RE: message-id formatting

"Navroz Shariff" <[email protected]> Thu, 29 Mar 2007 11:48:00 -0400
Newsgroups gmane.comp.security.forensics
Message-ID <9895CE482ED2164CA350758D0BF7E98C2D8240@ABSNY-EXCL01.abs.americanbible.org>
Is there a 1-to-1 mapping between message IDs and the email address of
the host or do the message IDs change?

-----Original Message-----
From: [email protected] [mailto:[email protected]]
On Behalf Of Ansgar -59cobalt- Wiechers
Sent: Tuesday, March 27, 2007 3:02 PM
To: [email protected]
Subject: Re: message-id formatting

On 2007-03-27 Simson Garfinkel wrote:
> On Mar 19, 2007, at 1:52 PM, Ansgar -59cobalt- Wiechers wrote:
>> On 2007-03-16 [email protected] wrote:
>>> I am trying to find the format of mac.com message-ids. The following
>>> are examples of message-id's received in emails from mac.com.
>>> 
>>> [email protected]
>>> [email protected]
>>> 
>>> Any ideas?
>> 
>> I'm not sure if I understand your question correctly. Are you looking
>> for a regular expression to match those message-IDs?
>> 
>>   [0-9A-F]{8}-([0-9A-F]{4}-){3}[0-9A-F]{12}@MAC\.COM
> 
> No. He's looking for a meaning of what they mean.

Well, they're message-IDs, they don't mean anything by themselves.
They're just supposed to be unique identifiers for a given message
(e-mail, in particular).

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq