rpc rule option is used to look for specific RPC application/program numbers, version numbers, and procedure numbers in SUNRPC CALL requests. The RPC application number is a required argument, but the version and procedure numbers are optional. Rule writers can either specify specific version and procedure numbers, or they can use the
* character to look for any version number or any procedure number.
# Look for the 100000 application number, any version number, # and procedure number 3 rpc:100000, *, 3;