OSX Mail logs access?

[lieiti]

Hello, I need to learn please how to open and read OS X 'Mail' logs.

The goal is to find the destination IP for a particular email (need to prove for a legal case that the recipient of an email was in a particular location at the time of receiving that email).

I thought it would be included in the email's header, but learned that the header only contains the Sender's IP address and the relay server IPs that the email passes through on its way to the destination. The header does not record the destination IP address of the email recipient.

I learned that the MDA (mail delivery agent) and/or Mail client would record such information in its log, and believe in this instance it would be the OSX Mail app.

Does anyone know how to find these particular Mail logs that record incoming email information such as this?

Any and all information and/or other suggestions to achieve this result is highly appreciated!

The version of OSX on the computer is 10.6.8.

Thank you.

 

[chscag]

You're using a very old version of OS X (Snow Leopard) and that is not going to help your cause. Anyway, here is the location of the Mail Logs in OS X Sierra: (10.12.4)

Macintosh HD/Users/your user name/Library/Containers/com.apple.mail/Data/Library/Logs/Mail/

The location and data makeup of the logs in such an old version of OS X may very well be different and in a different location. Sorry but that's the best we can do. And, I'm not even sure that the Mail logs contain the information you're looking for. You might be better off asking your ISP which IP address that particular mail was delivered to.

 

[IWT]

@lieiti

Welcome to our Forums.

Should Admin chscag's detailed advice not locate Mail Logs and you need to search your Mac - "Find Any File" is an app, often recommended here, which does have a version for Snow Leopard.

Visit this site for details: http://apps.tempel.org/FindAnyFile/

It used to be free, but there is now a modest charge. On the right side of the page, in a green box, there is the download option for earlier versions including OS 10.6.x (Snow Leopard).

The advantage of Find Any File, is that it reveals "hidden' files. Worth a consideration if Admin chscag's suggestions don't work out.

Ian

 

[lieiti]

Thank you chscag, there are no logs in that location, need to Google further. May have to contact the ISP see what they say.

Thanks IWT for the suggestion, will look into it.

Best- Roy

 

[chscag]

I doubt you will find anything in the Mail logs (if they exist on your machine). Your best bet in my opinion is to contact your ISP, provide them with the exact email - date and time - and addressee. If they cooperate, they may be able to give you an answer. However, ISPs are very reluctant to provide that kind of information without legal enforcement - in other words, a court order or maybe a nice letter from your attorney.

 

[ferrarr]

Since its is for as legal matter, your lawyer would know whom to contact, or so I would presume?