Can someone ID these mysterious files?

[Steven J. Norton]

Hello all,

I was hoping someone could identify these invisible files which seem to come
and go from my /root/ directory. They got flagged by Tripwire, and I want to
make sure that I can safely ignore changes to these files.

They have seemingly partly-random names, always beginning with .xauth***
Like .xauthY1yKq8 and so forth.

If I can ignore them, does anyone know how to tell Tripwire to ignore files
which always begin with certain characters (i.e. can I create a "stop point"
or something which uses a wildcard, such as .xauth*)?

Any advice appreciated.

 -- Steve Norton