email time and date stamp

if i printed a email on paper it will put the :

from:
date:
to:
subject:

Body of email(or text)

that date and time on the paper is it from the sender or the receiver
Nathan BrandtAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Robin CMSenior Security and Infrastructure EngineerCommented:
This would depend on the email client you're using.
e.g. Outlook Web Access gives the "Sent" time when you open the email, but in the Inbox view the time shown is the received time.
What email server and client product(s) are you using and what versions are they?
Wayne88Commented:
It's from the sender.  It's the date and time of when the sender sent that email.  It is not the time your email server/you receive that email.
Nathan BrandtAuthor Commented:
the companie is using outlook and blackberry clients and exchange server this was back in 2011 and 2012 Microsoft Exchange V6.5(Microsoft SMTPSVC(6.0.3790.4675))

the consultant was using mac   Entourage 2004 and google business account
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

Nathan BrandtAuthor Commented:
Wayne88 would you know where that is documented in any microsoft books, or any email manuals i need it for a court case

thanks
frankhelkCommented:
I wouldn't rely on the Date: filed only, especially if it got mangled for a printout by Outlook ...

If you open the email in Outlook and then inspect its properties (File -> Info-> Properties, or sth. similar ... depends on Outlook version and locale) you will find the internet header lines.

A set of header lines might look like this (it's from an actual email I've got, a (... description) stands for info I don't want to disclose and/or comments)

Return-Path: (... emailt where delivery problems should go)
Received: by (... id of an email server)
  with PIPE id 375634890; Tue, 14 Jul 2015 04:55:34 +0200
Received: from (... id of an email server)
Received: from (... id of an email server) with (... software name); Tue, 14 Jul 2015 04:55:30 +0200
Received: (qmail 4366 invoked from network); 14 Jul 2015 02:55:31 -0000
Received: from (... id of an email server)
  by (... id of an email server); 14 Jul 2015 02:55:30 -0000
Received: from localhost.localdomain (... some IP info)
 by (... id of an email server) with (... software name)
 (... some more info)
 for (... email address of recipient)
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="ISO-8859-15"
MIME-Version: 1.0
X-Mailer: (... software name)
List-Id: (... info on mailing list this email originates from)
Date: Tue, 14 Jul 2015 03:40:05 +0300
From: (... email address of sender)
Subject: (... email subject)
To: (... recipients email address)

Open in new window


The Date: line tells the time the sender sent that mail to the server (as seen by the sender's computer clock), and it contains time zone info; according to RFC3339 it means  June 14, 2015 (Tuesday), 03:40:05 local time, which has an offset of 3 hours to UTC (meaning it was sent on 00:40:05 UTC). Since the sende could manipulate his clock, this is not fully reliable.

The Received: lines are inserted by the servers the message did visit on its way to the recipient. Each server usually inserts that info at the top of the header (so they are to be read "backwards"), and it contains the server name, its IP, and another timestamp. It's usually used for technical service, but it could confirm the timestamp, too ... if there's no clock problem, the timestamps should appear in a timely order, from Date: to the topmost Received:.

Some other programs (virus scanners, spam filters, etc.) could leave info lines, too, usually with name starting with "X-".

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Nathan BrandtAuthor Commented:
yes i been trying to get the meta data (header lines) but the court wants me to prove that the pdf version that the company supplied is not good enough or there is inconsistency with the pdf version first before ordering them to hand over the meta data

it sucks
frankhelkCommented:
Do you still have access to that email with Outlook ? Then you could simply view and copy/paste/print that header info.

If you have to squeeze out that data from the other side with a court order, I have these arguments:

The printed date is the date that the sender's email program inserted into the mail header. That value could be simply false due to incorrect computer clock setting, or manipulated by setting the computer time manually before sending the mail. That could be ruled out by inspecting the header data ("Received:").

PDF files could be manipulated after creation, if not secured by signatures and and encryption ... and with some dark energy one could probably just generate the PDF with Word, I presume.

By the way, proof of inconsistency needs inspection of the header. And what could the other side loose if the court inspects some email meta data ? The judge should even suspect forgery from the fact that they are unwilling to proof their point with the meta data ... "Your honor, with all respect I ask: What are they about to hide in that meta data ?"
frankhelkCommented:
Inactive for a long time now ... answers give quite sufficient info.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Email Clients

From novice to tech pro — start learning today.