Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Time that the Email Security appliance received the message.

Dates and times are displayed using the local time configured on the Email 
Security appliance. 

Unique IronPort message ID. 

Message size. 

Subject line of the message.

The subject line in the tracking results may have the value “(No Subject)” if the 
message does not have a subject, or if log files are not configured to record 
subject headers. For more information, see 

Address of the sender in the SMTP envelope. 

If your deployment uses the alias table for alias expansion, the search finds the 
expanded recipient addresses rather than the original envelope addresses. For 
more information about Alias Tables, see “Creating Alias Tables” in the 
“Configuring Routing and Delivery Features” chapter . 

In all other cases, message tracking queries find the original envelope recipient 
addresses. 

The RFC 822 message header. 

SMTP authenticated username of the sender, if the sender used SMTP 
authentication to send the message. Otherwise, the value is “N/A.” 

The names of files attached to the message. 

Messages that contain at least one attachment with the queried name will appear 
in the search results. 

Some attachments may not be tracked. For performance reasons, scanning of 
attachment names occurs only as part of other scanning operations, for example 
message or content filtering, DLP, or disclaimer stamping. Attachment names are 
available only for messages that pass through body scanning while the 
attachment is still attached. Situations in which an attachment name will not 
appear in search results include (but are not limited to): 

if the system only uses content filters, and a message is dropped or its 
attachment is stripped by anti-spam or anti-virus filters

if message splintering policies strip the attachment from some messages 
before body scanning occurs. 

For performance reasons, the names of files within attachments, such as OLE 
objects or archives such as .ZIP files, are not searched. 

Name of the sending host, as verified by reverse DNS (PTR) lookup.

IP address of the sending host.