No Console Log Entries
Trying to find root cause of near-daily lockups of this 2.4 GHz Macbook. All keys and mouse are locked and a long press on the power button is required.
-Tried to look at console messages and found that there are none since April of 2009.
-Tried to try Onyx to trigger the various log scripts. Downloaded and installed and found that it crashes on startup.
-Ran 10.5.8 combo updater. Did not change the above.
Ideas?
Thanks in advance,
Tom
William, Thanks for your response.
Q: "When you see nothing since April of 2009, what is selected in the left column? "
A: "Console Messages" under the "LOG DATABASE MESSAGES" heading.
system.log is accessible either thru console or through Finder>Go>Go to folder.... It has plenty of current messages.
When Onyx crashes, the log entry is:
Mar 17 10:01:23 sue-pollaks-MacBook com.apple.launchd[82] ([0x0-0x49049].com.titanium.OnyX[960]): Exited abnormally: Trace/BPT trap
This doesn't give me any clues.
Yesterday the machine was sitting idle. Looking through the log entries, the only activity is Time Machine running at 23 minute past each hour. Then, at 22:35, the string of messages associated with booting begins. Hope it's OK to paste part of it here:
Mar 16 22:23:19 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Starting standard backup
Mar 16 22:23:21 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Backing up to: /Volumes/TimeMachine/Backups.backupdb
Mar 16 22:23:21 sue-pollaks-MacBook FindSystemFiles[3759]: Querying receipt database for system packages
Mar 16 22:23:21 sue-pollaks-MacBook com.apple.backupd[3758]: 2010-03-16 22:23:21.834 FindSystemFiles[3759:713] Querying receipt database for system packages
Mar 16 22:23:22 sue-pollaks-MacBook FindSystemFiles[3759]: Using system path cache.
Mar 16 22:23:22 sue-pollaks-MacBook com.apple.backupd[3758]: 2010-03-16 22:23:22.058 FindSystemFiles[3759:713] Using system path cache.
Mar 16 22:23:22 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: No pre-backup thinning needed: 100.0 MB requested (including padding), 29.66 GB available
Mar 16 22:23:23 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Copied 351 files (613 KB) from volume Macintosh HD.
Mar 16 22:23:23 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Starting post-backup thinning
Mar 16 22:23:24 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Deleted backup /Volumes/TimeMachine/Backups.backupdb/sue pollak’s MacBook/2010-03-15-212409: 29.67 GB now available
Mar 16 22:23:24 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Post-back up thinning complete: 1 expired backups removed
Mar 16 22:23:24 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Backup completed successfully.
Mar 16 22:35:27 localhost com.apple.launchctl.System[2]: fsck_hfs: Volume is journaled. No checking performed.
Mar 16 22:35:27 localhost com.apple.launchctl.System[2]: fsck_hfs: Use the -f option to force checking.
Mar 16 22:35:28 localhost com.apple.launchctl.System[2]: BootCacheControl: could not open /var/db/BootCache.playlist: No such file or directory
Mar 16 22:35:28 localhost com.apple.launchctl.System[2]: BootCacheControl: could not unlink playlist /var/db/BootCache.playlist: Unknown error: -1
Mar 16 22:35:29 localhost com.apple.launchctl.System[2]: launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
Mar 16 22:35:29 localhost com.apple.launchd[1] (com.apple.usbmuxd): Unknown key for boolean: EnableTransactions
Mar 16 22:35:29 localhost com.apple.launchd[1] (org.cups.cupsd): Unknown key: SHAuthorizationRight
Mar 16 22:35:29 localhost com.apple.launchd[1] (org.ntp.ntpd): Unknown key: SHAuthorizationRight
Mar 16 22:35:29 localhost com.apple.launchd[1] (org.x.privileged_startx): Unknown key for boolean: EnableTransactions
Mar 16 22:35:31 localhost kernel[0]: npvhash=4095
Mar 16 22:35:30 localhost DirectoryService[11]: Launched version 5.7 (v514.25)
Mar 16 22:35:31 localhost kernel[0]: hi mem tramps at 0xffe00000
Mar 16 22:35:30 localhost DirectoryService[11]: Improper shutdown detected
Mar 16 22:35:31 localhost kernel[0]: PAE enabled
Mar 16 22:35:30 localhost kextd[10]: 425 cached, 0 uncached personalities to catalog
Mar 16 22:35:31 localhost kernel[0]: 64 bit mode enabled
Looking through this does not give me any clues. The only things that seem odd are:
Mar 16 22:35:30 localhost DirectoryService[11]: Improper shutdown detected
and then later:
Mar 16 22:35:32 localhost kernel[0]: Previous Shutdown Cause: 3
THoughts?
Thanks,
Tom
Similar Messages
-
Security (Console log entries)
The following entries appear repeatedly every few seconds in my Console log:
10/29/07 12:24:56 PM mDNSResponder[16] handleLNTGetExternalAddressResponse: Router returned bad address
10/29/07 12:24:56 PM mDNSResponder[16] Error getting external address 3
My D-Link router is performing properly and I have no problems with the network connections between my two computers or my Internet connections.
I found four technical documents that reference mDNSResponder issues but they pertain mostly to Apple Security issues and do not suggest what might be causing the repetitive log error entries.
Any suggestions other than to just forget that I ever saw these log entries?I did a state dump for mDNSResponder (sudo killall -INFO mDNSResponder) both before and after killing and restarting the process (sudo killall -KILL mDNSResponder). Then offender appears to be in this area:
Oct 30 19:59:15 MaxG5 Unknown23: NAT Traversals
Oct 30 19:59:15 MaxG5 Unknown23: 0080A21C UDP Int 4500 Ext 0 Err 0 Retry 822 Interval 900 Expire 0
Oct 30 20:02:01 MaxG5 Unknown355: NAT Traversals
Oct 30 20:02:01 MaxG5 Unknown355: <None>
Note the number of retries and the expire value.
After killing and having the process restart itself, the messages in the log go away. The NAT Traversals values in the mDNSResponse state appear to be gone as well. -
Meaning of Console Log Entry? (and how to make it stop?)
The following occurs regularly in my console.log, and I'm wondering if anyone can point me to what might be causeing it:
Exception caught in COTTCPListener::HandleAccept(), calling OTSndDisconnect
It seems like something is trying to call an Open Transport routine to shut something down, but I don't have a clue what it would be.
This is on a 17" Intel iMac under 10.4.10MarkDouma® wrote:
What processes do you have running in the background?
26999 Activity Monitor EJG 1.40 2 16.07 MB 234.41 MB Intel
138 AppleFileServer root 0.00 2 436.00 KB 33.79 MB Intel
456 AppleSpell EJG 0.00 1 1.07 MB 37.77 MB Intel
326 AppleVNCServer EJG 0.00 31 1,004.00 KB 228.70 MB Intel
325 ARDAgent EJG 0.00 6 524.00 KB 210.73 MB Intel
141 ARDHelper root 0.00 1 168.00 KB 26.61 MB Intel
250 ATSServer EJG 0.00 2 4.55 MB 109.79 MB Intel
222 automount root 0.00 5 692.00 KB 29.78 MB Intel
231 automount root 0.00 3 312.00 KB 28.73 MB Intel
94 blued root 0.00 1 196.00 KB 37.10 MB Intel
5217 Calculator DashboardClient EJG 0.00 3 1.46 MB 228.44 MB Intel
332 ClamXavSentry EJG 0.00 2 2.86 MB 227.05 MB Intel
5218 Cocktail DashboardClient EJG 0.00 3 1.83 MB 241.17 MB Intel
68 configd root 0.00 3 628.00 KB 29.33 MB Intel
317 ControlCenter EJG 0.00 2 9.18 MB 392.45 MB PowerPC
69 coreaudiod root 0.00 1 960.00 KB 31.48 MB Intel
152 coreservicesd root 0.00 3 4.60 MB 76.98 MB Intel
110 crashreporterd root 0.00 1 68.00 KB 27.12 MB Intel
67 cron root 0.00 1 244.00 KB 26.88 MB Intel
155 cupsd root 0.10 2 1.64 MB 27.87 MB Intel
23047 DCP-8045D EJG 0.30 2 4.40 MB 256.20 MB Intel
5213 Dictionary DashboardClient EJG 0.00 3 3.78 MB 254.24 MB Intel
81 DirectoryService root 0.00 3 1.65 MB 30.27 MB Intel
70 diskarbitrationd root 0.00 1 940.00 KB 27.15 MB Intel
77 distnoted root 0.00 1 936.00 KB 27.03 MB Intel
275 Dock EJG 0.00 2 4.33 MB 242.39 MB Intel
26 dynamic_pager root 0.00 1 76.00 KB 26.63 MB Intel
331 ExpanderDaemon EJG 0.00 2 2.18 MB 212.95 MB Intel
5221 FamilyBot DashboardClient EJG 0.00 4 5.24 MB 234.47 MB Intel
291 Finder EJG 0.00 7 22.03 MB 345.12 MB Intel
2440 GimmeSomeTune EJG 0.00 5 9.16 MB 367.91 MB Intel
26195 grep EJG 0.00 1 324.00 KB 26.81 MB Intel
5220 GuitarChords DashboardClient EJG 0.00 5 1.72 MB 254.53 MB Intel
330 iCalAlarmScheduler EJG 0.00 1 1,012.00 KB 220.61 MB Intel
344 Image Capture Extension EJG 0.00 2 1.18 MB 221.12 MB Intel
5216 iStat pro DashboardClient EJG 0.00 4 3.65 MB 239.18 MB Intel
25038 iTunes EJG 0.10 7 34.32 MB 307.19 MB Intel
1638 iTunes Helper EJG 0.00 2 856.00 KB 214.41 MB Intel
0 kernel_task root 0.90 50 229.60 MB 2.02 GB Intel
62 KernelEventAgent root 0.00 2 180.00 KB 27.20 MB Intel
30 kextd root 0.00 2 84.00 KB 31.02 MB Intel
1 launchd root 0.00 3 472.00 KB 27.69 MB Intel
6707 LetterRip_Server EJG 13.10 115 37.82 MB 525.28 MB PowerPC
136 llipd root 0.00 1 836.00 KB 127.44 MB Intel
290 LOGINserver EJG 0.00 1 3.73 MB 284.75 MB PowerPC
252 loginwindow EJG 0.00 5 2.68 MB 237.26 MB Intel
334 Logitech Control Center Daemon EJG 0.00 3 1.92 MB 228.17 MB Intel
25674 lookupd root 0.00 2 7.71 MB 34.67 MB Intel
10386 MacaroniTool root 0.00 2 956.00 KB 38.79 MB Intel
8558 MacSword EJG 0.00 15 20.37 MB 1.08 GB Intel
28109 Mail EJG 0.00 11 67.77 MB 448.34 MB Intel
26930 mdimport nobody 0.00 3 3.21 MB 71.53 MB Intel
26966 mdimport EJG 0.00 4 4.06 MB 72.93 MB Intel
63 mDNSResponder root 0.00 2 824.00 KB 27.39 MB Intel
185 mds root 0.10 8 9.45 MB 949.69 MB Intel
71 memberd root 0.00 4 460.00 KB 28.16 MB Intel
26190 NeoOffice EJG 0.50 19 263.46 MB 1.61 GB Intel
64 netinfod root 0.00 1 596.00 KB 26.93 MB Intel
309 NETserver EJG 0.00 2 3.92 MB 287.42 MB PowerPC
210 nfsiod root 0.00 5 60.00 KB 28.63 MB Intel
340 nmbd root 0.00 1 672.00 KB 27.73 MB Intel
74 notifyd root 0.00 2 416.00 KB 27.21 MB Intel
196 ntpd root 0.00 1 248.00 KB 27.09 MB Intel
265 pbs EJG 0.00 2 512.00 KB 55.03 MB Intel
15359 perl webstar 0.00 1 176.00 KB 26.68 MB Intel
27001 pmTool root 1.70 1 2.02 MB 36.51 MB Intel
9466 Preview EJG 0.00 3 23.00 MB 260.81 MB Intel
19236 processon root 0.00 3 2.45 MB 101.63 MB PowerPC
308 ProcessServer webstar 0.00 2 240.00 KB 98.35 MB PowerPC
233 pvsnatd root 0.00 3 644.00 KB 29.15 MB Intel
5212 R-U-ON DashboardClient EJG 0.00 4 6.68 MB 244.96 MB Intel
5219 Reverse Lookup DashboardClient EJG 0.00 3 2.02 MB 239.89 MB Intel
219 rpc.lockd root 0.00 1 64.00 KB 26.67 MB Intel
4227 Safari EJG 8.00 14 316.07 MB 1.78 GB Intel
72 securityd root 0.00 1 992.00 KB 28.58 MB Intel
19125 serveron root 0.00 3 1.85 MB 101.58 MB PowerPC
5214 Sing that iTune! DashboardClient EJG 0.00 4 7.32 MB 244.39 MB Intel
25694 slpd root 0.00 6 616.00 KB 30.18 MB Intel
21037 SMARTReporter EJG 0.00 4 4.80 MB 330.11 MB Intel
28205 Sound Studio EJG 102.20 11 95.96 MB 1.16 GB PowerPC
65 syslogd root 0.00 1 292.00 KB 26.65 MB Intel
328 System Events EJG 0.00 1 2.83 MB 229.06 MB Intel
11704 SystemUIServer EJG 0.00 3 5.51 MB 285.62 MB Intel
5215 Translation DashboardClient EJG 0.00 3 1.81 MB 240.65 MB Intel
305 TWAINBridge EJG 0.00 3 5.61 MB 312.04 MB PowerPC
324 UniversalAccessApp EJG 0.00 1 2.06 MB 221.63 MB Intel
80 update root 0.00 1 452.00 KB 26.61 MB Intel
1657 usbmuxd nobody 0.00 2 176.00 KB 26.98 MB Intel
301 USBserver EJG 0.00 2 3.99 MB 291.87 MB PowerPC
5222 Weather DashboardClient EJG 0.00 4 5.97 MB 235.12 MB Intel
98 WindowServer windowserver 0.70 3 235.70 MB 624.53 MB Intel
260 WSAdminServer root 0.20 29 1.48 MB 268.80 MB PowerPC
150 WSAdminServer root 0.00 2 368.00 KB 124.78 MB PowerPC
307 WSCGIServer webstar 0.00 2 1.20 MB 100.39 MB PowerPC
261 WSWebServer webstar 1.50 106 11.39 MB 731.48 MB PowerPC
Any ideas? -
Repeating Console.log Entry?
The following occurs regularly in my console.log, and I'm wondering if anyone can point me to what might be causeing it:
Exception caught in COTTCPListener::HandleAccept(), calling OTSndDisconnect
It seems like something is trying to call an Open Transport routine to shut something down, but I don't have a clue what it would be.
This is on a 17" Intel iMac under 10.4.9
17" Intel iMac, iBook G4, eMac, PB 1400, Power Curve 120, etc. Mac OS X (10.4.9)Thanks.
While Google didn't directly help, as I read various posts I realized checking "receive faxes on this computer" in System Preferences>Print & Fax panel was creating the repetitive message. Unchecking it stopped the message in the System Log.
Aloha from Big Island. -
Understanding the Console Log Entries
I am trying to decipher which USER_PROCESS stands for a logon. So when a user logs into the machine it is USER_PROCESS: # Console.
I just don't know which number it is. 44? 47? other?
Any help is very much appreciated.It won't tell you much, but I think you'll get a +Login Window Started Security Agent+ message from a new loginwindow process. But it won't tell you which user logged-on.
If you're trying to monitor a particular account's usage, there's probably an app for that; I don't think you'll get much from the normal logs.
You might be able to write an Applescript or Automator to put in that user's Login items, that would update a file somewhere.
I haven't used +Parental Controls,+ but something there might do what you want.
You might find something in the +Account and Login+ section of the +Snow Leopard+ forum, either by browsing or searching.
If nobody responds to this thread for a while, you might want to repost with a title asking specifically how to do whatever it is. -
Microsoft Word generates excessive console log entries
Since upgrading to MS Word 14.3.0 yesterday my console is filled with entries such as:
31/1-13 9:49:53.645 AM Microsoft Word[2569]: Menu: 0x7ec5b050 Item: 12 Info:
31/1-13 9:49:53.645 AM Microsoft Word[2569]: Text: Paste Cells
31/1-13 9:49:53.645 AM Microsoft Word[2569]: Mark: <none>
31/1-13 9:49:53.645 AM Microsoft Word[2569]: Cmd Key: C (0x43)
31/1-13 9:49:53.645 AM Microsoft Word[2569]: Icon: <none>
31/1-13 9:49:53.645 AM Microsoft Word[2569]: Style Normal
31/1-13 9:49:53.646 AM Microsoft Word[2569]: Command ID: 22 (0x00000016)
31/1-13 9:49:53.646 AM Microsoft Word[2569]: Modifiers: 0x0E
31/1-13 9:49:53.646 AM Microsoft Word[2569]: Icon Type: 0, Icon Handle: 0x0
31/1-13 9:49:53.646 AM Microsoft Word[2569]: Text Encoding: 4294967294 (0xFFFFFFFE)
31/1-13 9:49:53.646 AM Microsoft Word[2569]: Hierarchical ID: 0 (0x0000)
31/1-13 9:49:53.646 AM Microsoft Word[2569]: Font: 0 Lucida Grande
31/1-13 9:49:53.646 AM Microsoft Word[2569]: RefCon: 0 (0x0)
31/1-13 9:49:53.646 AM Microsoft Word[2569]: Key Glyph: 0 (0x0000)
31/1-13 9:49:53.647 AM Microsoft Word[2569]: Enabled?: Yes
31/1-13 9:49:53.647 AM Microsoft Word[2569]: Icon Enabled?: Yes
31/1-13 9:49:53.647 AM Microsoft Word[2569]: Menu: 0x7ec5b050 Item: 12 Info:
31/1-13 9:49:53.647 AM Microsoft Word[2569]: Text: Paste Cells
31/1-13 9:49:53.647 AM Microsoft Word[2569]: Mark: <none>
31/1-13 9:49:53.647 AM Microsoft Word[2569]: Cmd Key: C (0x43)
31/1-13 9:49:53.647 AM Microsoft Word[2569]: Icon: <none>
31/1-13 9:49:53.647 AM Microsoft Word[2569]: Style Normal
31/1-13 9:49:53.648 AM Microsoft Word[2569]: Command ID: 22 (0x00000016)
31/1-13 9:49:53.648 AM Microsoft Word[2569]: Modifiers: 0x0E
31/1-13 9:49:53.648 AM Microsoft Word[2569]: Icon Type: 0, Icon Handle: 0x0
Am I the only one?
Microsoft's support site does not provide any clues.
Any thoughts?
PeterHi Peter, Dear all:
My console shows about 100 of the following messages per minute
2013-01-31 2:05:59.871 PM Microsoft Word[4332]: bind_window_backing: cannot map backing data shmem
2013-01-31 2:05:59.871 PM Microsoft Word[4332]: _CGSLockWindow: Unable to lock window
Besides that and since I upgraded to 14.3.0 two days ago, MS Word has crashed on me about 30 times (editing a plain simple text only document with track changes) and I've tons of problems with Word's GUI. I have submitted a couple feedback messages describing the problems to MS.
Realizing this is not the perfect place for this topic note that I have not found any statements from MS re problems with 14.3.0 yet and this is the first discussion I am aware of that recognizes a potential issue with the recent upgrade. My intent is merely to generate some momentum, so please contact MS if you do have problems with 14.3.0 - thanks! -
Console log entry: unable to verify code signing identity
Hi,
I can't recall if I encountered these issue earlier but today when I opened console I noticed these messages popping up while launching iWork apps simultaneously. It's the old problems that plugged me even before I did clean reinstall of my OS: when launching these apps I don't see windows opened or see only some of them. Just dock indicators. I have to hit the icons again to invoke the windows.
Here's the full entry:
tccd: unable to verify code signing identity of com.apple.iWork.pages
tccd: unable to verify code signing identity of com.apple.iWork.numbers
tccd: unable to verify the code signing identity of com.apple.iWork.keynote
Any ideas what is it all about?
I often run secure empty trash if it's of any value to mention.
Kindest regards,
I.S.Hi,
I can't recall if I encountered these issue earlier but today when I opened console I noticed these messages popping up while launching iWork apps simultaneously. It's the old problems that plugged me even before I did clean reinstall of my OS: when launching these apps I don't see windows opened or see only some of them. Just dock indicators. I have to hit the icons again to invoke the windows.
Here's the full entry:
tccd: unable to verify code signing identity of com.apple.iWork.pages
tccd: unable to verify code signing identity of com.apple.iWork.numbers
tccd: unable to verify the code signing identity of com.apple.iWork.keynote
Any ideas what is it all about?
I often run secure empty trash if it's of any value to mention.
Kindest regards,
I.S. -
Apparent inconsistency in Console Log reporting of modem activity
I have a MAC Pro using (in this case) 10.4.11. It has an internal "on hold modem."
When I connect to the internet, the Console Log consistently and reliably adds this item:
"Dec 23 00:13:42 jpnoaks-7500 /System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/InternalModemSu pport.kext/Contents/Resources/AppleModemOnHold.app/Contents/MacOS/AppleModemOnHo ld: MOHServiceAddedProc >>\n"
HOWEVER, if I'm already connected and there's an incoming call, SOMETIMES an identical item is added in the Console Log and SOMETIMES nothing is added. The "on hold" features of the modem otherwise appear to behave normally.
Is there a ready explanation for this inconsistent behavior? It happens even when successive incoming calls are from the same phone and when an incoming call is from a phone that has never before called (although I'm not entirely certain about the latter).
Obviously, I'm trying to track modem activity using the Console Log.
TIAI'm still not absolutely certain about this, but it would appear that there's no Console Log entry added if the incoming call is from a phone
number that called in recently. How recently? -- I don't know.
One way I can see that this would be normal behavior would be if the computer keeps a record of incoming phone numbers and doesn't
report any event involving that number in the Console Log until the record is refreshed, which could be every hour, day, or whatever.
Is it possible the computer is keeping a record of incoming phone numbers? -
Strange Entries in System and Console Logs
I have some strange entries in my system and console logs. In the system log, I regularly see these entries:
Feb 24 21:07:29 joseph-youngs-computer /System/Library/PrivateFrameworks/Apple80211.framework/Resources/airport: Error: owner of process not logged in on console - exiting.
Feb 24 21:20:32 joseph-youngs-computer kernel[0]: (82: coreservicesd)tfp: failed on 0:
In my console log, I regularly find these entries:
2006-02-25 09:23:24 -0600
2006-02-24 21:07:30.530 loginwindow[803] FSResolveAliasWithMountFlags returned err = -43
On occasion, I find something like this in my console log:
Assert failed: /Users/dave/dev/flash/player/FlashPlayer/platform/mac/plugins/../../../core/spl ay.cpp:7105
I admit to being something of a novice with the Mac, so I am not sure what to make of these entries, though I never noticed anything like this on my eMac, or on my prior iMac. Also, on the entry above, there are no users named dave on my Mac.
Has anyone else noticed this, and can anyone shed any light on what these messages mean?Resolved with a clean install.
-
SUDO is causing entries in the console log. A Virus?
Hello,
I was looking through my OSX installation and I found this mysterious file placed in my Application Support Folder in my library:
username/library/application support/7103555
It is named "7103555" and it is a Unix Executable File (according to "Get Info")
I am worried it might be a virus. I don't recall putting it there. The only time I used terminal so far was to open a Profile Manager for Mozilla Thunderbird. I see that it mentions PrinterNotification and I do recall installing an HP printer driver. Is that where it might have come from. Is this normal? May I delete it? Should I reset something back in console? I am not sure what to do here.
Should I be concerned?
Thank you for any advice.
This is what it looks like when I open it:
cd /System/Library/SystemConfiguration/PrinterNotifications.bundle/Contents/MacOS
# SUDO is causing entries in the console log making me believe
# that it's not getting run correctly. I am removing SUDO from the
# command lines.
#sudo ./makequeues -u
#sudo ./makequeues -r
./makequeues -u;./makequeues -r&
exit 0Mulder,
<<sarcasm mode on>>
You got me there: I can't even spot a simple shell script and figure out what it does and why. Nor could I explain it in plain 'Merican English to poor ol' rainforest. Nope, I must have absolutely no idea what I'm talking about.
<<sarcasm mode off>>
HINT: This is well within my area of expertise.
To quote one of your compadres, who "borrowed" it from answers.com:
"computer virus n. A computer program that is designed to replicate itself by copying itself into the other programs stored in a computer. It may be benign or have a negative effect, such as causing a program to operate incorrectly or corrupting a computer's memory."
A little further on in the same page:
"Virus
Software used to infect a computer. After the virus code is written, it is buried within an existing program. Once that program is executed, the virus code is activated and attaches copies of itself to other programs in the system. Infected programs copy the virus to other programs."
and
"Viruses Must Be Run to Do Damage
A virus is not inserted into data. It is a self-contained program or code that attaches itself to an existing application in a manner that causes it to be executed when the application is run."
On to Leap-A, from the description in Macworld (edited for brevity and clarity):
"...[W]hen you try to launch the newly-infected application, an apparent bug ... in the code prevents it [the application] from launching. But, ... a lot just happened:
A Spotlight search for the most-recently-used user-owned applications is run, and ... up to four of those programs at a time are infected...
The above process will repeat each time you try to launch an infected application."
The process described above fully conforms to the definition. Therefore, your, uh, "1337" assertion is wrong: Leap-A IS a virus.
-Wayne
PS I'll even make a more radical assertion: The first OS X viruses were written in 1983 by Fred Cohen. My source? Professor Cohen (after all, he invented the computer virus), who told me, "the first viruses written for the original experiments run on current Mac OSX systems without even a recompilation." -
Wierd applet entry in my Console log. What is it?
I found this entry in my Console log, does anyone know what this is? Is this spyware?
Sun Nov 09 08:28:04 EST 2008 JEP creating applet reportcard2.ReportCard (http://i.cmpnet.com/nc/java/)
Interactive Report Card version 2.0, written by Mike Lee.
I Googled cmpnet.com and here is what I found:
CMP Technology is a marketing solutions company serving the technology industry.
If this is spyware, how do I get rid of it?
TIAHmmm, is QWest your ISP perchance?
whois query for 66.77.24.10...
Results returned from whois.arin.net:
Qwest Communications Corporation QWEST-INET-12 (NET-66-77-0-0-1)
66.77.0.0 - 66.77.255.255
CMP Media LLC QWEST-IAD-CMPMEDIA (NET-66-77-24-0-1)
66.77.24.0 - 66.77.27.255 -
Error messages in Console Log of Apple System Profiler
Today, I manually executed some CRON scripts from the Terminal window as part of a regular maintenance cycle. Before doing so, I ran the Apple System Profiler (OS 10.2.8), clicked on the Logs tab, and checked the Console Log. It had three days of error messages and other info (more on this later), but my intent was just to check the last entries in the log before running the CRON scripts, so that I could detect any additional errors logged as a result of the CRON scripts.
Having checked the log, I quit the Profiler and all other applications. Then I opened the Terminal window and entered:
sudo periodic monthly
I was prompted for my adminstrator password, and it then executed the script. It took just seconds to execute. Following this, I also executed
sudo periodic weekly
sudo periodic daily
The weekly CRON took about 2 minutes to finish, and the daily only a few seconds. I ran Apple System Profiler again and checked the console log and found this additional error message (not present prior to running the scripts):
Feb 15 13:43:10 Drake-Bradleys-Computer sendmail[865]: NOQUEUE:
SYSERR(root): /etc/mail/sendmail.cf: line 93: fileclass: cannot open '/
etc/mail/local-host-names': Group writable directory
(I have inserted hard returns to break the single-line error message into three lines to avoid requiring readers to use the horizontal scroll bar.)
Can anyone tell me what this error means, and what, if anything, I should do about it?
Following all of this, I next repaired my permissions with Disk Utility (and yes, after dragging iTunes 6.0.2 to the desktop). I then ran the profiler, checked the log, and encountered these two additional error messages:
file not in an order that can be processed (local relocation entries out
of place): ./Library/Frameworks/StuffIt.framework/Versions/A/StuffIt
file not in an order that can be processed (local relocation entries out
of place): ./Library/Frameworks/StuffIt.framework/Versions/A/StuffIt
(Again, hard returns are inserted.)
The errors are identical. They presumably were generated by my running disk permissions, as other applications were shut down. It appears the error refers to the Suffit application.
Any ideas what causes these errors?
Finally, a last question. (And thanks for being patient with such a long post.) The console log contains a large number of error messages for each day. This occurs even on days when I have had no apps hang, or any other system problems (power failures, etc.) that I was aware of. Many of the errors seem to involve windows manangement. The most common one is:
Feb 14 17:11:18 Drake-Bradleys-Computer /System/Library/
CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer:
kCGErrorIllegalArgument : CGSGetWindowGeometry: Invalid window
But other examples are:
Feb 14 17:42:21 Drake-Bradleys-Computer WindowServer[194]:
Cannot merge groups (yet) for wid 1877, otherwid 1881
Feb 15 10:34:37 Drake-Bradleys-Computer WindowServer[194]:
Reserved range exhausted. (0xbbf45000 to 0xbc271000 goes out of
bounds)
Feb 15 10:35:03 Drake-Bradleys-Computer WindowServer[194]:
CGXRemoveTrackingArea : Invalid tracking area
Is it fairly common for the console log to be filled with dozens of errors like this on a given day even though the iMac seems to be functioning normally?
Thanks for any advice,
Drake Bradley
P.S. I have a Casio digital camera and an HP printer hooked up to the iMac, and very recently, an Iomega HDD. (The latter was not connected for the tests reported above.)534/2980
Hi Drake,
Yes, it is common, and I wouldn't worry about it.
These "errors" are not about anything wrong. My guess is that it's a developer jargon to indicate that something didn't happen, only because there is no possibility of it happening given your specific settings/system options.
See for example the statements "System woke from sleep" or "System going to sleep" in "error_log"...
We don't know to what extend these "errors" belong to so many unmodified files that used to do something in UNIX 15 years ago, but are now completely useless, harmless and so small they can't affect Mac OS X performance in any way?
Enjoy your Mac!
Axl -
We are seeing hundreds of these errors in our console log file:
mediaserver automount[4510]: Can't mount servername.domain.ooo.oo:/username on /private/Network/Servers/servername.domain.ooo.oo/username: Invalid argument (22)
Historically, users have had their home areas mount normally in the dock (as specified in our MCX settings for the group they are in), but of late we have been seeing only some of them getting mounted; and more than this the server is suffering random kernel panics throughout the week.
Any idea?
PaulHi Paul
That would be the one. Stuff also gets logged in /var/log/system.log.
After a kernel panic you could go into single user command line and just see what got logged perhaps?
tail -30 /var/log/system.log
Shows the last 30 entries. I think this is better than doing the whole log because it would take ages to scroll through it all. You could expand this to the last 50-60 entries. You never know it might log something? For example you may see a shutdown cause error followed by a number -93 or -122. You could review the energy saver settings just to make sure nothing is enabled that should be. Possibly the UPS may want looking at?
Hope this helps, Tony -
Weblogic 8.1 (SP4) configuration for console log
Weblogic version: 8.1 SP4
By default in console (cmd window) log, date and time format is as below.e.g
<Jul 11, 2008 12:22:35 PM IST>
I need to see time in millisecond. Is there any configuration for this?
please help.Assuming the log entries you care about are generated by your application, and not the infrastructure, you're better off adding millisecond detail to your application log messages. If you're using commons-logging, you can tie this to the WL server log implicitly through configuration, or you could use NonCatalogLogger to explicitly log to the WL server log.
-
Power supply related log entries?
(This question was posted all day yesterday, with no replies, in the iMac G5 forum. Perhaps someone here will have some idea what these logs mean in this situation.)
I recently had the PSU and the Logic Board replaced (two tries to get it right) for the sudden shutdown/ defective capacitor issue. Everything, fingers crossed, seems to be functioning properly, at least, so far. But, now that I'm completely paranoid about this issue, I've noticed log entries "AppleSMU -- shutdown cause = 1" or "AppleSMU -- shutdown cause = 2" (at least, not the dreaded = -110) in the log just after bootup. I know these are often related to the PSU issue and, since my shutdowns have been normal, I don't understand why they are appearing or what they mean.Here's the latest log from after an SMU reset. (Rebooted after that and only got the usual "shutdown cause =1.") The message in question is in bold. Should I be thinking of a corrupted cache, or is this a possible indication that the latest PSU is also on the way out? My shutdowns (as well as everything else, +so far+) appear to be normal, but this entry "localhost kernel[0]: AppleSMU -- shutdown cause = -110," is the log I was getting from when the computer was shutting down all the time, which is very strange. Thanks for any help.
Nov 19 23:23:14 Macintosh-3 shutdown[644]: SHUTDOWN_TIME: 1258690994 83525
Nov 19 23:23:14 Macintosh-3 com.apple.loginwindow[27]: Shutdown NOW!
Nov 19 23:23:14 Macintosh-3 com.apple.loginwindow[27]: System shutdown time has arrived^G^G
Nov 19 23:23:14 Macintosh-3 mDNSResponder mDNSResponder-176.3 (Jan 27 2009 14:51:59)[26]: stopping
Nov 19 23:23:14 Macintosh-3 com.apple.SystemStarter[20]: Stopping HP Trap Monitor
Nov 19 23:23:14 Macintosh-3 com.apple.SystemStarter[20]: Stopping HP IO Monitor
Nov 19 23:23:14 Macintosh-3 com.apple.usbmuxd[18]: stopping.
Nov 20 06:56:40 localhost kernel[0]: Darwin Kernel Version 9.8.0: Wed Jul 15 16:57:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_PPC
Nov 20 06:56:34 localhost com.apple.launchctl.System[2]: /dev/disk0s3 on / (hfs, local, journaled)
Nov 20 06:56:37 localhost com.apple.launchctl.System[2]: launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
Nov 20 06:56:37 localhost com.apple.launchd[1] (com.apple.usbmuxd): Unknown key for boolean: EnableTransactions
Nov 20 06:56:37 localhost com.apple.launchd[1] (org.cups.cupsd): Unknown key: SHAuthorizationRight
Nov 20 06:56:37 localhost com.apple.launchd[1] (org.ntp.ntpd): Unknown key: SHAuthorizationRight
Nov 20 06:56:37 localhost com.apple.launchd[1] (org.x.privileged_startx): Unknown key for boolean: EnableTransactions
Nov 20 06:56:39 localhost kextd[12]: 428 cached, 0 uncached personalities to catalog
Nov 20 06:56:40 localhost kernel[0]: standard timeslicing quantum is 10000 us
Nov 20 06:56:40 localhost kernel[0]: vmpagebootstrap: 313347 free pages and 14333 wired pages
Nov 20 06:56:40 localhost kernel[0]: migtable_maxdispl = 79
Nov 20 06:56:40 localhost kernel[0]: 103 prelinked modules
Nov 20 06:56:40 localhost kernel[0]: Loading security extension com.apple.security.TMSafetyNet
Nov 20 06:56:40 localhost kernel[0]: calling mpopolicyinit for TMSafetyNet
Nov 20 06:56:40 localhost kernel[0]: Security policy loaded: Safety net for Time Machine (TMSafetyNet)
Nov 20 06:56:40 localhost kernel[0]: Loading security extension com.apple.nke.applicationfirewall
Nov 20 06:56:40 localhost kernel[0]: Loading security extension com.apple.security.seatbelt
Nov 20 06:56:40 localhost kernel[0]: calling mpopolicyinit for mb
Nov 20 06:56:40 localhost kernel[0]: Seatbelt MACF policy initialized
Nov 20 06:56:40 localhost kernel[0]: Security policy loaded: Seatbelt Policy (mb)
Nov 20 06:56:40 localhost kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993
Nov 20 06:56:40 localhost kernel[0]: The Regents of the University of California. All rights reserved.
Nov 20 06:56:40 localhost kernel[0]: MAC Framework successfully initialized
Nov 20 06:56:40 localhost kernel[0]: using 6553 buffer headers and 4096 cluster IO buffer headers
Nov 20 06:56:40 localhost kernel[0]: AirPort_Brcm43xx::probe: 02956680, 0
Nov 20 06:56:40 localhost kernel[0]: AppleKauaiATA shasta-ata features enabled
Nov 20 06:56:40 localhost kernel[0]: DART enabled
Nov 20 06:56:40 localhost kernel[0]: FireWire (OHCI) Apple ID 52 PCI now active, GUID 001124fffe343a86; max speed s400.
Nov 20 06:56:40 localhost kernel[0]: mbinit: done
Nov 20 06:56:40 localhost kernel[0]: Security auditing service present
Nov 20 06:56:40 localhost kernel[0]: BSM auditing present
Nov 20 06:56:40 localhost kernel[0]: rooting via boot-uuid from /chosen: 06DF991F-E8CC-32A4-B78C-1791214651DE
Nov 20 06:56:40 localhost kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
*Nov 20 06:56:40 localhost kernel[0]: AppleSMU -- shutdown cause = -110*
Nov 20 06:56:40 localhost kernel[0]: wl0: Broadcom BCM4320 802.11 Wireless Controller
Nov 20 06:56:40 localhost kernel[0]: 4.170.25.8.2Got boot device = IOService:/MacRISC4PE/ht@0,f2000000/AppleMacRiscHT/pci@3/IOPCI2PCIBridge/k2-sat a-root@C/AppleK2SATARoot/k2-sata@0/AppleK2SATA/ATADeviceNub@0/AppleATADiskDriver /IOATABlockStorageDevice/IOBlockStorageDriver/WDC WD800JD-40GBB2 WDC WD800JD-40GBB2/IOApplePartitionScheme/Untitled@3
Nov 20 06:56:40 localhost kernel[0]: BSD root: disk0s3, major 14, minor 2
Nov 20 06:56:40 localhost kernel[0]: AppleSMU::PMU vers = 0x000d004c, SPU vers = 0x15, SDB vers = 0x01,
Nov 20 06:56:40 localhost kernel[0]: Jettisoning kernel linker.
Nov 20 06:56:40 localhost kernel[0]: Resetting IOCatalogue.
Nov 20 06:56:40 localhost kernel[0]: Matching service count = 1
Nov 20 06:56:40 localhost kernel[0]: Matching service count = 3
Nov 20 06:56:40: --- last message repeated 4 times ---
Nov 20 06:56:40 localhost kernel[0]: Matching service count = 4
Nov 20 06:56:40 localhost kernel[0]: NVDANV30HAL loaded and registered.
Nov 20 06:56:40 localhost kernel[0]: PowerMac8,1: stalling for module
Nov 20 06:56:42 localhost bootlog[40]: BOOT_TIME: 1258718192 0
Nov 20 06:56:42 localhost fseventsd[31]: bumping event counter to: 0x1d08d5e (current 0x0) from log file '0000000001d0337a'
Nov 20 06:56:43 localhost kernel[0]: IPv6 packet filtering initialized, default to accept, logging disabled
Nov 20 06:56:46 localhost kernel[0]: Matching service count = 1
Nov 20 06:56:46 localhost DirectoryService[36]: Launched version 5.7 (v514.25)
Nov 20 06:56:47 localhost kernel[0]: PowerMac81SystemFansCtrlLoop::calculateNewTarget() linkedControl not ready
Nov 20 06:56:47 localhost /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[27]: Login Window Application Started -- Threaded auth
Nov 20 06:56:47 localhost rpc.statd[22]: statd.notify - no notifications needed
Nov 20 06:56:47 localhost kernel[0]: UniNEnet: Ethernet address 00:11:24:34:3a:86
Nov 20 06:56:48 localhost kernel[0]: AirPort_Brcm43xx: Ethernet address 00:0a:95:f4:79:08
Nov 20 06:56:49 localhost iStatLocalDaemon[45]: Waiting for connections on port 5204.
Nov 20 06:56:50 localhost mDNSResponder mDNSResponder-176.3 (Jan 27 2009 14:51:59)[26]: starting
Nov 20 06:56:50 localhost com.apple.usbmuxd[18]: usbmuxd-176 built for iTunesNine on Jul 20 2009 at 13:06:53, running 32 bit
Nov 20 06:56:51 localhost com.paceap.pacesupport[44]: kextload: extension /System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns/PACESupportL eopard.kext is already loaded
Nov 20 06:56:52 localhost /usr/sbin/ocspd[67]: starting
Nov 20 06:56:55 localhost loginwindow[27]: Login Window Started Security Agent
Nov 20 06:56:57 localhost kernel[0]: AirPort: Link Down on en1
Nov 20 06:56:57 localhost kextd[12]: writing kernel link data to /var/run/mach.sym
Nov 20 06:56:58 Macintosh-3 configd[38]: setting hostname to "Macintosh-3.local"
Nov 20 06:56:59 Macintosh-3 kernel[0]: AirPort: Link Up on en1
Nov 20 06:56:59 Macintosh-3 kernel[0]: SetCryptoKey T: len 16, idx 0
Nov 20 06:56:59 Macintosh-3 kernel[0]: SetCryptoKey R: len 32, idx 2
Nov 20 06:57:02 Macintosh-3 com.apple.SystemStarter[20]: PACESupport - launchd already started us
Nov 20 06:57:02 Macintosh-3 com.apple.SystemStarter[20]: Starting HP IO Monitor
Nov 20 06:57:02 Macintosh-3 com.apple.SystemStarter[20]: Starting HP Trap Monitor
Nov 20 06:57:26 Macintosh-3 SecurityAgent[82]: NSExceptionHandler has recorded the following exception:\nNSRangeException -- * -[NSCFArray objectAtIndex:]: index (0) beyond bounds (0)\nStack trace: 0x39dbc 0x9329a4ec 0x92303c00 0x92303c38 0x90448180 0x709c8 0x5bee4 0x6edd8 0x637b4 0x649c4 0x6c678 0x9140c358 0x9140c28c 0x9144dc94 0x9144c0f4 0x914092dc 0x74764 0x913dc680 0x913498d8 0x11e14 0x2db0
Nov 20 06:57:33 Macintosh-3 authorizationhost[81]: MechanismInvoke 0x12d5f0 retainCount 2
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: MechanismInvoke 0x101660 retainCount 1
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: NSSecureTextFieldCell detected a field editor ((null)) that is not a NSTextView subclass designed to work with the cell. Ignoring...
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: NSExceptionHandler has recorded the following exception:\nNSRangeException -- * -[NSCFArray objectAtIndex:]: index (0) beyond bounds (0)\nStack trace: 0x39dbc 0x9329a4ec 0x92303c00 0x92303c38 0x90448180 0x709c8 0x5bee4 0x6edd8 0x637b4 0x68368 0x774a4 0xe068 0x14200 0x13f64 0xdb58 0x9047f8f0 0x9227426c 0x92296634 0x900bbb18 0x900bb93c 0x900bb77c 0x91350248 0x9134fc00 0x913498a0 0x11e14 0x2db0
Nov 20 06:57:34 Macintosh-3 loginwindow[27]: Login Window - Returned from Security Agent
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: MechanismDestroy 0x101660 retainCount 1
Nov 20 06:57:34 Macintosh-3 authorizationhost[81]: MechanismDestroy 0x12d5f0 retainCount 2
Nov 20 06:57:34 Macintosh-3 loginwindow[27]: USER_PROCESS: 27 console
Nov 20 06:57:34 Macintosh-3 com.apple.launchd[1] (com.apple.UserEventAgent-LoginWindow[80]): Exited: Terminated
Nov 20 06:57:34 Macintosh-3 com.apple.launchctl.Aqua[110]: launchctl: Couldn't stat("/etc/machinit_peruser.d"): No such file or directory
Nov 20 06:57:34 Macintosh-3 com.apple.launchd[107] (com.apple.AirPortBaseStationAgent): Unknown key for boolean: EnableTransactions
Nov 20 06:57:34 Macintosh-3 com.apple.launchd[107] (org.x.startx): Unknown key for boolean: EnableTransactions
Nov 20 06:57:35 Macintosh-3 com.apple.launchd[1] (com.apple.aslmanager): Throttling respawn: Will start in 2 seconds
Nov 20 06:57:42 Macintosh-3 /System/Library/CoreServices/coreservicesd[51]: SFLSharePointsEntry::CreateDSRecord: dsCreateRecordAndOpen(.... Public Folder) returned -14135
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: MenuCracker 2.0 (/Library/Application Support/iStat local/extras/MenuCracker.menu)\n See http://sourceforge.net/projects/menucracker\n MenuCracker is now loaded. Ready to accept new menu extras. Ignore the failure message that follows.
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: failed to instantiate and get the principal class of bundle: NSBundle </Library/Application Support/iStat local/extras/MenuCracker.menu> (loaded)
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusCPU".
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusDisks".
Nov 20 06:57:50 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusMemory".
Nov 20 06:57:50 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusNetwork".
Nov 20 06:57:50 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusTemps".
Message was edited by: WZZZ
Maybe you are looking for
-
PC Suite fails to start - 'ConnAPI.DLL was not fou...
I'm running Windows Vista and PC Suite version 7.0.8.2 fails to open up due to the following message: 'This application has failed to start because ConAPI.DLL was not found. Reinstalling the application may fix the problem.'. I have re-installed seve
-
Add an animated gif to a LiveCycle 8.2 form
Can you program an animated gif to be activated upon a given circumstance? Thank you very much. tucson102
-
Hi Experts, I am new to OBIEE11g(as i know 10g), can any one guide me with the docs how to build reports in OBIEE11g?? It will very help ful for me.. Thanks in Advance guys.
-
Fixing permissions problem on Mac OS that impedes start of Adobe applications
See this article for a suggestion for how to deal with a cause of After Effects (and other applications) taking a long time to start on Mac OS: fixing permissions problem on Mac OS that impedes start of Adobe applications This same issue also affects
-
Can we configure ASM instance on all nodes in RAC at the same time?