SANS reports a spike on traffic on TCP Port 48318 and is looking for traces. It is actually a really good question what is going on here.

http://isc.sans.org/diary.php?storyid=1821

If you have any ideas, tell them (or me or us :-))

Roger