Re: Interesting DNS Traffic

[Vern Paxson <vern () ee lbl gov>]

> Unless I am being ignorant, doesnt this NOT comply with the RFC that
> have to deal with return port numbers on all ip packets?

That's a BSD convention, not an RFC requirement.  There are other systems
that don't follow the convention ...  Let's see ... from a look at yesterday's
traffic logs, about 0.67% of the connections (one in 150) had both source
and destination port < 1024 (and about 0.1% of those had both source and
destination port < 512 ... though all of those were attacks! (scans))

                Vern