Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am troubleshooting a problem trying to SMTP into an Exchange 2010 machine.

I would like to view SMTP logs to see dropped or rejected sessions in order to try to figure out exactly why the sessions are being rejected.

I'm familiar with the message tracking log, but doesn't it only track successful sessions?

How can I view some raw session data for Exchange 2010?

share|improve this question
    
Do you host and/or have access to your smtp relays (mx servers) ? Are you talking about "internal" email send or external email send ? "but doesn't it only track successful sessions?" no, tracks also unsuccessful sessions –  krisFR Dec 13 '13 at 23:30

1 Answer 1

It tracks any SMTP connection. It also logs unsuccessful attempts like IP block. Here is an example:

2015-02-03T14:27:45.165Z,,08D177B7FDAD7212,0,10.0.0.10:25,10.0.0.11:23935,+,,
2015-02-03T14:27:45.165Z,,08D177B7FDAD7212,1,10.0.0.10:25,10.0.0.11:23935,>,421 4.3.2 Service not available,
2015-02-03T14:27:45.165Z,,08D177B7FDAD7212,2,10.0.0.10:25,10.0.0.11:23935,-,,Local

You can see here a machine is being blocked, without even reaching the Receive Connectort (the second column is empty).

So search for the troubleshooted IP, and you should be able to see all communication. Just remember to set the logging of each connector you monitor to Verbose.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.