what is rpc.statd

[Blaqb0x]

hi,

anyone know what rpc.statd does? it seems to have UDP port 32768 open.
thanx,

Remote procedure call status deamon? just a guess though.

The rpc.statd server implements the NSM (Network Status Monitor) RPC protocol. This service is somewhat misnomed, since it doesn't actually provide active monitoring as one might suspect; instead, NSM implements a reboot notification service. It is used by the NFS file locking service, rpc.lockd , to implement lock recovery when the NFS server machine crashes and reboots. For each NFS client or server machine to be monitored, rpc.statd creates a file in /var/lib/nfs/statd/sm . When starting, it iterates through these files and notifies the peer rpc.statd on those machines.

this is actually in a man page. so, man rpc.statd will give u all the details.

[Blaqb0x]

Ok, thanks. I had a machine compromised and it had a deamon listening on a udp port.