Re: Interesting DNS Traffic -Reply

[Einar EINARSSON <einar.einarsson () iea org>]

> > > Robert Graham <robert_david_graham () yahoo com>
5/31/99  11:38 pm >>>

> The DNS traffic from low ports is somewhat normal, from
> my own experience. I see LOTs of DNS traffic coming from
> ports lower than 1024 from machines browsing our website.
> Here are some example ports:

I thought DNS lookup 'was supposed' to use a random
source port above 1023. So why are some implementations
using a source port below 1023 and some above 1023 ? 
I guess there is nothing stoping the programmer, but
wouldn't it be simpler, at least for those writing packet filters,
if this stuff was implemented a certain way and not the other
? 

Einar