I recently found out that Mac leaves all the core file in /cores directory.
It's hard to tell what application caused the core dump if even possible.
Wonder if I can configure system to leave the cores where the executable resides as in Linux.
Hmm - maybe you can edit /etc/sysctl.conf and help yourself you specifying the core_pattern?
Maybe that would help you find out more about which process was responsible for the dump