finding a process that bind a spcific port

[Nico Angenon]

Hello,

i think i’ve been hacked on one of my boxes... 

I try to find with process bind a specific port :

# netstat -anpe |grep udp
gives me
udp        0      0 0.0.0.0:10001           0.0.0.0:*                           
0          5950269     -


but 
# lsof |grep 10001
doesn’t show me anything

i’ve  tried  to cat /proc/*/cmdline... no 10001 found
no 10001 in ‘ps aux’
no 10001 in ‘rpcinfo –p’

any idea ?

Thanks 
Nico