>I noticed that on my box "named" is listening to UDP port 65517.
>Is this normal?  Why isn't the port in /etc/services?

named also *makes* queries (eg, to resolve queries it receives or to
fetch glue).  since 8.2.something or other (i think) it started using
an unchanging dynamically assigned port (ie, the kernel assigns a port
and named never changes it) for this.

"query-source" in your options section can alter this, if you're so
inclined.

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
andrew@crossbar.com       * "information is power -- share the wealth."