I don't recognise it immediately, but can perhaps suggest tools to help you find it.
As for identifying the file, the closest I could find in a short time on my computer was /Applications/Mail.app/Contents/Resources/No Mail.aiff
but I think yours has a longer tone on the front. But perhaps you can find it yourself...
I'm assuming it's a file on your hard drive, somewhere... most applications store sound effects in .m4a or .aiff files. So my theory is you can find it by brute force... here's a command that'll find audio files, print their name and play them.
# find / -name "*.m4a" -or -name "*.aiff" -exec echo "Playing {}" \; -exec afplay "{}" \;
Note that this particular command plays all *.m4a
and *.aiff
files, so you might need to extend it with -or -name "*.mp3"
or similar for other file types (e.g. .wav, not sure really what else to try!)
The two -exec
arguments first print the file name, and then play the file. So you should see the name of each file appear, and then hear it played. Ctrl+C stops it if you find your match (and you can use afplay
if necessary to re-play the last few if you're not sure which it was).
If you have lots of music on the computer as well, you may need to exclude your iTunes library or similar:
# find / -not -path "*/iTunes/*" \( -name "*.m4a" -or -name "*.aiff" \) -exec echo "Playing {}" \; -exec afplay "{}" \;
This excludes any files if their path includes a directory called iTunes
(you can modify this to match your iTunes library folder).
That of course only tells you what the file was, not necessarily what was running it... if it's in the Resources
directory within an Application package, or another helpful path, it might be clear that it's from some specific Application.
If not you could then try
# sudo opensnoop -f <filename>
and leave that running until you hear the sound effect. That should then show you what process played it...
Good luck!
(Incidentally, if you or your friend have housemates like mine, you'll probably find out its someone messing with you, SSHing into the computer and running afplay <sound>
on a regular basis... or maybe they put it in the crontab...)