Thanks for the reply. If dynamic refered to all ports, that would not explain why many apps have specific ports listed, as well as tcp/udp dynamic. If dynamic covered all ports, it would be redundant to include others in the same app. e.g. Access-grid tcp/80,8000,20000,20200,dynamic, udp/dynamic apple-appstore tcp/80,443,dynamic baidu-hi-base tcp/443,80,6453,dynamic, udp/2400,2500,dynamic avaya-webalive-base tcp/dynamic, udp/7878,2379 condor tcp/dynamic, udp/9600-9700 Since for each app some ports are explicitly listed and others are dynamic it makes me think that the dynamic range is a common range that an app could select a port from, such as 49152-65535. I believe that the app was observed using the specified ports each session, but different random port(s) established per session as well, from an upper-range that could be 49152-65535 or even 32768-61000. I wonder why there's nothing in the documentation that covers this topic.
... View more
