Every item log has two IP address, what are the meaning of two IP? Thanks. 2012-01-16T00:00:38.404Z,2597351,0,/O=Amer/OU=Exchange/cn=Recipients/cn=car1,,,6.0.8211.0,Classic,10.134.7.4,10.134.150.226,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-1177238915-1202660629-1801674531-75820, Flags=IgnoreNoPublicFolders", 2012-01-16T00:00:40.435Z,2597352,0,/O=Amer/OU=Exchange/cn=Recipients/cn=car1,,,6.0.8211.0,Classic,10.134.7.4,10.134.150.226,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-1177238915-1202660629-1801674531-75820, Flags=IgnoreNoPublicFolders", 2012-01-16T00:00:40.435Z,2597353,0,/O=Amer/OU=Exchange/cn=Recipients/cn=car1,,,6.0.8211.0,Classic,10.134.7.4,10.134.150.226,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-1177238915-1202660629-1801674531-75820, Flags=IgnoreNoPublicFolders", 2012-04-16T00:00:40.435Z,2597354,0,/O=Amer/OU=Exchange/cn=Recipients/cn=car1,,,6.0.8211.0,Classic,10.134.7.4,10.134.150.226,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-1177238915-1202660629-1801674531-75820, Flags=IgnoreNoPublicFolders",

I don't know what these logs are, but when there are two IP addresses, they usually indicate the source of the information, and the destination. I'd guess: Source: 10.134.7.4 (probably a server on your LAN) Destination: 10.134.150.226 (probably a client on your LAN).Mobile OWA For Smartphone www.leederbyshire.com email a@t leederbyshire d.0.t c.0.m

Hi This is RPC Client Access log.they are source and destination ipTerence Yu TechNet Community Support

Thank your very much.