AFAIK, this is not possible in Exchange 5.5, but the client IP & hostname is recorded in the tracking logs in Exchange 2000. This of course means turning message tracking logs on, which may have an impact on server performance. Cheers Stu > -----Original Message----- > From: Settle, Sean [mailto:SeanSettleat_private] > Sent: Wednesday, 27 February 2002 1:00 p.m. > To: forensicsat_private > Subject: Exchange/MAPI message origin > > > Is there a tool to determine which computer a MAPI message > was sent from? We would like to be able to determine the > origin machine of email messages as needed but have not had > much luck finding a tool to give us this information. > > Sean Settle > X Network Services Q NPC X > Phoenix, AZ > SMTP: seansettleat_private > > > ----------------------------------------------------------------- > This list is provided by the SecurityFocus ARIS analyzer > service. For more information on this free incident handling, > management > and tracking system please see: http://aris.securityfocus.com > ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Wed Feb 27 2002 - 19:23:53 PST