Rule:--Sid:13900--Summary:This event is generated when network traffic that indicates iTunes server multicast DNS response is being used.--Impact:Possible policy violation. The use of iTunes server multicast DNS response may be prohibited by corporate policy in some network environments. --Detailed Information:This event indicates that the iTunes server multicast DNS response is being used on the protected network.--Affected Systems:All systems using iTunes server multicast DNS response--Attack Scenarios:This is a possible policy violation, it may be that iTunes server multicast DNS response has been installated on a client host.--Ease of Attack:Simple.--False Positives:None known.--False Negatives:None known.--Corrective Action:Disallow the use of iTunes server multicast DNS response on the protected network and enforce or implement an organization wide policy on the use of iTunes server multicast DNS response.--Contributors:Sourcefire Vulnerability Research Team--Additional References:--