strace -e open $(ps -o lwp= -LC rsync | sed 's/^/-p/')

… or to see what files the process has opened.

lsof -ad3-999 -c rsync?