Who's writing to /etc/mnttab?

Question

From what I learned, the /etc/mnttab is only supposed to be written to when mounting or dismounting anything.
Thus I set up a little monitoring script to watch the file for changes, to catch it if someone should change mounts, or one of the FC filesystems dismounting automatically due to some error etc.
However, I keep getting alerts about the modification time of the file being changed, but the content checksum stays the same.
Can anyone point me at a reason why this file keeps getting touched every few hours without changing anything?
(else I'll try rewriting my monitoring script to mount|grep|diff.. but that's a bit ugly)

Answer 1

I did that already, which is why I wrote my monitoring script the way I did.
The manpage notes state clearly, that:
The file modification time returned by stat(2)
for the mnttab file is the time of the last change to
mounted file system information... so whenever the mtime of /etc/mnttab changes, something must have happened to the mounted filesystems.
That's exactly what's confusing me.. the content of the mnttab stays the same, meaning nothing was changed on the mount points,
but the mtime of the mnttab changes, meaning something must have been changed on the mount points.
I see a certain contradiction there, that I'd like to clear up.
However, I do have a suspicion already.. might be one of the shared QFS/StorNext file systems reconnecting or changing meta owner..