Hello, I need to learn please how to open and read OS X 'Mail' logs.
The goal is to find the destination IP for a particular email (need to prove for a legal case that the recipient of an email was in a particular location at the time of receiving that email).
I thought it would be included in the email's header, but learned that the header only contains the Sender's IP address and the relay server IPs that the email passes through on its way to the destination. The header does not record the destination IP address of the email recipient.
I learned that the MDA (mail delivery agent) and/or Mail client would record such information in its log, and believe in this instance it would be the OSX Mail app.
Does anyone know how to find these particular Mail logs that record incoming email information such as this?
Any and all information and/or other suggestions to achieve this result is highly appreciated!
The version of OSX on the computer is actually 10.6.8, but I could not find a section for it (perhaps too old). I am guessing / hoping however that 10.7 might be very close to 10.6 in this regard.
Thank you.
The goal is to find the destination IP for a particular email (need to prove for a legal case that the recipient of an email was in a particular location at the time of receiving that email).
I thought it would be included in the email's header, but learned that the header only contains the Sender's IP address and the relay server IPs that the email passes through on its way to the destination. The header does not record the destination IP address of the email recipient.
I learned that the MDA (mail delivery agent) and/or Mail client would record such information in its log, and believe in this instance it would be the OSX Mail app.
Does anyone know how to find these particular Mail logs that record incoming email information such as this?
Any and all information and/or other suggestions to achieve this result is highly appreciated!
The version of OSX on the computer is actually 10.6.8, but I could not find a section for it (perhaps too old). I am guessing / hoping however that 10.7 might be very close to 10.6 in this regard.
Thank you.