See the DCE/RPC 2 Preprocessor section #sub:dcerpc2#5228> for a description and examples of using this rule option.