none
exchange2010的pop日志,已导出,但不明白如何判断分析,求教 RRS feed

  • 问题

  • dateTime,sessionId,seqNumber,sIp,cIp,user,duration,rqsize,rpsize,command,parameters,context
    #Software: Microsoft Exchange Server
    #Version: 14.0.0.0
    #Log-type: POP3 Log
    #Date: 2012-06-21T10:00:00.026Z
    #Fields: dateTime,sessionId,seqNumber,sIp,cIp,user,duration,rqsize,rpsize,command,parameters,context
    2012-06-21T10:00:00.026Z,0000000000003E5E,0,172.16.0.200:110,218.3.213.206:2060,,-2147483648,0,51,OpenSession,,
    2012-06-21T10:00:00.104Z,0000000000003E5E,1,172.16.0.200:110,218.3.213.206:2060,,0,10,5,user,su_lv,R=ok;RpcL=-1;LdapL=-1
    2012-06-21T10:00:00.182Z,0000000000003E5E,2,172.16.0.200:110,218.3.213.206:2060,su_lv,46,10,34,pass,*****,"R=ok;RpcL=-1;LdapL=-1;Msg=User:吕苏:3f327d5d-91a5-4b93-813c-d93fa6db1405:MBX01:MBX-01.xxx.com;Budget=""Conn:0,HangingConn:0,AD:$null/$null/0%,CAS:$null/$null/1%,AB:$null/$null/0%,RPC:$null/$null/1%,FC:1000/0,Policy:DefaultThrottlingPolicy_a42c236a-20ee-4dda-bb1c-f647bb0f703d,Norm[Resources:(DC)AD04.xxx.com(Health:-1%,HistLoad:0),(Mdb)MBX01(Health:-1%,HistLoad:0),]"""
    • 已移动 Tom Zhang – MSFT 2012年9月27日 8:03 exchange issue (发件人:Windows Server system)
    2012年9月26日 8:16

全部回复