Some Org use Exchange2003 Org. How could I see Protocol log and other logs to investigate spam source in Exchange2003 ?

On Mon, 24 Sep 2012 18:38:48 +0000, miyagiken wrote: >Some Org use Exchange2003 Org. > >How could I see Protocol log and other logs to investigate spam source in Exchange2003 ? If you've enabled protocol logging on the SMTP Virtual Server, and haven't changed the default location of the log files, they'd be in one of these directories: C:\WINDOWS\system32\LogFiles\SMTPSVCX The "X" depends on how many SMTP Virtual servers you have. If you have just one it'd probably be "1". --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

On Mon, 24 Sep 2012 18:38:48 +0000, miyagiken wrote: >Some Org use Exchange2003 Org. > >How could I see Protocol log and other logs to investigate spam source in Exchange2003 ? If you've enabled protocol logging on the SMTP Virtual Server, and haven't changed the default location of the log files, they'd be in one of these directories: C:\WINDOWS\system32\LogFiles\SMTPSVCX The "X" depends on how many SMTP Virtual servers you have. If you have just one it'd probably be "1". --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Thank you. Which log type would be easy to investigate spam source ? And is it possible to limit log size ? , because I think I have to watch disk usage .

There was log file which folder name is W3SVC1 which has every day logs. Where is configuration for that ? Because no log colllection was configured.

Adding to what Rich said, in case if you have not enabled the protocol logging then you may refer to info on the links below: Protocol Logging, Event Logging, and Message Tracking How to enable SMTP protocol logging in Exchange 2000 Server and in Exchange Server 2003 ______________________________________________________ PaVaN ~ ( Exchange Support | 2003/2007/2010) ~Mark this if Helpful

On Tue, 25 Sep 2012 04:48:42 +0000, miyagiken wrote: >Which log type would be easy to investigate spam source ? I've always used the "W3C Extended...." format. I also collect ALL the data, not just the limited number of columns in the default settings. >And is it possible to limit log size ? , because I think I have to watch disk usage . You can delete the log files with impunity. They're just text files and not used by Exchange for anything other than logging the activity on a SMTP Virtual Server. You can also stop the SMTP logging when you don't want it, or change the location of the log files to another location where ou have more room. There are also a number of scripts and other tools that will help you manage log files (not as nicely as the *nix logrotate, but better than trying to build your own). --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

On Tue, 25 Sep 2012 04:48:42 +0000, miyagiken wrote: >Which log type would be easy to investigate spam source ? I've always used the "W3C Extended...." format. I also collect ALL the data, not just the limited number of columns in the default settings. >And is it possible to limit log size ? , because I think I have to watch disk usage . You can delete the log files with impunity. They're just text files and not used by Exchange for anything other than logging the activity on a SMTP Virtual Server. You can also stop the SMTP logging when you don't want it, or change the location of the log files to another location where ou have more room. There are also a number of scripts and other tools that will help you manage log files (not as nicely as the *nix logrotate, but better than trying to build your own). --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP