Monitoring Incomming POP3 Connections
Windows 2003, Exchange 2003 Enterprise SP2 (clustered)
How do I enable logging for incomming POP3 connctions?
What I'm looking for is something like this:
2010-11-16T17:51:30.592Z,0000000000000036,1,192.168.170.82:995,192.168.170.133:4668,>,+OK The Microsoft Exchange POP3 service is ready.,
2010-11-16T17:51:30.904Z,0000000000000036,2,192.168.170.82:995,192.168.170.133:4668,<,AUTH ,
2010-11-16T17:51:30.936Z,0000000000000036,3,192.168.170.82:995,192.168.170.133:4668,>,+OK,
2010-11-16T17:51:30.936Z,0000000000000036,4,192.168.170.82:995,192.168.170.133:4668,>,GSSAPI,
2010-11-16T17:51:30.936Z,0000000000000036,5,192.168.170.82:995,192.168.170.133:4668,>,PLAIN,
2010-11-16T17:51:30.936Z,0000000000000036,6,192.168.170.82:995,192.168.170.133:4668,>,.,
2010-11-16T17:51:30.936Z,0000000000000036,7,192.168.170.82:995,192.168.170.133:4668,<,USER fileitd,
2010-11-16T17:51:30.936Z,0000000000000036,8,192.168.170.82:995,192.168.170.133:4668,>,+OK,
2010-11-16T17:51:30.936Z,0000000000000036,9,192.168.170.82:995,192.168.170.133:4668,<,PASS *****,
Thanks.
November 18th, 2010 1:09pm
Whoops sorry, missed that.
Windows 2003, Exchange 2003 Enterprise SP2 (clustered).
David.
Free Windows Admin Tool Kit Click here and download it now
November 18th, 2010 6:52pm
Please use the KB below to enable the logging level, which can log the trace just like the traces you posted above. I have tried in my exchange 2003 lab
Resources:
How to activate protocol logging for POP3 and IMAP4
James Luo
TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx)
If you have any feedback on our support, please contact tngfb@microsoft.com
November 18th, 2010 9:05pm
Thank you thats exactly what I was looking for.
Free Windows Admin Tool Kit Click here and download it now
November 24th, 2010 4:47pm
Glad to help : )James Luo
TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx)
If you have any feedback on our support, please contact tngfb@microsoft.com
November 26th, 2010 2:40am