Руководство По Устранению Ошибки для Cisco Cisco Content Security Management Appliance M680

Contributed by Chris Haag and Robert Sherwin, Cisco TAC Engineers.
Aug 12, 2014

This document describes recorded information regarding text mail logs and the associated message ID,
injection connection ID, and delivery ID on the Email Security Appliance (ESA) or on the Security Message
Appliance (SMA).

A Message ID (MID), is an unique identifier assigned to a particular message by the ESA.  A MID is
associated with every message received by the Cisco appliance and can be tracked in mail logs.

An Injection Connection ID (ICID) is a numerical identifier for an individual SMTP connection to the system,
over which 1 to thousands of individual messages may be sent.

A Delivery Connection ID (DCID) is a numerical identifier for an individual SMTP connection to another
server, for delivery of 1 to thousands of messages, each with some or all of their Recipient IDs (RID) being
delivered in a single message transmission.

The type of log best suited for discovering the disposition of a specific email message is the text mail log
(mail_logs).  This contains details of email receiving, email delivery and bounces. Status information is also
written to the mail log every minute. These logs are a useful source of information to understand delivery
of specific messages and to analyze system performance.

An example of a message processing through the ESA and written to the mail_logs:

Mon Apr 17 19:56:22 2003 Info: New SMTP ICID 5 interface Management (10.1.1.1)

 address 10.1.1.209 reverse dns host remotehost.com verified yes

Mon Apr 17 19:57:20 2003 Info: Start MID 6 ICID 5

Mon Apr 17 19:57:20 2003 Info: MID 6 ICID 5 From: <sender@remotehost.com>