rpc
The rpc
rule option is used to look for specific RPC application/program numbers, version numbers, and procedure numbers in SUNRPC CALL requests. The RPC application number is a required argument, but the version and procedure numbers are optional. Rule writers can either specify specific version and procedure numbers, or they can use the *
character to look for any version number or any procedure number.
Format:
rpc:application_number[,{version_number|*}][,{procedure_number|*}];
Examples:
# Look for the 100000 application number, any version number,
# and procedure number 3
rpc:100000, *, 3;