HTTP Request method not recognised

[ricey]

I have set up an IPS senor and was getting a lot of alerts generated for signatures 12673 (Recognised Content type) and 12676 (Request method not recognised) these are generated when SMS clinets communicate with the SMS server.

Analyses showed the content type to be multipart/mixed and the request method to be ccm_post. I have tuned the signatures and added multipart/mixed as a valid content type and ccm_post as a valid request method.

This has fixed the alerts for 12673 but not for 12676 (ccm_post)

Does anyone know how I can allow this type of request method?

Thanks very much

[sadbulali]

Use the "status" command in the signature definition submode to specify the status of a specific signature. If you disable the status of the signature 12676 then alerts regarding this signature will not be generated.