Appfirewall log no ip addresses?

When I turn on the firewall on mavericks and look at the log appfirewall log .
Block all connections and steath etc
I see that it is logging connections attemps but no details
Nov 11 15:08:33 XXXXX.local socketfilterfw[108] <Info>: iTunes: Deny TCP CONNECT (in:7 out:0)
Nov 11 15:09:33 XXXXX.local socketfilterfw[108] <Info>: netbiosd: Deny UDP CONNECT (in:1 out:0)
Nov 11 15:09:57 XXXXX.local socketfilterfw[108] <Info>: Stealth Mode connection attempt to UDP 1 time
Nov 11 15:23:15 XXXXXX.local socketfilterfw[108] <Info>: Stealth Mode connection attempt to UDP 2 time
Nov 11 15:27:57 XXXXXX.local socketfilterfw[108] <Info>: Stealth Mode connection attempt to UDP 1 time
Nov 11 15:32:14 XXXXXX.local socketfilterfw[108] <Info>: Stealth Mode connection attempt to UDP 1 time
Nov 11 15:34:27 XXXXXX.local socketfilterfw[108] <Info>: Stealth Mode connection attempt to UDP 1 time
Nov 11 15:45:33 XXXXXX.local socketfilterfw[108] <Info>: gamed: Deny UDP CONNECT (in:12 out:0)
Nov 11 15:47:25 XXXXXX.local socketfilterfw[108] <Info>: Stealth Mode connection attempt to UDP 5 time
Nov 11 15:50:33 XXXXXX.local socketfilterfw[108] <Info>: gamed: Deny UDP CONNECT (in:12 out:0)
Nov 11 15:52:11 XXXXXX.local socketfilterfw[108] <Info>: Stealth Mode connection attempt to UDP 1 time
Is there a way to see the IP addrresses that are trying to make connections to my computer through the firewall or has mavericks turn off this feature.
What is the number 108 come from ????
What does gamed ???? mean
Why do I see netbiosd???
My setup is cable modem to airport base station extreme router
Why do I not see the IP Addresses ?????
Thanks

If you are using the Airport Extreme then you do not need to turn on the software firewall in Mavericks. The Extreme has its own firewall built in, like every other router.

Similar Messages

Understanding Console: appfirewall.log

I was looking through console and saw some really funky messages in the appfirewall.log. (I am only showing parts of the messages)
stealth mode connection attempted
krb5kdc is listening from :::88 proto=6
krb5kdc is listening from 0.0.0.0:88 proto=6
awacsd is listening from ::ffff:0.0.0.0:4488 proto=6
Deny nmblookup data in from .....
Does this mean anything?

Conner_36 wrote:
krb5kdc is listening from :::88 proto=6
That means something that is part of your own system is listening to the network.
http://discussions.apple.com/thread.jspa?messageID=6739752

Log Host IP Address

Hi,
Is it possible to log the IP address of the client (not the application server) in a database table along with other session values like last accessed time, last login time and log off time?
Once this is logged I need to show this information on the default dashboard page (which is the simple bit). :)
I have OBI 10.1.3.4 running on a Windows 2000 server with OC4J as the web server.
Many Thanks in Advance!

Web Applications do not care where users are coming from, the whole idea of a Web Application is that it can be accessed from anywhere in your IP network. From a security standpoint I don't think it matters where the user are coming from either. If you really care about this you should to implement an SSO solution using NTLM which is "virtually unspoofable". We use NTLM in our SSO solution and there is absolutely no way a user can login to OBIEE unless it is authenticated on the Windows domain first so there is no chance of a user login in with another user's details.

Gatekeeper Accounting: Logging the IP addresses

Hi,
I am using a Cisco 7200 as a gatekeeper and I have setup a RADIUS server to log the calls. The problem is that the gatekeeper is not logging the IP ADDRESSes of the gateways (even for gateways registered to its local zone). It just logs the H323-ID of the gateways belonging to the local zone. Although you can see the IP address of the gateways in the "show gatekeeper calls" command ouput.
Is there anyway I could configure the gatekeeper to log the IP address of the gateways. Is this done through the GK API? If yes, could anyone explain or give me an example?
Thanks,
Hamid

Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (http://www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at http://www.cisco.com/tac/caseopen
If anyone else in the forum has some advice, please reply to this thread.
Thank you for posting.

Is it possible to log calls with address book?

Does anyone know how to log calls with address book - I usually dial right out of addessbook (via blue tooth) and always get the incoming calls as pop-ups on my screen. I was wondering if address book is logging them anywhere that I could access. I would appreciate anybody's help! Thanks, Paul

Thanks for the response. Sometimes I just think my macs can do anything!
I often use the incoming phone info through caller to create/ update contacts. Perhaps there is something third- party out there that will fill the bill.
Anyway, have a great day! Paul

Appfirewall.log dies daily

Yes, literally daily. Logging to /private/var/log/appfirewall.log works perfectly until the daily log clean-up kicks in at 03:15 every morning. Thereafter the appfirewall.log displays no new entries.
The only way I've got to get it start logging again is to reboot, which is not good, or disabling and re-enabling the firewall, which is annoying.
Can anyone suggest a resolution to this?
Message was edited by: Jay from BKK

In regards to the firewall messages you're noticing in your log, I'm having the same issue.
I'm on a 10.10.x.x private network and I'm also getting connection attempts from a 209.85.x.x IP. Specifically, my requests are originating from 209.85.225.102.
I can't figure out how a request from an IP in this subnet would get behind our NAT, which leads me to believe that a Windows PC on our network has been compromised and is sending out spoofed packets. Since I can't identify the machine by its IP, I haven't yet figured out which machine it is.

Change log of document address for Ship to party in sales order

hi experts,
There is a case where Ship to party address is diffferent at sales order level and custome rmaster level.Can anyone help to find the log of data inserted /updated in the customer address at sales document level. We tried CDHDR and CDPOS tables with object Adresse.But this is not giving correct information.

Hi,
In your case,I hope the Customer number is same at both levels.i.e. at Sales Order level and Customer master level but the address is different.
Goto the T.Code "SE16".Enter the table Name as "KNA1".Enter the Custoemr Number and get the value from the field "Adress".
Now Enter the table name as "VBPA".
Enter the Address numebr you have noted from table "KNA1" and enter the select option as "Not Equla to".Pass the Ship-To-Party number under the field "Customer" and select the partner function as "WE/SH".
Execute.
You will receive all the list of sales orders where teh address is differed from master data.
Regards,
Krishna.

10.7 SMTP Mail Logs send email address- Assign Postmaster?

How do you assign the SMTP mail log email address? I received an email this morning from another System Administrator (who previously administered this server), that he received the following message (I should be receiving these notifications, not him. To add: I was already the "Alert Email Address." Is there another location, where the SA's email address is set?):
From: Mail Delivery System
Subject: Postfix SMTP server: errors from server2.domain.com
Date: September 23, 2013 6:05:43 AM EDT
To: Postmaster
Transcript of session follows.
Out: 220 server.domain.com ESMTP Postfix
In: HELO XXX.XXX.XXX.XXX
Out: 250 server.domain
In: STARTTLS
Out: 454 4.7.0 TLS not available due to local problem
In: QUIT
Out: 221 2.0.0 Bye
For other details, see the local mail logfile

I am having the same problem. I also can't send anything with attachments at all. Mail Just hangs there endlessly. This is a HUGE problem for me right now, and I don't feel like using entourage mail because it is not really reliable either. Does anyone know how to get a direct hold of Mac Telephone Support or engineering? I need to fix this problem like right now. We need to go back one level of code. Mr. Logic... This is my third day since I downloaded this code revision too, so please let me know what you find out, and I will do the same for you. I should have known better than to install this code without reading up on the issues and fixes.
[email protected]
Since downloading the 10.4.7 update I've experienced
the mail problem wherein emails can't be sent to the
smtp server. I've read all the discussions on all
the various fora, and tried all the fixes (e.g.
downloading the combo update instead, trashing mail
preferences, repairing permissions, setting up mail
again from scratch, looking for the SOCKS proxy,
resetting the PRAM, etc. etc. etc.) but all to no
avail.
Note that in my case the SOCKS proxy checkbox was
NEVER ticked/checked and so I couldn't uncheck it
(which was the fix that seems to have worked for most
people).
Anyway... last night I thought would try setting the
SOCKS proxy checkbox myself, so that I could then
uncheck it. (you never know!)
However, when doing this I noticed that any changes I
made to the proxy checkboxes in the Network system
preference panel ARE NOT SAVED.
i.e. If I tick one or more of them and Apply the
changes, then exit the Network Preferences panel, the
relaunch the Network Preferences panel, they are all
UNCHECKED again.
Is this related to my Mail problem? Any clues?
This is my 3rd day without the ability to send email
from the Mail client in 10.4.7. Not good.
Any help/suggestions appreciated.
Mr Logic.
Powerbook G4 Mac OS X (10.4.7)

SGD: logging client source address

With the admin console, it's easy to see who is logged into global desktop and also which application servers they are running sessions on. I have need to know where they're connecting from. Is there a log filter or any other mechanism that will show me the hostname or ip address of the client where the user is logged in from?
TIA for the help.
-Dan

you should be able to see the client IP via
$ tarantella webtopsession list
User: .../_ens/o=organization/ou=People/ou=SGD/cn=Tom
Client: 192.168.1.77
Connection type: Secure
Logged in at: 2008-06-17 11:24:36.725
Logged in to: yourserver.yourcompany.com
Print state: Ready
Profile: .../_ens/o=organization/ou=People/ou=SGD/cn=Tom
if you are using Firewall forwarding, then the emulatorsession list will show the loopback
$ tarantella emulatorsession list
User: .../_ens/o=organization/ou=People/ou=SGD/cn=Tom
Application: .../_ens/o=applications/ou=Apps/cn=xterm
Application Server: .../_ens/o=appservers/cn=Tarantella server sgd
Application Server User: tom123
Client: 127.0.0.1
Protocol Engine ID: 16614
Resumable For: Always
Session ID: sgd.solaris.org:1212766049959:-7733236712545113475:Li4uL19lbnMvbz1vcmdhbml6YXRpb24vb3U9UGVvcGxlL291PVJTRC9jbj1SaWNoYXJk
Start Time: 2008-06-06 08:27:29.966
Status: Suspended
If you are on a Sunray, then you might not see the IP of the DTU. The next version of SGD should report the DTU IP.

Change log of Plant Address

Hello,
One of the plants had an address change. The change log does not list those changes. Is there any way I can figure out as to when the address of the plant was changed and who changed it. Any help will be appreciated.
Thanks.
ALAM.

When plant address is changed transport request will be created ,based on the transport request you can findout the changes
G.Ganesh Kumar

TS1398 Why is it that my iPod 'connects' to a wifi network but doesn't log an IP address and can't use the internet?

My iPod has no trouble connecting to my wifi connection, but never stops loading. The wifi bars appear at the top of the iPod, but when you get further details on the wifi network, no IP address is logged; neither is the router number or the DNS number. My iPod registers that a wifi connection exists, but it can't hook up to it to use the internet. Does anyone know what is wrong?

How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
However, I would try recovery mode firs. It is safer. See:
iPhone and iPod touch: Unable to update or restore

My ICloud account log in email address to an invalid email

my ICloud account log in e-mail address/ID is not correct the domain name of the e-mail was change from yahoo to AOL. Now I can not reset the ID/log in name and password on my Iphone 5 ISO 7 to restore I Phone to factory setting

You need to respond to the verification email sent from Apple by clicking the Verify Now link. Make sure you are checking the email address you used to set up your iCloud account. Check the spam/junk folder as well as the inbox. If it isn't there, go to https://appleid.apple.com, click Manage your Apple ID, sign in, click on Name, ID and Email addresses on the left, then to the right click Resend under your Primary Email Address to resend the verification email.

HT1904 Hi can i gt some advice. tried to download app from iPad air. it said vertification code sent to email address. when i tried to log in email address not recognise. what do i do?

Tried to download an app.
Mentioned certification code sent to email .....
When I tried to log into my email address it says email address not known.
Please advice what to do?

Edits:
*could not access for the past three months
*while the inter-apple messaging system

Sonicwall TZ 215 Log Monitor Ip address display

I have finally worked through some issues with opening ports on this device. Now after installing the latest firmware SonicOS Enhanced 5.9.1.1-39o, the log does not show the ip address in a user friendly format. I have played around with all the new settings options but no matter what I choose the ip address looks like gibirish. Please check out the screen shot to see what I am referring to. Let me know if you have a quick work around or if there is some sort of logging setting in one of my rules that may cause this?
This topic first appeared in the Spiceworks Community

It seems that the log file contains details of several failed/aborted attempt to install
>
INFO: Setting variable 'ORACLE_HOME' to 'H:\ora10\app\oracle\product\10.2.0\server'. Received the value from the command line.
INFO: Setting variable 'ORACLE_BASE' to 'H:\app\india'. Received the value from the command line.
>
>
INFO: Setting the 'OracleHome ( ORACLE_HOME )' property to 'H:\app\india\ora10\app\oracle\product\10.2.0\server'. Received the value from the command line.
INFO: Setting the 'OracleHomeName ( ORACLE_HOME_NAME )' property to 'OraDb11g_home1'. Received the value from the default settings.
INFO: Setting the 'OracleBase ( ORACLE_BASE )' property to 'H:\app\india'. Received the value from the command line.
>
Why are you trying to install 11gR1 into a 10g HOME ? You will run into issues as long as you do not follow install instructions at http://docs.oracle.com
HTH
Srini

Logging connecting MAC addresses

Hi,
I recently purchased this router and I LOVE IT!!! I have been looking around in the different settings and waht not. I would like to know if there is a way to have the router log what times MAC addresses connect and what IP they are assigned. I have given someone access to the router and I think he may have given the access out to others. The only way I can think of to tell is through the MAC. That way I can filter out those connections.
I am using firmware version 4.30.11. The main box I use is running Kubuntu 9.04.

Just a quick message since I can't edit the old one. I found a program called wireshark. While it has the ability to do exactly what I want it to do.....no dice. It only tracks my machine.
I probably should have given some more information about my setup.
I have a cable modem the old motorola surfboard, Connected to that is the Linksys wrt54gl. Into that I have my DVD player connected, my computer a switch and 1 laptop . Plus the wireless. In the switch is connected the other computer and another laptop of mine.
I just want to track how many unique connections are being made. My bandwidth has dropped and I am thinking that my room mate gave it out to too many people. I can change the WEP key, but he would just give it back out.
That is why i am hunting for something to track MACs.

Appfirewall log no ip addresses?

Similar Messages

Maybe you are looking for