Ephemeral Ports

Not really a question, but an ‘Ahah!’ moment. I always wondered why when pentesting Active Directory, there were high port numbers that were unidentified. There was always the same amount as actual running services. Thank you ACG.