Scan an strace log and track where file descriptors came from