• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Message shows up in SMTP log but not Message Tracking or Inbox

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2003] >> Message Routing >> Message shows up in SMTP log but not Message Tracking or Inbox Page: [1]
Login
Message << Older Topic   Newer Topic >>
Message shows up in SMTP log but not Message Tracking o... - 6.May2008 3:12:23 AM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
Hi Exchange Lovers

I´m stumped.  I´m missing an Email.

I can find it in my SMTP logs but not in Message Tracking Center (MTC) or in the destination mailbox/inbox.

Also, it shows up in the SMTP logs at the Bridgehead Server and the destination mailbox (Backend) Server but not in MTC in any of the 2 servers.

The Email message was a reply in a longer conversation and messages both prior and after gets delivered?!

Server version is Exchange Server 2003 SP2 and we do not use any Build-in AntiSpam features. AntiVirus is Antigen v.9 SP1.

Any one experienced this behaviour before? Any tips would be most welcome.
Post #: 1
RE: Message shows up in SMTP log but not Message Tracki... - 6.May2008 9:10:34 AM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
The message shows up in the SMTP logs of your bridgehead server, but not in the Message Tracking logs for that same server?

What does the SMTP logs show for the bridgehead and mailbox servers?  Are all SMTP commands received and acknowledged with OK (200-299 responses)?

Did you check the queues on all servers?

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to Jesper Bernle)
Post #: 2
RE: Message shows up in SMTP log but not Message Tracki... - 6.May2008 10:36:43 AM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
Correct me if I´m wrong, but I´m under the impression that the commands logged in the SMTP log isn´t sequential thus making it hard to tell where the communication started and ended.

Otherwize it´s correct that I can see the mail in the SMTP logs of all Exchange Servers along the Message path ... but not in Message Tracking Center.

And yes - all queues are checked.

(in reply to uemurad)
Post #: 3
RE: Message shows up in SMTP log but not Message Tracki... - 6.May2008 12:05:36 PM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
Just to confirm, Message Tracking is enabled for each of the servers?
I've not witnessed an SMTP log being out of order.  What are you seeing that is out of order?  Is it that message streams are co-mingled, or that they are out of chronological order?

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to Jesper Bernle)
Post #: 4
RE: Message shows up in SMTP log but not Message Tracki... - 7.May2008 4:17:44 AM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
Hi Dean!

Yes, Message Tracking is enabled Organizational Wide via Policy.

This is what I find in the SMTP log:







10.111.122.36 - srv00abc.xx.yy.com [07/Apr/2008:10:58:09 +0100] "EHLO -? srv00abc.xx.yy.com SMTP" 250 314
10.111.122.36 - srv00abc.xx.yy.com [07/Apr/2008:10:58:09 +0100] "x-exps -? GSSAPI SMTP" 0 22
10.111.122.36 - srv00abc.xx.yy.com [07/Apr/2008:10:58:09 +0100] "x-link2state -? LAST CHUNK={0000006a} MULTI (5) ({00000051} DIGEST_QUERY caaf3d7bd7711148b8d4e8ab73e9f0eb ca4849932a6ec95dba77b26b132c6257  )   SMTP" 200 68
10.111.122.36 - srv00abc.xx.yy.com [07/Apr/2008:10:58:09 +0100] "MAIL -? FROM:<sender@domain.se> SMTP" 250 51
10.111.122.36 - srv00abc.xx.yy.com [07/Apr/2008:10:58:09 +0100] "RCPT -? TO:<recipient@domain.se> SMTP" 250 38
10.111.122.36 - srv00abc.xx.yy.com [07/Apr/2008:10:58:09 +0100] "xexch50 -? 1084 2 SMTP" 354 22
10.111.122.36 - srv00abc.xx.yy.com [07/Apr/2008:10:58:09 +0100] "BDAT -? <!~!UENERkVCMDkAAQACAGoAAAAAAAAAOKG7EAXlEBqhuwgAKypWwgAARU1TTURCLkRMTAAAAAAAAAAAG1X6IKpmEc2byACqAC/EWgwAAABTUlYwMDU1NQAvTz1TSVBPTi9PVT1TMDEvY249UmVjaXBpZW50cy9jbj1sbmYALgAAAAAAAAC1PEFTQI/OQb6+vk12Q7sDAQDByoxSW2/tSKljxWR2JvYGAAAAE75LAAAAAAAALgAAAAAAAAC1PEFTQI/OQb6+vk12Q7sDAQDByoxSW2/tSKljxWR2JvYGAAAAE75MAAAQAAAAYLTzatTiFEu5WVat5ztaVQ0AAABTVjogRvZyIGluZm8A@domain.se> SMTP" 250 404
10.111.122.36 - srv00abc.xx.yy.com [07/Apr/2008:10:58:09 +0100] "QUIT -?srv00abc.xx.yy.com SMTP" 240 70






< Message edited by Jesper Bernle -- 7.May2008 4:20:04 AM >

(in reply to uemurad)
Post #: 5
RE: Message shows up in SMTP log but not Message Tracki... - 7.May2008 9:30:37 AM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
What is that log excerpt showing?  Is it the inbound message from the outside, or internally between the bridgehead and mailbox server (and is it the log on the bridgehead or mailbox server)?  It appears to be accepting the message.

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to Jesper Bernle)
Post #: 6
RE: Message shows up in SMTP log but not Message Tracki... - 8.May2008 2:40:34 AM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
The excerpt is taken from the Backend SMTP log and hence it´s the message from the Bridgehead to Mailbox server.

I also see the message as beeing accepted but the reality is that it´s nowhere to be found. It´s really scary if my Exchange Server is loosing accepted mail. We are currently hosting 11.000+ mailboxes soo there is alot of potential for disaster if I cannot figure this out.

Do you know Sherlock Holmes?

(in reply to uemurad)
Post #: 7
RE: Message shows up in SMTP log but not Message Tracki... - 8.May2008 9:11:10 AM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
Does the message appear in MTC for the bridgehead server?  If so, what does that indicate?

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to Jesper Bernle)
Post #: 8
RE: Message shows up in SMTP log but not Message Tracki... - 8.May2008 9:26:07 AM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
No,the message doesn´t show up in any MTC.

(in reply to uemurad)
Post #: 9
RE: Message shows up in SMTP log but not Message Tracki... - 8.May2008 9:34:09 AM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
You are getting current information in the MTC logs though, right?  Let's think about what else can affect message traffic.

Do you have any event sinks anywhere?
What Anti-Virus and/or Anti-Spam software do you have installed on your Exchange servers?  Have you attempted to disable those?
Have you activated any of the Exchange filters?

Is it possible that the one message was corrupted, or that the transmission was garbled?  Since ESMTP commands were issued (in particular the BDAT command), Exchange just counts characters instead of looking for the normal end-of-data sequence (CRLF, dot, CRLF).

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to Jesper Bernle)
Post #: 10
RE: Message shows up in SMTP log but not Message Tracki... - 8.May2008 9:44:39 AM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
As far as I know I´m getting up2speed info from MTC ...

No EventSinks implemented.
AntiVirus is Antigen v9 SP1.
AntiSpam is external (Ironport).
No Exchange Server AntiSpam features activated.

I´m not really sure what you are implying with "Since ESMTP commands were issued (in particular the BDAT command), ... " Could you try to elaborate a bit more?

By the way - Thanx a million for bearing with me and trying to find a solution for this wierd problem.

(in reply to uemurad)
Post #: 11
RE: Message shows up in SMTP log but not Message Tracki... - 8.May2008 10:32:49 AM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
quote:

I´m not really sure what you are implying with "Since ESMTP commands were issued (in particular the BDAT command), ... " Could you try to elaborate a bit more?
Ha - I knew I'd have to explain that one ...
In a normal SMTP transmission, the body of the message is controlled by issuing a DATA command.  Trouble is, how do you tell the recipient server when you're done transmitting?  The RFC specification says that you issue a period on a line by itself - in other words a newline, a dot, and another newline.  That signals the recipient server to prompt for the next SMTP command - typically QUIT.  You can guess that it a garbled transmission at the wrong time, or a malformed message termination would result in either a premature end, or not getting the termination transmitted at all.

In ESMTP, transmission control is done using a BDAT command.  This indicates the length of the message in bytes.  When the number of bytes has been reached, the recipient server can assume the message is complete.

I don't know the actual format of the BDAT command (which appears in your SMTP log), so I don't know if what you show is normal or not.  You might look for another one to compare.

The point of my bringing it up was that it doesn't take a lot to corrupt a message.  SMTP is a TCP connection (TCP port 25), and therefore some additional things are done behind the scenes to guarantee the connection, but that doesn't mean that problems can't occur.

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to Jesper Bernle)
Post #: 12
RE: Message shows up in SMTP log but not Message Tracki... - 8.May2008 10:43:06 AM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
The first part I knew (done some manual telnet sessions on port 25 in my days ) but the BDAT was new info (cool - I love learning new stuff about Exchange).

But is it fair to say that SMTP messages can from time to time be corrupted even though the session is completed (thus not making TCP resending the last packet) and that the net result of this is lost email even though it´s presieved as received by Exchange (at least looking at the SMTP log)?

(in reply to uemurad)
Post #: 13
RE: Message shows up in SMTP log but not Message Tracki... - 8.May2008 10:56:37 AM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
quote:

But is it fair to say that SMTP messages can from time to time be corrupted even though the session is completed (thus not making TCP resending the last packet) and that the net result of this is lost email even though it´s presieved as received by Exchange (at least looking at the SMTP log)?
It's rare.  I was just throwing out the possibility especially in light of your note that messages belonging to the same thread before and after came through without any issue.
quote:

I love learning new stuff about Exchange
Same here.  I have to say I've learned a ton of stuff by participating here at MSExchange.org, researching issues that other people are experiencing.

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to Jesper Bernle)
Post #: 14
RE: Message shows up in SMTP log but not Message Tracki... - 8.May2008 11:05:31 AM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
I´d love to be more active at forums.msexchange.org but I participate quite alot over at the Swedish IT-forum called ITProffs (Swedish for ITPro - go figure ) and all Exchange Server related questions over there.

Beeing a new House Owner and proud father of a soon 4-year old doughter ... well, there´s just not enought time to do all the things I´d love to be doing. But hey - it´s sunny and warm today so who cares?!

Well - let´s bury this weired problem under 10 tons of pure dirt and call it a day, shall we?

Lots of thnx for beeing my brainstorming partner in this.

(in reply to uemurad)
Post #: 15
RE: Message shows up in SMTP log but not Message Tracki... - 8.Jun.2017 12:06:40 AM   
Buisness_Idea

 

Posts: 70
Joined: 19.Apr.2017
Status: offline
Tight bras can impact or hinder the lymphatic flow. It is therefore very important to pay attention to what you wear and to prevent breast cancer you must wear those that they call breast cancer clothing. online sports bra sale

(in reply to Jesper Bernle)
Post #: 16

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2003] >> Message Routing >> Message shows up in SMTP log but not Message Tracking or Inbox Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter