Newer versions of BIND bind to ports other than 53 for sending requests without having to be root (ie, above 1024) I suspect this is what you're seeing. Bob