Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

data wrongly being backed up from outside specified date range

Created: 17 Jun 2013 | 8 comments
JJ's picture

Greetings,

My weekly backup is now breaking 200gb whereas my dailes are only 10-20gb. The weekly backup job specifies to backup working set last accessed in the last 5 days however im getting stuff thats not been accesed/modified for at least two months.

Any ideas as to why that may be happening?

Thanks

James

Operating Systems:

Comments 8 CommentsJump to latest comment

Colin Weaver's picture

Do you have scheduled anti-virus or orther security scanners touching all files on the system?

JJ's picture

Hi Colin,

We have a daily sophos scan of local drives but as far as im aware this doesnt actually scan the areas in question. Am confirming whether it sees mapped network drives as to a local drive. Ive had a look through whats been backed up however and a good section of those i can say would definitely not have been scanned by either av or security software. Any other idea as to what may be causing this?

Thanks

James

VJware's picture

Verbatim from TECH59624

'Working Set' is an option which backs up files that have been created or changed within 'X' number of days. In addition to backing up files accessed within these set number of dates, backups performed using the 'Working Set' backup option will also, by design, backup any file which has its Archive Bit set.
Any file within the backup selection list that has its Archive attribute set will be backed up regardless of its 'Date Accessed' attribute.
 
JJ's picture

I understand now, that makes sense as to why its backing up the majority of the files. Can you suggest a way i can stop this happening? Our daily backup uses the changed today method, would that affect whats backed up by the weekly job?

Thanks

James

VJware's picture

Changed today backup method does not reset the archive bit..so possibly files who's archive bit is on, they are getting backed up.

Alternative is to consider backing up via modified time or using archive bit instead of working set..

Jaydeep S's picture

Try switching to modified time for performing incremental/differential backups

pkh's picture

Switching to the modified time method may not work if AV software is involved.  You could be facing a situation similiar to what is described in my blog below

https://www-secure.symantec.com/connect/blogs/incr...

If your data resides on a NAS which does not have RAWS/RALUS installed on them, then your incr/diff backups may become full backup because incr/diff backups are not supported for devices without RAWS/RALUS.

JJ's picture

Had a chap from sophos confirm that it doesnt change timestamps on files during a scan so it must be the archive bit causing the problem. Ive changed to modified time to test, will see how it goes. Thanks for all your replies,