Well, one very simple thing you can do is shutdown the MTA on the IMC server. That'll queue up things on the originating server's MTA queues and then you can look at what kind of messages are being queued up.
Serdar Soysal -----Original Message----- From: McMahon, Terry [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 10:00 AM To: Exchange Discussions Subject: RE: Exchange traffic to 10.10.10.10 I thought it might be public folder replication, goes off every four hours. But this is constant. All I get from the transport guys is the source name and the destination, is there any way to check which process is sending the traffic? I've got NAV running and updated on the server so I'm pretty sure (not completely sure, getting less sure every couple of minutes) that it's not a virus. -----Original Message----- From: Soysal, Serdar [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 8:51 AM To: Exchange Discussions Subject: RE: Exchange traffic to 10.10.10.10 Directory replication? Virus? Serdar Soysal -----Original Message----- From: McMahon, Terry [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 9:48 AM To: Exchange Discussions Subject: Exchange traffic to 10.10.10.10 Hello, One of our Exchange servers (5.5 Sp4) is sending loads of traffic to 10.10.10.10. It's an internal mailbox server, not a relay, has an IMC and a site connector. NAV for exchange and Pagemaster. I can't find anything wrong with it, but there has to be some kind of configuration error. Anyone else have this problem? Terry McMahon Enterprise e-mail team AEGON _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
