How To Use Exchange Protocol Logging to Troubleshoot Email SMTP Connectivity

Article: 100038601
Last Published: 2021-04-30
Ratings: 0 0
Product(s): eDiscovery Platform

Description

Protocol logging records the SMTP conversations that occur between messaging servers. Use protocol logging to diagnose mail flow problems.

By default, protocol logging is disabled on all Send connectors and Receive connectors.
Enable or Disable Protocol logging on each individual connector.

Note: Disable protocol logging after troubleshooting is complete.


Turning Logging ON/OFF on the Connectors
Use the Exchange Management Console to enable each Receive Connector:

  1. Go to "Server Configuration > Hub Transport" in the left pane
  2. Right click on a Receive Connector
  3. Click "Properties"
  4. Set the "Protocol logging level" to "Verbose"

 

Set Location for logging
Use the Exchange Management Console to Set Location for logging:

  1. Go to "Server Configuration > Hub Transport" in the left pane
  2. Right click on a Server
  3. Click "Properties"
  4. Go to the "Log Settings" tab
  5. Set or make a note of the "Send/Receive protocol log path"
Logging Examples:
( Failed to deliver email; Cause: No Author (From) )
<,AUTH LOGIN
>,334 <authentication response>
>,334 <authentication response>
*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassAntiSpam BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SMTPSendXShadow SMTPAcceptXShadow,Set Session Permissions
*,CWLAB\_svcacct,authenticated
>,235 2.7.0 Authentication successful
<,MAIL FROM:<null>
>,501 5.1.7 Invalid address
( Successful email delivered )
<,AUTH LOGIN
>,334 <authentication response>
>,334 <authentication response>
*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassAntiSpam BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SMTPSendXShadow SMTPAcceptXShadow,Set Session Permissions
*,CWLAB\_svcacct,authenticated
>,235 2.7.0 Authentication successful
<,MAIL FROM:<_svcacct@cwlab.com>
*,08D06729BA48D0CA;2013-10-15T12:32:43.248Z;1,receiving message
>,250 2.1.0 Sender OK
<,RCPT TO:<_svcacct@cwlab.local>
>,250 2.1.5 Recipient OK
<,DATA
>,354 Start mail input; end with <CRLF>.<CRLF>
*,Tarpit for '0.00:00:25.639' due to 'DelayedAck',Delivered
>,250 2.6.0 <901503496.7.1381841520363.JavaMail.cwappadmin@CWSUPPORT20> [InternalId=110] Queued mail for delivery
<,QUIT
>,221 2.0.0 Service closing transmission channel

Was this content helpful?