Ryan Simpkins wrote: 
On Sun, March 25, 2007 21:11, Edward Milstein wrote:
  
Anyone got a guess??
    

udp        0      0 0.0.0.0:36489              
It is the source port (see firewall section here for details):

http://www.oreillynet.com/pub/a/network/excerpt/dnsbindcook_ch07/index.html

Thanks.  I understood the meaning of the field to be the source port.  Is the meaning here, this is the response port resuling from an inbound packet on port 53 udp?

Sorry if it is obvious, but thanks,

-ed-