KnowledgeBase Archive

An Archive of Early Microsoft KnowledgeBase Articles

View on GitHub

Q153188: XCON: Description of MTA Diagnostics Logging Options

Article: Q153188
Product(s): Microsoft Exchange
Version(s): winnt:4.0,5.0,5.5
Operating System(s): 
Keyword(s): kbusage exc4 exc5 exc55
Last Modified: 19-DEC-1999

-------------------------------------------------------------------------------
The information in this article applies to:

- Microsoft Exchange Server, versions 4.0, 5.0, 5.5 
-------------------------------------------------------------------------------

SUMMARY
=======

Five different variations of logs may be created when troubleshooting the
Microsoft Exchange Message Transfer Agent (MTA) or X.400 Connector:

1. Event Viewer Application Log (*.EVT): Logging begins when Diagnostics Logging
  options have been enabled on the MTA; all logging can only be seen in the
  Windows NT Event Viewer.

2. EV0.LOG: Logging to this file, located in Exchsrvr\mtadata, begins when the
  TextEventLog value in the Windows NT Registry:

      KEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES
                      \MSEXCHANGEMTA\Parameters

  has been changed from 0, the default, to 1. The MTA service must be stopped
  and restarted for this Registry entry to take effect. This logging will
  include the information that is seen in Event Viewer; however, it will be in
  TXT file format, rather than EVT, so that it can be viewed in any
  environment.

3. Tracking.log: The Tracking.log subdirectory under \Exchsrvr contains logs for
  each day that Message Tracking has been enabled. The log files are named
  according to the day they were created (a log file created on 7/1/96 will be
  named 19960701.log). These logs are created when Message Tracking has been
  enabled on either the Information Store Site Configuration object or the MTA
  Site Configuration object in the Microsoft Exchange Administrator program.
  These objects are in the Configuration container. The Tracking.log file may
  be viewed by 2 methods:

  1. The Message Tracking Center (click Track Message on the Tools menu of the
     Microsoft Exchange Administrator program) is used to selectively query the
     tracking log files and is effective when an administrator desires to track
     a particular message to find out if/how it was delivered.

  2. The Tracking.log file is in tab-delimited TXT format and can be viewed
     with any text editor, or it can more effectively be used by opening it in
     Excel. The Tracking.log will give an administrator such information as
     Message ID, Event Type, Date/Time stamp, Length of Message, Recipients,
     and Status of all messages received/sent on the corresponding day. Please
     refer to pages 589-591 in the Administrator's Guide for specific details
     on the various event codes and fields in this log file.

4. Ap0.log: The Ap0.log is generated when the Diagnostics Logging options have
  been set up correctly. Specifically, the Interface and Interoperability
  categories must be set to Maximum on the MTA service. This file will contain
  information about how the MTA's are making connections and sending data, as
  defined in RFC1006.

5. Bf0.log: The Bf0.log is generated when the X400 Service and APDU categories
  have been set to a minimum of Medium. This log file contains a binary dump of
  messages that have been sent/received by the MTA.

MORE INFORMATION
================

This section includes a sample of each of the files described above. This
message was sent to a recipient called "alpine1" in Site Alpine and was copied
to a recipient on the local server called "tamraj1" in Site TamraJ.

1. Event Viewer (generated by MSExchangeMTA,X.400 Service):

  An additional session to
  /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
  2/cn=Microsoft Private MDB was initiated. Client version:
  01. [XAPI MAIN BASE 1 91] (10)

  Object 06000056 received from entity
  /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=SERVERS/CN=TAMRAJ
  2/CN=MICROSOFT PRIVATE MDB. The entity is a Message, object
  is a Normal priority Message, the MTS identifier is C=US;A=
  ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2, and content length
  is 1155. The number of objects sent so far = 1. External
  trace information (first 100 bytes) =
  3080638061801302555300006280130120000013094D4943524F534F4654
  0000318080113936303730313133333135352D3034303082010083020600
  00000000. (10)

  Message C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 was
  successfully appended to the
  /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
  ternet Mail Connector (TAMRAJ2) transfer-in queue. [XAPI
  TRANSFER 37 73] (10)

  Object 06000057 was sent to entity
  /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN
  TERNET MAIL CONNECTOR (TAMRAJ2). The entity is a XAPI-
  Gateway        , object is a Normal priority Message, the
  MTS Identifier is C=US;A= ;P=MICROSOFT;L=TAMRAJ2-
  960701173047Z-2, and content length 1155. The number of
  objects sent so far = 1. The External Trace Information
  (first 100 bytes) =
  3080638061801302555300006280130120000013094D4943524F534F4654
  0000318080113936303730313133333135352D3034303082010083020600
  00000000. (10)

  Entity
  /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
  ternet Mail Connector (TAMRAJ2) has removed object C=US;A=
  ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 from the transfer-in
  queue/mailbox. Internal object ID: 06000057. [XAPI GATEWAY
  36 134] (10)

2. Ev0.log:

  (XAPI TRANSFER(37) Proc 73) 07-01-96 01:32:08pm
         Message appended to transfer-in queue OK
           Entity name
  /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
  ternet Mail Connector (TAMRAJ2)
           MTS Identifier C=US;A= ;P=MICROSOFT;L=TAMRAJ2-
  960701173047Z-2

  (MTA XFER-IN(17) Proc 205) 07-01-96 01:32:09pm
         Object 06000057 sent to entity
  /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN
  TERNET MAIL CONNECTOR (TAMRAJ2)
           Entity is a XAPI-Gateway
           Object is a Normal priority Message
           MTS Identifier C=US;A= ;P=MICROSOFT;L=TAMRAJ2-
  960701173047Z-2
           Content length 1155
           External Trace Information (first 100 bytes) =
  3080638061801302555300006280130120000013094D4943524F534F4654
  0000318080113936303730313133333135352D3034303082010083020600
  00000000
           No. of objects sent so far = 1
           PDU dump reference 2

3. Tracking.log:

  c=US;a= ;p=MICROSOFT;l=TAMRAJ2-960701173047Z-2 1000 1996.7.1
  17:30:48
  /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
  2/cn=Microsoft Private MDB
  /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
  2/cn=Microsoft Private MDB
  /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 454 0 1 1
  /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=Tamraj1
  C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 4 1996.7.1
  18:31:56
  /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=SERVERS/CN=TAMRAJ
  2/CN=MICROSOFT PRIVATE MDB
  /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 1155 0 0 1
  /O=MICROSOFT/OU=ALPINE/CN=Recipients/CN=alpine1
  C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 7 1996.7.1
  18:32:9
  /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN
  TERNET MAIL CONNECTOR (TAMRAJ2)
  /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 1155 0 0 1
  /O=MICROSOFT/OU=ALPINE/CN=RECIPIENTS/CN=ALPINE1
  c=US;a= ;p=MICROSOFT;l=TAMRAJ2-960701173047Z-2 1003 1996.7.1
  17:32:18
  /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
  ternet Mail Connector (TAMRAJ2) alpine.microsoft.com
  <c=US%a=_%p=MICROSOFT%l=TAMRAJ2-960701173047Z-
  2@tamraj.microsoft.com>[PBZ70AAB]
  /o=MICROSOFT/ou=TAMRAJ/cn=RECIPIENTS/cn=TAMRAJ1 0 2907 0 0 1
  IMCEAEX-
  _O=MICROSOFT_OU=ALPINE_cn=RECIPIENTS_cn=ALPINE1@alpine.micro
  soft.com

4. Ap0.log:

  MA_Wait Indication received from entity
  /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
  2/cn=Microsoft Priv

  [00000] A1 80 02 01 33 A1 80 30 80 99 02 27 10 91 01 00
  ....3..0...'....
  [00016] 00 00 00 00 00 00
  ......

  XAPI message: Jul 1, 1996 14:49:09, connection 1543
  MA_Wait Response sent to entity
  /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
  2/cn=Microsoft Publ

  [00000] A2 80 02 01 33 30 80 94 01 00 00 00 00 00
  ....30........

  XAPI message: Jul 1, 1996 14:49:09, connection 775
  MA_Wait Indication received from entity
  /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
  2/cn=Microsoft Publ

  [00000] A1 80 02 01 33 A1 80 30 80 99 02 27 10 91 01 00
  ....3..0...'....
  [00016] 00 00 00 00 00 00
  ......

5. Bf0.log:

  Reference 47 :
  [        0]  01 31 77 12 41 55 86 CF 11 9B 30 00 AA 00 62 C8
  .1w.AU....0...b.
  [       16]  05 00 00 00 05 35 7A 03 00 03 40 E4 84 08 40 29
  .....5z...@...@)
  [       32]  00 00 00 2F 4F 3D 4D 49 43 52 4F 53 4F 46 54 2F
  .../O=MICROSOFT/ 
  [       48]  4F 55 3D 54 41 4D 52 41 4A 2F 43 4E 3D 52 45 43
  OU=TAMRAJ/CN=REC
  [       64]  49 50 49 45 4E 54 53 2F 43 4E 3D 00 02 01 FF 0F
  IPIENTS/CN=.....
  [       80]  22 00 00 00 10 00 41 4C 50 49 4E 45 2F 43 4E 3D
  ".....ALPINE/CN=
  [       96]  52 45 43 49 50 49 45 4E 54 53 2F 43 4E 3D 41 4C
  RECIPIENTS/CN=AL
  [      112]  50 49 4E 45 31 00 E4 84 01 30 08 00 00 00 61 6C
  PINE1....0....al
  [      128]  70 69 6E 65 31 00 E4 84 20 3A 08 00 00 00 61 6C
  pine1... :....al
  [      144]  70 69 6E 65 31 00 0B 00 40 3A 01 00 03 00 00 39
  pine1...@:.....9
  [      160]  00 00 00 00 E4 84 FF 39 08 00 00 00 61 6C 70 69
  .......9....alpi
  [      176]  6E 65 31 00 03 00 04 40 03 00 03 40 02 01 FF 0F
  ne1....@...@....
  [      192]  0A 00 00 00 28 00 54 41 4D 52 41 4A 31 00 E4 84
  ....(.TAMRAJ1...
  [      208]  01 30 08 00 00 00 74 61 6D 72 61 6A 31 00 E4 84
  .0....tamraj1...
  [      224]  20 3A 08 00 00 00 74 61 6D 72 61 6A 31 00 0B 00
  :....tamraj1...
  [      240]  40 3A 01 00 03 00 00 39 00 00 00 00 E4 84 FF 39
  @:.....9.......9
  [      256]  08 00 00 00 74 61 6D 72 61 6A 31 00 03 00 05 40
  ....tamraj1....@
  [      272]  02 01 0B 30 10 00 00 00 25 EF C6 FA 51 D3 CF 11
  ...0....%...Q...
  [      288]  9B 43 00 AA 00 62 C8 05 E4 84 70 00 38 00 00 00
  .C...b....p.8...
  [      304]  4D 65 73 73 61 67 65 20 73 65 6E 74 20 66 6F 72
  Message sent for
  [      320]  20 76 61 72 69 6F 75 73 20 44 69 61 67 6E 6F 73
  various Diagnos
  [      336]  74 69 63 73 20 4C 6F 67 67 69 6E 67 20 6F 70 74
  tics Logging opt
  [      352]  69 6F 6E 73 2E 2E 2E 00 02 01 71 00 1B 00 00 00
  ions......q.....
  [      368]  01 BB 67 73 0A 53 BA 0E E8 E6 D3 64 11 CF 9B 43
  ..gs.S.....d...C
  [      384]  00 AA 00 62 C8 05 00 01 7B 48 D1 03 00 2E 00 00
  ...b....{H......
  [      400]  00 00 00 02 01 09 10 9D 01 00 00 99 01 00 00 9B
  ................
  [      416]  03 00 00 4C 5A 46 75 CD 91 89 6D FF 00 0A 01 0F
  ...LZFu...m.....
  [      432]  02 15 02 A4 03 E4 05 EB 02 83 00 50 13 03 54 02
  ...........P..T.
  [      448]  00 63 68 0A C0 73 65 74 EE 32 06 00 06 C3 02 83
  .ch..set.2......
  [      464]  32 03 C6 07 13 02 83 22 33 0F 7A 68 65 6C 03 20
  2......"3.zhel.
  [      480]  44 6C EA 67 02 83 34 13 0D 7D 0A 80 08 CF 09 D9
  Dl.g..4..}......
  [      496]  E2 3B 17 9F 32 35 35 02 80 0A 81 0D B1 C1 0B 60
  .;..255........`
  [      512]  6E 67 31 30 33 14 20 0B 0A 6B 12 F2 0C 01 63 00
  ng103. ..k....c.
  [      528]  40 20 0A 85 0A 8B 6C 90 69 31 34 34 02 D1 69 2D
  @ ....l.i144..i-
  [      544]  1D E3 67 0C D0 1D E3 0B 59 31 36 0A A0 03 60 74
  ..g.....Y16...`t
  [      560]  FB 05 90 05 40 2D 20 87 0A 87 1F 3B 0C 30 20 06
  ....@- ....;.0 .
  [      576]  BA 46 03 61 3A 21 8E 20 06 0C 82 20 01 90 E0 6D
  .F.a:!. ... ...m
  [      592]  72 61 6A 31 21 2F 22 3D 06 60 17 02 30 23 6F 24
  raj1!/"=.`..0#o$
  [      608]  7B 4D 02 20 64 61 79 00 2C 20 4A 75 6C 79 20 30
  {M. day., July 0
  [      624]  42 31 2A 30 31 39 39 36 2A D0 3A 60 33 30 20 50
  B1*01996*.:`30 P
  [      640]  4D 25 BF 22 3D 54 AE 6F 27 FF 24 7B 07 40 70 0B
  M%."=T.o'.${.@p.
  [      656]  80 65 25 AF F9 22 2E 43 63 2D CF 24 7F 25 8F 30
  .e%..".Cc-.$.%.0
  [      672]  FF 06 00 78 75 62 6A 20 41 32 3F 29 0C 07 90 73
  ...xubj A2?)...s
  [      688]  B0 61 67 65 20 11 F0 02 30 20 02 10 B5 05 C0 76
  .age ...0 .....v
  [      704]  0A C0 69 08 60 04 20 44 07 30 80 67 6E 6F 73 74
  ..i.`. D.0.gnost
  [      720]  69 63 04 20 10 4C 6F 67 67 0B 80 67 20 6F F7 05
  ic. .Logg..g o..
  [      736]  30 3A 10 00 80 2E 3C 10 1C 8F 0B 28 15 C2 EB 0C
  0:....<....(....
  [      752]  01 20 06 42 04 70 79 36 F0 2D 90 07 90 B3 05 40
  . .B.py6.-.....@
  [      768]  39 53 74 6F 13 70 2F B4 20 0B 80 7D 06 00 69 20
  9Sto.p/. ..}..i
  [      784]  30 36 F0 40 24 2F 90 29 F0 20 AE 63 32 20 41 C0
  06.@$/.). .c2 A.
  [      800]  3F F1 54 34 22 4A 40 88 BF 42 64 3C BF 1B A8 20
  ?.T4"J@..Bd<...
  [      816]  06 43 C5 16 C1 00 46 A0 40 00 39 00 60 57 1A 17
  .C....F.@.9.`W..
  [      832]  79 67 BB 01 03 00 F1 3F 09 04 00 00 02 01 41 00
  yg.....?......A.
  [      848]  0A 00 00 00 28 00 54 41 4D 52 41 4A 31 00 B1 84
  ....(.TAMRAJ1...
  [      864]  42 00 08 00 00 00 74 61 6D 72 61 6A 31 00 02 01
  B.....tamraj1...
  [      880]  47 00 2F 00 00 00 63 3D 55 53 3B 61 3D 20 3B 70
  G./...c=US;a= ;p
  [      896]  3D 4D 49 43 52 4F 53 4F 46 54 3B 6C 3D 54 41 4D
  =MICROSOFT;l=TAM
  [      912]  52 41 4A 32 2D 39 36 30 37 30 31 31 38 31 34 30
  RAJ2-96070118140
  [      928]  35 5A 2D 33 00 02 01 F9 3F 4C 00 00 00 00 00 00
  5Z-3....?L......
  [      944]  00 DC A7 40 C8 C0 42 10 1A B4 B9 08 00 2B 2F E1
  ...@..B......+/.
  [      960]  82 01 00 00 00 00 00 00 00 2F 4F 3D 4D 49 43 52
  ........./O=MICR
  [      976]  4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A 2F
  OSOFT/OU=TAMRAJ/ 
  [      992]  43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43 4E
  CN=RECIPIENTS/CN
  [     1008]  3D 54 41 4D 52 41 4A 31 00 B1 84 F8 3F 08 00 00
  =TAMRAJ1....?...
  [     1024]  00 74 61 6D 72 61 6A 31 00 02 01 FB 3F 4C 00 00
  .tamraj1....?L..
  [     1040]  00 00 00 00 00 DC A7 40 C8 C0 42 10 1A B4 B9 08
  .......@..B.....
  [     1056]  00 2B 2F E1 82 01 00 00 00 00 00 00 00 2F 4F 3D
  .+/........../O=
  [     1072]  4D 49 43 52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D
  MICROSOFT/OU=TAM
  [     1088]  52 41 4A 2F 43 4E 3D 52 45 43 49 50 49 45 4E 54
  RAJ/CN=RECIPIENT
  [     1104]  53 2F 43 4E 3D 54 41 4D 52 41 4A 31 00 B1 84 FA
  S/CN=TAMRAJ1....
  [     1120]  3F 08 00 00 00 74 61 6D 72 61 6A 31 00 40 00 07
  ?....tamraj1.@..
  [     1136]  30 A0 C7 FB 16 79 67 BB 01 40 00 08 30 E0 90 26
  0....yg..@..0..&
  [     1152]  17 79 67 BB 01 B1 84 3D 00 05 00 00 00 46 57 3A
  .yg....=.....FW:
  [     1168]  20 00 B1 84 1D 0E 38 00 00 00 4D 65 73 73 61 67
  .....8...Messag
  [     1184]  65 20 73 65 6E 74 20 66 6F 72 20 76 61 72 69 6F
  e sent for vario
  [     1200]  75 73 20 44 69 61 67 6E 6F 73 74 69 63 73 20 4C
  us Diagnostics L
  [     1216]  6F 67 67 69 6E 67 20 6F 70 74 69 6F 6E 73 2E 2E
  ogging options..
  [     1232]  2E 00 E4 84 31 40 30 00 00 00 2F 4F 3D 4D 49 43
  ....1@0.../O=MIC
  [     1248]  52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A
  ROSOFT/OU=TAMRAJ
  [     1264]  2F 43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43
  /CN=RECIPIENTS/C
  [     1280]  4E 3D 54 41 4D 52 41 4A 31 00 E4 84 38 40 30 00
  N=TAMRAJ1...8@0.
  [     1296]  00 00 2F 4F 3D 4D 49 43 52 4F 53 4F 46 54 2F 4F
  ../O=MICROSOFT/O
  [     1312]  55 3D 54 41 4D 52 41 4A 2F 43 4E 3D 52 45 43 49
  U=TAMRAJ/CN=RECI
  [     1328]  50 49 45 4E 54 53 2F 43 4E 3D 54 41 4D 52 41 4A
  PIENTS/CN=TAMRAJ
  [     1344]  31 00 E4 84 39 40 30 00 00 00 2F 4F 3D 4D 49 43
  1...9@0.../O=MIC
  [     1360]  52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A
  ROSOFT/OU=TAMRAJ
  [     1376]  2F 43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43
  /CN=RECIPIENTS/C
  [     1392]  4E 3D 54 41 4D 52 41 4A 31 00
  N=TAMRAJ1.

Additional query words:

======================================================================
Keywords          : kbusage exc4 exc5 exc55 
Technology        : kbExchangeSearch kbExchange500 kbExchange550 kbExchange400 kbZNotKeyword2
Version           : winnt:4.0,5.0,5.5

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 1986-2002.