Our webmaster, who gets email every day, reported this morning that her inbox was missing all messages received after June 10.  the inbox is in a /var/mail filesystem mounted from a filer.  Assuming that her inbox had gotten corrupted since yesterday, I looked at the snapshots to find one that had her recently received messages.

 

[/var/mail/.snapshot/hourly.0] ls -l mthomas

-rw-rw----   1 mthomas  mail     14482423 Aug 27 08:13 mthomas

 

[/var/mail/.snapshot/hourly.1] ls -l mthomas

-rw-rw----   1 mthomas  mail     14482423 Jun 10 12:21 mthomas

 

Note that the file from the hourly.1 snapshot appears to be the same file as the one from the hourly.0 snapshot but it has a June 10 date.  All the other snapshots also have the June 10 date.

 

Has anyone seen anything like this with snapshots?