To check for POP3 traffic using Ethereal, what port should an investigator search by?

The correct answer is C. 110. POP3 (Post Office Protocol version 3) operates on port 110 by default. When filtering network traffic in Ethereal (the predecessor to Wireshark), an investigator would filter by port 110 to isolate POP3 email retrieval sessions. Port 143 is IMAP, port 25 is SMTP (email…

Submitted by tom_us· Apr 18, 2026Network Forensics

Question

Options

A143
B25
C110
D125

How the community answered

(52 responses)

A
4% (2)
B
6% (3)
C
88% (46)
D
2% (1)

Explanation

POP3 (Post Office Protocol version 3) operates on port 110 by default. When filtering network traffic in Ethereal (the predecessor to Wireshark), an investigator would filter by port 110 to isolate POP3 email retrieval sessions. Port 143 is IMAP, port 25 is SMTP (email sending), and port 125 is not a standard mail protocol port.

Topics

#POP3#Standard ports#Network traffic analysis#Ethereal

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice