We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.

Why are message sent dates showing up as the date of message export when exporting to PST files?

  • Type: Knowledgebase
  • Date changed: 10 months ago

Solution #00006035

Scope:

All Barracuda Message Archivers, all firmware versions.

Answer:
The root cause of message sent dates being set to date of export to PST files typically emanates from invalid source data at the original time of import.  Often, third party tools, including backup restore tools or message conversion tools from email systems other than Microsoft Outlook and Exchange, create invalid headers in PST files they generate.

 

When importing these files with invalid headers, the Barracuda Message Archiver retains the original source data (.eml format) in its permanent storage.  However, on export to PST format, the Barracuda Message Archiver attempts to normalize all data at export so that the messages can be properly utilized upon subsequent export within viewers such as Microsoft Outlook.  While these normalization operations are logged internally (and temporarily) for debugging purposes in the Barracuda Message Archiver, only the most extreme cases are reported to the administrators. This is consistent with the behavior of Microsoft Outlook and Microsoft Exchange when creating items based on data with missing headers so as not to overwhelm administrators with high volumes of warning messages associated with high volume exports that would obfuscate the presence of more severe errors.

 

If the message sent headers are found to be invalid, the normallization process on export sets the message sent date to the date of export from the Barracuda Message Archiver into PST format.

 

An interesting use case is that if the the received headers are correct, the absence of valid sent headers might appear to be transparent to the users within the Barracuda Message Archiver.  For search indexing and display in the Search screen, the Barracuda Message Archiver utilizes the message received dates, which are in close proximity to the message sent dates.  The reason for this behavior is that often automated bulk email tools do not properly set message sent dates so this attribute cannot be relied on for indexing.

 

Barracuda Networks recommends that customers who import PST data generated from tools other than Microsoft Outlook and Exchange advise their auditors to rely on received header data for analysis, not sent header data.

 

Customers who want to provide original source data with the invalid headers for forensic purposes can use ZIP format instead of PST.



Link to This Page:
https://campus.barracuda.com/solution/50160000000ItEDAA0