Linux Server prevents arp attacks

When we use netstat-an, we sometimes see similar output: udp000.0.0.0: 327680.0.0.0: * But the etcservices does not have the relevant description of this port. What should we do? Is this a hacker program? Is there a way to check which program listens on this port? Use lsof-I: 32768 to see

When we use netStat-An, sometimes we can see similar output:

Udp 0 0 0.0.0.0: 32768 0.0.0.0 :*

However, what should I do if I find that/etc/services does not have this port? Is this a hacker program? Is there a way to check which program listens on this port?

UseLsOf-I: 32768, you can see:

COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
Rpc. statd 603 root 4u IPv4 953 UDP *: 32768
Rpc. statd 603 root 6u IPv4 956 TCP *: 32768 (LISTEN)

It was originally an rpc program.

You can use lsof-I: port to view the program running on the specified port and the current connection.