nerdexam
F5

101 · Question #689

The users in a company are unable to send and receive SMTP e-mails using the BIG-IP Virtual Server. The administrator logs into the BIG IP device to verify if the mail pool member with an IP address o

The correct answer is C. Icpdurnp - 0:0 host 192.168.10.100 and port 25. SMTP uses TCP port 25, so verifying SMTP delivery traffic on a BIG-IP pool member requires a tcpdump filter on port 25, not port 143 which belongs to IMAP.

Section 2: F5 Solutions and Technology

Question

The users in a company are unable to send and receive SMTP e-mails using the BIG-IP Virtual Server. The administrator logs into the BIG IP device to verify if the mail pool member with an IP address of 192.168.10.100 18 is serving SMTP traffic. Which command on the BIG-IP device should the administrator use to verify the traffic?

Options

  • Atcpdump - 0 0 host 192.168.10.100 and port 143
  • Bcurf - 1 smtp1/192.168.10.100
  • CIcpdurnp - 0:0 host 192.168.10.100 and port 25
  • Dtelnet 192.168.10.100 143

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    9% (3)
  • C
    82% (28)
  • D
    6% (2)

Why each option

SMTP uses TCP port 25, so verifying SMTP delivery traffic on a BIG-IP pool member requires a tcpdump filter on port 25, not port 143 which belongs to IMAP.

Atcpdump - 0 0 host 192.168.10.100 and port 143

Port 143 is the IMAP protocol port used for email retrieval, not SMTP email delivery, so this filter would capture the wrong type of mail traffic and miss SMTP sessions entirely.

Bcurf - 1 smtp1/192.168.10.100

The curl command shown has invalid syntax for this use case and curl is not a packet capture tool - it cannot monitor live network traffic flows on a BIG-IP device.

CIcpdurnp - 0:0 host 192.168.10.100 and port 25Correct

The tcpdump command filtered on host 192.168.10.100 and port 25 captures only SMTP traffic to and from that specific pool member, since port 25 is the well-known SMTP submission port defined in RFC 5321. This is the standard method on BIG-IP for verifying pool member traffic at the packet level, allowing the administrator to confirm SMTP sessions are being established and served correctly.

Dtelnet 192.168.10.100 143

Port 143 is IMAP rather than SMTP, and telnet tests TCP connectivity to a single port at a point in time rather than capturing or continuously monitoring traffic flows.

Concept tested: BIG-IP tcpdump filtering for SMTP port 25 traffic

Topics

#tcpdump#SMTP#port 25#BIG-IP troubleshooting

Community Discussion

No community discussion yet for this question.

Full 101 Practice