I had a ktrace -i -f /tmp/something running, forgot that one of the sub-processes created was still running, rm'd /tmp/something and later wondered why /tmp was running out of space. I suspected an unlinked file, but didn't think of the ktrace output.
Why does that ktrace file not show up? Because it isn't associated with a process?
