With tcpdump I see many SYN packets ... and source IP is Localhost.I wish to find which processes are trying to connect.Note the connections don't reach ESTABLISHED state, they seems to be random port scans.
Find local processes starting TCP connections
linux;tcp;ipv4