The QID is a 16-bit random string, so we have a chance of 1 over 2^16 to guess it correctly. If we also use port randomisation, we have to guess 16+16=32 bits, giving us a 1 over 2^32 chance.