XCON: Description of MTA Diagnostics Logging Options

ID: Q153188


The information in this article applies to:
  • Microsoft Exchange Server, versions 4.0, 5.0, 5.5


SUMMARY

Five different variations of logs may be created when troubleshooting the Microsoft Exchange Message Transfer Agent (MTA) or X.400 Connector:

  1. Event Viewer Application Log (*.EVT): Logging begins when Diagnostics Logging options have been enabled on the MTA; all logging can only be seen in the Windows NT Event Viewer.


  2. EV0.LOG: Logging to this file, located in Exchsrvr\mtadata, begins when the TextEventLog value in the Windows NT Registry:
    
           KEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES
                           \MSEXCHANGEMTA\Parameters 

    has been changed from 0, the default, to 1. The MTA service must be stopped and restarted for this Registry entry to take effect. This logging will include the information that is seen in Event Viewer; however, it will be in TXT file format, rather than EVT, so that it can be viewed in any environment.


  3. Tracking.log: The Tracking.log subdirectory under \Exchsrvr contains logs for each day that Message Tracking has been enabled. The log files are named according to the day they were created (a log file created on 7/1/96 will be named 19960701.log). These logs are created when Message Tracking has been enabled on either the Information Store Site Configuration object or the MTA Site Configuration object in the Microsoft Exchange Administrator program. These objects are in the Configuration container. The Tracking.log file may be viewed by 2 methods:

    1. The Message Tracking Center (click Track Message on the Tools menu of the Microsoft Exchange Administrator program) is used to selectively query the tracking log files and is effective when an administrator desires to track a particular message to find out if/how it was delivered.


    2. The Tracking.log file is in tab-delimited TXT format and can be viewed with any text editor, or it can more effectively be used by opening it in Excel. The Tracking.log will give an administrator such information as Message ID, Event Type, Date/Time stamp, Length of Message, Recipients, and Status of all messages received/sent on the corresponding day. Please refer to pages 589-591 in the Administrator's Guide for specific details on the various event codes and fields in this log file.


  4. Ap0.log: The Ap0.log is generated when the Diagnostics Logging options have been set up correctly. Specifically, the Interface and Interoperability categories must be set to Maximum on the MTA service. This file will contain information about how the MTA's are making connections and sending data, as defined in RFC1006.


  5. Bf0.log: The Bf0.log is generated when the X400 Service and APDU categories have been set to a minimum of Medium. This log file contains a binary dump of messages that have been sent/received by the MTA.


MORE INFORMATION

This section includes a sample of each of the files described above. This message was sent to a recipient called "alpine1" in Site Alpine and was copied to a recipient on the local server called "tamraj1" in Site TamraJ.

  1. Event Viewer (generated by MSExchangeMTA,X.400 Service):
    
    An additional session to
    /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
    2/cn=Microsoft Private MDB was initiated. Client version:
    01. [XAPI MAIN BASE 1 91] (10)
    
    Object 06000056 received from entity
    /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=SERVERS/CN=TAMRAJ
    2/CN=MICROSOFT PRIVATE MDB. The entity is a Message, object
    is a Normal priority Message, the MTS identifier is C=US;A=
    ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2, and content length
    is 1155. The number of objects sent so far = 1. External
    trace information (first 100 bytes) =
    3080638061801302555300006280130120000013094D4943524F534F4654
    0000318080113936303730313133333135352D3034303082010083020600
    00000000. (10)
    
    Message C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 was
    successfully appended to the
    /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
    ternet Mail Connector (TAMRAJ2) transfer-in queue. [XAPI
    TRANSFER 37 73] (10)
    
    Object 06000057 was sent to entity
    /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN
    TERNET MAIL CONNECTOR (TAMRAJ2). The entity is a XAPI-
    Gateway        , object is a Normal priority Message, the
    MTS Identifier is C=US;A= ;P=MICROSOFT;L=TAMRAJ2-
    960701173047Z-2, and content length 1155. The number of
    objects sent so far = 1. The External Trace Information
    (first 100 bytes) =
    3080638061801302555300006280130120000013094D4943524F534F4654
    0000318080113936303730313133333135352D3034303082010083020600
    00000000. (10)
    
    Entity
    /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
    ternet Mail Connector (TAMRAJ2) has removed object C=US;A=
    ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 from the transfer-in
    queue/mailbox. Internal object ID: 06000057. [XAPI GATEWAY
    36 134] (10) 


  2. Ev0.log:
    
    (XAPI TRANSFER(37) Proc 73) 07-01-96 01:32:08pm
              Message appended to transfer-in queue OK
                Entity name
    /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
    ternet Mail Connector (TAMRAJ2)
                MTS Identifier C=US;A= ;P=MICROSOFT;L=TAMRAJ2-
    960701173047Z-2
    
    (MTA XFER-IN(17) Proc 205) 07-01-96 01:32:09pm
              Object 06000057 sent to entity
    /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN
    TERNET MAIL CONNECTOR (TAMRAJ2)
                Entity is a XAPI-Gateway
                Object is a Normal priority Message
                MTS Identifier C=US;A= ;P=MICROSOFT;L=TAMRAJ2-
    960701173047Z-2
                Content length 1155
                External Trace Information (first 100 bytes) =
    3080638061801302555300006280130120000013094D4943524F534F4654
    0000318080113936303730313133333135352D3034303082010083020600
    00000000
                No. of objects sent so far = 1
                PDU dump reference 2 


  3. Tracking.log:
    
    c=US;a= ;p=MICROSOFT;l=TAMRAJ2-960701173047Z-2 1000 1996.7.1
    17:30:48
    /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
    2/cn=Microsoft Private MDB
    /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
    2/cn=Microsoft Private MDB
    /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 454 0 1 1
    /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=Tamraj1
    C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 4 1996.7.1
    18:31:56
    /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=SERVERS/CN=TAMRAJ
    2/CN=MICROSOFT PRIVATE MDB
    /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 1155 0 0 1
    /O=MICROSOFT/OU=ALPINE/CN=Recipients/CN=alpine1
    C=US;A= ;P=MICROSOFT;L=TAMRAJ2-960701173047Z-2 7 1996.7.1
    18:32:9
    /O=MICROSOFT/OU=TAMRAJ/CN=CONFIGURATION/CN=CONNECTIONS/CN=IN
    TERNET MAIL CONNECTOR (TAMRAJ2)
    /O=MICROSOFT/OU=TAMRAJ/CN=RECIPIENTS/CN=TAMRAJ1 0 1155 0 0 1
    /O=MICROSOFT/OU=ALPINE/CN=RECIPIENTS/CN=ALPINE1
    c=US;a= ;p=MICROSOFT;l=TAMRAJ2-960701173047Z-2 1003 1996.7.1
    17:32:18
    /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Connections/cn=In
    ternet Mail Connector (TAMRAJ2) alpine.microsoft.com
    <c=US%a=_%p=MICROSOFT%l=TAMRAJ2-960701173047Z-
    2@tamraj.microsoft.com>[PBZ70AAB]
    /o=MICROSOFT/ou=TAMRAJ/cn=RECIPIENTS/cn=TAMRAJ1 0 2907 0 0 1
    IMCEAEX-
    _O=MICROSOFT_OU=ALPINE_cn=RECIPIENTS_cn=ALPINE1@alpine.micro
    soft.com 


  4. Ap0.log:
    
    MA_Wait Indication received from entity
    /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
    2/cn=Microsoft Priv
    
    [00000] A1 80 02 01 33 A1 80 30 80 99 02 27 10 91 01 00
    ....3..0...'....
    [00016] 00 00 00 00 00 00
    ......
    
    XAPI message: Jul 1, 1996 14:49:09, connection 1543
    MA_Wait Response sent to entity
    /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
    2/cn=Microsoft Publ
    
    [00000] A2 80 02 01 33 30 80 94 01 00 00 00 00 00
    ....30........
    
    XAPI message: Jul 1, 1996 14:49:09, connection 775
    MA_Wait Indication received from entity
    /o=MICROSOFT/ou=TAMRAJ/cn=Configuration/cn=Servers/cn=TAMRAJ
    2/cn=Microsoft Publ
    
    [00000] A1 80 02 01 33 A1 80 30 80 99 02 27 10 91 01 00
    ....3..0...'....
    [00016] 00 00 00 00 00 00
    ...... 


  5. Bf0.log:
    
    Reference 47 :
    [        0]  01 31 77 12 41 55 86 CF 11 9B 30 00 AA 00 62 C8
    .1w.AU....0...b.
    [       16]  05 00 00 00 05 35 7A 03 00 03 40 E4 84 08 40 29
    .....5z...@...@)
    [       32]  00 00 00 2F 4F 3D 4D 49 43 52 4F 53 4F 46 54 2F
    .../O=MICROSOFT/ 
    [       48]  4F 55 3D 54 41 4D 52 41 4A 2F 43 4E 3D 52 45 43
    OU=TAMRAJ/CN=REC
    [       64]  49 50 49 45 4E 54 53 2F 43 4E 3D 00 02 01 FF 0F
    IPIENTS/CN=.....
    [       80]  22 00 00 00 10 00 41 4C 50 49 4E 45 2F 43 4E 3D
    ".....ALPINE/CN=
    [       96]  52 45 43 49 50 49 45 4E 54 53 2F 43 4E 3D 41 4C
    RECIPIENTS/CN=AL
    [      112]  50 49 4E 45 31 00 E4 84 01 30 08 00 00 00 61 6C
    PINE1....0....al
    [      128]  70 69 6E 65 31 00 E4 84 20 3A 08 00 00 00 61 6C
    pine1... :....al
    [      144]  70 69 6E 65 31 00 0B 00 40 3A 01 00 03 00 00 39
    pine1...@:.....9
    [      160]  00 00 00 00 E4 84 FF 39 08 00 00 00 61 6C 70 69
    .......9....alpi
    [      176]  6E 65 31 00 03 00 04 40 03 00 03 40 02 01 FF 0F
    ne1....@...@....
    [      192]  0A 00 00 00 28 00 54 41 4D 52 41 4A 31 00 E4 84
    ....(.TAMRAJ1...
    [      208]  01 30 08 00 00 00 74 61 6D 72 61 6A 31 00 E4 84
    .0....tamraj1...
    [      224]  20 3A 08 00 00 00 74 61 6D 72 61 6A 31 00 0B 00
    :....tamraj1...
    [      240]  40 3A 01 00 03 00 00 39 00 00 00 00 E4 84 FF 39
    @:.....9.......9
    [      256]  08 00 00 00 74 61 6D 72 61 6A 31 00 03 00 05 40
    ....tamraj1....@
    [      272]  02 01 0B 30 10 00 00 00 25 EF C6 FA 51 D3 CF 11
    ...0....%...Q...
    [      288]  9B 43 00 AA 00 62 C8 05 E4 84 70 00 38 00 00 00
    .C...b....p.8...
    [      304]  4D 65 73 73 61 67 65 20 73 65 6E 74 20 66 6F 72
    Message sent for
    [      320]  20 76 61 72 69 6F 75 73 20 44 69 61 67 6E 6F 73
    various Diagnos
    [      336]  74 69 63 73 20 4C 6F 67 67 69 6E 67 20 6F 70 74
    tics Logging opt
    [      352]  69 6F 6E 73 2E 2E 2E 00 02 01 71 00 1B 00 00 00
    ions......q.....
    [      368]  01 BB 67 73 0A 53 BA 0E E8 E6 D3 64 11 CF 9B 43
    ..gs.S.....d...C
    [      384]  00 AA 00 62 C8 05 00 01 7B 48 D1 03 00 2E 00 00
    ...b....{H......
    [      400]  00 00 00 02 01 09 10 9D 01 00 00 99 01 00 00 9B
    ................
    [      416]  03 00 00 4C 5A 46 75 CD 91 89 6D FF 00 0A 01 0F
    ...LZFu...m.....
    [      432]  02 15 02 A4 03 E4 05 EB 02 83 00 50 13 03 54 02
    ...........P..T.
    [      448]  00 63 68 0A C0 73 65 74 EE 32 06 00 06 C3 02 83
    .ch..set.2......
    [      464]  32 03 C6 07 13 02 83 22 33 0F 7A 68 65 6C 03 20
    2......"3.zhel.
    [      480]  44 6C EA 67 02 83 34 13 0D 7D 0A 80 08 CF 09 D9
    Dl.g..4..}......
    [      496]  E2 3B 17 9F 32 35 35 02 80 0A 81 0D B1 C1 0B 60
    .;..255........`
    [      512]  6E 67 31 30 33 14 20 0B 0A 6B 12 F2 0C 01 63 00
    ng103. ..k....c.
    [      528]  40 20 0A 85 0A 8B 6C 90 69 31 34 34 02 D1 69 2D
    @ ....l.i144..i-
    [      544]  1D E3 67 0C D0 1D E3 0B 59 31 36 0A A0 03 60 74
    ..g.....Y16...`t
    [      560]  FB 05 90 05 40 2D 20 87 0A 87 1F 3B 0C 30 20 06
    ....@- ....;.0 .
    [      576]  BA 46 03 61 3A 21 8E 20 06 0C 82 20 01 90 E0 6D
    .F.a:!. ... ...m
    [      592]  72 61 6A 31 21 2F 22 3D 06 60 17 02 30 23 6F 24
    raj1!/"=.`..0#o$
    [      608]  7B 4D 02 20 64 61 79 00 2C 20 4A 75 6C 79 20 30
    {M. day., July 0
    [      624]  42 31 2A 30 31 39 39 36 2A D0 3A 60 33 30 20 50
    B1*01996*.:`30 P
    [      640]  4D 25 BF 22 3D 54 AE 6F 27 FF 24 7B 07 40 70 0B
    M%."=T.o'.${.@p.
    [      656]  80 65 25 AF F9 22 2E 43 63 2D CF 24 7F 25 8F 30
    .e%..".Cc-.$.%.0
    [      672]  FF 06 00 78 75 62 6A 20 41 32 3F 29 0C 07 90 73
    ...xubj A2?)...s
    [      688]  B0 61 67 65 20 11 F0 02 30 20 02 10 B5 05 C0 76
    .age ...0 .....v
    [      704]  0A C0 69 08 60 04 20 44 07 30 80 67 6E 6F 73 74
    ..i.`. D.0.gnost
    [      720]  69 63 04 20 10 4C 6F 67 67 0B 80 67 20 6F F7 05
    ic. .Logg..g o..
    [      736]  30 3A 10 00 80 2E 3C 10 1C 8F 0B 28 15 C2 EB 0C
    0:....<....(....
    [      752]  01 20 06 42 04 70 79 36 F0 2D 90 07 90 B3 05 40
    . .B.py6.-.....@
    [      768]  39 53 74 6F 13 70 2F B4 20 0B 80 7D 06 00 69 20
    9Sto.p/. ..}..i
    [      784]  30 36 F0 40 24 2F 90 29 F0 20 AE 63 32 20 41 C0
    06.@$/.). .c2 A.
    [      800]  3F F1 54 34 22 4A 40 88 BF 42 64 3C BF 1B A8 20
    ?.T4"J@..Bd<...
    [      816]  06 43 C5 16 C1 00 46 A0 40 00 39 00 60 57 1A 17
    .C....F.@.9.`W..
    [      832]  79 67 BB 01 03 00 F1 3F 09 04 00 00 02 01 41 00
    yg.....?......A.
    [      848]  0A 00 00 00 28 00 54 41 4D 52 41 4A 31 00 B1 84
    ....(.TAMRAJ1...
    [      864]  42 00 08 00 00 00 74 61 6D 72 61 6A 31 00 02 01
    B.....tamraj1...
    [      880]  47 00 2F 00 00 00 63 3D 55 53 3B 61 3D 20 3B 70
    G./...c=US;a= ;p
    [      896]  3D 4D 49 43 52 4F 53 4F 46 54 3B 6C 3D 54 41 4D
    =MICROSOFT;l=TAM
    [      912]  52 41 4A 32 2D 39 36 30 37 30 31 31 38 31 34 30
    RAJ2-96070118140
    [      928]  35 5A 2D 33 00 02 01 F9 3F 4C 00 00 00 00 00 00
    5Z-3....?L......
    [      944]  00 DC A7 40 C8 C0 42 10 1A B4 B9 08 00 2B 2F E1
    ...@..B......+/.
    [      960]  82 01 00 00 00 00 00 00 00 2F 4F 3D 4D 49 43 52
    ........./O=MICR
    [      976]  4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A 2F
    OSOFT/OU=TAMRAJ/ 
    [      992]  43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43 4E
    CN=RECIPIENTS/CN
    [     1008]  3D 54 41 4D 52 41 4A 31 00 B1 84 F8 3F 08 00 00
    =TAMRAJ1....?...
    [     1024]  00 74 61 6D 72 61 6A 31 00 02 01 FB 3F 4C 00 00
    .tamraj1....?L..
    [     1040]  00 00 00 00 00 DC A7 40 C8 C0 42 10 1A B4 B9 08
    .......@..B.....
    [     1056]  00 2B 2F E1 82 01 00 00 00 00 00 00 00 2F 4F 3D
    .+/........../O=
    [     1072]  4D 49 43 52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D
    MICROSOFT/OU=TAM
    [     1088]  52 41 4A 2F 43 4E 3D 52 45 43 49 50 49 45 4E 54
    RAJ/CN=RECIPIENT
    [     1104]  53 2F 43 4E 3D 54 41 4D 52 41 4A 31 00 B1 84 FA
    S/CN=TAMRAJ1....
    [     1120]  3F 08 00 00 00 74 61 6D 72 61 6A 31 00 40 00 07
    ?....tamraj1.@..
    [     1136]  30 A0 C7 FB 16 79 67 BB 01 40 00 08 30 E0 90 26
    0....yg..@..0..&
    [     1152]  17 79 67 BB 01 B1 84 3D 00 05 00 00 00 46 57 3A
    .yg....=.....FW:
    [     1168]  20 00 B1 84 1D 0E 38 00 00 00 4D 65 73 73 61 67
    .....8...Messag
    [     1184]  65 20 73 65 6E 74 20 66 6F 72 20 76 61 72 69 6F
    e sent for vario
    [     1200]  75 73 20 44 69 61 67 6E 6F 73 74 69 63 73 20 4C
    us Diagnostics L
    [     1216]  6F 67 67 69 6E 67 20 6F 70 74 69 6F 6E 73 2E 2E
    ogging options..
    [     1232]  2E 00 E4 84 31 40 30 00 00 00 2F 4F 3D 4D 49 43
    ....1@0.../O=MIC
    [     1248]  52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A
    ROSOFT/OU=TAMRAJ
    [     1264]  2F 43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43
    /CN=RECIPIENTS/C
    [     1280]  4E 3D 54 41 4D 52 41 4A 31 00 E4 84 38 40 30 00
    N=TAMRAJ1...8@0.
    [     1296]  00 00 2F 4F 3D 4D 49 43 52 4F 53 4F 46 54 2F 4F
    ../O=MICROSOFT/O
    [     1312]  55 3D 54 41 4D 52 41 4A 2F 43 4E 3D 52 45 43 49
    U=TAMRAJ/CN=RECI
    [     1328]  50 49 45 4E 54 53 2F 43 4E 3D 54 41 4D 52 41 4A
    PIENTS/CN=TAMRAJ
    [     1344]  31 00 E4 84 39 40 30 00 00 00 2F 4F 3D 4D 49 43
    1...9@0.../O=MIC
    [     1360]  52 4F 53 4F 46 54 2F 4F 55 3D 54 41 4D 52 41 4A
    ROSOFT/OU=TAMRAJ
    [     1376]  2F 43 4E 3D 52 45 43 49 50 49 45 4E 54 53 2F 43
    /CN=RECIPIENTS/C
    [     1392]  4E 3D 54 41 4D 52 41 4A 31 00
    N=TAMRAJ1. 

Additional query words:

Keywords : kbusage XCON exc4 exc5 exc55
Version : winnt:4.0,5.0,5.5
Platform : winnt
Issue type :


Last Reviewed: December 17, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.