DOCUMENT:Q153188 19-DEC-1999 [exchange] TITLE :XCON: Description of MTA Diagnostics Logging Options PRODUCT :Microsoft Exchange PROD/VER:winnt:4.0,5.0,5.5 OPER/SYS: KEYWORDS:kbusage exc4 exc5 exc55 ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Exchange Server, versions 4.0, 5.0, 5.5 ------------------------------------------------------------------------------- SUMMARY ======= Five different variations of logs may be created when troubleshooting the Microsoft Exchange Message Transfer Agent (MTA) or X.400 Connector: 1. Event Viewer Application Log (*.EVT): Logging begins when Diagnostics Logging options have been enabled on the MTA; all logging can only be seen in the Windows NT Event Viewer. 2. EV0.LOG: Logging to this file, located in Exchsrvr\mtadata, begins when the TextEventLog value in the Windows NT Registry: KEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES \MSEXCHANGEMTA\Parameters has been changed from 0, the default, to 1. The MTA service must be stopped and restarted for this Registry entry to take effect. This logging will include the information that is seen in Event Viewer; however, it will be in TXT file format, rather than EVT, so that it can be viewed in any environment. 3. Tracking.log: The Tracking.log subdirectory under \Exchsrvr contains logs for each day that Message Tracking has been enabled. The log files are named according to the day they were created (a log file created on 7/1/96 will be named 19960701.log). These logs are created when Message Tracking has been enabled on either the Information Store Site Configuration object or the MTA Site Configuration object in the Microsoft Exchange Administrator program. These objects are in the Configuration container. The Tracking.log file may be viewed by 2 methods: 1. The Message Tracking Center (click Track Message on the Tools menu of the Microsoft Exchange Administrator program) is used to selectively query the tracking log files and is effective when an administrator desires to track a particular message to find out if/how it was delivered. 2. The Tracking.log file is in tab-delimited TXT format and can be viewed with any text editor, or it can more effectively be used by opening it in Excel. The Tracking.log will give an administrator such information as Message ID, Event Type, Date/Time stamp, Length of Message, Recipients, and Status of all messages received/sent on the corresponding day. Please refer to pages 589-591 in the Administrator's Guide for specific details on the various event codes and fields in this log file. 4. Ap0.log: The Ap0.log is generated when the Diagnostics Logging options have been set up correctly. Specifically, the Interface and Interoperability categories must be set to Maximum on the MTA service. This file will contain information about how the MTA's are making connections and sending data, as defined in RFC1006. 5. Bf0.log: The Bf0.log is generated when the X400 Service and APDU categories have been set to a minimum of Medium. This log file contains a binary dump of messages that have been sent/received by the MTA. MORE INFORMATION ================ This section includes a sample of each of the files described above. This message was sent to a recipient called "alpine1" in Site Alpine and was copied to a recipient on the local server called "tamraj1" in Site TamraJ. 1. Event Viewer (generated by MSExchangeMTA,X.400 Service): An additional session to /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ 2/cn=Microsoft Private MDB was initiated. Client version: 01. [XAPI MAIN BASE 1 91] (10) Object 06000056 received from entity /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=SERVERS/CN=TAMRAJ 2/CN=MICROSOFT PRIVATE MDB. The entity is a Message, object is a Normal priority Message, the MTS identifier is C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2, and content length is 1155. The number of objects sent so far = 1. External trace information (first 100 bytes) = 3080638061801302555300006280130120000013094D4943524F534F4654 0000318080113936303730313133333135352D3034303082010083020600 00000000. (10) Message C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 was successfully appended to the /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In ternet Mail Connector (TAMRAJ2) transfer-in queue. [XAPI TRANSFER 37 73] (10) Object 06000057 was sent to entity /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN TERNET MAIL CONNECTOR (TAMRAJ2). The entity is a XAPI- Gateway , object is a Normal priority Message, the MTS Identifier is C=US;A= ;P=MICROSOFT;L=TAMRAJ2- 960701173047Z-2, and content length 1155. The number of objects sent so far = 1. The External Trace Information (first 100 bytes) = 3080638061801302555300006280130120000013094D4943524F534F4654 0000318080113936303730313133333135352D3034303082010083020600 00000000. (10) Entity /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In ternet Mail Connector (TAMRAJ2) has removed object C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 from the transfer-in queue/mailbox. Internal object ID: 06000057. [XAPI GATEWAY 36 134] (10) 2. Ev0.log: (XAPI TRANSFER(37) Proc 73) 07-01-96 01:32:08pm Message appended to transfer-in queue OK Entity name /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In ternet Mail Connector (TAMRAJ2) MTS Identifier C=US;A= ;P=MICROSOFT;L=TAMRAJ2- 960701173047Z-2 (MTA XFER-IN(17) Proc 205) 07-01-96 01:32:09pm Object 06000057 sent to entity /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN TERNET MAIL CONNECTOR (TAMRAJ2) Entity is a XAPI-Gateway Object is a Normal priority Message MTS Identifier C=US;A= ;P=MICROSOFT;L=TAMRAJ2- 960701173047Z-2 Content length 1155 External Trace Information (first 100 bytes) = 3080638061801302555300006280130120000013094D4943524F534F4654 0000318080113936303730313133333135352D3034303082010083020600 00000000 No. of objects sent so far = 1 PDU dump reference 2 3. Tracking.log: c=US;a= ;p=MICROSOFT;l=TAMRAJ2-960701173047Z-2 1000 1996.7.1 17:30:48 /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ 2/cn=Microsoft Private MDB /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ 2/cn=Microsoft Private MDB /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 454 0 1 1 /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=Tamraj1 C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 4 1996.7.1 18:31:56 /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=SERVERS/CN=TAMRAJ 2/CN=MICROSOFT PRIVATE MDB /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 1155 0 0 1 /O=MICROSOFT/OU=ALPINE/CN=Recipients/CN=alpine1 C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 7 1996.7.1 18:32:9 /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN TERNET MAIL CONNECTOR (TAMRAJ2) /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 1155 0 0 1 /O=MICROSOFT/OU=ALPINE/CN=RECIPIENTS/CN=ALPINE1 c=US;a= ;p=MICROSOFT;l=TAMRAJ2-960701173047Z-2 1003 1996.7.1 17:32:18 /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In ternet Mail Connector (TAMRAJ2) alpine.microsoft.com [PBZ70AAB] /o=MICROSOFT/ou=TAMRAJ/cn=RECIPIENTS/cn=TAMRAJ1 0 2907 0 0 1 IMCEAEX- _O=MICROSOFT_OU=ALPINE_cn=RECIPIENTS_cn=ALPINE1@alpine.micro soft.com 4. Ap0.log: MA_Wait Indication received from entity /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ 2/cn=Microsoft Priv [00000] A1 80 02 01 33 A1 80 30 80 99 02 27 10 91 01 00 ....3..0...'.... [00016] 00 00 00 00 00 00 ...... XAPI message: Jul 1, 1996 14:49:09, connection 1543 MA_Wait Response sent to entity /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ 2/cn=Microsoft Publ [00000] A2 80 02 01 33 30 80 94 01 00 00 00 00 00 ....30........ XAPI message: Jul 1, 1996 14:49:09, connection 775 MA_Wait Indication received from entity /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ 2/cn=Microsoft Publ [00000] A1 80 02 01 33 A1 80 30 80 99 02 27 10 91 01 00 ....3..0...'.... [00016] 00 00 00 00 00 00 ...... 5. Bf0.log: Reference 47 : [ 0] 01 31 77 12 41 55 86 CF 11 9B 30 00 AA 00 62 C8 .1w.AU....0...b. [ 16] 05 00 00 00 05 35 7A 03 00 03 40 E4 84 08 40 29 .....5z...@...@) [ 32] 00 00 00 2F 4F 3D 4D 49 43 52 4F 53 4F 46 54 2F .../O=MICROSOFT/ [ 48] 4F 55 3D 54 41 4D 52 41 4A 2F 43 4E 3D 52 45 43 OU=TAMRAJ/CN=REC [ 64] 49 50 49 45 4E 54 53 2F 43 4E 3D 00 02 01 FF 0F IPIENTS/CN=..... [ 80] 22 00 00 00 10 00 41 4C 50 49 4E 45 2F 43 4E 3D ".....ALPINE/CN= [ 96] 52 45 43 49 50 49 45 4E 54 53 2F 43 4E 3D 41 4C RECIPIENTS/CN=AL [ 112] 50 49 4E 45 31 00 E4 84 01 30 08 00 00 00 61 6C PINE1....0....al [ 128] 70 69 6E 65 31 00 E4 84 20 3A 08 00 00 00 61 6C pine1... :....al [ 144] 70 69 6E 65 31 00 0B 00 40 3A 01 00 03 00 00 39 pine1...@:.....9 [ 160] 00 00 00 00 E4 84 FF 39 08 00 00 00 61 6C 70 69 .......9....alpi [ 176] 6E 65 31 00 03 00 04 40 03 00 03 40 02 01 FF 0F ne1....@...@.... [ 192] 0A 00 00 00 28 00 54 41 4D 52 41 4A 31 00 E4 84 ....(.TAMRAJ1... [ 208] 01 30 08 00 00 00 74 61 6D 72 61 6A 31 00 E4 84 .0....tamraj1... [ 224] 20 3A 08 00 00 00 74 61 6D 72 61 6A 31 00 0B 00 :....tamraj1... [ 240] 40 3A 01 00 03 00 00 39 00 00 00 00 E4 84 FF 39 @:.....9.......9 [ 256] 08 00 00 00 74 61 6D 72 61 6A 31 00 03 00 05 40 ....tamraj1....@ [ 272] 02 01 0B 30 10 00 00 00 25 EF C6 FA 51 D3 CF 11 ...0....%...Q... [ 288] 9B 43 00 AA 00 62 C8 05 E4 84 70 00 38 00 00 00 .C...b....p.8... [ 304] 4D 65 73 73 61 67 65 20 73 65 6E 74 20 66 6F 72 Message sent for [ 320] 20 76 61 72 69 6F 75 73 20 44 69 61 67 6E 6F 73 various Diagnos [ 336] 74 69 63 73 20 4C 6F 67 67 69 6E 67 20 6F 70 74 tics Logging opt [ 352] 69 6F 6E 73 2E 2E 2E 00 02 01 71 00 1B 00 00 00 ions......q..... [ 368] 01 BB 67 73 0A 53 BA 0E E8 E6 D3 64 11 CF 9B 43 ..gs.S.....d...C [ 384] 00 AA 00 62 C8 05 00 01 7B 48 D1 03 00 2E 00 00 ...b....{H...... [ 400] 00 00 00 02 01 09 10 9D 01 00 00 99 01 00 00 9B ................ [ 416] 03 00 00 4C 5A 46 75 CD 91 89 6D FF 00 0A 01 0F ...LZFu...m..... [ 432] 02 15 02 A4 03 E4 05 EB 02 83 00 50 13 03 54 02 ...........P..T. [ 448] 00 63 68 0A C0 73 65 74 EE 32 06 00 06 C3 02 83 .ch..set.2...... [ 464] 32 03 C6 07 13 02 83 22 33 0F 7A 68 65 6C 03 20 2......"3.zhel. [ 480] 44 6C EA 67 02 83 34 13 0D 7D 0A 80 08 CF 09 D9 Dl.g..4..}...... [ 496] E2 3B 17 9F 32 35 35 02 80 0A 81 0D B1 C1 0B 60 .;..255........` [ 512] 6E 67 31 30 33 14 20 0B 0A 6B 12 F2 0C 01 63 00 ng103. ..k....c. [ 528] 40 20 0A 85 0A 8B 6C 90 69 31 34 34 02 D1 69 2D @ ....l.i144..i- [ 544] 1D E3 67 0C D0 1D E3 0B 59 31 36 0A A0 03 60 74 ..g.....Y16...`t [ 560] FB 05 90 05 40 2D 20 87 0A 87 1F 3B 0C 30 20 06 ....@- ....;.0 . [ 576] BA 46 03 61 3A 21 8E 20 06 0C 82 20 01 90 E0 6D .F.a:!. ... ...m [ 592] 72 61 6A 31 21 2F 22 3D 06 60 17 02 30 23 6F 24 raj1!/"=.`..0#o$ [ 608] 7B 4D 02 20 64 61 79 00 2C 20 4A 75 6C 79 20 30 {M. day., July 0 [ 624] 42 31 2A 30 31 39 39 36 2A D0 3A 60 33 30 20 50 B1*01996*.:`30 P [ 640] 4D 25 BF 22 3D 54 AE 6F 27 FF 24 7B 07 40 70 0B M%."=T.o'.${.@p. [ 656] 80 65 25 AF F9 22 2E 43 63 2D CF 24 7F 25 8F 30 .e%..".Cc-.$.%.0 [ 672] FF 06 00 78 75 62 6A 20 41 32 3F 29 0C 07 90 73 ...xubj A2?)...s [ 688] B0 61 67 65 20 11 F0 02 30 20 02 10 B5 05 C0 76 .age ...0 .....v [ 704] 0A C0 69 08 60 04 20 44 07 30 80 67 6E 6F 73 74 ..i.`. D.0.gnost [ 720] 69 63 04 20 10 4C 6F 67 67 0B 80 67 20 6F F7 05 ic. .Logg..g o.. [ 736] 30 3A 10 00 80 2E 3C 10 1C 8F 0B 28 15 C2 EB 0C 0:....<....(.... [ 752] 01 20 06 42 04 70 79 36 F0 2D 90 07 90 B3 05 40 . .B.py6.-.....@ [ 768] 39 53 74 6F 13 70 2F B4 20 0B 80 7D 06 00 69 20 9Sto.p/. ..}..i [ 784] 30 36 F0 40 24 2F 90 29 F0 20 AE 63 32 20 41 C0 06.@$/.). .c2 A. [ 800] 3F F1 54 34 22 4A 40 88 BF 42 64 3C BF 1B A8 20 ?.T4"J@..Bd<... [ 816] 06 43 C5 16 C1 00 46 A0 40 00 39 00 60 57 1A 17 .C....F.@.9.`W.. [ 832] 79 67 BB 01 03 00 F1 3F 09 04 00 00 02 01 41 00 yg.....?......A. [ 848] 0A 00 00 00 28 00 54 41 4D 52 41 4A 31 00 B1 84 ....(.TAMRAJ1... [ 864] 42 00 08 00 00 00 74 61 6D 72 61 6A 31 00 02 01 B.....tamraj1... [ 880] 47 00 2F 00 00 00 63 3D 55 53 3B 61 3D 20 3B 70 G./...c=US;a= ;p [ 896] 3D 4D 49 43 52 4F 53 4F 46 54 3B 6C 3D 54 41 4D =MICROSOFT;l=TAM [ 912] 52 41 4A 32 2D 39 36 30 37 30 31 31 38 31 34 30 RAJ2-96070118140 [ 928] 35 5A 2D 33 00 02 01 F9 3F 4C 00 00 00 00 00 00 5Z-3....?L...... [ 944] 00 DC A7 40 C8 C0 42 10 1A B4 B9 08 00 2B 2F E1 ...@..B......+/. [ 960] 82 01 00 00 00 00 00 00 00 2F 4F 3D 4D 49 43 52 ........./O=MICR [ 976] 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A 2F OSOFT/OU=TAMRAJ/ [ 992] 43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43 4E CN=RECIPIENTS/CN [ 1008] 3D 54 41 4D 52 41 4A 31 00 B1 84 F8 3F 08 00 00 =TAMRAJ1....?... [ 1024] 00 74 61 6D 72 61 6A 31 00 02 01 FB 3F 4C 00 00 .tamraj1....?L.. [ 1040] 00 00 00 00 00 DC A7 40 C8 C0 42 10 1A B4 B9 08 .......@..B..... [ 1056] 00 2B 2F E1 82 01 00 00 00 00 00 00 00 2F 4F 3D .+/........../O= [ 1072] 4D 49 43 52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D MICROSOFT/OU=TAM [ 1088] 52 41 4A 2F 43 4E 3D 52 45 43 49 50 49 45 4E 54 RAJ/CN=RECIPIENT [ 1104] 53 2F 43 4E 3D 54 41 4D 52 41 4A 31 00 B1 84 FA S/CN=TAMRAJ1.... [ 1120] 3F 08 00 00 00 74 61 6D 72 61 6A 31 00 40 00 07 ?....tamraj1.@.. [ 1136] 30 A0 C7 FB 16 79 67 BB 01 40 00 08 30 E0 90 26 0....yg..@..0..& [ 1152] 17 79 67 BB 01 B1 84 3D 00 05 00 00 00 46 57 3A .yg....=.....FW: [ 1168] 20 00 B1 84 1D 0E 38 00 00 00 4D 65 73 73 61 67 .....8...Messag [ 1184] 65 20 73 65 6E 74 20 66 6F 72 20 76 61 72 69 6F e sent for vario [ 1200] 75 73 20 44 69 61 67 6E 6F 73 74 69 63 73 20 4C us Diagnostics L [ 1216] 6F 67 67 69 6E 67 20 6F 70 74 69 6F 6E 73 2E 2E ogging options.. [ 1232] 2E 00 E4 84 31 40 30 00 00 00 2F 4F 3D 4D 49 43 ....1@0.../O=MIC [ 1248] 52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A ROSOFT/OU=TAMRAJ [ 1264] 2F 43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43 /CN=RECIPIENTS/C [ 1280] 4E 3D 54 41 4D 52 41 4A 31 00 E4 84 38 40 30 00 N=TAMRAJ1...8@0. [ 1296] 00 00 2F 4F 3D 4D 49 43 52 4F 53 4F 46 54 2F 4F ../O=MICROSOFT/O [ 1312] 55 3D 54 41 4D 52 41 4A 2F 43 4E 3D 52 45 43 49 U=TAMRAJ/CN=RECI [ 1328] 50 49 45 4E 54 53 2F 43 4E 3D 54 41 4D 52 41 4A PIENTS/CN=TAMRAJ [ 1344] 31 00 E4 84 39 40 30 00 00 00 2F 4F 3D 4D 49 43 1...9@0.../O=MIC [ 1360] 52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A ROSOFT/OU=TAMRAJ [ 1376] 2F 43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43 /CN=RECIPIENTS/C [ 1392] 4E 3D 54 41 4D 52 41 4A 31 00 N=TAMRAJ1. Additional query words: ====================================================================== Keywords : kbusage exc4 exc5 exc55 Technology : kbExchangeSearch kbExchange500 kbExchange550 kbExchange400 kbZNotKeyword2 Version : winnt:4.0,5.0,5.5 ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 1999.