How do I find a file on Linux in an ext4 filesystem that's being written to frequently?
Solution 1:
Maybe you can check which process is writing frequently to disk with iotop, then spy this process with strace.
Solution 2:
You could use inotifywatch(1). Something like this should get you closer
inotifywatch -v -e modify -r /root