Session files are generated when Marshal is started in the client application.

While the application is running, Marshal writes to a session with extension rttkinsp.

When your application terminates normally, Marshal will close the session and rename rttkinsp to rttksess.

Caddie has a thread checking for rttksess files on the machine where it is running.

For Android, there is a batch collection process.