Trace email source w/out headers

[mvvilleza]

Hi people,

My question is the lovelorn virus is spreading mail on my network and i found out that it doesn't have headers. Is it possible to trace the source of the virus or should i use a special software? If yes, is there a free software available? Thanks for any info.

 

[Patrickp1973]

Quick and dirty way.. if the virus was still spreading would be to write a filter using something like tcpdump to capture the mail off the wire. Also looking back at email logs you could possible co-relate the time the message was recieved to a host which sent it in the LAN.