This is an article from school discussing email forensics. It's not about IP tracing and the like, but rather testing and comparing content and using it to verify authorship.

It includes a few different models for accomplishing this goal, and is somewhat technical, but I found it interesting. Turns out there is a lot more to email forensics than just tracing it back to a specific computer.

Maybe someone else will be interested in it.