🚀 go-pugleaf

Remy Lebeau (TeamB) wrote:

> 
> 
> Soundsl like you are not looking at the actual message data that was
> downloaded, only at the stream tags that wrap the data.  You need to
> find the stream that contains the original message headers and then
> grab the date/time from that data.
> 


Thanks for the info. I have found out that some of the messages indeed 
contain a stream with the original message headers (the type is 
PR_TRANSPORT_MESSAGE_HEADERS). However, internally, we use an Exchange-
server, and an internal mail does not contain that stream. Is there any way 
I can retrieve the date in that case?  
I have found a stream with PR_MESSAGE_SUBMISSION_ID as type, and the 
contents seams to contain the date: 
c=BE;a= ;p=Exchange;l=W2003EX-070306151740Z-1672
but I'm not sure it always contains it.

I have another question: to know the type of the message I have to parse 
the pwcsName-member of the tagSTATSTG structure (Take the 8 last characters 
to read a hex-number). There doesn't seem to be a member to define the 
type. Is this the correct way or am I something missing?

regards,

Koen