Got:
Warning: Network TCP port 13000 is being used by /sbin/rpc.statd. Possible
rootkit: Possible Universal Rootkit (URK) SSH server
Use the 'lsof -i' or 'netstat -an' command to check this.
rpc.statd is started by nfs-common.
False alarm? Bug? Serous trouble?