Comments on: Tracking the computer or source of an email http://itknowledgeexchange.techtarget.com/itanswers/tracking-the-computer-or-source-of-an-email/ Wed, 22 May 2013 18:27:48 +0000 hourly 1 By: maclanachu http://itknowledgeexchange.techtarget.com/itanswers/tracking-the-computer-or-source-of-an-email/#comment-40102 maclanachu Mon, 24 Jul 2006 18:37:15 +0000 #comment-40102 yeah thx came accross that too but alas this is from a few weeks back now.
Am beginning to think this level of detail isn’t permanently logged. Bugger!

MAc

]]> By: aalborz43 http://itknowledgeexchange.techtarget.com/itanswers/tracking-the-computer-or-source-of-an-email/#comment-40103 aalborz43 Mon, 24 Jul 2006 08:56:22 +0000 #comment-40103 You can also, in ESM, right-click on Logons folder under Mailbox Store.
Select View/Add-Remove Columns and add Client IP address.
Right-click again and do Refresh.
If nobody has logged on to that mailbox since then, you should be able to see the IP address listed there.

]]> By: maclanachu http://itknowledgeexchange.techtarget.com/itanswers/tracking-the-computer-or-source-of-an-email/#comment-40104 maclanachu Sun, 23 Jul 2006 00:35:08 +0000 #comment-40104 Thx,

but there are no headers from the sent box, and on the receiving side it only gives the ip address of our mail server. It’s the originating computers IP address is what I need to find.
SMTP logs similarly only give the ip address of the mail server as source. Argh!
ExMon can do live snapshots that give the source IP. Just need to fnd this in the logs somehow.

Mac

]]>