Analysis of disk file block with ZFS checksum error

Gavin Atkinson gavin.atkinson at
Mon Feb 11 17:11:08 UTC 2008

On Fri, 2008-02-08 at 17:15 -0700, Joe Peterson wrote:
> Chris Dillon wrote:
> > That is a chunk of a Mozilla Mork-format database.  Perhaps the  
> > Firefox URL history or address book from Thunderbird.
> Interesting (thanks to all who recognized Mork).  I do use Firefox and
> Thunderbird, so it's feasible, but how the heck would a piece of one of
> those files find its way into 1/2 of a ZFS block in one of my mp3 files?
>    I wonder if it could have been done on write when the file was copied
> to the ZFS pool (maybe some write-caching issue?), but I thought ZFS
> would have verified the block after write.  It seems unlikely that it
> would get changed later - I never rewrote that file after the original
> copy...

Are the datestamps (Thu Jan 24 23:20:58 2008) found within the corrupt
block before or after the datestamp of the file it was found within?
i.e. was the corrupt block on the disk before or after the mp3 was
written there?

You could possibly confirm this by grepping for that datestamp in the
files in your home directory, and with the aid of, try to
establish exactly what the datestamp means (ie was it the time you
visited a URL, etc).


More information about the freebsd-stable mailing list