The rpc rule option is used to look for specific RPC application/program numbers, version numbers, and procedure numbers in SUNRPC CALL requests. The RPC application number is a required argument, but the version and procedure numbers are optional. Rule writers can either specify specific version and procedure numbers, or they can use the * character to look for any version number or any procedure number.




# Look for the 100000 application number, any version number,
# and procedure number 3
rpc:100000, *, 3;