Incremental backups are the same size or larger than the full backups, even if an incremental backup ran an hour after the full completed.
If this behavior is seen, it is likely that the file set for this backup has Preserve Access Time selected, while Only Check Modification Times cleared.
On the Unix-like operating systems, when you do a differential or incremental backup, files will be included for backup if the
ctime (change timestamp) or
mtime (modification timestamp) is greater than the time of the last backup (so if the file has been modified or changed). Opening the file to read it for backup, updates the file’s
atime (access time). The Preserve Access times option tells the agent to reset the
atime on the file to the value it was before the file was backed up. Setting the
atime is a change to the file, so the
ctime gets changed. Because of that change, the next backup finds the file has a newer
ctime, and so it gets included in the backup again. The Browse and Restore dialog shows the file’s
mtime (which contributes to the confusion).
Steps to resolve
There are two options for making incremental and differential backups work properly for a Linux client.
One is to clear Preserve Access Times. When a file gets backed up, its
atime will be set to the time of the backup. With this option off, the
atime will not get reset, to the
ctime remains unchanged. Some programs do not like having the
atime changed on their files, so turning this option off could have mildly unpleasant consequences if such a program is being used.
Second is to select Only Check Modification Times in addition to having Preserve Access Times selected. This will ignore changes to the
ctime, and only back up the file if the
mtime is newer than the last backup. Changing the properties of a file without modifying its contents will only update the
ctime of that file. So with this option, changing the owner, group, or permissions of a file (or other file attributes) will change the
ctime, but that change will not be noticed and backed up until the next full backup.
Unless it causes a problem for some software you are using, the first option is recommended.