{
  "port": 32778,
  "protocol": "both",
  "service": "Unassigned / dynamic ONC RPC",
  "oneLiner": "Past the end of the registered FileNet block — unassigned, and typically a dynamically bound RPC program.",
  "whatItIs": "IANA's registrations stop at 32777; 32778 begins the unassigned 32778–32800 block, so there is no official service name. Nmap calls it sometimes-rpc19 with the comment \"Sometimes an RPC port on my Solaris box (rstatd)\", reflecting the same dynamic ONC RPC allocation that fills 32770 upward. On Linux it is inside the default ephemeral range (32768–60999) and is just as likely to be an outbound socket or a published container port. Identify the listener; the number carries no meaning of its own.",
  "exposure": {
    "verdict": "careful",
    "note": "rstatd and its neighbours hand out host telemetry with no authentication, and anything else here is unidentified — both argue for keeping the range internal."
  },
  "checkCommand": "rpcinfo -p TARGET",
  "links": [
    {
      "title": "IANA port registry — 32778 (unassigned)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=32778",
      "kind": "iana"
    },
    {
      "title": "RFC 1833 — Binding Protocols for ONC RPC Version 2",
      "url": "https://www.rfc-editor.org/rfc/rfc1833.html",
      "kind": "spec"
    },
    {
      "title": "rpcbind(8) manual page",
      "url": "https://man7.org/linux/man-pages/man8/rpcbind.8.html",
      "kind": "official-docs"
    },
    {
      "title": "nmap-services — Nmap's port frequency and name table",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}