Q153188: XCON: Description of MTA Diagnostics Logging Options
Article: Q153188
Product(s): Microsoft Exchange
Version(s): winnt:4.0,5.0,5.5
Operating System(s):
Keyword(s): kbusage exc4 exc5 exc55
Last Modified: 19-DEC-1999
-------------------------------------------------------------------------------
The information in this article applies to:
- Microsoft Exchange Server, versions 4.0, 5.0, 5.5
-------------------------------------------------------------------------------
SUMMARY
=======
Five different variations of logs may be created when troubleshooting the
Microsoft Exchange Message Transfer Agent (MTA) or X.400 Connector:
1. Event Viewer Application Log (*.EVT): Logging begins when Diagnostics Logging
options have been enabled on the MTA; all logging can only be seen in the
Windows NT Event Viewer.
2. EV0.LOG: Logging to this file, located in Exchsrvr\mtadata, begins when the
TextEventLog value in the Windows NT Registry:
KEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES
\MSEXCHANGEMTA\Parameters
has been changed from 0, the default, to 1. The MTA service must be stopped
and restarted for this Registry entry to take effect. This logging will
include the information that is seen in Event Viewer; however, it will be in
TXT file format, rather than EVT, so that it can be viewed in any
environment.
3. Tracking.log: The Tracking.log subdirectory under \Exchsrvr contains logs for
each day that Message Tracking has been enabled. The log files are named
according to the day they were created (a log file created on 7/1/96 will be
named 19960701.log). These logs are created when Message Tracking has been
enabled on either the Information Store Site Configuration object or the MTA
Site Configuration object in the Microsoft Exchange Administrator program.
These objects are in the Configuration container. The Tracking.log file may
be viewed by 2 methods:
1. The Message Tracking Center (click Track Message on the Tools menu of the
Microsoft Exchange Administrator program) is used to selectively query the
tracking log files and is effective when an administrator desires to track
a particular message to find out if/how it was delivered.
2. The Tracking.log file is in tab-delimited TXT format and can be viewed
with any text editor, or it can more effectively be used by opening it in
Excel. The Tracking.log will give an administrator such information as
Message ID, Event Type, Date/Time stamp, Length of Message, Recipients,
and Status of all messages received/sent on the corresponding day. Please
refer to pages 589-591 in the Administrator's Guide for specific details
on the various event codes and fields in this log file.
4. Ap0.log: The Ap0.log is generated when the Diagnostics Logging options have
been set up correctly. Specifically, the Interface and Interoperability
categories must be set to Maximum on the MTA service. This file will contain
information about how the MTA's are making connections and sending data, as
defined in RFC1006.
5. Bf0.log: The Bf0.log is generated when the X400 Service and APDU categories
have been set to a minimum of Medium. This log file contains a binary dump of
messages that have been sent/received by the MTA.
MORE INFORMATION
================
This section includes a sample of each of the files described above. This
message was sent to a recipient called "alpine1" in Site Alpine and was copied
to a recipient on the local server called "tamraj1" in Site TamraJ.
1. Event Viewer (generated by MSExchangeMTA,X.400 Service):
An additional session to
/o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
2/cn=Microsoft Private MDB was initiated. Client version:
01. [XAPI MAIN BASE 1 91] (10)
Object 06000056 received from entity
/O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=SERVERS/CN=TAMRAJ
2/CN=MICROSOFT PRIVATE MDB. The entity is a Message, object
is a Normal priority Message, the MTS identifier is C=US;A=
;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2, and content length
is 1155. The number of objects sent so far = 1. External
trace information (first 100 bytes) =
3080638061801302555300006280130120000013094D4943524F534F4654
0000318080113936303730313133333135352D3034303082010083020600
00000000. (10)
Message C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 was
successfully appended to the
/o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
ternet Mail Connector (TAMRAJ2) transfer-in queue. [XAPI
TRANSFER 37 73] (10)
Object 06000057 was sent to entity
/O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN
TERNET MAIL CONNECTOR (TAMRAJ2). The entity is a XAPI-
Gateway , object is a Normal priority Message, the
MTS Identifier is C=US;A= ;P=MICROSOFT;L=TAMRAJ2-
960701173047Z-2, and content length 1155. The number of
objects sent so far = 1. The External Trace Information
(first 100 bytes) =
3080638061801302555300006280130120000013094D4943524F534F4654
0000318080113936303730313133333135352D3034303082010083020600
00000000. (10)
Entity
/o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
ternet Mail Connector (TAMRAJ2) has removed object C=US;A=
;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 from the transfer-in
queue/mailbox. Internal object ID: 06000057. [XAPI GATEWAY
36 134] (10)
2. Ev0.log:
(XAPI TRANSFER(37) Proc 73) 07-01-96 01:32:08pm
Message appended to transfer-in queue OK
Entity name
/o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
ternet Mail Connector (TAMRAJ2)
MTS Identifier C=US;A= ;P=MICROSOFT;L=TAMRAJ2-
960701173047Z-2
(MTA XFER-IN(17) Proc 205) 07-01-96 01:32:09pm
Object 06000057 sent to entity
/O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN
TERNET MAIL CONNECTOR (TAMRAJ2)
Entity is a XAPI-Gateway
Object is a Normal priority Message
MTS Identifier C=US;A= ;P=MICROSOFT;L=TAMRAJ2-
960701173047Z-2
Content length 1155
External Trace Information (first 100 bytes) =
3080638061801302555300006280130120000013094D4943524F534F4654
0000318080113936303730313133333135352D3034303082010083020600
00000000
No. of objects sent so far = 1
PDU dump reference 2
3. Tracking.log:
c=US;a= ;p=MICROSOFT;l=TAMRAJ2-960701173047Z-2 1000 1996.7.1
17:30:48
/o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
2/cn=Microsoft Private MDB
/o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
2/cn=Microsoft Private MDB
/O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 454 0 1 1
/O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=Tamraj1
C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 4 1996.7.1
18:31:56
/O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=SERVERS/CN=TAMRAJ
2/CN=MICROSOFT PRIVATE MDB
/O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 1155 0 0 1
/O=MICROSOFT/OU=ALPINE/CN=Recipients/CN=alpine1
C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 7 1996.7.1
18:32:9
/O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN
TERNET MAIL CONNECTOR (TAMRAJ2)
/O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 1155 0 0 1
/O=MICROSOFT/OU=ALPINE/CN=RECIPIENTS/CN=ALPINE1
c=US;a= ;p=MICROSOFT;l=TAMRAJ2-960701173047Z-2 1003 1996.7.1
17:32:18
/o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
ternet Mail Connector (TAMRAJ2) alpine.microsoft.com
<c=US%a=_%p=MICROSOFT%l=TAMRAJ2-960701173047Z-
2@tamraj.microsoft.com>[PBZ70AAB]
/o=MICROSOFT/ou=TAMRAJ/cn=RECIPIENTS/cn=TAMRAJ1 0 2907 0 0 1
IMCEAEX-
_O=MICROSOFT_OU=ALPINE_cn=RECIPIENTS_cn=ALPINE1@alpine.micro
soft.com
4. Ap0.log:
MA_Wait Indication received from entity
/o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
2/cn=Microsoft Priv
[00000] A1 80 02 01 33 A1 80 30 80 99 02 27 10 91 01 00
....3..0...'....
[00016] 00 00 00 00 00 00
......
XAPI message: Jul 1, 1996 14:49:09, connection 1543
MA_Wait Response sent to entity
/o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
2/cn=Microsoft Publ
[00000] A2 80 02 01 33 30 80 94 01 00 00 00 00 00
....30........
XAPI message: Jul 1, 1996 14:49:09, connection 775
MA_Wait Indication received from entity
/o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
2/cn=Microsoft Publ
[00000] A1 80 02 01 33 A1 80 30 80 99 02 27 10 91 01 00
....3..0...'....
[00016] 00 00 00 00 00 00
......
5. Bf0.log:
Reference 47 :
[ 0] 01 31 77 12 41 55 86 CF 11 9B 30 00 AA 00 62 C8
.1w.AU....0...b.
[ 16] 05 00 00 00 05 35 7A 03 00 03 40 E4 84 08 40 29
.....5z...@...@)
[ 32] 00 00 00 2F 4F 3D 4D 49 43 52 4F 53 4F 46 54 2F
.../O=MICROSOFT/
[ 48] 4F 55 3D 54 41 4D 52 41 4A 2F 43 4E 3D 52 45 43
OU=TAMRAJ/CN=REC
[ 64] 49 50 49 45 4E 54 53 2F 43 4E 3D 00 02 01 FF 0F
IPIENTS/CN=.....
[ 80] 22 00 00 00 10 00 41 4C 50 49 4E 45 2F 43 4E 3D
".....ALPINE/CN=
[ 96] 52 45 43 49 50 49 45 4E 54 53 2F 43 4E 3D 41 4C
RECIPIENTS/CN=AL
[ 112] 50 49 4E 45 31 00 E4 84 01 30 08 00 00 00 61 6C
PINE1....0....al
[ 128] 70 69 6E 65 31 00 E4 84 20 3A 08 00 00 00 61 6C
pine1... :....al
[ 144] 70 69 6E 65 31 00 0B 00 40 3A 01 00 03 00 00 39
pine1...@:.....9
[ 160] 00 00 00 00 E4 84 FF 39 08 00 00 00 61 6C 70 69
.......9....alpi
[ 176] 6E 65 31 00 03 00 04 40 03 00 03 40 02 01 FF 0F
ne1....@...@....
[ 192] 0A 00 00 00 28 00 54 41 4D 52 41 4A 31 00 E4 84
....(.TAMRAJ1...
[ 208] 01 30 08 00 00 00 74 61 6D 72 61 6A 31 00 E4 84
.0....tamraj1...
[ 224] 20 3A 08 00 00 00 74 61 6D 72 61 6A 31 00 0B 00
:....tamraj1...
[ 240] 40 3A 01 00 03 00 00 39 00 00 00 00 E4 84 FF 39
@:.....9.......9
[ 256] 08 00 00 00 74 61 6D 72 61 6A 31 00 03 00 05 40
....tamraj1....@
[ 272] 02 01 0B 30 10 00 00 00 25 EF C6 FA 51 D3 CF 11
...0....%...Q...
[ 288] 9B 43 00 AA 00 62 C8 05 E4 84 70 00 38 00 00 00
.C...b....p.8...
[ 304] 4D 65 73 73 61 67 65 20 73 65 6E 74 20 66 6F 72
Message sent for
[ 320] 20 76 61 72 69 6F 75 73 20 44 69 61 67 6E 6F 73
various Diagnos
[ 336] 74 69 63 73 20 4C 6F 67 67 69 6E 67 20 6F 70 74
tics Logging opt
[ 352] 69 6F 6E 73 2E 2E 2E 00 02 01 71 00 1B 00 00 00
ions......q.....
[ 368] 01 BB 67 73 0A 53 BA 0E E8 E6 D3 64 11 CF 9B 43
..gs.S.....d...C
[ 384] 00 AA 00 62 C8 05 00 01 7B 48 D1 03 00 2E 00 00
...b....{H......
[ 400] 00 00 00 02 01 09 10 9D 01 00 00 99 01 00 00 9B
................
[ 416] 03 00 00 4C 5A 46 75 CD 91 89 6D FF 00 0A 01 0F
...LZFu...m.....
[ 432] 02 15 02 A4 03 E4 05 EB 02 83 00 50 13 03 54 02
...........P..T.
[ 448] 00 63 68 0A C0 73 65 74 EE 32 06 00 06 C3 02 83
.ch..set.2......
[ 464] 32 03 C6 07 13 02 83 22 33 0F 7A 68 65 6C 03 20
2......"3.zhel.
[ 480] 44 6C EA 67 02 83 34 13 0D 7D 0A 80 08 CF 09 D9
Dl.g..4..}......
[ 496] E2 3B 17 9F 32 35 35 02 80 0A 81 0D B1 C1 0B 60
.;..255........`
[ 512] 6E 67 31 30 33 14 20 0B 0A 6B 12 F2 0C 01 63 00
ng103. ..k....c.
[ 528] 40 20 0A 85 0A 8B 6C 90 69 31 34 34 02 D1 69 2D
@ ....l.i144..i-
[ 544] 1D E3 67 0C D0 1D E3 0B 59 31 36 0A A0 03 60 74
..g.....Y16...`t
[ 560] FB 05 90 05 40 2D 20 87 0A 87 1F 3B 0C 30 20 06
....@- ....;.0 .
[ 576] BA 46 03 61 3A 21 8E 20 06 0C 82 20 01 90 E0 6D
.F.a:!. ... ...m
[ 592] 72 61 6A 31 21 2F 22 3D 06 60 17 02 30 23 6F 24
raj1!/"=.`..0#o$
[ 608] 7B 4D 02 20 64 61 79 00 2C 20 4A 75 6C 79 20 30
{M. day., July 0
[ 624] 42 31 2A 30 31 39 39 36 2A D0 3A 60 33 30 20 50
B1*01996*.:`30 P
[ 640] 4D 25 BF 22 3D 54 AE 6F 27 FF 24 7B 07 40 70 0B
M%."=T.o'.${.@p.
[ 656] 80 65 25 AF F9 22 2E 43 63 2D CF 24 7F 25 8F 30
.e%..".Cc-.$.%.0
[ 672] FF 06 00 78 75 62 6A 20 41 32 3F 29 0C 07 90 73
...xubj A2?)...s
[ 688] B0 61 67 65 20 11 F0 02 30 20 02 10 B5 05 C0 76
.age ...0 .....v
[ 704] 0A C0 69 08 60 04 20 44 07 30 80 67 6E 6F 73 74
..i.`. D.0.gnost
[ 720] 69 63 04 20 10 4C 6F 67 67 0B 80 67 20 6F F7 05
ic. .Logg..g o..
[ 736] 30 3A 10 00 80 2E 3C 10 1C 8F 0B 28 15 C2 EB 0C
0:....<....(....
[ 752] 01 20 06 42 04 70 79 36 F0 2D 90 07 90 B3 05 40
. .B.py6.-.....@
[ 768] 39 53 74 6F 13 70 2F B4 20 0B 80 7D 06 00 69 20
9Sto.p/. ..}..i
[ 784] 30 36 F0 40 24 2F 90 29 F0 20 AE 63 32 20 41 C0
06.@$/.). .c2 A.
[ 800] 3F F1 54 34 22 4A 40 88 BF 42 64 3C BF 1B A8 20
?.T4"J@..Bd<...
[ 816] 06 43 C5 16 C1 00 46 A0 40 00 39 00 60 57 1A 17
.C....F.@.9.`W..
[ 832] 79 67 BB 01 03 00 F1 3F 09 04 00 00 02 01 41 00
yg.....?......A.
[ 848] 0A 00 00 00 28 00 54 41 4D 52 41 4A 31 00 B1 84
....(.TAMRAJ1...
[ 864] 42 00 08 00 00 00 74 61 6D 72 61 6A 31 00 02 01
B.....tamraj1...
[ 880] 47 00 2F 00 00 00 63 3D 55 53 3B 61 3D 20 3B 70
G./...c=US;a= ;p
[ 896] 3D 4D 49 43 52 4F 53 4F 46 54 3B 6C 3D 54 41 4D
=MICROSOFT;l=TAM
[ 912] 52 41 4A 32 2D 39 36 30 37 30 31 31 38 31 34 30
RAJ2-96070118140
[ 928] 35 5A 2D 33 00 02 01 F9 3F 4C 00 00 00 00 00 00
5Z-3....?L......
[ 944] 00 DC A7 40 C8 C0 42 10 1A B4 B9 08 00 2B 2F E1
...@..B......+/.
[ 960] 82 01 00 00 00 00 00 00 00 2F 4F 3D 4D 49 43 52
........./O=MICR
[ 976] 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A 2F
OSOFT/OU=TAMRAJ/
[ 992] 43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43 4E
CN=RECIPIENTS/CN
[ 1008] 3D 54 41 4D 52 41 4A 31 00 B1 84 F8 3F 08 00 00
=TAMRAJ1....?...
[ 1024] 00 74 61 6D 72 61 6A 31 00 02 01 FB 3F 4C 00 00
.tamraj1....?L..
[ 1040] 00 00 00 00 00 DC A7 40 C8 C0 42 10 1A B4 B9 08
.......@..B.....
[ 1056] 00 2B 2F E1 82 01 00 00 00 00 00 00 00 2F 4F 3D
.+/........../O=
[ 1072] 4D 49 43 52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D
MICROSOFT/OU=TAM
[ 1088] 52 41 4A 2F 43 4E 3D 52 45 43 49 50 49 45 4E 54
RAJ/CN=RECIPIENT
[ 1104] 53 2F 43 4E 3D 54 41 4D 52 41 4A 31 00 B1 84 FA
S/CN=TAMRAJ1....
[ 1120] 3F 08 00 00 00 74 61 6D 72 61 6A 31 00 40 00 07
?....tamraj1.@..
[ 1136] 30 A0 C7 FB 16 79 67 BB 01 40 00 08 30 E0 90 26
0....yg..@..0..&
[ 1152] 17 79 67 BB 01 B1 84 3D 00 05 00 00 00 46 57 3A
.yg....=.....FW:
[ 1168] 20 00 B1 84 1D 0E 38 00 00 00 4D 65 73 73 61 67
.....8...Messag
[ 1184] 65 20 73 65 6E 74 20 66 6F 72 20 76 61 72 69 6F
e sent for vario
[ 1200] 75 73 20 44 69 61 67 6E 6F 73 74 69 63 73 20 4C
us Diagnostics L
[ 1216] 6F 67 67 69 6E 67 20 6F 70 74 69 6F 6E 73 2E 2E
ogging options..
[ 1232] 2E 00 E4 84 31 40 30 00 00 00 2F 4F 3D 4D 49 43
....1@0.../O=MIC
[ 1248] 52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A
ROSOFT/OU=TAMRAJ
[ 1264] 2F 43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43
/CN=RECIPIENTS/C
[ 1280] 4E 3D 54 41 4D 52 41 4A 31 00 E4 84 38 40 30 00
N=TAMRAJ1...8@0.
[ 1296] 00 00 2F 4F 3D 4D 49 43 52 4F 53 4F 46 54 2F 4F
../O=MICROSOFT/O
[ 1312] 55 3D 54 41 4D 52 41 4A 2F 43 4E 3D 52 45 43 49
U=TAMRAJ/CN=RECI
[ 1328] 50 49 45 4E 54 53 2F 43 4E 3D 54 41 4D 52 41 4A
PIENTS/CN=TAMRAJ
[ 1344] 31 00 E4 84 39 40 30 00 00 00 2F 4F 3D 4D 49 43
1...9@0.../O=MIC
[ 1360] 52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A
ROSOFT/OU=TAMRAJ
[ 1376] 2F 43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43
/CN=RECIPIENTS/C
[ 1392] 4E 3D 54 41 4D 52 41 4A 31 00
N=TAMRAJ1.
Additional query words:
======================================================================
Keywords : kbusage exc4 exc5 exc55
Technology : kbExchangeSearch kbExchange500 kbExchange550 kbExchange400 kbZNotKeyword2
Version : winnt:4.0,5.0,5.5
=============================================================================
THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.
Copyright Microsoft Corporation 1986-2002.