• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Repeated internal server send entries in SMTP Log

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2003] >> Exchange 2003 SBS >> Repeated internal server send entries in SMTP Log Page: [1]
Login
Message << Older Topic   Newer Topic >>
Repeated internal server send entries in SMTP Log - 16.Sep.2011 8:09:57 PM   
bdr200@yahoo.co.uk

 

Posts: 1
Joined: 16.Sep.2011
Status: offline
Hi,

I think I have found a problem in the SMTP log and would like to know if this is really a problem or simply a record of normal activity.

Below is an extract from the log which shows a repeating pattern that appears to occur every few seconds.  Apparently the server, called oB00 is trying to send a message to itself.  I do not know how to use the information in the log to trace the source of these entries.  Information or help would be much appreciated.

Brian

#Fields: date time c-ip cs-username s-computername s-ip s-port cs-method time-taken
2011-09-15 09:00:16 192.168.1.20 OB00 OB00 192.168.1.20 0 HELO 2875
2011-09-15 09:00:53 192.168.1.20 OB00 OB00 192.168.1.20 0 MAIL 33140
2011-09-15 09:00:53 192.168.1.20 OB00 OB00 192.168.1.20 0 RCPT 250
2011-09-15 09:04:16 192.168.1.20 OB00 OB00 192.168.1.20 0 DATA 203516
2011-09-15 09:04:21 192.168.1.20 OB00 OB00 192.168.1.20 0 MAIL 0
2011-09-15 09:04:21 192.168.1.20 OB00 OB00 192.168.1.20 0 RCPT 0
2011-09-15 09:04:24 192.168.1.20 OB00 OB00 192.168.1.20 0 DATA 2078
Post #: 1
RE: Repeated internal server send entries in SMTP Log - 19.Sep.2011 8:12:25 PM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
Brian,

If what you posted shows unedited lines from your SMTP log file, then the first thing you need to do is edit the properties of the logging and include all of the fields.

There is more information, especially following the MAIL and RCPT commands.  They will show the sending and recipient addresses which may give you a clue as to what is happening.  With that information you can use Message Tracking to see what Exchange thinks it is trying to do with the message.

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to bdr200@yahoo.co.uk)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2003] >> Exchange 2003 SBS >> Repeated internal server send entries in SMTP Log Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter