Given an email in your inbox that you know was generated from inside NS, what's the best way to tell which record[s] it came from?