The fields worth logging for the IIS SMTP service
date
time
client IP (c-ip)
username (cs-username)
server name (s-computername)
server IP (s-ip)
server port (s-port)
method (cs-method)
URI query (cs-uri-query)
protocol status (sc-status)
win32 status (sc-win32-status)
bytes sent (sc-sent)
bytes received (cs-bytes)
time taken (time-taken)
Modified: 18/01/2005, Mike Coppins.
Tested on: Win2k.
www.mikeymike.org.uk