How to Use Exchange Protocol Logging to Troubleshoot Email SMTP Connectivity.

Article:HOWTO92299  |  Created: 2013-10-15  |  Updated: 2013-10-16  |  Article URL http://www.symantec.com/docs/HOWTO92299
Article Type
How To



Protocol logging records the SMTP conversations that occur between messaging servers. Use protocol logging to diagnose mail flow problems.
 
By default, protocol logging is disabled on all Send connectors and Receive connectors. 
Enable or Disable Protocol logging on each individual connector.
 
Note: Disable protocol logging after troubleshooting is complete.
 
 
Turning Logging ON/OFF on the Connectors
- Use the Exchange Management Console to enable each Receive Connector (See Figure 1)
 
Navigate to Server Configuration | Hub Transport | Highlight and right click each Receive Connector | Properties | Protocol logging level | Verbose or None
 
Figure 1:
 
 
 
 
 
Set Location for logging
- Use the Exchange Management Console to Set Location for logging (See Figure 2)
 
Navigate to Server Configuration | Hub Transport | Highlight and right click the Server | Properties | Log Settings | (Protocol Log) Send/Receive protocol log path.
 
Figure 2:
 
 
 
 
Logging Examples:
 
 
( Failed to deliver email; Cause: No Author (From) )
 
<,AUTH LOGIN
>,334 <authentication response>
>,334 <authentication response>
*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassAntiSpam BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SMTPSendXShadow SMTPAcceptXShadow,Set Session Permissions
*,CWLAB\_svcacct,authenticated
>,235 2.7.0 Authentication successful
<,MAIL FROM:<null>
>,501 5.1.7 Invalid address
 
 
( Successful email delivered )
 
<,AUTH LOGIN
>,334 <authentication response>
>,334 <authentication response>
*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassAntiSpam BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SMTPSendXShadow SMTPAcceptXShadow,Set Session Permissions
*,CWLAB\_svcacct,authenticated
>,235 2.7.0 Authentication successful
<,MAIL FROM:<_svcacct@cwlab.com>
*,08D06729BA48D0CA;2013-10-15T12:32:43.248Z;1,receiving message
>,250 2.1.0 Sender OK
<,RCPT TO:<_svcacct@cwlab.local>
>,250 2.1.5 Recipient OK
<,DATA
>,354 Start mail input; end with <CRLF>.<CRLF>
*,Tarpit for '0.00:00:25.639' due to 'DelayedAck',Delivered
>,250 2.6.0 <901503496.7.1381841520363.JavaMail.cwappadmin@CWSUPPORT20> [InternalId=110] Queued mail for delivery
<,QUIT
>,221 2.0.0 Service closing transmission channel
 




Article URL http://www.symantec.com/docs/HOWTO92299


Terms of use for this information are found in Legal Notices