On Wed, 2008-05-14 at 07:02 -0700, Ceyhun Atacan wrote: > Hi all, > In my project I'm trying to distinguish and identify individual e-mail > and calendaring flows between Exchange and MAPI clients such as > Outllook. First and foremost, is this possible?
It is.
Preliminary and quick ideas:
1. check for PR_MESSAGE_CLASS property and looks whether it is
"IPM.Note" or "IPM.Appointment".
2. check for the folder message class. MAPI clients such as
Outlook "will assume" this messages are the same type than the
container.
> Apparently wireshark doesn't support MAPI dissection and throws a
> bunch of unknown MAPI opnums when I capture some email traffic.
It does have a new dissector I pushed a couple of weeks ago, but it yet
only support emsmdb traffic for server < Exchange 2003. We should be
pushing some code for E2k3 and above EcDoConnectEx (0xa) and EcDoRpcEx
(0xb) soon.
> Is this something publicly available?
For e2k3, not yet. It is under development, but not yet functional to
get included into libmapi trunk.
> I'd like to help if there is a need in this area.
Can you go further and develop the kind of help you are willing to
provide?
Regards,
Julien.
--
Julien Kerihuel
[EMAIL PROTECTED]
OpenChange Project Manager
GPG Fingerprint: 0B55 783D A781 6329 108A B609 7EF6 FE11 A35F 1F79
signature.asc
Description: This is a digitally signed message part
_______________________________________________ devel mailing list [email protected] http://mailman.openchange.org/listinfo/devel
