RE: SMTP traffic monitoring

[Campbell, Rob]

OK.  Let's see if any of them are SMTP

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" 
|? {$_.source -eq "SMTP"}


From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 3:55 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

A bunch of results

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 1:38 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

What does just this much get you?

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE"

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 3:35 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

My hub server. I can run the canned tracking tool GUI fine, but running that in 
the PS window gives me nothing.

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 1:27 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

That's weird.

Are you checking your mail server logs, or your hub transport logs?

These events will only show up on the hub transport servers.

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 2:35 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Thanks for this. It just comes back with the prompt...no error, but no output..

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 8:30 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Missed the closing quote on "SMTP"

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP"} |
Select clientip,totalbytes,timestamp | ft -auto


From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 10:26 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

You can check the SMTP RECEIVE events in the Message Tracking Logs on the hub 
transport servers.

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP} |
Select clientip,totalbytes,timestamp | ft -auto

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 10:09 AM
To: MS-Exchange Admin Issues
Subject: SMTP traffic monitoring

We have Exchange 2007 here and I'd like to be able to see what machines are 
passing SMTP traffic  though it - how do I do that? it appears that it can 
create a CONNECTLOGn.LOG file - is there something that can parse it so I 
can view the connections easily?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764



**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information co

Re: Orla?

[Micheal Espinola Jr]

Web page brokenly designed to look Mac-ish.  -100 pts.

--
ME2


On Tue, Mar 9, 2010 at 2:58 PM, Richard Stovall  wrote:

> Indeed.  I think I'll hold off trying it out.
>
>
> On Tue, Mar 9, 2010 at 5:06 PM, Kurt Buff  wrote:
>
>> Some decisions should be postponed...
>>
>> On Tue, Mar 9, 2010 at 14:02, David Lum  wrote:
>> > Anyone ever hear of this?
>> >
>> > http://www.orla.org/00!bh?a_aid=49cb8cbdefe18
>> >
>> > David Lum // SYSTEMS ENGINEER
>> > NORTHWEST EVALUATION ASSOCIATION
>> > (Desk) 971.222.1025 // (Cell) 503.267.9764
>> >
>> >
>> >
>> >
>> >
>> >
>>
>>
>

RE: Orla?

[Campbell, Rob]

Glowing recommendations by people from "Chamber of Commerce" aren't 
particularly compelling.

From: Richard Stovall [mailto:rich...@gmail.com]
Sent: Tuesday, March 09, 2010 4:58 PM
To: MS-Exchange Admin Issues
Subject: Re: Orla?

Indeed.  I think I'll hold off trying it out.
On Tue, Mar 9, 2010 at 5:06 PM, Kurt Buff 
mailto:kurt.b...@gmail.com>> wrote:
Some decisions should be postponed...

On Tue, Mar 9, 2010 at 14:02, David Lum 
mailto:david@nwea.org>> wrote:
> Anyone ever hear of this?
>
> http://www.orla.org/00!bh?a_aid=49cb8cbdefe18
>
> David Lum // SYSTEMS ENGINEER
> NORTHWEST EVALUATION ASSOCIATION
> (Desk) 971.222.1025 // (Cell) 503.267.9764
>
>
>
>
>
>

**
Note: 
The information contained in this message may be privileged and confidential 
and 
protected from disclosure.  If the reader of this message is not the intended  
recipient, or an employee or agent responsible for delivering this message to  
the intended recipient, you are hereby notified that any dissemination,   
distribution or copying of this communication is strictly prohibited. If you  
have received this communication in error, please notify us immediately by  
replying to the message and deleting it from your computer. 
**
**
Note: 
The information contained in this message may be privileged and confidential 
and 
protected from disclosure.  If the reader of this message is not the intended  
recipient, or an employee or agent responsible for delivering this message to  
the intended recipient, you are hereby notified that any dissemination,   
distribution or copying of this communication is strictly prohibited. If you  
have received this communication in error, please notify us immediately by  
replying to the message and deleting it from your computer. 
**

Re: Orla?

[Richard Stovall]

Indeed.  I think I'll hold off trying it out.

On Tue, Mar 9, 2010 at 5:06 PM, Kurt Buff  wrote:

> Some decisions should be postponed...
>
> On Tue, Mar 9, 2010 at 14:02, David Lum  wrote:
> > Anyone ever hear of this?
> >
> > http://www.orla.org/00!bh?a_aid=49cb8cbdefe18
> >
> > David Lum // SYSTEMS ENGINEER
> > NORTHWEST EVALUATION ASSOCIATION
> > (Desk) 971.222.1025 // (Cell) 503.267.9764
> >
> >
> >
> >
> >
> >
>
>

Re: Orla?

[Kurt Buff]

Some decisions should be postponed...

On Tue, Mar 9, 2010 at 14:02, David Lum  wrote:
> Anyone ever hear of this?
>
> http://www.orla.org/00!bh?a_aid=49cb8cbdefe18
>
> David Lum // SYSTEMS ENGINEER
> NORTHWEST EVALUATION ASSOCIATION
> (Desk) 971.222.1025 // (Cell) 503.267.9764
>
>
>
>
>
>

Orla?

[David Lum]

Anyone ever hear of this?
http://www.orla.org/00!bh?a_aid=49cb8cbdefe18
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

RE: SMTP traffic monitoring

[David Lum]

A bunch of results

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 1:38 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

What does just this much get you?

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE"

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 3:35 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

My hub server. I can run the canned tracking tool GUI fine, but running that in 
the PS window gives me nothing.

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 1:27 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

That's weird.

Are you checking your mail server logs, or your hub transport logs?

These events will only show up on the hub transport servers.

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 2:35 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Thanks for this. It just comes back with the prompt...no error, but no output..

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 8:30 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Missed the closing quote on "SMTP"

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP"} |
Select clientip,totalbytes,timestamp | ft -auto


From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 10:26 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

You can check the SMTP RECEIVE events in the Message Tracking Logs on the hub 
transport servers.

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP} |
Select clientip,totalbytes,timestamp | ft -auto

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 10:09 AM
To: MS-Exchange Admin Issues
Subject: SMTP traffic monitoring

We have Exchange 2007 here and I'd like to be able to see what machines are 
passing SMTP traffic  though it - how do I do that? it appears that it can 
create a CONNECTLOGn.LOG file - is there something that can parse it so I 
can view the connections easily?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764



**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissem

RE: SMTP traffic monitoring

[Campbell, Rob]

What does just this much get you?

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE"

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 3:35 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

My hub server. I can run the canned tracking tool GUI fine, but running that in 
the PS window gives me nothing.

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 1:27 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

That's weird.

Are you checking your mail server logs, or your hub transport logs?

These events will only show up on the hub transport servers.

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 2:35 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Thanks for this. It just comes back with the prompt...no error, but no output..

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 8:30 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Missed the closing quote on "SMTP"

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP"} |
Select clientip,totalbytes,timestamp | ft -auto


From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 10:26 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

You can check the SMTP RECEIVE events in the Message Tracking Logs on the hub 
transport servers.

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP} |
Select clientip,totalbytes,timestamp | ft -auto

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 10:09 AM
To: MS-Exchange Admin Issues
Subject: SMTP traffic monitoring

We have Exchange 2007 here and I'd like to be able to see what machines are 
passing SMTP traffic  though it - how do I do that? it appears that it can 
create a CONNECTLOGn.LOG file - is there something that can parse it so I 
can view the connections easily?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764



**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**
**
Note: 
The information contained in this message may be privileged and confidential 
and 
protected from disclosure.  If the reader of this message is not the intended  
recipient, or an employee or agent responsible for delivering this message to  
the intended recipient, you are hereby notified that any dissemination,   
distribution or copying of this communication is strictly prohibited. If you  
have received this communication in error, please notify us immediately by  
replying to the mess

RE: SMTP traffic monitoring

[David Lum]

My hub server. I can run the canned tracking tool GUI fine, but running that in 
the PS window gives me nothing.

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 1:27 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

That's weird.

Are you checking your mail server logs, or your hub transport logs?

These events will only show up on the hub transport servers.

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 2:35 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Thanks for this. It just comes back with the prompt...no error, but no output..

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 8:30 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Missed the closing quote on "SMTP"

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP"} |
Select clientip,totalbytes,timestamp | ft -auto


From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 10:26 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

You can check the SMTP RECEIVE events in the Message Tracking Logs on the hub 
transport servers.

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP} |
Select clientip,totalbytes,timestamp | ft -auto

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 10:09 AM
To: MS-Exchange Admin Issues
Subject: SMTP traffic monitoring

We have Exchange 2007 here and I'd like to be able to see what machines are 
passing SMTP traffic  though it - how do I do that? it appears that it can 
create a CONNECTLOGn.LOG file - is there something that can parse it so I 
can view the connections easily?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764



**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

RE: SMTP traffic monitoring

[Campbell, Rob]

That's weird.

Are you checking your mail server logs, or your hub transport logs?

These events will only show up on the hub transport servers.

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 2:35 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Thanks for this. It just comes back with the prompt...no error, but no output..

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 8:30 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Missed the closing quote on "SMTP"

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP"} |
Select clientip,totalbytes,timestamp | ft -auto


From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 10:26 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

You can check the SMTP RECEIVE events in the Message Tracking Logs on the hub 
transport servers.

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP} |
Select clientip,totalbytes,timestamp | ft -auto

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 10:09 AM
To: MS-Exchange Admin Issues
Subject: SMTP traffic monitoring

We have Exchange 2007 here and I'd like to be able to see what machines are 
passing SMTP traffic  though it - how do I do that? it appears that it can 
create a CONNECTLOGn.LOG file - is there something that can parse it so I 
can view the connections easily?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764



**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**
**
Note: 
The information contained in this message may be privileged and confidential 
and 
protected from disclosure.  If the reader of this message is not the intended  
recipient, or an employee or agent responsible for delivering this message to  
the intended recipient, you are hereby notified that any dissemination,   
distribution or copying of this communication is strictly prohibited. If you  
have received this communication in error, please notify us immediately by  
replying to the message and deleting it from your computer. 
**

RE: SMTP traffic monitoring

[David Lum]

Thanks for this. It just comes back with the prompt...no error, but no output..

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 8:30 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

Missed the closing quote on "SMTP"

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP"} |
Select clientip,totalbytes,timestamp | ft -auto


From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 10:26 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

You can check the SMTP RECEIVE events in the Message Tracking Logs on the hub 
transport servers.

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP} |
Select clientip,totalbytes,timestamp | ft -auto

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 10:09 AM
To: MS-Exchange Admin Issues
Subject: SMTP traffic monitoring

We have Exchange 2007 here and I'd like to be able to see what machines are 
passing SMTP traffic  though it - how do I do that? it appears that it can 
create a CONNECTLOGn.LOG file - is there something that can parse it so I 
can view the connections easily?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764



**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

RE: SMTP traffic monitoring

[Campbell, Rob]

Missed the closing quote on "SMTP"

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP"} |
Select clientip,totalbytes,timestamp | ft -auto


From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Tuesday, March 09, 2010 10:26 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP traffic monitoring

You can check the SMTP RECEIVE events in the Message Tracking Logs on the hub 
transport servers.

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP} |
Select clientip,totalbytes,timestamp | ft -auto

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 10:09 AM
To: MS-Exchange Admin Issues
Subject: SMTP traffic monitoring

We have Exchange 2007 here and I'd like to be able to see what machines are 
passing SMTP traffic  though it - how do I do that? it appears that it can 
create a CONNECTLOGn.LOG file - is there something that can parse it so I 
can view the connections easily?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764



**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**
**
Note: 
The information contained in this message may be privileged and confidential 
and 
protected from disclosure.  If the reader of this message is not the intended  
recipient, or an employee or agent responsible for delivering this message to  
the intended recipient, you are hereby notified that any dissemination,   
distribution or copying of this communication is strictly prohibited. If you  
have received this communication in error, please notify us immediately by  
replying to the message and deleting it from your computer. 
**

RE: SMTP traffic monitoring

[Campbell, Rob]

You can check the SMTP RECEIVE events in the Message Tracking Logs on the hub 
transport servers.

Get-messagetrackinglog -server  -resultsize 100 -eventid "RECEIVE" |
? {$_.source -eq "SMTP} |
Select clientip,totalbytes,timestamp | ft -auto

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 10:09 AM
To: MS-Exchange Admin Issues
Subject: SMTP traffic monitoring

We have Exchange 2007 here and I'd like to be able to see what machines are 
passing SMTP traffic  though it - how do I do that? it appears that it can 
create a CONNECTLOGn.LOG file - is there something that can parse it so I 
can view the connections easily?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764


**
Note: 
The information contained in this message may be privileged and confidential 
and 
protected from disclosure.  If the reader of this message is not the intended  
recipient, or an employee or agent responsible for delivering this message to  
the intended recipient, you are hereby notified that any dissemination,   
distribution or copying of this communication is strictly prohibited. If you  
have received this communication in error, please notify us immediately by  
replying to the message and deleting it from your computer. 
**

RE: SMTP traffic monitoring

[Michael B. Smith]

Logparser on Microsoft.com/downloads.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, March 09, 2010 11:09 AM
To: MS-Exchange Admin Issues
Subject: SMTP traffic monitoring

We have Exchange 2007 here and I'd like to be able to see what machines are 
passing SMTP traffic  though it - how do I do that? it appears that it can 
create a CONNECTLOGn.LOG file - is there something that can parse it so I 
can view the connections easily?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

SMTP traffic monitoring

[David Lum]

We have Exchange 2007 here and I'd like to be able to see what machines are 
passing SMTP traffic  though it - how do I do that? it appears that it can 
create a CONNECTLOGn.LOG file - is there something that can parse it so I 
can view the connections easily?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

RE: No Emails since Friday

[Ellis, John P.]

I had some yesterday 08/03/10 & yours today :-)
John


From: Carol Fee [mailto:c...@massbar.org] 
Sent: 09 March 2010 15:02
To: MS-Exchange Admin Issues
Subject: No Emails since Friday



Have there been any posts to this list ?

 

 



Carol Fee

Network Administrator

617-338-0623

c...@massbar.org  

 

   

   Massachusetts Bar Association

   20 West Street

   Boston, MA 02111-1204
   (617) 338-0500


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.clearswift.com
**


<>

RE: No Emails since Friday

[Todd Lemmiksoo]

I have received a few yesterday and 1 today.
 

Todd Lemmiksoo 

 



From: Carol Fee [mailto:c...@massbar.org] 
Sent: Tuesday, March 09, 2010 10:02 AM
To: MS-Exchange Admin Issues
Subject: No Emails since Friday



Have there been any posts to this list ?

 

 



Carol Fee

Network Administrator

617-338-0623

c...@massbar.org  

 

   

   Massachusetts Bar Association

   20 West Street

   Boston, MA 02111-1204
   (617) 338-0500

<>

RE: No Emails since Friday

[Don Guyer]

Got some yesterday.

 

Don Guyer

Systems Engineer - Information Services

Prudential, Fox & Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com  

 

From: Carol Fee [mailto:c...@massbar.org] 
Sent: Tuesday, March 09, 2010 10:02 AM
To: MS-Exchange Admin Issues
Subject: No Emails since Friday

 

Have there been any posts to this list ?

 

 



Carol Fee

Network Administrator

617-338-0623

c...@massbar.org

 

   

   Massachusetts Bar Association

   20 West Street

   Boston, MA 02111-1204
   (617) 338-0500

<>

No Emails since Friday

[Carol Fee]

Have there been any posts to this list ?



Carol Fee
Network Administrator
617-338-0623
c...@massbar.org

[cid:image001.gif@01CABF6F.85A664B0]
   Massachusetts Bar Association
   20 West Street
   Boston, MA 02111-1204
   (617) 338-0500
<>

RE: No Emails since Friday

[Sobey, Richard A]

I count 8 over Saturday and Sunday.

From: bounce-8844433-8066...@lyris.sunbelt-software.com 
[mailto:bounce-8844433-8066...@lyris.sunbelt-software.com] On Behalf Of Carol 
Fee
Sent: 09 March 2010 15:02
To: MS-Exchange Admin Issues
Subject: No Emails since Friday

Have there been any posts to this list ?



Carol Fee
Network Administrator
617-338-0623
c...@massbar.org

[cid:image002.gif@01CABF99.AEFE18B0]
   Massachusetts Bar Association
   20 West Street
   Boston, MA 02111-1204
   (617) 338-0500
<>

Dns services are removed from exchange 2003

[jgarciaitlist]

We no longer since this moring can see dns services on our exchange 2003 server

Anyone got any ideas

We belive some malware
Or rootkit
Sent via BlackBerry from T-Mobile