Logs to a destination port that not configured

[badrgb]

Hello,

I need your help to understand some logs for a rule : 

For example my rule contain :

Src : IP_A, IP_B ...; Dst : IP_O, IP_Z, Service ; ftp(21),telnet(23)and tcp 6058

in my logs on the forianalyzer I can some others dst port value.

It's possible? There are some explinations for that?

Thank you 

[badrgb · Accepted solution]

Good morning,

I think the only explination is the presence of the ftp in my rule.