AFAIK, this is not possible in Exchange 5.5, but the client IP & hostname is
recorded in the tracking logs in Exchange 2000. This of course means
turning message tracking logs on, which may have an impact on server
performance.

Cheers

Stu

> -----Original Message-----
> From: Settle, Sean [mailto:SeanSettlealliantfs.com]
> Sent: Wednesday, 27 February 2002 1:00 p.m.
> To: forensicssecurityfocus.com
> Subject: Exchange/MAPI message origin
>
>
> Is there a tool to determine which computer a MAPI message
> was sent from? We would like to be able to determine the
> origin machine of email messages as needed but have not had
> much luck finding a tool to give us this information.
>
> Sean Settle
> X Network Services Q NPC X
> Phoenix, AZ
> SMTP: seansettlealliantfs.com
>
>
> -----------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer
> service. For more information on this free incident handling,
> management
> and tracking system please see: http://aris.securityfocus.com
>

-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]