2013/6/6 Liu Yuan <namei.unix at gmail.com>: > any snapshot taken just before it? Oh yes. But not just before it. I turned off the guest and created a snapshot at about17:00, so 2/3 hours before the backups started writing data.