Rule to log SMTP traffic in npath deployment

For some ideas, take a look at

Logging SMTP traffic info via HSL to remote log server.

However, because you need to collect the TCP payload to get SMTP items like message id , email from/to and queue id, this is expensive on memory in tmm. You will also need to parse out the items that have been requested using regex.

Also, because this is npath traffic, The BigIP will only see the client side of the conversation.

This sort of specific logging would be better delivered from the actual Mail Servers, as they understand the SMTP traffic without it having to be parsed.