Unsuspected "named" behaviour

["Gustav" <gustav () umbriel org>]

Hi!

While doing some searching after an imaginary bug on my name-server, I
stumbled across something strange.
I found "named" listening on an undocumented high udp-port. I haven't heard
of this before, so I wondered if one of you geniouses could help me out. My
paranoid side is screaming trojan, but I haven't found any documentation on
the subject. Could anyone point me in the right direction?

I'm running Bind 8.2.3 on a Linux box with kernel 2.2.16.

regards

Gustav


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com