Our webmaster, who gets email every day, reported this morning that her inbox was missing all messages received after June 10. the inbox is in a /var/mail filesystem mounted from a filer. Assuming that her inbox had gotten corrupted since yesterday, I looked at the snapshots to find one that had her recently received messages.
[/var/mail/.snapshot/hourly.0] ls -l mthomas
-rw-rw---- 1 mthomas mail 14482423 Aug 27 08:13 mthomas
[/var/mail/.snapshot/hourly.1] ls -l mthomas
-rw-rw---- 1 mthomas mail 14482423 Jun 10 12:21 mthomas
Note that the file from the hourly.1 snapshot appears to be the same file as the one from the hourly.0 snapshot but it has a June 10 date. All the other snapshots also have the June 10 date.
Has anyone seen anything like this with snapshots?