Internet-Security raven logo internet-security.com

UDP 32765

ProtocolUDP
Port32765
Labels

Synopsis

  • UDP port 32765 is commonly used by rpc.statd (Network Status Monitor) in NFS implementations on Unix/Linux systems (the rpc.statd daemon from nfs-utils).
  • Many real deployments fix rpc.statd to UDP 32765 for firewalling; examples include Red Hat Enterprise Linux/CentOS 5–6 and SUSE Linux Enterprise 10–11 (often documented alongside ports 111, 2049, and 32765–32768 for NFS services).
  • Older Debian/Ubuntu setups and admin guides likewise pin rpc.statd to UDP 32765 to support NFS file-lock recovery notifications.
  • The specific binary is typically /sbin/rpc.statd (nfs-utils), registering with rpcbind/portmapper and then serving on UDP 32765 when configured.
  • Security note: rpc.statd had a widely exploited remote buffer overflow (e.g., CVE-2000-0666); attackers used portmapper to find the service and often targeted hosts where rpc.statd was exposed on UDP 32765, leading to root compromise.

Observed activity

Last 30 days Detailed chart

More information