i'd guess the most reciently changed devices should head the list of leading suspects:
--rw-rw-r-- M 72 glenda sys 1591 Oct 4 01:40 pcmciamodem.c --rw-rw-r-- M 72 glenda sys 30411 Oct 8 19:31 ether82557.c --rw-rw-r-- M 72 geoff sys 37571 Oct 8 20:30 sdiahci.c --rw-rw-r-- M 72 geoff sys 34689 Oct 10 16:11 ether82563.c --rw-rw-r-- M 72 jmk sys 22388 Nov 8 16:20 ethervt6102.c --rw-rw-r-- M 72 jmk sys 45327 Nov 11 10:58 etherigbe.c - erik
