(Item) 0x80004005

Thu 03.27.08: Number of Outbound SMTP connections

I need to find out how to get a list of all of the Outbound SMTP connections that our Exchange server has done over a time period for load issues. To do this, I decided to use LogParser.

LogParser 2.2 can be found here:
www.microsoft.com



First you need to go into the SMTP properties and make sure that you are logging the following advanced log fields: cs-username, and cs-method. I turn on all logging so that I can run statistics on some of the stuff after I import the data.

To get just a list of all of the connections to outbound SMTP hosts, I used the following Log Parser command line:

logparser "SELECT * FROM \\pr-ex1\c$\WINDOWS\system32\LogFiles\SMTPSVC1\ex*.log WHERE cs-username LIKE 'OutboundConnectionCommand' AND cs-method = 'QUIT'" -o:CSV > SMTP_Outbound.CSV


This will look at all the log files found on a server named pr-ex1 and only return the ones that have OutboundConnectionCommand in the cs-username field and QUIT in the cs-method field.

Basically it will return a result when it closed the connection with the remote SMTP server. It will save it as file called SMTP_Outbound.CSV in CSV format (comma delimited) in directory you are running logparser from.

---

Item Rating Information....

Total Votes: 12 - Rating: 1.00

Please rate this item:

012345