You're right that nfsd is using those ports. Running
will verify that these ports are used by nfsd.
one of my partners told me it's the kernel which opens those ports
whose process name/PID are identified by -, such as nfs.
what do you think about his words?
You can say this, since nfs support is built in the kernel.