Date: Mon, 11 Feb 2008 16:39:13 +0000 From: Gavin Atkinson <gavin.atkinson@ury.york.ac.uk> To: Joe Peterson <joe@skyrush.com> Cc: freebsd-fs@freebsd.org, freebsd-stable@freebsd.org Subject: Re: Analysis of disk file block with ZFS checksum error Message-ID: <1202747953.27277.7.camel@buffy.york.ac.uk> In-Reply-To: <47ACF0AE.3040802@skyrush.com> References: <47ACD7D4.5050905@skyrush.com> <D6B0BBFB-D6DB-4DE1-9094-8EA69710A10C@apple.com> <47ACDE82.1050100@skyrush.com> <20080208173517.rdtobnxqg4g004c4@www.wolves.k12.mo.us> <47ACF0AE.3040802@skyrush.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 2008-02-08 at 17:15 -0700, Joe Peterson wrote: > Chris Dillon wrote: > > That is a chunk of a Mozilla Mork-format database. Perhaps the > > Firefox URL history or address book from Thunderbird. > > Interesting (thanks to all who recognized Mork). I do use Firefox and > Thunderbird, so it's feasible, but how the heck would a piece of one of > those files find its way into 1/2 of a ZFS block in one of my mp3 files? > I wonder if it could have been done on write when the file was copied > to the ZFS pool (maybe some write-caching issue?), but I thought ZFS > would have verified the block after write. It seems unlikely that it > would get changed later - I never rewrote that file after the original > copy... Are the datestamps (Thu Jan 24 23:20:58 2008) found within the corrupt block before or after the datestamp of the file it was found within? i.e. was the corrupt block on the disk before or after the mp3 was written there? You could possibly confirm this by grepping for that datestamp in the files in your home directory, and with the aid of http://developer.mozilla.org/en/docs/Mork_Structure#Rows, try to establish exactly what the datestamp means (ie was it the time you visited a URL, etc). Gavin
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1202747953.27277.7.camel>