According to the DShield Trends report, tcp/20329 is way out of line for the past couple of days.  If you've seen these packets on your network and don't mind sharing, it would be interesting to know what is going on.

By the way, we all used to do a really good job of adding comments to the port pages on DShield.  In the past few years there has been a noticeable drop in comments and notes.  If you've got the time and ambition it would be very helpful to add additional information to what is there, particularly if you see new activity and figure out what it is.

Marcus H. Sachs
Director, SANS Internet Storm Center