In Tor Browser test suite, use strace to monitor files and network activity during tests
We are currently using a patched version of mbox (http://pdos.csail.mit.edu/mbox/) to do that, but it is quite buggy and requires a custom build of mbox. It might be easier to run the browser with strace and parse the logs to find the open and connect system calls.