Björn Engels
What can be behind netstat -a * udp send-Q 288:1024 nmap -sU x.com says udp 1024 unknown - can it be related that tcpdump -i eth0 takes ages to write packet traffic?
'lsof -Pi | grep 1024' should show you which process is listening on that port.
Not necessarily... netstat -a --udp: udp 0 0 *:ssh *:* udp 0 0 *:nfs *:* udp 0 0 *:918 *:* udp 0 0 *:913 *:* udp 0 0 *:910 *:* udp 0 0 *:1024 *:* udp 0 0 *:sunrpc *:* lsof -Pi does not show any process listening on port 1024, however rpcinfo -p shows the following: program vers proto port 100000 2 tcp 111 portmapper 100000 2 udp 111 portmapper 100021 1 udp 1024 nlockmgr 100021 3 udp 1024 nlockmgr 100021 1 tcp 1024 nlockmgr 100021 3 tcp 1024 nlockmgr 100024 1 udp 910 status 100024 1 tcp 912 status 100005 1 udp 913 mountd 100005 1 tcp 915 mountd 100005 2 udp 918 mountd 100005 2 tcp 920 mountd 100003 2 udp 2049 nfs -- Sami Nuuttila