A few cases where a non-production session source port suggests same for
production sessions, assuming the production router opened the connections:
- Reachability for a non-production session can depend on the same
interface(s) as production session(s), so they may use sequential ports
after an interface flap.
- When the source port is near the start of the range (ie, 11020), other
sessions with that router may have last reset when it reloaded.