DNS port requests

[Kevin Darcy]

Rasheed Darras wrote:
> Dears,
>
> If I captured DNS packets using snoop, I found many requests like:
>
> "Customer IP" > "My DNS IP" DNS C port=16931
> "Customer IP" > "My DNS IP" DNS C port=16932
> "Customer IP" > "My DNS IP" DNS C port=2949
> "Customer IP" > "My DNS IP" DNS C port=16931
> "Customer IP" > "My DNS IP" DNS C port=16932
> "Customer IP" > "My DNS IP" DNS C port=16932
> "Customer IP" > "My DNS IP" DNS C port=16932
> "Customer IP" > "My DNS IP" DNS C port=16932
> "Customer IP" > "My DNS IP" DNS C port=31864
> "Customer IP" > "My DNS IP" DNS C port=31875
> "Customer IP" > "My DNS IP" DNS C port=2949
>
> What are these requests?
>   
Since they're coming to the "DNS" (53) port on your DNS server, I'd 
assume they were DNS queries.

Or, do you consider this traffic unusual in some way?

- Kevin