We solved this kind of problem with a hidden parameter:
1- create the file /usr/openv/netbackup/db/config/ndmp.cfg on the master/media
2- put NDMP_MOVER_CLIENT_DISABLE in it.
Without this NBU made random connections to random ports near the end of the backup.
Now only the port 10000 is used.