sometimes, when i rsh to a netbsd or freebsd machine, i see the following:
normal traffic through the reverse IP lookup to the DNS host. 

Then a query from the netbsd host for localhost.sarnoff.com (!)
(localhost is in /etc/hosts)

The localhost gets redirected by our name server (!) to bogus host. 

Then i see something really weird:

UDP:  Source port = 1070
UDP:  Destination port = 53 (DNS)
UDP:  Length = 52 
UDP:  Checksum = B67F 
UDP:  
DNS:  ----- DNS:   -----
DNS:  
DNS:  "\0\4\1\0\0\1\0\0\0\0\0\0\23my_very_good_friend\6domain\0\0\1\0\1"
DNS:  


           0: 0800 2007 7f4c 0020 af38 31ad 0800 4500    .. ..L. .81...E.
          16: 0048 627d 0000 4011 00e5 8221 0ad8 8221    .Hb}..@....!...!
          32: 0829 042e 0035 0034 b67f 0004 0100 0001    .)...5.4........
          48: 0000 0000 0000 136d 795f 7665 7279 5f67    .......my_very_g
          64: 6f6f 645f 6672 6965 6e64 0664 6f6d 6169    ood_friend.domai
          80: 6e00 0001 0001 0000                        n.......

my_very_good_friend ?????

anybody have a hint on this one?

thanks
ron