fahy@chapman.edu MIchael Fahy) writes:
Thanks to everyone who pointed out that ls -lu will show the time the snapshot was created, but I already knew what time the snapshot was created. The mystery is this: I know this file was modified every day this week and had new email messages in it yesterday. Even if the file was somehow replaced by an old file with a June 10 modification date, shouldn't the nightly.0 snapshot still have yesterday's more current version of the file?
You are still looking only at the mtime's, which can be set arbitrarily (and some MUAs do things like restoring the mtime on an inbox). Maybe looking at the ctimes in the snapshots, i.e.
ls -lc /var/mail/.snapshot/*/mthomas"
will shed some light on whether the file was really being modified.
Chris Thompson Email: cet1@cam.ac.uk