Keep track of all files created and file offset for detecting rotated/renamed files