Linux 上的 Exchange edb
我有一个 60GB 的 edb 文件，我想将数据库分成单独的电子邮件。我没有任何原始域信息，因此我无法启动 Server 2k8 虚拟机并将其重新附加到那里。我通过一种简单的方法取得了一些进展，即从文件（从 60 GB 变为 30 GB）中剥离二进制数据（字节不是 0x09、0x0a、0x0d 和 0x20 到 0x7f），然后在明显的 SMTP 标头处拆分它。这种方法似乎不起作用，因为 Exchange 不会将整个电子邮件放在一个连续的块中，而且它似乎复制了很多电子邮件（这可能是将整个文件视为文件系统的产物，而不是这样做更明智的做法是让文件系统成为文件系统，然后将电子邮件存储在 /var/mail 等中）。
那么，问题是：哪些 Exchange 数据库文件格式的工具和文档隐藏在 Google 无法或不会向我展示的世界中？
I have a 60GB edb file, and I want to break the database into individual emails. I do not have any of the original domain information, so I can't just fire up a Server 2k8 vm and reattach it there. I have made some progress with a naive approach of stripping binary data (bytes not 0x09, 0x0a, 0x0d, and 0x20 through 0x7f) from the file (went from 60 to 30 GB), then split that at obvious SMTP headers. That approach does not seem to work because Exchange doesn't keep the entire email together in a contiguous block, and it seems to duplicate a lot of the email (this is probably an artifact of treating the entire file as a filesystem, rather than doing something more sensible like letting the filesystem be a filesystem, and just storing the emails in /var/mail or the like).
So, question is: what tools and documents for the Exchange Database File Format are hidden in the world that Google can't or won't show me?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
看看约阿希姆·梅茨的作品。他对 edb 格式进行了逆向工程，并对交换数据库进行了有限的分析。它是开源的，甚至还有一些有关表和列的文档：
http://sourceforge.net/projects/ libesedb/files/
然而，它并没有做比您看似实现的更多的事情。它将 edb 的所有表导出到单独的文件中。您必须使用提供的文档，并根据从数据库导出的位和字节自行撰写电子邮件。请记住，有关电子邮件和附件的信息相当分散，并且所有列的命名都相当神秘。您必须自己进行一些研究和逆向工程才能穿越这个数据丛林。
由于该项目是开源的，您可以调整或扩展代码并“轻松”地到达您想要的地方。
Take a look at Joachim Metz' work. He reverse engineered the edb format and analyzed the exchange database to a limited extend. It's open source and there's even some documentation about the tables and columns:
http://sourceforge.net/projects/libesedb/files/
However it doesn't do more than you have seemingly achieved. It exports all tables of the edb into separate files. You would have to use the provided documentation and compose the emails yourself from the bits and bytes you export from the database. Keep in mind though that the information about the emails and attachements is rather scattered and all columns are rather cryptic in their naming. You have to do some research and reverse engineering yourself to get through this data jungle.
Since the project is open source you can adjust or extend the code and get to where you want to get quite "easily".