From cd1334a1839f31e4a7ae50483a5773236217aa5e Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Tue, 6 Jan 2026 00:38:14 +0100 Subject: [PATCH 01/28] small changes to DataBuffer --- src/detectmatelibrary/utils/data_buffer.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/detectmatelibrary/utils/data_buffer.py b/src/detectmatelibrary/utils/data_buffer.py index aaa5d6c..1f0d2a9 100644 --- a/src/detectmatelibrary/utils/data_buffer.py +++ b/src/detectmatelibrary/utils/data_buffer.py @@ -101,8 +101,15 @@ def _process_and_clear(self, buf: deque[Any], clear: bool = True) -> Any: buf.clear() return result + def get_buffer(self) -> deque[Any]: + """Get the current buffer.""" + return self.buffer + def flush(self) -> Any: """Process remaining data_points.""" if self.buffer: clear = self.mode != BufferMode.WINDOW return self._process_and_clear(self.buffer, clear=clear) + + def __repr__(self) -> str: + return f"DataBuffer(mode={self.mode}, capacity={self.size}, current_length={len(self.buffer)})" From 7f3a1303c23f8dff1b62e3b38e0a90d63879bf42 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Tue, 6 Jan 2026 00:40:39 +0100 Subject: [PATCH 02/28] add an RLE list implementation for the persistency + preview helpers for __repr__ --- src/detectmatelibrary/utils/RLE_list.py | 63 +++++++++++++++++++ .../utils/preview_helpers.py | 19 ++++++ 2 files changed, 82 insertions(+) create mode 100644 src/detectmatelibrary/utils/RLE_list.py create mode 100644 src/detectmatelibrary/utils/preview_helpers.py diff --git a/src/detectmatelibrary/utils/RLE_list.py b/src/detectmatelibrary/utils/RLE_list.py new file mode 100644 index 0000000..988fe85 --- /dev/null +++ b/src/detectmatelibrary/utils/RLE_list.py @@ -0,0 +1,63 @@ +# Incremental RLE implementation. +# https://en.wikipedia.org/wiki/Run-length_encoding + +from typing import Generic, Iterable, Iterator, List, Tuple, TypeVar + +from .preview_helpers import list_preview_str + +T = TypeVar("T") + + +class RLEList(Generic[T]): + """List-like container storing data in run-length encoded form.""" + + def __init__(self, data: Iterable[T] | None = None): + self._runs: List[Tuple[T, int]] = [] + self._len: int = 0 + if data is not None: + for x in data: + self.append(x) + + def append(self, x: T) -> None: + if self._runs and self._runs[-1][0] == x: + v, c = self._runs[-1] + self._runs[-1] = (v, c + 1) + else: + self._runs.append((x, 1)) + self._len += 1 + + def extend(self, xs: Iterable[T]) -> None: + for x in xs: + self.append(x) + + def __len__(self) -> int: + return self._len + + def __iter__(self) -> Iterator[T]: + for v, c in self._runs: + for _ in range(c): + yield v + + def runs(self) -> List[Tuple[T, int]]: + """Return the internal RLE representation.""" + return list(self._runs) + + def __repr__(self) -> str: + # convert bool to int + runs_str = list_preview_str(self._runs) + return f"RLEList(len={self._len}, runs={runs_str})" + + +# example usage +if __name__ == "__main__": + r = RLEList[str]() + + r.append("A") + r.append("A") + r.append("B") + r.extend(["B", "B", "C"]) + + print(len(r)) # 6 + print(list(r)) # ['A', 'A', 'B', 'B', 'B', 'C'] + print(r.runs()) # [('A', 2), ('B', 3), ('C', 1)] + print(r) # RLEList(len=6, runs=[('A', 2), ('B', 3), ('C', 1)]) diff --git a/src/detectmatelibrary/utils/preview_helpers.py b/src/detectmatelibrary/utils/preview_helpers.py new file mode 100644 index 0000000..854c7b5 --- /dev/null +++ b/src/detectmatelibrary/utils/preview_helpers.py @@ -0,0 +1,19 @@ +from typing import Any, Dict, List, Set + + +def list_preview_str(listlike: List[Any] | Set[Any], bool_to_int: bool = True) -> list[Any]: + """Show a preview of a listlike sequence.""" + series_start = list(listlike)[:3] + if len(listlike) > 6: + series_end = list(listlike)[-3:] + series_preview = series_start + ["..."] + series_end + else: + series_preview = list(listlike) + if bool_to_int: + series_preview = [int(x) if isinstance(x, bool) else x for x in series_preview] + return series_preview + + +def format_dict_repr(items: Dict[str, Any], indent: str = "\t") -> str: + """Format a dictionary as a multiline string with indentation.""" + return f"\n{indent}".join(f"{name}: {value}" for name, value in items.items()) From c33f8eb5c9f57bc0a9153c70bc910be86d31f595 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Tue, 6 Jan 2026 00:49:16 +0100 Subject: [PATCH 03/28] create initial version of persistency class --- config/pipeline_config_default.yaml | 3 - pyproject.toml | 2 + .../persistency/event_data_structures/base.py | 19 +++ .../event_data_structures/dataframes.py | 117 +++++++++++++++++ .../event_data_structures/trackers.py | 120 ++++++++++++++++++ .../common/persistency/event_persistency.py | 76 +++++++++++ .../utils/preview_helpers.py | 4 +- uv.lock | 30 +++++ 8 files changed, 366 insertions(+), 5 deletions(-) create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/base.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers.py create mode 100644 src/detectmatelibrary/common/persistency/event_persistency.py diff --git a/config/pipeline_config_default.yaml b/config/pipeline_config_default.yaml index 1ce2c62..3a89431 100644 --- a/config/pipeline_config_default.yaml +++ b/config/pipeline_config_default.yaml @@ -97,11 +97,8 @@ detectors: variables: - pos: 0 name: var1 - params: - threshold: 0. header_variables: - pos: level - params: {} NewValueComboDetector_All: method_type: new_value_combo_detector auto_config: False diff --git a/pyproject.toml b/pyproject.toml index 7322744..cdfa7ae 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -6,7 +6,9 @@ readme = "README.md" requires-python = ">=3.12" dependencies = [ "drain3>=0.9.11", + "numpy>=2.3.2", "pandas>=2.3.2", + "polars>=1.36.1", "protobuf>=6.32.1", "pydantic>=2.11.7", "pyyaml>=6.0.3", diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/base.py b/src/detectmatelibrary/common/persistency/event_data_structures/base.py new file mode 100644 index 0000000..2803d85 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/base.py @@ -0,0 +1,19 @@ +from abc import ABC, abstractmethod +from typing import Any, List + + +class EventDataStructure(ABC): + """Storage backend interface for event-based data analysis.""" + + @abstractmethod + def add_data(self, data_object: Any) -> None: ... + + @abstractmethod + def get_data(self) -> Any: ... + + @abstractmethod + def get_variables(self) -> List[str]: ... + + @classmethod + @abstractmethod + def to_data(cls, raw_data: Any) -> Any: ... diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py new file mode 100644 index 0000000..f998de7 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py @@ -0,0 +1,117 @@ +from typing import Any, Dict, List, Optional +from dataclasses import dataclass, field + +import pandas as pd +import polars as pl + +from .base import EventDataStructure + + +# -------- Pandas backend -------- + +@dataclass +class EventDataFrame(EventDataStructure): + """ + Pandas DataFrame backend: + - Ingest appends data (expensive) + - Retention is not handled (can be extended) + - DataFrame is always materialized + """ + + def __init__(self) -> None: + self.data: pd.DataFrame = pd.DataFrame() + + def add_data(self, data: pd.DataFrame) -> None: + if len(self.data) > 0: + self.data = pd.concat([self.data, data], ignore_index=True) + else: + self.data = data + + def get_data(self) -> pd.DataFrame: + return self.data + + def get_variables(self) -> List[str]: + return list(self.data.columns) + + @staticmethod + def to_data(raw_data: Dict[int | str, Any]) -> pd.DataFrame: + return pd.DataFrame(raw_data) + + def __repr__(self) -> str: + return f"EventDataFrame(df=..., rows={len(self.data)}, variables={self.get_variables()})" + + +# -------- Polars backends -------- +@dataclass +class ChunkedEventDataFrame(EventDataStructure): + """ + Streaming-friendly Polars DataFrame backend: + - Ingest appends chunks (cheap) + - Retention by max_rows is handled internally + - DataFrame is materialized on demand + """ + max_rows: Optional[int] = 10_000_000 + compact_every: int = 1000 + + chunks: list[pl.DataFrame] = field(default_factory=list) + _rows: int = 0 + + def add_data(self, data: pl.DataFrame) -> None: + if data.height == 0: + return + self.chunks.append(data) + self._rows += data.height + + if self.max_rows is not None: + self._evict_oldest() + + if len(self.chunks) > self.compact_every: + self._compact() + + def _evict_oldest(self) -> None: + if self.max_rows is not None: + overflow = self._rows - self.max_rows + if overflow <= 0: + return + + # drop whole chunks + while self.chunks and overflow >= self.chunks[0].height: + oldest = self.chunks.pop(0) + overflow -= oldest.height + self._rows -= oldest.height + + # trim remaining overflow from the oldest chunk + if overflow > 0 and self.chunks: + oldest = self.chunks[0] + keep = oldest.height - overflow + self.chunks[0] = oldest.tail(keep) + self._rows -= overflow + + def _compact(self) -> None: + if not self.chunks: + return + df = pl.concat(self.chunks, how="vertical", rechunk=False) + self.chunks = [df] + self._rows = df.height + + def get_data(self) -> pl.DataFrame: + if not self.chunks: + return pl.DataFrame() + if len(self.chunks) == 1: + return self.chunks[0] + return pl.concat(self.chunks, how="vertical", rechunk=False) + + def get_variables(self) -> Any: + if not self.chunks: + return [] + return self.chunks[0].columns + + @staticmethod + def to_data(raw_data: Dict[str, List[Any]]) -> pl.DataFrame: + return pl.DataFrame(raw_data) + + def __repr__(self) -> str: + return ( + f"ChunkedEventDataFrame(rows={self._rows}, chunks={len(self.chunks)}, " + f"variables={self.get_variables()})" + ) diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py new file mode 100644 index 0000000..f5f2f49 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py @@ -0,0 +1,120 @@ +# from src.detectmatelibrary.utils.data_buffer import DataBuffer, ArgsBuffer, BufferMode +from abc import ABC, abstractmethod +from typing import Any, Dict, Set, Type + +from detectmatelibrary.utils.RLE_list import RLEList +from detectmatelibrary.utils.preview_helpers import list_preview_str, format_dict_repr + +from .base import EventDataStructure + + +class BaseTracker(ABC): + @abstractmethod + def extract_feature(self, value: Any) -> Any: ... + + @abstractmethod + def add_value(self, value: Any) -> None: ... + + @abstractmethod + def classify(self) -> Any: ... + + +class ConvergenceTracker(BaseTracker): + """Tracks whether a variable is converging to a constant value.""" + + def __init__(self, min_samples: int = 3) -> None: + self.min_samples = min_samples + self.series: RLEList[bool] = RLEList() + self.value_set: Set[Any] = set() + + def extract_feature(self, value: Any) -> bool: + """Extracts a feature from the value to track. + + Simply tracks whether the value is new (not seen before). + """ + return True if value not in self.value_set else False + + def add_value(self, value: Any) -> None: + """Add a new value to the tracker.""" + self.series.append(self.extract_feature(value)) + self.value_set.add(value) + + def classify(self) -> str: + """Classify the variable as 'constant', 'random', or 'between'.""" + if len(self.series) < self.min_samples: + return "not_enough_data" + elif len(self.value_set) == 1: + return "static" + elif len(self.value_set) == len(self.series): + return "random" + # elif XY: + # return "stable" + else: + return "unstable" + + def __repr__(self) -> str: + # show only part of the series for brevity + series_str = list_preview_str(self.series) + value_set_str = "{" + ", ".join(map(str, list_preview_str(self.value_set))) + "}" + RLE_str = list_preview_str(self.series.runs()) + return ( + f"ConvergenceTracker(classification={self.classify()}, series={series_str}, " + f"value_set={value_set_str}, RLE={RLE_str})" + ) + + +class VariableTrackers: + """Tracks multiple variables using individual trackers.""" + + def __init__(self, tracker_type: Type[BaseTracker] = ConvergenceTracker) -> None: + self.trackers: Dict[str, BaseTracker] = {} + self.tracker_type: Type[BaseTracker] = tracker_type + + def add_data(self, data_object: Dict[str, Any]) -> None: + """Add data to the appropriate variable trackers.""" + for var_name, value in data_object.items(): + if var_name not in self.trackers: + self.trackers[var_name] = self.tracker_type() + self.trackers[var_name].add_value(value) + + def get_trackers(self) -> Dict[str, BaseTracker]: + """Get the current variable trackers.""" + return self.trackers + + def classify(self) -> Dict[str, Any]: + """Classify all tracked variables.""" + classifications = {} + for var_name, tracker in self.trackers.items(): + classifications[var_name] = tracker.classify() + return classifications + + def __repr__(self) -> str: + strs = format_dict_repr(self.trackers, indent="\t") + return f"VariableTrackers{{\n\t{strs}\n}}\n" + + +class EventVariableTracker(EventDataStructure): + """Event data structure that tracks variable behaviors over time (or event + series).""" + + def __init__(self) -> None: + self.variable_trackers = VariableTrackers() + self.current_data = None + + def add_data(self, data_object: Any) -> None: + """Add data to the variable trackers.""" + self.variable_trackers.add_data(data_object) + + def get_data(self) -> Any: + return self.variable_trackers.get_trackers() + + def get_variables(self) -> list[str]: + return list(self.variable_trackers.get_trackers().keys()) + + @staticmethod + def to_data(raw_data: Dict[str, Any]) -> Dict[str, Any]: + return raw_data + + def __repr__(self) -> str: + strs = format_dict_repr(self.variable_trackers.get_trackers(), indent="\t") + return f"EventVariableTracker(data={{\n\t{strs}\n}}" diff --git a/src/detectmatelibrary/common/persistency/event_persistency.py b/src/detectmatelibrary/common/persistency/event_persistency.py new file mode 100644 index 0000000..d96ec46 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_persistency.py @@ -0,0 +1,76 @@ +from typing import Any, Dict, Optional, Type + +from .event_data_structures.base import EventDataStructure + + +# -------- Generic persistency -------- + +class EventPersistency: + """ + Event-based persistency orchestrator: + - manages multiple EventDataStructure instances, one per event ID + - doesn't know retention strategy + - only delegates to EventDataStructure + """ + + def __init__( + self, + event_data_class: Type[EventDataStructure], + variable_blacklist: Optional[set[str | int]] = None, + *, + event_data_kwargs: Optional[dict[str, Any]] = None, + ): + self.events_data: Dict[int, EventDataStructure] = {} + self.event_data_class = event_data_class + self.event_data_kwargs = event_data_kwargs or {} + self.variable_blacklist = variable_blacklist or set() + + def ingest_event( + self, + event_id: int, + variables: list[Any], + log_format_variables: Dict[str, Any], + ) -> None: + """Ingest event data into the appropriate EventData store.""" + all_variables = self.get_all_variables(variables, log_format_variables, self.variable_blacklist) + data = self.event_data_class.to_data(all_variables) + + data_structure = self.events_data.get(event_id) + if data_structure is None: + data_structure = self.event_data_class(**self.event_data_kwargs) + self.events_data[event_id] = data_structure + + data_structure.add_data(data) + + def get_event_data(self, event_id: int) -> Any | None: + """Retrieve the data for a specific event ID.""" + data_structure = self.events_data.get(event_id) + return data_structure.get_data() if data_structure is not None else None + + @staticmethod + def get_all_variables( + variables: list[Any], + log_format_variables: Dict[str, Any], + variable_blacklist: set[str | int], + event_var_prefix: str = "var_", + ) -> dict[str, list[Any]]: + """Combine log format variables and event variables into a single + dictionary. + + Schema-friendly by using string column names. + """ + all_vars: dict[str, list[Any]] = { + k: v for k, v in log_format_variables.items() + if k not in variable_blacklist + } + all_vars.update({ + f"{event_var_prefix}{i}": val for i, val in enumerate(variables) + if i not in variable_blacklist + }) + return all_vars + + def __getitem__(self, event_id: int) -> EventDataStructure | None: + return self.events_data.get(event_id) + + def __repr__(self) -> str: + return f"EventPersistency(num_event_types={len(self.events_data)})" diff --git a/src/detectmatelibrary/utils/preview_helpers.py b/src/detectmatelibrary/utils/preview_helpers.py index 854c7b5..278f031 100644 --- a/src/detectmatelibrary/utils/preview_helpers.py +++ b/src/detectmatelibrary/utils/preview_helpers.py @@ -1,7 +1,7 @@ -from typing import Any, Dict, List, Set +from typing import Any, Dict -def list_preview_str(listlike: List[Any] | Set[Any], bool_to_int: bool = True) -> list[Any]: +def list_preview_str(listlike: Any, bool_to_int: bool = True) -> list[Any]: """Show a preview of a listlike sequence.""" series_start = list(listlike)[:3] if len(listlike) > 6: diff --git a/uv.lock b/uv.lock index 4d7cd6f..cfa7df7 100644 --- a/uv.lock +++ b/uv.lock @@ -109,7 +109,9 @@ version = "0.1.0" source = { editable = "." } dependencies = [ { name = "drain3" }, + { name = "numpy" }, { name = "pandas" }, + { name = "polars" }, { name = "protobuf" }, { name = "pydantic" }, { name = "pyyaml" }, @@ -126,7 +128,9 @@ dev = [ [package.metadata] requires-dist = [ { name = "drain3", specifier = ">=0.9.11" }, + { name = "numpy", specifier = ">=2.3.2" }, { name = "pandas", specifier = ">=2.3.2" }, + { name = "polars", specifier = ">=1.36.1" }, { name = "prek", marker = "extra == 'dev'", specifier = ">=0.2.8" }, { name = "protobuf", specifier = ">=6.32.1" }, { name = "pydantic", specifier = ">=2.11.7" }, @@ -280,6 +284,32 @@ wheels = [ { url = "https://files.pythonhosted.org/packages/54/20/4d324d65cc6d9205fabedc306948156824eb9f0ee1633355a8f7ec5c66bf/pluggy-1.6.0-py3-none-any.whl", hash = "sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746", size = 20538, upload-time = "2025-05-15T12:30:06.134Z" }, ] +[[package]] +name = "polars" +version = "1.36.1" +source = { registry = "https://pypi.org/simple" } +dependencies = [ + { name = "polars-runtime-32" }, +] +sdist = { url = "https://files.pythonhosted.org/packages/9f/dc/56f2a90c79a2cb13f9e956eab6385effe54216ae7a2068b3a6406bae4345/polars-1.36.1.tar.gz", hash = "sha256:12c7616a2305559144711ab73eaa18814f7aa898c522e7645014b68f1432d54c", size = 711993, upload-time = "2025-12-10T01:14:53.033Z" } +wheels = [ + { url = "https://files.pythonhosted.org/packages/f6/c6/36a1b874036b49893ecae0ac44a2f63d1a76e6212631a5b2f50a86e0e8af/polars-1.36.1-py3-none-any.whl", hash = "sha256:853c1bbb237add6a5f6d133c15094a9b727d66dd6a4eb91dbb07cdb056b2b8ef", size = 802429, upload-time = "2025-12-10T01:13:53.838Z" }, +] + +[[package]] +name = "polars-runtime-32" +version = "1.36.1" +source = { registry = "https://pypi.org/simple" } +sdist = { url = "https://files.pythonhosted.org/packages/31/df/597c0ef5eb8d761a16d72327846599b57c5d40d7f9e74306fc154aba8c37/polars_runtime_32-1.36.1.tar.gz", hash = "sha256:201c2cfd80ceb5d5cd7b63085b5fd08d6ae6554f922bcb941035e39638528a09", size = 2788751, upload-time = "2025-12-10T01:14:54.172Z" } +wheels = [ + { url = "https://files.pythonhosted.org/packages/e1/ea/871129a2d296966c0925b078a9a93c6c5e7facb1c5eebfcd3d5811aeddc1/polars_runtime_32-1.36.1-cp39-abi3-macosx_10_12_x86_64.whl", hash = "sha256:327b621ca82594f277751f7e23d4b939ebd1be18d54b4cdf7a2f8406cecc18b2", size = 43494311, upload-time = "2025-12-10T01:13:56.096Z" }, + { url = "https://files.pythonhosted.org/packages/d8/76/0038210ad1e526ce5bb2933b13760d6b986b3045eccc1338e661bd656f77/polars_runtime_32-1.36.1-cp39-abi3-macosx_11_0_arm64.whl", hash = "sha256:ab0d1f23084afee2b97de8c37aa3e02ec3569749ae39571bd89e7a8b11ae9e83", size = 39300602, upload-time = "2025-12-10T01:13:59.366Z" }, + { url = "https://files.pythonhosted.org/packages/54/1e/2707bee75a780a953a77a2c59829ee90ef55708f02fc4add761c579bf76e/polars_runtime_32-1.36.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:899b9ad2e47ceb31eb157f27a09dbc2047efbf4969a923a6b1ba7f0412c3e64c", size = 44511780, upload-time = "2025-12-10T01:14:02.285Z" }, + { url = "https://files.pythonhosted.org/packages/11/b2/3fede95feee441be64b4bcb32444679a8fbb7a453a10251583053f6efe52/polars_runtime_32-1.36.1-cp39-abi3-manylinux_2_24_aarch64.whl", hash = "sha256:d9d077bb9df711bc635a86540df48242bb91975b353e53ef261c6fae6cb0948f", size = 40688448, upload-time = "2025-12-10T01:14:05.131Z" }, + { url = "https://files.pythonhosted.org/packages/05/0f/e629713a72999939b7b4bfdbf030a32794db588b04fdf3dc977dd8ea6c53/polars_runtime_32-1.36.1-cp39-abi3-win_amd64.whl", hash = "sha256:cc17101f28c9a169ff8b5b8d4977a3683cd403621841623825525f440b564cf0", size = 44464898, upload-time = "2025-12-10T01:14:08.296Z" }, + { url = "https://files.pythonhosted.org/packages/d1/d8/a12e6aa14f63784cead437083319ec7cece0d5bb9a5bfe7678cc6578b52a/polars_runtime_32-1.36.1-cp39-abi3-win_arm64.whl", hash = "sha256:809e73857be71250141225ddd5d2b30c97e6340aeaa0d445f930e01bef6888dc", size = 39798896, upload-time = "2025-12-10T01:14:11.568Z" }, +] + [[package]] name = "prek" version = "0.2.10" From 3d0bfe3e01ec2a58b3aaed8da7193ea2f6825dd6 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Wed, 7 Jan 2026 15:30:46 +0100 Subject: [PATCH 04/28] add a classifier for stability to the persistency --- .../common/persistency/__init__.py | 5 + .../event_data_structures/trackers.py | 198 +++++++++++++----- .../common/persistency/event_persistency.py | 13 +- src/detectmatelibrary/utils/LRU_set.py | 68 ++++++ src/detectmatelibrary/utils/RLE_list.py | 24 +-- 5 files changed, 245 insertions(+), 63 deletions(-) create mode 100644 src/detectmatelibrary/common/persistency/__init__.py create mode 100644 src/detectmatelibrary/utils/LRU_set.py diff --git a/src/detectmatelibrary/common/persistency/__init__.py b/src/detectmatelibrary/common/persistency/__init__.py new file mode 100644 index 0000000..5ea37cd --- /dev/null +++ b/src/detectmatelibrary/common/persistency/__init__.py @@ -0,0 +1,5 @@ +from .event_persistency import EventPersistency + +__all__ = [ + "EventPersistency" +] diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py index f5f2f49..c185df1 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py @@ -1,74 +1,175 @@ +# A tracker is a data structure that stores a specific feature of a variable +# and tracks the behavior of that feature over time/events. +# It operates within the persistency framework to monitor how variables evolve. +# It is interchangable with other EventDataStructure implementations. + # from src.detectmatelibrary.utils.data_buffer import DataBuffer, ArgsBuffer, BufferMode -from abc import ABC, abstractmethod -from typing import Any, Dict, Set, Type +from typing import Any, Dict, Set, Type, List +from dataclasses import dataclass +import numpy as np -from detectmatelibrary.utils.RLE_list import RLEList from detectmatelibrary.utils.preview_helpers import list_preview_str, format_dict_repr +from detectmatelibrary.utils.RLE_list import RLEList from .base import EventDataStructure -class BaseTracker(ABC): - @abstractmethod - def extract_feature(self, value: Any) -> Any: ... +class StabilityClassifier: + """Classifier for stability based on segment means.""" + def __init__(self, segment_thresholds: List[float], min_samples: int = 10): + self.segment_threshs = segment_thresholds + self.min_samples = min_samples + # for RLELists + self.segment_sums = [0.0] * len(segment_thresholds) + self.segment_counts = [0] * len(segment_thresholds) + self.n_segments = len(self.segment_threshs) + # for lists + self.segment_means: List[float] = [] + + def is_stable(self, change_series: RLEList[bool] | List[bool]) -> bool: + """Determine if a list of segment means is stable. + + Works efficiently with RLEList without expanding to a full list. + """ + # Handle both RLEList and regular list + if isinstance(change_series, RLEList): + total_len = len(change_series) + if total_len == 0: + return True + + # Calculate segment boundaries + segment_size = total_len / self.n_segments + segment_boundaries = [int(i * segment_size) for i in range(self.n_segments + 1)] + segment_boundaries[-1] = total_len + + # Compute segment means directly from RLE runs + segment_sums = [0.0] * self.n_segments + segment_counts = [0] * self.n_segments + + position = 0 + for value, count in change_series.runs(): + run_start = position + run_end = position + count + + # Find which segments this run overlaps with + for seg_idx in range(self.n_segments): + seg_start = segment_boundaries[seg_idx] + seg_end = segment_boundaries[seg_idx + 1] + + # Calculate overlap between run and segment + overlap_start = max(run_start, seg_start) + overlap_end = min(run_end, seg_end) + overlap_count = max(0, overlap_end - overlap_start) + + if overlap_count > 0: + segment_sums[seg_idx] += value * overlap_count + segment_counts[seg_idx] += overlap_count + + position = run_end + + # Calculate means + self.segment_means = [ + segment_sums[i] / segment_counts[i] if segment_counts[i] > 0 else np.nan + for i in range(self.n_segments) + ] + else: + # Original implementation for regular lists + self.segment_means = self._compute_segment_means(change_series) + return all([not q >= thresh for q, thresh in zip(self.segment_means, self.segment_threshs)]) + + def _compute_segment_means(self, change_series: List[bool]) -> List[float]: + """Get means of each segment for a normal list.""" + segments = np.array_split(change_series, self.n_segments) + return list(map(lambda x: np.mean(x) if len(x) > 0 else np.nan, segments)) + + def get_last_segment_means(self) -> List[float]: + return self.segment_means - @abstractmethod - def add_value(self, value: Any) -> None: ... + def get_segment_thresholds(self) -> List[float]: + return self.segment_threshs - @abstractmethod - def classify(self) -> Any: ... + def __call__(self, change_series: RLEList[bool] | List[bool]) -> bool: + return self.is_stable(change_series) + def __repr__(self) -> str: + return ( + f"StabilityClassifier(segment_threshs={self.segment_threshs}, " + f"segment_means={self.segment_means})" + ) + + +@dataclass +class Classification: + type: str = "" + reason: str = "" -class ConvergenceTracker(BaseTracker): + +class StabilityTracker: """Tracks whether a variable is converging to a constant value.""" def __init__(self, min_samples: int = 3) -> None: self.min_samples = min_samples - self.series: RLEList[bool] = RLEList() - self.value_set: Set[Any] = set() - - def extract_feature(self, value: Any) -> bool: - """Extracts a feature from the value to track. - - Simply tracks whether the value is new (not seen before). - """ - return True if value not in self.value_set else False + self.change_series: RLEList[bool] = RLEList() + self.unique_set: Set[Any] = set() + self.stability_classifier: StabilityClassifier = StabilityClassifier( + segment_thresholds=[1.1, 0.3, 0.1, 0.01], + ) def add_value(self, value: Any) -> None: """Add a new value to the tracker.""" - self.series.append(self.extract_feature(value)) - self.value_set.add(value) - - def classify(self) -> str: - """Classify the variable as 'constant', 'random', or 'between'.""" - if len(self.series) < self.min_samples: - return "not_enough_data" - elif len(self.value_set) == 1: - return "static" - elif len(self.value_set) == len(self.series): - return "random" - # elif XY: - # return "stable" + unique_set_size_before = len(self.unique_set) + self.unique_set.add(value) + has_changed = len(self.unique_set) - unique_set_size_before > 0 + self.change_series.append(has_changed) + + def classify(self) -> Classification: + """Classify the variable.""" + if len(self.change_series) < self.min_samples: + return Classification( + type="INSUFFICIENT_DATA", + reason=f"Not enough data (have {len(self.change_series)}, need {self.min_samples})" + ) + elif len(self.unique_set) == 1: + return Classification( + type="STATIC", + reason="Unique set size is 1" + ) + elif len(self.unique_set) == len(self.change_series): + return Classification( + type="RANDOM", + reason=f"Unique set size equals number of samples ({len(self.change_series)})" + ) + elif self.stability_classifier.is_stable(self.change_series): + return Classification( + type="STABLE", + reason=( + f"Segment means of change series {self.stability_classifier.get_last_segment_means()} " + f"are below segment thresholds: {self.stability_classifier.get_segment_thresholds()}" + ) + ) else: - return "unstable" + return Classification( + type="UNSTABLE", + reason="No classification matched; variable is unstable" + ) def __repr__(self) -> str: # show only part of the series for brevity - series_str = list_preview_str(self.series) - value_set_str = "{" + ", ".join(map(str, list_preview_str(self.value_set))) + "}" - RLE_str = list_preview_str(self.series.runs()) + series_str = list_preview_str(self.change_series) + unique_set_str = "{" + ", ".join(map(str, list_preview_str(self.unique_set))) + "}" + RLE_str = list_preview_str(self.change_series.runs()) return ( - f"ConvergenceTracker(classification={self.classify()}, series={series_str}, " - f"value_set={value_set_str}, RLE={RLE_str})" + f"StabilityTracker(classification={self.classify()}, series={series_str}, " + f"unique_set={unique_set_str}, RLE={RLE_str})" ) class VariableTrackers: """Tracks multiple variables using individual trackers.""" - def __init__(self, tracker_type: Type[BaseTracker] = ConvergenceTracker) -> None: - self.trackers: Dict[str, BaseTracker] = {} - self.tracker_type: Type[BaseTracker] = tracker_type + def __init__(self, tracker_type: Type[StabilityTracker] = StabilityTracker) -> None: + self.trackers: Dict[str, StabilityTracker] = {} + self.tracker_type: Type[StabilityTracker] = tracker_type def add_data(self, data_object: Dict[str, Any]) -> None: """Add data to the appropriate variable trackers.""" @@ -77,7 +178,7 @@ def add_data(self, data_object: Dict[str, Any]) -> None: self.trackers[var_name] = self.tracker_type() self.trackers[var_name].add_value(value) - def get_trackers(self) -> Dict[str, BaseTracker]: + def get_trackers(self) -> Dict[str, StabilityTracker]: """Get the current variable trackers.""" return self.trackers @@ -94,11 +195,11 @@ def __repr__(self) -> str: class EventVariableTracker(EventDataStructure): - """Event data structure that tracks variable behaviors over time (or event - series).""" + """Event data structure that tracks variable behaviors over time (or rather + events).""" - def __init__(self) -> None: - self.variable_trackers = VariableTrackers() + def __init__(self, tracker_type: Type[StabilityTracker] = StabilityTracker) -> None: + self.variable_trackers = VariableTrackers(tracker_type=tracker_type) self.current_data = None def add_data(self, data_object: Any) -> None: @@ -106,13 +207,16 @@ def add_data(self, data_object: Any) -> None: self.variable_trackers.add_data(data_object) def get_data(self) -> Any: + """Retrieve the tracker's stored data.""" return self.variable_trackers.get_trackers() def get_variables(self) -> list[str]: + """Get the list of tracked variable names.""" return list(self.variable_trackers.get_trackers().keys()) @staticmethod def to_data(raw_data: Dict[str, Any]) -> Dict[str, Any]: + """Transform raw data into the format expected by the tracker.""" return raw_data def __repr__(self) -> str: diff --git a/src/detectmatelibrary/common/persistency/event_persistency.py b/src/detectmatelibrary/common/persistency/event_persistency.py index d96ec46..379d88b 100644 --- a/src/detectmatelibrary/common/persistency/event_persistency.py +++ b/src/detectmatelibrary/common/persistency/event_persistency.py @@ -1,4 +1,4 @@ -from typing import Any, Dict, Optional, Type +from typing import Any, Dict, List, Optional, Type from .event_data_structures.base import EventDataStructure @@ -11,19 +11,24 @@ class EventPersistency: - manages multiple EventDataStructure instances, one per event ID - doesn't know retention strategy - only delegates to EventDataStructure + + Args: + event_data_class: The EventDataStructure subclass to use for storing event data. + variable_blacklist: Variable names to exclude from storage. "Content" is excluded by default. + event_data_kwargs: Additional keyword arguments to pass to the EventDataStructure constructor. """ def __init__( self, event_data_class: Type[EventDataStructure], - variable_blacklist: Optional[set[str | int]] = None, + variable_blacklist: Optional[List[str | int]] = ["Content"], *, event_data_kwargs: Optional[dict[str, Any]] = None, ): self.events_data: Dict[int, EventDataStructure] = {} self.event_data_class = event_data_class self.event_data_kwargs = event_data_kwargs or {} - self.variable_blacklist = variable_blacklist or set() + self.variable_blacklist = variable_blacklist or [] def ingest_event( self, @@ -51,7 +56,7 @@ def get_event_data(self, event_id: int) -> Any | None: def get_all_variables( variables: list[Any], log_format_variables: Dict[str, Any], - variable_blacklist: set[str | int], + variable_blacklist: List[str | int], event_var_prefix: str = "var_", ) -> dict[str, list[Any]]: """Combine log format variables and event variables into a single diff --git a/src/detectmatelibrary/utils/LRU_set.py b/src/detectmatelibrary/utils/LRU_set.py new file mode 100644 index 0000000..5d00df9 --- /dev/null +++ b/src/detectmatelibrary/utils/LRU_set.py @@ -0,0 +1,68 @@ +from collections import OrderedDict +from collections.abc import Iterator +from typing import List + +from .preview_helpers import list_preview_str + + +class LRUSet: + """LRU = Least Recently Used. + + A set with a maximum size that evicts the least-recently-used items + when full. + """ + + def __init__(self, max_size: int): + if max_size <= 0: + raise ValueError("max_size must be > 0") + self.max_size = max_size + self._d: OrderedDict[object, None] = OrderedDict() + + def add(self, item: object) -> None: + # Touch -> mark as most-recent + if item in self._d: + self._d.move_to_end(item) + return + + self._d[item] = None + if len(self._d) > self.max_size: + self._d.popitem(last=False) # evict LRU + + def touch(self, item: object) -> bool: + """Mark item as most-recent if present. + + Returns True if present. + """ + if item in self._d: + self._d.move_to_end(item) + return True + return False + + def discard(self, item: object) -> None: + self._d.pop(item, None) + + def __contains__(self, item: object) -> bool: + return item in self._d + + def __len__(self) -> int: + return len(self._d) + + def __iter__(self) -> Iterator[object]: + return iter(self._d) + + def items_lru_to_mru(self) -> List[object]: + return list(self._d.keys()) + + def __repr__(self) -> str: + return f"LRUSet({list_preview_str(self._d.keys())})" + + +# example usage: + +# lru = LRUSet(max_size=3) +# lru.add("a") +# lru.add("b") +# lru.add("c") +# print(lru) # LRUSet(['a', 'b', 'c']) +# lru.add("d") +# print(lru) # LRUSet(['b', 'c', 'd']) diff --git a/src/detectmatelibrary/utils/RLE_list.py b/src/detectmatelibrary/utils/RLE_list.py index 988fe85..8009433 100644 --- a/src/detectmatelibrary/utils/RLE_list.py +++ b/src/detectmatelibrary/utils/RLE_list.py @@ -49,15 +49,15 @@ def __repr__(self) -> str: # example usage -if __name__ == "__main__": - r = RLEList[str]() - - r.append("A") - r.append("A") - r.append("B") - r.extend(["B", "B", "C"]) - - print(len(r)) # 6 - print(list(r)) # ['A', 'A', 'B', 'B', 'B', 'C'] - print(r.runs()) # [('A', 2), ('B', 3), ('C', 1)] - print(r) # RLEList(len=6, runs=[('A', 2), ('B', 3), ('C', 1)]) + +# r = RLEList[str]() + +# r.append("A") +# r.append("A") +# r.append("B") +# r.extend(["B", "B", "C"]) + +# print(len(r)) # 6 +# print(list(r)) # ['A', 'A', 'B', 'B', 'B', 'C'] +# print(r.runs()) # [('A', 2), ('B', 3), ('C', 1)] +# print(r) # RLEList(len=6, runs=[('A', 2), ('B', 3), ('C', 1)]) From 8dfdea846fa0bf6844bf58e84dec5c510c74c480 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Thu, 8 Jan 2026 17:13:02 +0100 Subject: [PATCH 05/28] minor change --- .../common/persistency/event_data_structures/trackers.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py index c185df1..d46fa6e 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py @@ -159,7 +159,7 @@ def __repr__(self) -> str: unique_set_str = "{" + ", ".join(map(str, list_preview_str(self.unique_set))) + "}" RLE_str = list_preview_str(self.change_series.runs()) return ( - f"StabilityTracker(classification={self.classify()}, series={series_str}, " + f"StabilityTracker(classification={self.classify()}, change_series={series_str}, " f"unique_set={unique_set_str}, RLE={RLE_str})" ) From a0399eceb9fe68d3ab67d0ddb48f263119aaf299 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Fri, 9 Jan 2026 13:29:53 +0100 Subject: [PATCH 06/28] turn data structures into dataclasses --- .../persistency/event_data_structures/base.py | 15 ++++++++++- .../event_data_structures/dataframes.py | 4 +-- .../event_data_structures/trackers.py | 27 ++++++++++++++----- .../common/persistency/event_persistency.py | 20 +++++++++++++- 4 files changed, 55 insertions(+), 11 deletions(-) diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/base.py b/src/detectmatelibrary/common/persistency/event_data_structures/base.py index 2803d85..86ac25e 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/base.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/base.py @@ -1,10 +1,15 @@ from abc import ABC, abstractmethod from typing import Any, List +from dataclasses import dataclass +@dataclass class EventDataStructure(ABC): """Storage backend interface for event-based data analysis.""" + event_id: int = -1 + template: str = "" + @abstractmethod def add_data(self, data_object: Any) -> None: ... @@ -16,4 +21,12 @@ def get_variables(self) -> List[str]: ... @classmethod @abstractmethod - def to_data(cls, raw_data: Any) -> Any: ... + def to_data(cls, raw_data: Any) -> Any: + """Convert raw data into the appropriate data format for storage.""" + pass + + def get_template(self) -> str: + return self.template + + def get_event_id(self) -> int: + return self.event_id diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py index f998de7..a1d0955 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py @@ -17,9 +17,7 @@ class EventDataFrame(EventDataStructure): - Retention is not handled (can be extended) - DataFrame is always materialized """ - - def __init__(self) -> None: - self.data: pd.DataFrame = pd.DataFrame() + data: pd.DataFrame = field(default_factory=pd.DataFrame) def add_data(self, data: pd.DataFrame) -> None: if len(self.data) > 0: diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py index d46fa6e..1514cc4 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py @@ -5,7 +5,7 @@ # from src.detectmatelibrary.utils.data_buffer import DataBuffer, ArgsBuffer, BufferMode from typing import Any, Dict, Set, Type, List -from dataclasses import dataclass +from dataclasses import dataclass, field import numpy as np from detectmatelibrary.utils.preview_helpers import list_preview_str, format_dict_repr @@ -189,18 +189,29 @@ def classify(self) -> Dict[str, Any]: classifications[var_name] = tracker.classify() return classifications + def get_stable_variables(self) -> List[str]: + """Get a list of variable names that are classified as stable.""" + stable_vars = [] + for var_name, tracker in self.trackers.items(): + classification = tracker.classify() + if classification.type == "STABLE": + stable_vars.append(var_name) + return stable_vars + def __repr__(self) -> str: strs = format_dict_repr(self.trackers, indent="\t") return f"VariableTrackers{{\n\t{strs}\n}}\n" +@dataclass class EventVariableTracker(EventDataStructure): - """Event data structure that tracks variable behaviors over time (or rather - events).""" + """Event data structure that tracks variable behaviors over time/events.""" - def __init__(self, tracker_type: Type[StabilityTracker] = StabilityTracker) -> None: - self.variable_trackers = VariableTrackers(tracker_type=tracker_type) - self.current_data = None + tracker_type: Type[StabilityTracker] = StabilityTracker + variable_trackers: VariableTrackers = field(init=False) + + def __post_init__(self) -> None: + self.variable_trackers = VariableTrackers(tracker_type=self.tracker_type) def add_data(self, data_object: Any) -> None: """Add data to the variable trackers.""" @@ -214,6 +225,10 @@ def get_variables(self) -> list[str]: """Get the list of tracked variable names.""" return list(self.variable_trackers.get_trackers().keys()) + def get_stable_variables(self) -> List[str]: + """Get a list of variable names that are classified as stable.""" + return self.variable_trackers.get_stable_variables() + @staticmethod def to_data(raw_data: Dict[str, Any]) -> Dict[str, Any]: """Transform raw data into the format expected by the tracker.""" diff --git a/src/detectmatelibrary/common/persistency/event_persistency.py b/src/detectmatelibrary/common/persistency/event_persistency.py index 379d88b..ace9f0d 100644 --- a/src/detectmatelibrary/common/persistency/event_persistency.py +++ b/src/detectmatelibrary/common/persistency/event_persistency.py @@ -29,14 +29,17 @@ def __init__( self.event_data_class = event_data_class self.event_data_kwargs = event_data_kwargs or {} self.variable_blacklist = variable_blacklist or [] + self.event_templates: Dict[int, str] = {} def ingest_event( self, event_id: int, + event_template: str, variables: list[Any], log_format_variables: Dict[str, Any], ) -> None: """Ingest event data into the appropriate EventData store.""" + self.event_templates[event_id] = event_template all_variables = self.get_all_variables(variables, log_format_variables, self.variable_blacklist) data = self.event_data_class.to_data(all_variables) @@ -52,6 +55,18 @@ def get_event_data(self, event_id: int) -> Any | None: data_structure = self.events_data.get(event_id) return data_structure.get_data() if data_structure is not None else None + def get_events_data(self) -> Any | None: + """Retrieve the events' data.""" + return self.events_data + + def get_event_template(self, event_id: int) -> str | None: + """Retrieve the template for a specific event ID.""" + return self.event_templates.get(event_id) + + def get_event_templates(self) -> Dict[int, str]: + """Retrieve all event templates.""" + return self.event_templates + @staticmethod def get_all_variables( variables: list[Any], @@ -78,4 +93,7 @@ def __getitem__(self, event_id: int) -> EventDataStructure | None: return self.events_data.get(event_id) def __repr__(self) -> str: - return f"EventPersistency(num_event_types={len(self.events_data)})" + return ( + f"EventPersistency(num_event_types={len(self.events_data)}, " + f"keys={list(self.events_data.keys())})" + ) From 907f16567e6b4717d79e44ec198ad844efd39d1d Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Mon, 12 Jan 2026 12:37:36 +0100 Subject: [PATCH 07/28] implement config-engine in combodetector --- .../common/persistency/event_persistency.py | 2 +- .../detectors/new_value_combo_detector.py | 94 ++++++++++++++++++- src/detectmatelibrary/readers/log_file.py | 4 + uv.lock | 30 ++++++ 4 files changed, 128 insertions(+), 2 deletions(-) diff --git a/src/detectmatelibrary/common/persistency/event_persistency.py b/src/detectmatelibrary/common/persistency/event_persistency.py index ace9f0d..3a2362c 100644 --- a/src/detectmatelibrary/common/persistency/event_persistency.py +++ b/src/detectmatelibrary/common/persistency/event_persistency.py @@ -55,7 +55,7 @@ def get_event_data(self, event_id: int) -> Any | None: data_structure = self.events_data.get(event_id) return data_structure.get_data() if data_structure is not None else None - def get_events_data(self) -> Any | None: + def get_events_data(self) -> Dict[int, EventDataStructure]: """Retrieve the events' data.""" return self.events_data diff --git a/src/detectmatelibrary/detectors/new_value_combo_detector.py b/src/detectmatelibrary/detectors/new_value_combo_detector.py index 01b2908..6aaa5fc 100644 --- a/src/detectmatelibrary/detectors/new_value_combo_detector.py +++ b/src/detectmatelibrary/detectors/new_value_combo_detector.py @@ -5,12 +5,68 @@ from detectmatelibrary.utils.data_buffer import BufferMode +from detectmatelibrary.common.persistency.event_data_structures.trackers import ( + EventVariableTracker, StabilityTracker +) +from detectmatelibrary.common.persistency.event_persistency import EventPersistency + import detectmatelibrary.schemas as schemas from itertools import combinations from typing import Any, Set, Dict, cast +from copy import deepcopy +from typing import List, Optional + + +def generate_detector_config( + variable_selection: Dict[int, List[str]], + templates: Dict[Any, str | None], + detector_name: str, + method_type: str, + base_config: Optional[Dict[str, Any]] = None, + max_combo_size: int = 6, +) -> Dict[str, Any]: + + if base_config is None: + base_config = { + "detectors": { + detector_name: { + "method_type": method_type, + "auto_config": False, + "params": { + "log_variables": [] + }, + } + } + } + config = deepcopy(base_config) + + detectors = config.setdefault("detectors", {}) + detector = detectors.setdefault(detector_name, {}) + detector.setdefault("method_type", method_type) + detector.setdefault("auto_config", False) + params = detector.setdefault("params", {}) + params["comb_size"] = max_combo_size + log_variables = params.setdefault("log_variables", []) + + for event_id, all_variables in variable_selection.items(): + variables = [ + {"pos": int(name.split("_")[1]), "name": name} + for name in all_variables if name.startswith("var_") + ] + header_variables = [{"pos": name} for name in all_variables if not name.startswith("var_")] + + log_variables.append({ + "id": f"id_{event_id}", + "event": event_id, + "template": templates.get(event_id, ""), + "variables": variables, + "header_variables": header_variables, + }) + return config + # Auxiliar methods ******************************************************** class ComboTooBigError(Exception): @@ -42,7 +98,7 @@ def _get_combos( return set() relevant_log_fields = relevant_log_fields.get_all().keys() # type: ignore - _check_size(combo_size, len(relevant_log_fields)) # type: ignore + # _check_size(combo_size, len(relevant_log_fields)) # type: ignore return set(combinations([ _get_element(input_, var_pos=field) for field in relevant_log_fields # type: ignore @@ -120,8 +176,18 @@ def __init__( self.config = cast(NewValueComboDetectorConfig, self.config) self.known_combos: Dict[str | int, Set[Any]] = {"all": set()} + self.persistency = EventPersistency( + event_data_class=EventVariableTracker, + event_data_kwargs={"tracker_type": StabilityTracker} + ) def train(self, input_: schemas.ParserSchema) -> None: # type: ignore + # self.persistency.ingest_event( + # event_id=input_["EventID"], + # event_template=input_["template"], + # variables=input_["variables"], + # log_format_variables=input_["logFormatVariables"], + # ) train_combo_detector( input_=input_, known_combos=self.known_combos, @@ -148,3 +214,29 @@ def detect( output_["alertsObtain"].update(alerts) return True return False + + def configure(self, input_: schemas.ParserSchema) -> None: + self.persistency.ingest_event( + event_id=input_["EventID"], + event_template=input_["template"], + variables=input_["variables"], + log_format_variables=input_["logFormatVariables"], + ) + + def set_configuration(self, max_combo_size: int = 6) -> None: + variable_combos = {} + templates = {} + for event_id, tracker in self.persistency.get_events_data().items(): + stable_vars = tracker.get_stable_variables() # type: ignore + if len(stable_vars) > 1: + variable_combos[event_id] = stable_vars + templates[event_id] = self.persistency.get_event_template(event_id) + config_dict = generate_detector_config( + variable_selection=variable_combos, + templates=templates, + detector_name=self.name, + method_type=self.config.method_type, + max_combo_size=max_combo_size + ) + # Update the config object from the dictionary instead of replacing it + self.config = NewValueComboDetectorConfig.from_dict(config_dict, self.name) diff --git a/src/detectmatelibrary/readers/log_file.py b/src/detectmatelibrary/readers/log_file.py index 4d22164..ea55b07 100644 --- a/src/detectmatelibrary/readers/log_file.py +++ b/src/detectmatelibrary/readers/log_file.py @@ -57,3 +57,7 @@ def read(self, output_: schemas.LogSchema) -> bool: output_.log = log return not self.is_over + + def reset(self) -> None: + self.__log_generator = self.read_logs() + self.is_over = False \ No newline at end of file diff --git a/uv.lock b/uv.lock index caf0ecc..c9a83ad 100644 --- a/uv.lock +++ b/uv.lock @@ -110,7 +110,9 @@ source = { editable = "." } dependencies = [ { name = "drain3" }, { name = "kafka-python" }, + { name = "numpy" }, { name = "pandas" }, + { name = "polars" }, { name = "protobuf" }, { name = "pydantic" }, { name = "pyyaml" }, @@ -128,7 +130,9 @@ dev = [ requires-dist = [ { name = "drain3", specifier = ">=0.9.11" }, { name = "kafka-python", specifier = ">=2.3.0" }, + { name = "numpy", specifier = ">=2.3.2" }, { name = "pandas", specifier = ">=2.3.2" }, + { name = "polars", specifier = ">=1.36.1" }, { name = "prek", marker = "extra == 'dev'", specifier = ">=0.2.8" }, { name = "protobuf", specifier = ">=6.32.1" }, { name = "pydantic", specifier = ">=2.11.7" }, @@ -291,6 +295,32 @@ wheels = [ { url = "https://files.pythonhosted.org/packages/54/20/4d324d65cc6d9205fabedc306948156824eb9f0ee1633355a8f7ec5c66bf/pluggy-1.6.0-py3-none-any.whl", hash = "sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746", size = 20538, upload-time = "2025-05-15T12:30:06.134Z" }, ] +[[package]] +name = "polars" +version = "1.36.1" +source = { registry = "https://pypi.org/simple" } +dependencies = [ + { name = "polars-runtime-32" }, +] +sdist = { url = "https://files.pythonhosted.org/packages/9f/dc/56f2a90c79a2cb13f9e956eab6385effe54216ae7a2068b3a6406bae4345/polars-1.36.1.tar.gz", hash = "sha256:12c7616a2305559144711ab73eaa18814f7aa898c522e7645014b68f1432d54c", size = 711993, upload-time = "2025-12-10T01:14:53.033Z" } +wheels = [ + { url = "https://files.pythonhosted.org/packages/f6/c6/36a1b874036b49893ecae0ac44a2f63d1a76e6212631a5b2f50a86e0e8af/polars-1.36.1-py3-none-any.whl", hash = "sha256:853c1bbb237add6a5f6d133c15094a9b727d66dd6a4eb91dbb07cdb056b2b8ef", size = 802429, upload-time = "2025-12-10T01:13:53.838Z" }, +] + +[[package]] +name = "polars-runtime-32" +version = "1.36.1" +source = { registry = "https://pypi.org/simple" } +sdist = { url = "https://files.pythonhosted.org/packages/31/df/597c0ef5eb8d761a16d72327846599b57c5d40d7f9e74306fc154aba8c37/polars_runtime_32-1.36.1.tar.gz", hash = "sha256:201c2cfd80ceb5d5cd7b63085b5fd08d6ae6554f922bcb941035e39638528a09", size = 2788751, upload-time = "2025-12-10T01:14:54.172Z" } +wheels = [ + { url = "https://files.pythonhosted.org/packages/e1/ea/871129a2d296966c0925b078a9a93c6c5e7facb1c5eebfcd3d5811aeddc1/polars_runtime_32-1.36.1-cp39-abi3-macosx_10_12_x86_64.whl", hash = "sha256:327b621ca82594f277751f7e23d4b939ebd1be18d54b4cdf7a2f8406cecc18b2", size = 43494311, upload-time = "2025-12-10T01:13:56.096Z" }, + { url = "https://files.pythonhosted.org/packages/d8/76/0038210ad1e526ce5bb2933b13760d6b986b3045eccc1338e661bd656f77/polars_runtime_32-1.36.1-cp39-abi3-macosx_11_0_arm64.whl", hash = "sha256:ab0d1f23084afee2b97de8c37aa3e02ec3569749ae39571bd89e7a8b11ae9e83", size = 39300602, upload-time = "2025-12-10T01:13:59.366Z" }, + { url = "https://files.pythonhosted.org/packages/54/1e/2707bee75a780a953a77a2c59829ee90ef55708f02fc4add761c579bf76e/polars_runtime_32-1.36.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:899b9ad2e47ceb31eb157f27a09dbc2047efbf4969a923a6b1ba7f0412c3e64c", size = 44511780, upload-time = "2025-12-10T01:14:02.285Z" }, + { url = "https://files.pythonhosted.org/packages/11/b2/3fede95feee441be64b4bcb32444679a8fbb7a453a10251583053f6efe52/polars_runtime_32-1.36.1-cp39-abi3-manylinux_2_24_aarch64.whl", hash = "sha256:d9d077bb9df711bc635a86540df48242bb91975b353e53ef261c6fae6cb0948f", size = 40688448, upload-time = "2025-12-10T01:14:05.131Z" }, + { url = "https://files.pythonhosted.org/packages/05/0f/e629713a72999939b7b4bfdbf030a32794db588b04fdf3dc977dd8ea6c53/polars_runtime_32-1.36.1-cp39-abi3-win_amd64.whl", hash = "sha256:cc17101f28c9a169ff8b5b8d4977a3683cd403621841623825525f440b564cf0", size = 44464898, upload-time = "2025-12-10T01:14:08.296Z" }, + { url = "https://files.pythonhosted.org/packages/d1/d8/a12e6aa14f63784cead437083319ec7cece0d5bb9a5bfe7678cc6578b52a/polars_runtime_32-1.36.1-cp39-abi3-win_arm64.whl", hash = "sha256:809e73857be71250141225ddd5d2b30c97e6340aeaa0d445f930e01bef6888dc", size = 39798896, upload-time = "2025-12-10T01:14:11.568Z" }, +] + [[package]] name = "prek" version = "0.2.10" From a31978d09b3a0a2a49eaae495d3265940a0178eb Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Sun, 18 Jan 2026 15:46:56 +0100 Subject: [PATCH 08/28] minor change in dataframe persistency --- .../common/persistency/event_data_structures/dataframes.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py index a1d0955..b3009a2 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py @@ -33,7 +33,8 @@ def get_variables(self) -> List[str]: @staticmethod def to_data(raw_data: Dict[int | str, Any]) -> pd.DataFrame: - return pd.DataFrame(raw_data) + data = {key: [value] for key, value in raw_data.items()} + return pd.DataFrame(data) def __repr__(self) -> str: return f"EventDataFrame(df=..., rows={len(self.data)}, variables={self.get_variables()})" @@ -110,6 +111,6 @@ def to_data(raw_data: Dict[str, List[Any]]) -> pl.DataFrame: def __repr__(self) -> str: return ( - f"ChunkedEventDataFrame(rows={self._rows}, chunks={len(self.chunks)}, " + f"ChunkedEventDataFrame(df=..., rows={self._rows}, chunks={len(self.chunks)}, " f"variables={self.get_variables()})" ) From 3d5a0cdf0e60c219832646724317201317dd64ef Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Sun, 18 Jan 2026 17:03:42 +0100 Subject: [PATCH 09/28] add tests for persistency class --- tests/test_common/test_persistency.py | 460 ++++++++++++++++ tests/test_common/test_stability_tracking.py | 506 ++++++++++++++++++ .../test_new_value_combo_detector.py | 24 +- 3 files changed, 967 insertions(+), 23 deletions(-) create mode 100644 tests/test_common/test_persistency.py create mode 100644 tests/test_common/test_stability_tracking.py diff --git a/tests/test_common/test_persistency.py b/tests/test_common/test_persistency.py new file mode 100644 index 0000000..38883de --- /dev/null +++ b/tests/test_common/test_persistency.py @@ -0,0 +1,460 @@ +"""Tests for the persistency module core functionality. + +This module tests EventPersistency and data structure backends including +EventDataFrame (Pandas) and ChunkedEventDataFrame (Polars). +""" + + +import pandas as pd +import polars as pl +from detectmatelibrary.common.persistency.event_persistency import EventPersistency +from detectmatelibrary.common.persistency.event_data_structures.dataframes import ( + EventDataFrame, + ChunkedEventDataFrame, +) +from detectmatelibrary.common.persistency.event_data_structures.trackers import ( + EventVariableTracker, + StabilityTracker, +) + + +# Sample test data - variables is a list, not a dict +SAMPLE_EVENT_1 = { + "event_id": "E001", + "event_template": "User <*> logged in from <*>", + "variables": ["alice", "192.168.1.1"], + "log_format_variables": {"timestamp": "2024-01-01 10:00:00"}, +} + +SAMPLE_EVENT_2 = { + "event_id": "E002", + "event_template": "Error in module <*>: <*>", + "variables": ["auth", "timeout"], + "log_format_variables": {"timestamp": "2024-01-01 10:01:00"}, +} + +SAMPLE_EVENT_3 = { + "event_id": "E001", + "event_template": "User <*> logged in from <*>", + "variables": ["bob", "192.168.1.2"], + "log_format_variables": {"timestamp": "2024-01-01 10:02:00"}, +} + + +class TestEventPersistency: + """Test suite for EventPersistency orchestrator class.""" + + def test_initialization_with_pandas_backend(self): + """Test initialization with EventDataFrame backend.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + assert persistency is not None + assert persistency.event_data_class == EventDataFrame + + def test_initialization_with_polars_backend(self): + """Test initialization with ChunkedEventDataFrame backend.""" + persistency = EventPersistency( + event_data_class=ChunkedEventDataFrame, + event_data_kwargs={"max_rows": 100}, + ) + assert persistency is not None + assert persistency.event_data_class == ChunkedEventDataFrame + + def test_initialization_with_tracker_backend(self): + """Test initialization with EventVariableTracker backend.""" + persistency = EventPersistency( + event_data_class=EventVariableTracker, + event_data_kwargs={"tracker_type": StabilityTracker}, + ) + assert persistency is not None + assert persistency.event_data_class == EventVariableTracker + + def test_ingest_single_event(self): + """Test ingesting a single event.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + persistency.ingest_event(**SAMPLE_EVENT_1) + + data = persistency.get_event_data("E001") + assert data is not None + assert len(data) == 1 + assert "var_0" in data.columns # alice + assert "var_1" in data.columns # 192.168.1.1 + assert "timestamp" in data.columns + + def test_ingest_multiple_events_same_id(self): + """Test ingesting multiple events with the same ID.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + persistency.ingest_event(**SAMPLE_EVENT_1) + persistency.ingest_event(**SAMPLE_EVENT_3) + + data = persistency.get_event_data("E001") + assert len(data) == 2 + assert data["var_0"].tolist() == ["alice", "bob"] + + def test_ingest_multiple_events_different_ids(self): + """Test ingesting events with different IDs.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + persistency.ingest_event(**SAMPLE_EVENT_1) + persistency.ingest_event(**SAMPLE_EVENT_2) + + data1 = persistency.get_event_data("E001") + data2 = persistency.get_event_data("E002") + + assert len(data1) == 1 + assert len(data2) == 1 + assert "var_0" in data1.columns + assert "var_0" in data2.columns + + def test_get_all_events_data(self): + """Test retrieving data for all events.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + persistency.ingest_event(**SAMPLE_EVENT_1) + persistency.ingest_event(**SAMPLE_EVENT_2) + + all_data = persistency.get_events_data() + assert "E001" in all_data + assert "E002" in all_data + assert isinstance(all_data["E001"], EventDataFrame) + assert isinstance(all_data["E002"], EventDataFrame) + + def test_template_storage_and_retrieval(self): + """Test template storage and retrieval.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + persistency.ingest_event(**SAMPLE_EVENT_1) + persistency.ingest_event(**SAMPLE_EVENT_2) + + template1 = persistency.get_event_template("E001") + template2 = persistency.get_event_template("E002") + + assert template1 == "User <*> logged in from <*>" + assert template2 == "Error in module <*>: <*>" + + def test_get_all_templates(self): + """Test retrieving all templates.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + persistency.ingest_event(**SAMPLE_EVENT_1) + persistency.ingest_event(**SAMPLE_EVENT_2) + + templates = persistency.get_event_templates() + assert len(templates) == 2 + assert templates["E001"] == "User <*> logged in from <*>" + assert templates["E002"] == "Error in module <*>: <*>" + + def test_variable_blacklist(self): + """Test variable blacklisting functionality.""" + persistency = EventPersistency( + event_data_class=EventDataFrame, + variable_blacklist=[1], # Blacklist index 1 (second variable) + ) + persistency.ingest_event(**SAMPLE_EVENT_1) + + data = persistency.get_event_data("E001") + assert "var_0" in data.columns # First variable should be present + assert "var_1" not in data.columns # Second variable should be blocked + + def test_get_all_variables_static_method(self): + """Test the get_all_variables static method.""" + variables = ["value1", "value2", "value3"] + log_format_variables = {"timestamp": "2024-01-01", "level": "INFO"} + blacklist = [1] # Blacklist index 1 + + combined = EventPersistency.get_all_variables( + variables, log_format_variables, blacklist + ) + + assert "timestamp" in combined + assert "level" in combined + assert "var_0" in combined # First variable + assert "var_1" not in combined # Blacklisted + assert "var_2" in combined # Third variable + + def test_dict_like_access(self): + """Test dictionary-like access via __getitem__.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + persistency.ingest_event(**SAMPLE_EVENT_1) + + data_structure = persistency["E001"] + assert data_structure is not None + assert isinstance(data_structure, EventDataFrame) + + +class TestEventDataFrame: + """Test suite for EventDataFrame (Pandas backend).""" + + def test_initialization(self): + """Test EventDataFrame initialization.""" + edf = EventDataFrame() + assert edf is not None + assert len(edf.data) == 0 # Empty DataFrame + + def test_add_single_data(self): + """Test adding single data entry.""" + edf = EventDataFrame() + data_dict = {"user": "alice", "ip": "192.168.1.1"} + data_df = EventDataFrame.to_data(data_dict) + edf.add_data(data_df) + + assert edf.data is not None + assert len(edf.data) == 1 + assert "user" in edf.data.columns + + def test_add_multiple_data(self): + """Test adding multiple data entries.""" + edf = EventDataFrame() + edf.add_data(EventDataFrame.to_data({"user": "alice", "ip": "192.168.1.1"})) + edf.add_data(EventDataFrame.to_data({"user": "bob", "ip": "192.168.1.2"})) + + assert len(edf.data) == 2 + assert edf.data["user"].tolist() == ["alice", "bob"] + + def test_get_data(self): + """Test retrieving data.""" + edf = EventDataFrame() + edf.add_data(EventDataFrame.to_data({"user": "alice", "ip": "192.168.1.1"})) + + data = edf.get_data() + assert isinstance(data, pd.DataFrame) + assert len(data) == 1 + + def test_get_variable_names(self): + """Test retrieving variable names.""" + edf = EventDataFrame() + edf.add_data(EventDataFrame.to_data({"user": "alice", "ip": "192.168.1.1", "port": "22"})) + + var_names = edf.get_variables() + assert "user" in var_names + assert "ip" in var_names + assert "port" in var_names + + +class TestChunkedEventDataFrame: + """Test suite for ChunkedEventDataFrame (Polars backend).""" + + def test_initialization_default(self): + """Test ChunkedEventDataFrame initialization with defaults.""" + cedf = ChunkedEventDataFrame() + assert cedf is not None + assert cedf.max_rows == 10_000_000 + assert cedf.compact_every == 1000 + + def test_initialization_custom_params(self): + """Test initialization with custom parameters.""" + cedf = ChunkedEventDataFrame(max_rows=500, compact_every=100) + assert cedf.max_rows == 500 + assert cedf.compact_every == 100 + + def test_add_single_data(self): + """Test adding single data entry.""" + cedf = ChunkedEventDataFrame(max_rows=10) + data_dict = {"user": ["alice"], "ip": ["192.168.1.1"]} + data_df = ChunkedEventDataFrame.to_data(data_dict) + cedf.add_data(data_df) + + data = cedf.get_data() + assert data is not None + assert len(data) == 1 + + def test_add_data_triggers_compaction(self): + """Test that adding data beyond compact_every triggers compaction.""" + cedf = ChunkedEventDataFrame(max_rows=10000, compact_every=5) + + # Add 6 entries (should trigger compaction at 5) + for i in range(6): + cedf.add_data(ChunkedEventDataFrame.to_data({"user": [f"user{i}"], "value": [i]})) + + # After compaction, should have 1 chunk + data = cedf.get_data() + assert len(data) == 6 + + def test_chunked_storage(self): + """Test that data is stored in chunks.""" + cedf = ChunkedEventDataFrame(max_rows=5, compact_every=1000) + + # Add more than max_rows + for i in range(8): + cedf.add_data(ChunkedEventDataFrame.to_data({"user": [f"user{i}"], "value": [i]})) + + # Should have evicted oldest to stay within max_rows + data = cedf.get_data() + assert data is not None + assert len(data) <= 5 + + def test_get_variable_names(self): + """Test retrieving variable names from chunks.""" + cedf = ChunkedEventDataFrame() + cedf.add_data( + ChunkedEventDataFrame.to_data({"user": ["alice"], "ip": ["192.168.1.1"], "port": ["22"]}) + ) + + var_names = cedf.get_variables() + assert "user" in var_names + assert "ip" in var_names + assert "port" in var_names + + def test_dict_to_dataframe_conversion(self): + """Test static method to_data.""" + data_dict = {"user": ["alice"], "ip": ["192.168.1.1"]} + df = ChunkedEventDataFrame.to_data(data_dict) + + assert isinstance(df, pl.DataFrame) + assert len(df) == 1 + assert "user" in df.columns + + +class TestEventPersistencyIntegration: + """Integration tests for EventPersistency with different backends.""" + + def test_pandas_backend_full_workflow(self): + """Test complete workflow with Pandas backend.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + + # Ingest multiple events + for i in range(10): + persistency.ingest_event( + event_id=f"E{i % 3}", + event_template=f"Template {i % 3}", + variables=[str(i), str(i * 10)], + log_format_variables={}, + ) + + # Verify all events stored + all_data = persistency.get_events_data() + assert len(all_data) == 3 # 3 unique event IDs + + # Verify correct grouping + assert len(all_data["E0"].get_data()) == 4 # 0, 3, 6, 9 + assert len(all_data["E1"].get_data()) == 3 # 1, 4, 7 + assert len(all_data["E2"].get_data()) == 3 # 2, 5, 8 + + def test_polars_backend_full_workflow(self): + """Test complete workflow with Polars backend.""" + persistency = EventPersistency( + event_data_class=ChunkedEventDataFrame, + event_data_kwargs={"max_rows": 5, "compact_every": 10}, + ) + + # Ingest events + for i in range(10): + persistency.ingest_event( + event_id="E001", + event_template="Test template", + variables=[str(i)], + log_format_variables={}, + ) + + # Verify data retrieval works + data = persistency.get_event_data("E001") + assert data is not None + assert len(data) <= 5 # Should be trimmed to max_rows + + def test_tracker_backend_full_workflow(self): + """Test complete workflow with Tracker backend.""" + persistency = EventPersistency( + event_data_class=EventVariableTracker, + event_data_kwargs={"tracker_type": StabilityTracker}, + ) + + # Ingest events with patterns + for i in range(20): + persistency.ingest_event( + event_id="E001", + event_template="Test template", + variables=["constant", str(i)], + log_format_variables={}, + ) + + # Verify tracker functionality + data_structure = persistency.events_data["E001"] + assert isinstance(data_structure, EventVariableTracker) + + def test_mixed_event_ids_and_templates(self): + """Test handling mixed event IDs and templates.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + + events = [ + ("E001", "Login from <*>", ["192.168.1.1"]), + ("E002", "Error: <*>", ["timeout"]), + ("E001", "Login from <*>", ["192.168.1.2"]), + ("E003", "Logout <*>", ["alice"]), + ("E002", "Error: <*>", ["connection refused"]), + ] + + for event_id, template, variables in events: + persistency.ingest_event( + event_id=event_id, + event_template=template, + variables=variables, + log_format_variables={}, + ) + + # Verify correct storage + all_data = persistency.get_events_data() + assert len(all_data) == 3 + assert len(all_data["E001"].get_data()) == 2 + assert len(all_data["E002"].get_data()) == 2 + assert len(all_data["E003"].get_data()) == 1 + + # Verify templates + templates = persistency.get_event_templates() + assert templates["E001"] == "Login from <*>" + assert templates["E002"] == "Error: <*>" + assert templates["E003"] == "Logout <*>" + + def test_large_scale_ingestion(self): + """Test ingesting a large number of events.""" + persistency = EventPersistency(event_data_class=EventDataFrame) + + num_events = 1000 + for i in range(num_events): + persistency.ingest_event( + event_id=f"E{i % 10}", + event_template=f"Template {i % 10}", + variables=[str(i), str(i * 2)], + log_format_variables={"timestamp": f"2024-01-01 10:{i % 60}:00"}, + ) + + # Verify all data stored + all_data = persistency.get_events_data() + assert len(all_data) == 10 + + # Verify counts + total_rows = sum(len(data_structure.get_data()) for data_structure in all_data.values()) + assert total_rows == num_events + + def test_variable_blacklist_across_backends(self): + """Test variable blacklist works with different backends.""" + # Blacklist log format variables by name and event variables by index + log_blacklist = ["timestamp"] + event_blacklist = [1] # Second event variable + blacklist = log_blacklist + event_blacklist + + # Test with Pandas + p1 = EventPersistency( + event_data_class=EventDataFrame, + variable_blacklist=blacklist, + ) + p1.ingest_event( + event_id="E001", + event_template="Test", + variables=["alice", "1234"], + log_format_variables={"timestamp": "2024-01-01"}, + ) + data1 = p1.get_event_data("E001") + assert "var_0" in data1.columns # First variable + assert "var_1" not in data1.columns # Blacklisted + assert "timestamp" not in data1.columns # Blacklisted + + # Test with Polars + p2 = EventPersistency( + event_data_class=ChunkedEventDataFrame, + variable_blacklist=blacklist, + ) + p2.ingest_event( + event_id="E001", + event_template="Test", + variables=["bob", "5678"], + log_format_variables={"timestamp": "2024-01-02"}, + ) + data2 = p2.get_event_data("E001") + assert "var_0" in data2.columns # First variable + assert "var_1" not in data2.columns # Blacklisted + assert "timestamp" not in data2.columns # Blacklisted diff --git a/tests/test_common/test_stability_tracking.py b/tests/test_common/test_stability_tracking.py new file mode 100644 index 0000000..9d5171a --- /dev/null +++ b/tests/test_common/test_stability_tracking.py @@ -0,0 +1,506 @@ +"""Tests for the stability tracking module. + +This module tests StabilityClassifier, StabilityTracker, +VariableTrackers, and EventVariableTracker for variable convergence and +stability analysis. +""" + +from detectmatelibrary.common.persistency.event_data_structures.trackers import ( + StabilityClassifier, + StabilityTracker, + VariableTrackers, + EventVariableTracker, + Classification, +) +from detectmatelibrary.utils.RLE_list import RLEList + + +class TestStabilityClassifier: + """Test suite for StabilityClassifier.""" + + def test_initialization_default(self): + """Test StabilityClassifier initialization with defaults.""" + classifier = StabilityClassifier(segment_thresholds=[1.1, 0.5, 0.2, 0.1]) + assert classifier.segment_threshs == [1.1, 0.5, 0.2, 0.1] + assert classifier is not None + + def test_initialization_custom_threshold(self): + """Test initialization with custom segment thresholds.""" + classifier = StabilityClassifier(segment_thresholds=[0.8, 0.4, 0.2, 0.05]) + assert classifier.segment_threshs == [0.8, 0.4, 0.2, 0.05] + + def test_is_stable_with_rle_list_stable_pattern(self): + """Test stability detection with RLEList - stable pattern.""" + classifier = StabilityClassifier(segment_thresholds=[1.1, 0.3, 0.1, 0.01]) + + # Create RLEList: 10 True, 5 False, 15 True (stabilizing to True) + rle = RLEList() + for _ in range(10): + rle.append(True) + for _ in range(5): + rle.append(False) + for _ in range(15): + rle.append(True) + + result = classifier.is_stable(rle) + assert isinstance(result, bool) + + def test_is_stable_with_rle_list_unstable_pattern(self): + """Test stability detection with RLEList - unstable pattern.""" + classifier = StabilityClassifier(segment_thresholds=[1.1, 0.3, 0.1, 0.01]) + + # Create alternating pattern + rle = RLEList() + for _ in range(20): + rle.append(True) + rle.append(False) + + result = classifier.is_stable(rle) + assert isinstance(result, bool) + + def test_is_stable_with_regular_list(self): + """Test stability detection with regular list.""" + classifier = StabilityClassifier(segment_thresholds=[1.1, 0.3, 0.1, 0.01]) + + # Stable pattern + stable_list = [1] * 10 + [0] * 5 + [1] * 15 + result = classifier.is_stable(stable_list) + assert isinstance(result, bool) + + def test_different_segment_thresholds(self): + """Test behavior with different segment thresholds.""" + series = [1] * 10 + [0] * 3 + [1] * 15 + + strict = StabilityClassifier(segment_thresholds=[0.5, 0.2, 0.05, 0.01]) + lenient = StabilityClassifier(segment_thresholds=[2.0, 1.0, 0.5, 0.3]) + + result_strict = strict.is_stable(series) + result_lenient = lenient.is_stable(series) + + assert isinstance(result_strict, bool) + assert isinstance(result_lenient, bool) + + +class TestStabilityTracker: + """Test suite for StabilityTracker.""" + + def test_initialization_default(self): + """Test StabilityTracker initialization with defaults.""" + tracker = StabilityTracker() + assert tracker.min_samples == 3 + assert isinstance(tracker.change_series, RLEList) + assert isinstance(tracker.unique_set, set) + + def test_initialization_custom_params(self): + """Test initialization with custom parameters.""" + tracker = StabilityTracker(min_samples=20) + assert tracker.min_samples == 20 + + def test_add_value_single(self): + """Test adding a single value.""" + tracker = StabilityTracker() + tracker.add_value("value1") + + assert len(tracker.unique_set) == 1 + assert len(tracker.change_series) == 1 + + def test_add_value_multiple_same(self): + """Test adding multiple same values.""" + tracker = StabilityTracker() + + for i in range(10): + tracker.add_value("constant") + + assert len(tracker.unique_set) == 1 + assert "constant" in tracker.unique_set + + def test_add_value_multiple_different(self): + """Test adding multiple different values.""" + tracker = StabilityTracker() + + for i in range(10): + tracker.add_value(f"value_{i}") + + assert len(tracker.unique_set) == 10 + + def test_classification_insufficient_data(self): + """Test classification with insufficient data.""" + tracker = StabilityTracker(min_samples=30) + + for i in range(10): # Less than min_samples + tracker.add_value(f"value_{i}") + + result = tracker.classify() + assert result.type == "INSUFFICIENT_DATA" + + def test_classification_static(self): + """Test classification as STATIC (single unique value).""" + tracker = StabilityTracker(min_samples=10) + + for i in range(40): + tracker.add_value("constant") + + result = tracker.classify() + assert result.type == "STATIC" + + def test_classification_random(self): + """Test classification as RANDOM (all unique values).""" + tracker = StabilityTracker(min_samples=10) + + for i in range(40): + tracker.add_value(f"unique_{i}") + + result = tracker.classify() + assert result.type == "RANDOM" + + def test_classification_stable(self): + """Test classification as STABLE (converging pattern).""" + tracker = StabilityTracker(min_samples=10) + + # Pattern: changing values that stabilize + for i in range(15): + tracker.add_value(f"value_{i % 5}") + for i in range(25): + tracker.add_value("stable_value") + + result = tracker.classify() + assert result.type in ["STABLE", "STATIC"] + + def test_classification_unstable(self): + """Test classification as UNSTABLE (no clear pattern).""" + tracker = StabilityTracker(min_samples=10) + + # Alternating pattern + for i in range(40): + tracker.add_value("value_a" if i % 2 == 0 else "value_b") + + result = tracker.classify() + # Could be UNSTABLE or classified differently depending on classifier logic + assert result.type in ["UNSTABLE", "STABLE", "RANDOM"] + + def test_rle_list_integration(self): + """Test that RLEList is used for efficient storage.""" + tracker = StabilityTracker() + + # Add values that create runs + for i in range(20): + tracker.add_value("a") + for i in range(20): + tracker.add_value("b") + + # RLEList should be populated + assert len(tracker.change_series) > 0 + + def test_unique_values_tracking(self): + """Test unique values are tracked in a set.""" + tracker = StabilityTracker() + + values = ["a", "b", "c", "a", "b", "a"] + for v in values: + tracker.add_value(v) + + assert len(tracker.unique_set) == 3 + assert "a" in tracker.unique_set + assert "b" in tracker.unique_set + assert "c" in tracker.unique_set + + def test_change_detection(self): + """Test that add_value correctly detects changes.""" + tracker = StabilityTracker() + + tracker.add_value("a") + tracker.add_value("a") + tracker.add_value("b") + + # First value creates a change (new unique value) + # Second doesn't (same value) + # Third does (new unique value) + assert len(tracker.change_series) == 3 + + +class TestVariableTrackers: + """Test suite for VariableTrackers manager.""" + + def test_initialization_default(self): + """Test VariableTrackers initialization.""" + trackers = VariableTrackers(tracker_type=StabilityTracker) + assert trackers is not None + assert trackers.tracker_type == StabilityTracker + + def test_initialization_with_kwargs(self): + """Test initialization without kwargs - VariableTrackers doesn't store tracker kwargs.""" + trackers = VariableTrackers(tracker_type=StabilityTracker) + assert trackers.tracker_type == StabilityTracker + + def test_add_data_single_variable(self): + """Test adding data for a single variable.""" + trackers = VariableTrackers(tracker_type=StabilityTracker) + data = {"var1": "value1"} + trackers.add_data(data) + + all_trackers = trackers.get_trackers() + assert "var1" in all_trackers + assert isinstance(all_trackers["var1"], StabilityTracker) + + def test_add_data_multiple_variables(self): + """Test adding data for multiple variables.""" + trackers = VariableTrackers(tracker_type=StabilityTracker) + data = {"var1": "value1", "var2": "value2", "var3": "value3"} + trackers.add_data(data) + + all_trackers = trackers.get_trackers() + assert len(all_trackers) == 3 + assert "var1" in all_trackers + assert "var2" in all_trackers + assert "var3" in all_trackers + + def test_add_data_multiple_times(self): + """Test adding data multiple times.""" + trackers = VariableTrackers(tracker_type=StabilityTracker) + + trackers.add_data({"var1": "a", "var2": "x"}) + trackers.add_data({"var1": "b", "var2": "y"}) + trackers.add_data({"var1": "a", "var3": "z"}) + + all_trackers = trackers.get_trackers() + assert len(all_trackers) == 3 + assert "var3" in all_trackers # New variable dynamically added + + def test_classify_all_variables(self): + """Test classifying all variables.""" + trackers = VariableTrackers(tracker_type=StabilityTracker) + + # Add enough data for classification + for i in range(10): + trackers.add_data({"var1": "constant", "var2": f"changing_{i}"}) + + classifications = trackers.classify() + assert "var1" in classifications + assert "var2" in classifications + assert isinstance(classifications["var1"], Classification) + + def test_get_stable_variables(self): + """Test retrieving stable variables.""" + trackers = VariableTrackers(tracker_type=StabilityTracker) + + # Create stable pattern + for i in range(40): + trackers.add_data({ + "stable_var": "constant", + "random_var": f"unique_{i}", + }) + + stable_vars = trackers.get_stable_variables() + assert isinstance(stable_vars, list) + # "stable_var" should be classified as STATIC + + def test_get_trackers(self): + """Test retrieving all trackers.""" + trackers = VariableTrackers(tracker_type=StabilityTracker) + trackers.add_data({"var1": "a", "var2": "b"}) + + all_trackers = trackers.get_trackers() + assert isinstance(all_trackers, dict) + assert len(all_trackers) == 2 + + def test_dynamic_tracker_creation(self): + """Test that trackers are created dynamically.""" + trackers = VariableTrackers(tracker_type=StabilityTracker) + + # First add + trackers.add_data({"var1": "a"}) + assert len(trackers.get_trackers()) == 1 + + # Second add with new variable + trackers.add_data({"var1": "b", "var2": "x"}) + assert len(trackers.get_trackers()) == 2 + + # Third add with another new variable + trackers.add_data({"var3": "z"}) + assert len(trackers.get_trackers()) == 3 + + +class TestEventVariableTracker: + """Test suite for EventVariableTracker.""" + + def test_initialization(self): + """Test EventVariableTracker initialization.""" + evt = EventVariableTracker(tracker_type=StabilityTracker) + assert evt is not None + assert isinstance(evt.variable_trackers, VariableTrackers) + + def test_add_data(self): + """Test adding data.""" + evt = EventVariableTracker(tracker_type=StabilityTracker) + data = {"var1": "value1", "var2": "value2"} + evt.add_data(data) + + # Should have created trackers + trackers = evt.get_data() + assert len(trackers) == 2 + + def test_get_variables(self): + """Test retrieving variable names.""" + evt = EventVariableTracker(tracker_type=StabilityTracker) + evt.add_data({"var1": "a", "var2": "b", "var3": "c"}) + + var_names = evt.get_variables() + assert "var1" in var_names + assert "var2" in var_names + assert "var3" in var_names + assert len(var_names) == 3 + + def test_get_stable_variables(self): + """Test retrieving stable variables.""" + evt = EventVariableTracker(tracker_type=StabilityTracker) + + for i in range(40): + evt.add_data({ + "stable_var": "constant", + "random_var": f"unique_{i}", + }) + + stable_vars = evt.get_stable_variables() + assert isinstance(stable_vars, list) + + def test_integration_with_stability_tracker(self): + """Test full integration with StabilityTracker.""" + evt = EventVariableTracker(tracker_type=StabilityTracker) + + # Simulate log processing + for i in range(50): + evt.add_data({ + "user": f"user_{i % 5}", + "status": "success" if i > 30 else f"status_{i}", + "request_id": f"req_{i}", + }) + + # Get data and variables + var_names = evt.get_variables() + stable_vars = evt.get_stable_variables() + + assert len(var_names) == 3 + assert isinstance(stable_vars, list) + + +class TestClassification: + """Test suite for Classification dataclass.""" + + def test_initialization(self): + """Test Classification initialization.""" + result = Classification(type="STABLE", reason="Test reason") + assert result.type == "STABLE" + assert result.reason == "Test reason" + + def test_all_classification_types(self): + """Test Classification with all classification types.""" + types = ["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] + + for cls_type in types: + result = Classification(type=cls_type, reason=f"Reason for {cls_type}") + assert result.type == cls_type + assert isinstance(result.reason, str) + + +class TestStabilityTrackingIntegration: + """Integration tests for stability tracking components.""" + + def test_full_workflow_static_variable(self): + """Test full workflow with static variable.""" + tracker = StabilityTracker(min_samples=10) + + # Add 50 identical values + for i in range(50): + tracker.add_value("constant_value") + + classification = tracker.classify() + assert classification.type == "STATIC" + + def test_full_workflow_random_variable(self): + """Test full workflow with random variable.""" + tracker = StabilityTracker(min_samples=10) + + # Add 50 unique values + for i in range(50): + tracker.add_value(f"unique_value_{i}") + + classification = tracker.classify() + assert classification.type == "RANDOM" + + def test_full_workflow_stabilizing_variable(self): + """Test full workflow with stabilizing variable.""" + tracker = StabilityTracker(min_samples=10) + + # Start with varied values, then stabilize + for i in range(15): + tracker.add_value(f"value_{i % 7}") + for i in range(35): + tracker.add_value("final_stable_value") + + classification = tracker.classify() + # Should be STABLE or STATIC + assert classification.type in ["STABLE", "STATIC"] + + def test_multiple_variables_with_different_patterns(self): + """Test tracking multiple variables with different patterns.""" + trackers = VariableTrackers(tracker_type=StabilityTracker) + + # Simulate 100 events + for i in range(100): + trackers.add_data({ + "static_var": "always_same", + "random_var": f"unique_{i}", + "user_id": f"user_{i % 10}", # 10 users cycling + "status": "ok" if i > 80 else f"status_{i % 5}", # Stabilizing + }) + + classifications = trackers.classify() + + # static_var should be STATIC + assert classifications["static_var"].type == "STATIC" + + # random_var should be RANDOM + assert classifications["random_var"].type == "RANDOM" + + # user_id and status depend on classifier logic + assert isinstance(classifications["user_id"], Classification) + assert isinstance(classifications["status"], Classification) + + def test_event_variable_tracker_real_world_scenario(self): + """Test EventVariableTracker with realistic log data.""" + evt = EventVariableTracker(tracker_type=StabilityTracker) + + # Simulate web server logs + for i in range(200): + evt.add_data({ + "method": "GET" if i % 10 != 0 else "POST", # Mostly GET + "status_code": "200" if i > 150 else str(200 + (i % 5)), # Stabilizing to 200 + "user_agent": f"Browser_{i % 3}", # 3 different browsers + "request_id": f"req_{i}", # Unique per request + "server": "prod-server-1", # Static + }) + + var_names = evt.get_variables() + stable_vars = evt.get_stable_variables() + + assert len(var_names) == 5 + assert isinstance(stable_vars, list) + + # Server should definitely be stable + # Request_id should be random + # Others depend on exact classifier logic + + def test_classifier_with_varying_thresholds(self): + """Test stability classifier with different thresholds.""" + # Create a borderline case + pattern = [1] * 15 + [0] * 5 + [1] * 20 + + strict = StabilityClassifier(segment_thresholds=[0.5, 0.2, 0.08, 0.02]) + lenient = StabilityClassifier(segment_thresholds=[2.0, 1.5, 1.0, 0.5]) + + result_strict = strict.is_stable(pattern) + result_lenient = lenient.is_stable(pattern) + + # Both should produce boolean results + assert isinstance(result_strict, bool) + assert isinstance(result_lenient, bool) diff --git a/tests/test_detectors/test_new_value_combo_detector.py b/tests/test_detectors/test_new_value_combo_detector.py index 7cc4f34..07e7de5 100644 --- a/tests/test_detectors/test_new_value_combo_detector.py +++ b/tests/test_detectors/test_new_value_combo_detector.py @@ -1,12 +1,11 @@ from detectmatelibrary.detectors.new_value_combo_detector import ( - NewValueComboDetector, ComboTooBigError, BufferMode + NewValueComboDetector, BufferMode ) import detectmatelibrary.schemas as schemas from detectmatelibrary.utils.aux import time_test_mode -import pytest # Set time test mode for consistent timestamps time_test_mode() @@ -166,27 +165,6 @@ def test_train_multiple_values(self): })} assert combos == detector.known_combos - def test_train_too_big(self): - parser_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 1, - "template": "test template", - "variables": ["0", "assa"], - "logID": 1, - "parsedLogID": 1, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "INFO"} - }) - - with pytest.raises(ComboTooBigError): - detector = NewValueComboDetector(config=config, name="AllDetectorTooBig") - detector.train(parser_data) - - with pytest.raises(ComboTooBigError): - detector = NewValueComboDetector(config=config, name="MultipleDetectorTooBig") - detector.train(parser_data) - class TestNewValueComboDetectorDetection: """Test NewValueDetector detection functionality.""" From 7c9d1e7cc826317707eaebbac9c65da9f9553659 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Sun, 18 Jan 2026 17:04:39 +0100 Subject: [PATCH 10/28] add notebook for demonstration purposes --- notebooks/persistency_demo.ipynb | 533 +++++++++++++++++++++++++ notebooks/reader_parser_detector.ipynb | 154 +++++++ 2 files changed, 687 insertions(+) create mode 100644 notebooks/persistency_demo.ipynb create mode 100644 notebooks/reader_parser_detector.ipynb diff --git a/notebooks/persistency_demo.ipynb b/notebooks/persistency_demo.ipynb new file mode 100644 index 0000000..db6af59 --- /dev/null +++ b/notebooks/persistency_demo.ipynb @@ -0,0 +1,533 @@ +{ + "cells": [ + { + "cell_type": "code", + "execution_count": null, + "id": "54215189", + "metadata": {}, + "outputs": [], + "source": [ + "import os\n", + "os.chdir(\"../\")\n", + "\n", + "from detectmatelibrary.detectors.new_value_combo_detector import NewValueComboDetector, schemas\n", + "from detectmatelibrary.parsers.template_matcher import MatcherParser\n", + "from detectmatelibrary.readers.log_file import LogFileReader\n", + "\n", + "from detectmatelibrary.common.persistency.event_data_structures.trackers import (\n", + " EventVariableTracker, StabilityTracker\n", + ")\n", + "from detectmatelibrary.common.persistency.event_data_structures.dataframes import (\n", + " EventDataFrame, ChunkedEventDataFrame\n", + ")\n", + "from detectmatelibrary.common.persistency.event_persistency import EventPersistency\n", + "\n", + "import logging\n", + "logging.getLogger().setLevel(logging.ERROR) # Only show errors" + ] + }, + { + "cell_type": "code", + "execution_count": null, + "id": "4cd73416", + "metadata": {}, + "outputs": [], + "source": [ + "import yaml\n", + "\n", + "\n", + "with open(\"config/pipeline_config_default.yaml\", 'r') as f:\n", + " config = yaml.safe_load(f)" + ] + }, + { + "cell_type": "code", + "execution_count": null, + "id": "54ae5e78", + "metadata": {}, + "outputs": [], + "source": [ + "reader = LogFileReader(config=config)\n", + "parser = MatcherParser(config=config)\n", + "detector = NewValueComboDetector(config=config)\n", + "\n", + "persistency1 = EventPersistency(\n", + " event_data_class=EventVariableTracker,\n", + " event_data_kwargs={\"tracker_type\": StabilityTracker},\n", + ")\n", + "\n", + "persistency2 = EventPersistency(\n", + " event_data_class=EventDataFrame,\n", + ")\n", + "\n", + "persistency3 = EventPersistency(\n", + " event_data_class=ChunkedEventDataFrame,\n", + ")" + ] + }, + { + "cell_type": "code", + "execution_count": null, + "id": "f23c07d8", + "metadata": {}, + "outputs": [], + "source": [ + "for i in range(1000):\n", + " log = reader.process(as_bytes=False)\n", + " parsed_log = parser.process(log)\n", + "\n", + " persistency1.ingest_event(\n", + " event_id=parsed_log['EventID'],\n", + " event_template=parsed_log['template'],\n", + " variables=parsed_log['variables'],\n", + " log_format_variables=parsed_log['logFormatVariables'],\n", + " )\n", + " persistency2.ingest_event(\n", + " event_id=parsed_log['EventID'],\n", + " event_template=parsed_log['template'],\n", + " variables=parsed_log['variables'],\n", + " log_format_variables=parsed_log['logFormatVariables'],\n", + " )\n", + " persistency3.ingest_event(\n", + " event_id=parsed_log['EventID'],\n", + " event_template=parsed_log['template'],\n", + " variables=parsed_log['variables'],\n", + " log_format_variables=parsed_log['logFormatVariables'],\n", + " )" + ] + }, + { + "cell_type": "code", + "execution_count": null, + "id": "651e272e", + "metadata": {}, + "outputs": [ + { + "data": { + "text/plain": [ + "{0: EventVariableTracker(data={\n", + " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (642)'), change_series=[1, 1, 1, '...', 1, 1, 1], unique_set={(1642820941.151:1057), (1642847941.596:1245), (1642785421.190:843), ..., (1642833541.196:1147), (1642799821.579:931), (1642822741.217:1074)}, RLE=[(True, 642)])\n", + " \tType: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.03125, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 1, 1, '...', 0, 0, 0], unique_set={USER_START, CRED_DISP, USER_ACCT, USER_END, CRED_ACQ}, RLE=[(True, 5), (False, 637)])\n", + " \tvar_0: StabilityTracker(classification=Classification(type='UNSTABLE', reason='No classification matched; variable is unstable'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={16092, 14930, 15774, ..., 10883, 13737, 19301}, RLE=[(True, 1), (False, 4), (True, 1), '...', (False, 4), (True, 1), (False, 3)])\n", + " \tvar_1: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 641)])\n", + " \tvar_2: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.01875, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 1, '...', 0, 0, 0], unique_set={1002, 4294967295, 0}, RLE=[(True, 1), (False, 1), (True, 1), (False, 127), (True, 1), (False, 511)])\n", + " \tvar_3: StabilityTracker(classification=Classification(type='UNSTABLE', reason='No classification matched; variable is unstable'), change_series=[1, 0, 1, '...', 0, 1, 0], unique_set={120, 110, 117, ..., 183, 133, 162}, RLE=[(True, 1), (False, 1), (True, 1), '...', (False, 4), (True, 1), (False, 1)])\n", + " \tvar_4: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.025, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 1, 1, '...', 0, 0, 0], unique_set={PAM:session_open, PAM:session_close, PAM:accounting, PAM:setcred}, RLE=[(True, 3), (False, 1), (True, 1), (False, 637)])\n", + " \tvar_5: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.0125, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={\"root\", \"jhall\"}, RLE=[(True, 1), (False, 129), (True, 1), (False, 511)])\n", + " \tvar_6: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.0125, 0.006211180124223602, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={\"/usr/sbin/sshd\", \"/usr/sbin/cron\", \"/lib/systemd/systemd\"}, RLE=[(True, 1), (False, 129), (True, 1), (False, 48), (True, 1), (False, 462)])\n", + " \tvar_7: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.0125, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={172.19.131.174, ?}, RLE=[(True, 1), (False, 129), (True, 1), (False, 511)])\n", + " \tvar_8: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.0125, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={172.19.131.174, ?}, RLE=[(True, 1), (False, 129), (True, 1), (False, 511)])\n", + " \tvar_9: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.0125, 0.006211180124223602, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={ssh, cron, ?}, RLE=[(True, 1), (False, 129), (True, 1), (False, 48), (True, 1), (False, 462)])\n", + " \tvar_10: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={success}, RLE=[(True, 1), (False, 641)])\n", + " },\n", + " 2: EventVariableTracker(data={\n", + " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (129)'), change_series=[1, 1, 1, '...', 1, 1, 1], unique_set={(1642774000.779:760), (1642748941.234:583), (1642820941.151:1058), ..., (1642819141.100:1050), (1642763341.623:689), (1642749421.260:591)}, RLE=[(True, 129)])\n", + " \tType: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={LOGIN}, RLE=[(True, 1), (False, 128)])\n", + " \tvar_0: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (129)'), change_series=[1, 1, 1, '...', 1, 1, 1], unique_set={16092, 14930, 15774, ..., 10883, 13737, 19301}, RLE=[(True, 129)])\n", + " \tvar_1: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 128)])\n", + " \tvar_2: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 128)])\n", + " \tvar_3: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.03125, 0.03125, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={1002, 0}, RLE=[(True, 1), (False, 34), (True, 1), (False, 93)])\n", + " \tvar_4: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={(none)}, RLE=[(True, 1), (False, 128)])\n", + " \tvar_5: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 128)])\n", + " \tvar_6: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (129)'), change_series=[1, 1, 1, '...', 1, 1, 1], unique_set={120, 110, 117, ..., 183, 133, 162}, RLE=[(True, 129)])\n", + " \tvar_7: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={1}, RLE=[(True, 1), (False, 128)])\n", + " },\n", + " 1: EventVariableTracker(data={\n", + " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (215)'), change_series=[1, 1, 1, '...', 1, 1, 1], unique_set={(1642790352.631:877), (1642764532.512:701), (1642746730.000:557), ..., (1642846152.628:1232), (1642761573.588:680), (1642726457.339:397)}, RLE=[(True, 215)])\n", + " \tType: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.03773584905660377, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 1, 0, '...', 0, 0, 0], unique_set={SERVICE_START, SERVICE_STOP}, RLE=[(True, 2), (False, 213)])\n", + " \tvar_0: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={1}, RLE=[(True, 1), (False, 214)])\n", + " \tvar_1: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 214)])\n", + " \tvar_2: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 214)])\n", + " \tvar_3: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 214)])\n", + " \tvar_4: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.20754716981132076, 0.09259259259259259, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={systemd-udevd, systemd-journald, systemd-tmpfiles-clean, ..., apt-daily-upgrade, user@1002, systemd-timesyncd}, RLE=[(True, 1), (False, 3), (True, 1), '...', (False, 17), (True, 1), (False, 128)])\n", + " \tvar_5: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={\"systemd\"}, RLE=[(True, 1), (False, 214)])\n", + " \tvar_6: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={\"/lib/systemd/systemd\"}, RLE=[(True, 1), (False, 214)])\n", + " \tvar_7: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={?}, RLE=[(True, 1), (False, 214)])\n", + " \tvar_8: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={?}, RLE=[(True, 1), (False, 214)])\n", + " \tvar_9: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={?}, RLE=[(True, 1), (False, 214)])\n", + " \tvar_10: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={success}, RLE=[(True, 1), (False, 214)])\n", + " },\n", + " 3: EventVariableTracker(data={\n", + " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={(1642746582.133:531), (1642746582.137:532), (1642746582.133:530), (1642746582.129:529)}, RLE=[(True, 4)])\n", + " \tType: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={AVC}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_0: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"STATUS\"}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_1: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"profile_replace\"}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_2: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"same as current profile, skipping\"}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_3: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"unconfined\"}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_4: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={\"/usr/lib/connman/scripts/dhclient-script\", \"/usr/lib/NetworkManager/nm-dhcp-helper\", \"/usr/lib/NetworkManager/nm-dhcp-client.action\", \"/sbin/dhclient\"}, RLE=[(True, 4)])\n", + " \tvar_5: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={23662}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_6: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"apparmor_parser\"}, RLE=[(True, 1), (False, 3)])\n", + " },\n", + " 4: EventVariableTracker(data={\n", + " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={(1642746582.133:531), (1642746582.137:532), (1642746582.133:530), (1642746582.129:529)}, RLE=[(True, 4)])\n", + " \tType: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={SYSCALL}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_0: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={c000003e}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_1: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={1}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_2: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={yes}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_3: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={25025, 24993, 44953, 23625}, RLE=[(True, 4)])\n", + " \tvar_4: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={6}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_5: StabilityTracker(classification=Classification(type='UNSTABLE', reason='No classification matched; variable is unstable'), change_series=[1, 1, 0, 0], unique_set={55688bbce110, 55688bbf9b10}, RLE=[(True, 2), (False, 2)])\n", + " \tvar_6: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={5c49, 61a1, af99, 61c1}, RLE=[(True, 4)])\n", + " \tvar_7: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_8: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_9: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={23661}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_10: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={23662}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_11: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_12: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_13: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_14: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_15: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_16: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_17: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_18: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_19: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_20: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={pts1}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_21: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_22: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"apparmor_parser\"}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_23: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"/sbin/apparmor_parser\"}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_24: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={(null)}, RLE=[(True, 1), (False, 3)])\n", + " },\n", + " 5: EventVariableTracker(data={\n", + " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={(1642746582.133:531), (1642746582.137:532), (1642746582.133:530), (1642746582.129:529)}, RLE=[(True, 4)])\n", + " \tType: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={PROCTITLE}, RLE=[(True, 1), (False, 3)])\n", + " \tvar_0: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={61707061726D6F725F706172736572002D72002D54002D57002F6574632F61707061726D6F722E642F7362696E2E6468636C69656E74}, RLE=[(True, 1), (False, 3)])\n", + " },\n", + " 6: EventVariableTracker(data={\n", + " \tTime: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 1], unique_set={(1642774001.811:765), (1642761574.840:683)}, RLE=[(True, 2)])\n", + " \tType: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={USER_LOGIN}, RLE=[(True, 1), (False, 1)])\n", + " \tvar_0: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 1], unique_set={15014, 14362}, RLE=[(True, 2)])\n", + " \tvar_1: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={0}, RLE=[(True, 1), (False, 1)])\n", + " \tvar_2: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={1002}, RLE=[(True, 1), (False, 1)])\n", + " \tvar_3: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 1], unique_set={100, 111}, RLE=[(True, 2)])\n", + " \tvar_4: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={login}, RLE=[(True, 1), (False, 1)])\n", + " \tvar_5: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={1002}, RLE=[(True, 1), (False, 1)])\n", + " \tvar_6: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={\"/usr/sbin/sshd\"}, RLE=[(True, 1), (False, 1)])\n", + " \tvar_7: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={172.19.131.174}, RLE=[(True, 1), (False, 1)])\n", + " \tvar_8: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={172.19.131.174}, RLE=[(True, 1), (False, 1)])\n", + " \tvar_9: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={/dev/pts/0}, RLE=[(True, 1), (False, 1)])\n", + " \tvar_10: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={success}, RLE=[(True, 1), (False, 1)])\n", + " }}" + ] + }, + "execution_count": 5, + "metadata": {}, + "output_type": "execute_result" + } + ], + "source": [ + "persistency1.get_events_data()" + ] + }, + { + "cell_type": "code", + "execution_count": null, + "id": "6e70d2b3", + "metadata": {}, + "outputs": [ + { + "data": { + "text/html": [ + "
\n", + "\n", + "\n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + "
TimeTypevar_0var_1var_2var_3var_4var_5var_6var_7var_8var_9var_10
0(1642723741.072:375)USER_ACCT10125042949672954294967295PAM:accounting\"root\"\"/usr/sbin/cron\"??cronsuccess
1(1642723741.072:376)CRED_ACQ10125042949672954294967295PAM:setcred\"root\"\"/usr/sbin/cron\"??cronsuccess
2(1642723741.080:378)USER_START101250065PAM:session_open\"root\"\"/usr/sbin/cron\"??cronsuccess
3(1642723741.084:379)CRED_DISP101250065PAM:setcred\"root\"\"/usr/sbin/cron\"??cronsuccess
4(1642723741.084:380)USER_END101250065PAM:session_close\"root\"\"/usr/sbin/cron\"??cronsuccess
..........................................
637(1642865941.046:1359)USER_END2019100192PAM:session_close\"root\"\"/usr/sbin/cron\"??cronsuccess
638(1642867741.073:1362)USER_ACCT20264042949672954294967295PAM:accounting\"root\"\"/usr/sbin/cron\"??cronsuccess
639(1642867741.077:1363)CRED_ACQ20264042949672954294967295PAM:setcred\"root\"\"/usr/sbin/cron\"??cronsuccess
640(1642867741.081:1365)USER_START2026400193PAM:session_open\"root\"\"/usr/sbin/cron\"??cronsuccess
641(1642867741.085:1366)CRED_DISP2026400193PAM:setcred\"root\"\"/usr/sbin/cron\"??cronsuccess
\n", + "

642 rows × 13 columns

\n", + "
" + ], + "text/plain": [ + " Time Type var_0 var_1 var_2 var_3 \\\n", + "0 (1642723741.072:375) USER_ACCT 10125 0 4294967295 4294967295 \n", + "1 (1642723741.072:376) CRED_ACQ 10125 0 4294967295 4294967295 \n", + "2 (1642723741.080:378) USER_START 10125 0 0 65 \n", + "3 (1642723741.084:379) CRED_DISP 10125 0 0 65 \n", + "4 (1642723741.084:380) USER_END 10125 0 0 65 \n", + ".. ... ... ... ... ... ... \n", + "637 (1642865941.046:1359) USER_END 20191 0 0 192 \n", + "638 (1642867741.073:1362) USER_ACCT 20264 0 4294967295 4294967295 \n", + "639 (1642867741.077:1363) CRED_ACQ 20264 0 4294967295 4294967295 \n", + "640 (1642867741.081:1365) USER_START 20264 0 0 193 \n", + "641 (1642867741.085:1366) CRED_DISP 20264 0 0 193 \n", + "\n", + " var_4 var_5 var_6 var_7 var_8 var_9 var_10 \n", + "0 PAM:accounting \"root\" \"/usr/sbin/cron\" ? ? cron success \n", + "1 PAM:setcred \"root\" \"/usr/sbin/cron\" ? ? cron success \n", + "2 PAM:session_open \"root\" \"/usr/sbin/cron\" ? ? cron success \n", + "3 PAM:setcred \"root\" \"/usr/sbin/cron\" ? ? cron success \n", + "4 PAM:session_close \"root\" \"/usr/sbin/cron\" ? ? cron success \n", + ".. ... ... ... ... ... ... ... \n", + "637 PAM:session_close \"root\" \"/usr/sbin/cron\" ? ? cron success \n", + "638 PAM:accounting \"root\" \"/usr/sbin/cron\" ? ? cron success \n", + "639 PAM:setcred \"root\" \"/usr/sbin/cron\" ? ? cron success \n", + "640 PAM:session_open \"root\" \"/usr/sbin/cron\" ? ? cron success \n", + "641 PAM:setcred \"root\" \"/usr/sbin/cron\" ? ? cron success \n", + "\n", + "[642 rows x 13 columns]" + ] + }, + "execution_count": 9, + "metadata": {}, + "output_type": "execute_result" + } + ], + "source": [ + "persistency2.get_event_data(0)" + ] + }, + { + "cell_type": "code", + "execution_count": null, + "id": "8580b0d3", + "metadata": {}, + "outputs": [ + { + "data": { + "text/plain": [ + "{0: ChunkedEventDataFrame(df=..., rows=642, chunks=642, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6', 'var_7', 'var_8', 'var_9', 'var_10']),\n", + " 2: ChunkedEventDataFrame(df=..., rows=129, chunks=129, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6', 'var_7']),\n", + " 1: ChunkedEventDataFrame(df=..., rows=215, chunks=215, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6', 'var_7', 'var_8', 'var_9', 'var_10']),\n", + " 3: ChunkedEventDataFrame(df=..., rows=4, chunks=4, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6']),\n", + " 4: ChunkedEventDataFrame(df=..., rows=4, chunks=4, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6', 'var_7', 'var_8', 'var_9', 'var_10', 'var_11', 'var_12', 'var_13', 'var_14', 'var_15', 'var_16', 'var_17', 'var_18', 'var_19', 'var_20', 'var_21', 'var_22', 'var_23', 'var_24']),\n", + " 5: ChunkedEventDataFrame(df=..., rows=4, chunks=4, variables=['Time', 'Type', 'var_0']),\n", + " 6: ChunkedEventDataFrame(df=..., rows=2, chunks=2, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6', 'var_7', 'var_8', 'var_9', 'var_10'])}" + ] + }, + "execution_count": 10, + "metadata": {}, + "output_type": "execute_result" + } + ], + "source": [ + "persistency3.get_events_data()" + ] + } + ], + "metadata": { + "kernelspec": { + "display_name": "detectmatelibrary (3.12.3)", + "language": "python", + "name": "python3" + }, + "language_info": { + "codemirror_mode": { + "name": "ipython", + "version": 3 + }, + "file_extension": ".py", + "mimetype": "text/x-python", + "name": "python", + "nbconvert_exporter": "python", + "pygments_lexer": "ipython3", + "version": "3.12.3" + } + }, + "nbformat": 4, + "nbformat_minor": 5 +} diff --git a/notebooks/reader_parser_detector.ipynb b/notebooks/reader_parser_detector.ipynb new file mode 100644 index 0000000..8e36449 --- /dev/null +++ b/notebooks/reader_parser_detector.ipynb @@ -0,0 +1,154 @@ +{ + "cells": [ + { + "cell_type": "code", + "execution_count": null, + "id": "54215189", + "metadata": {}, + "outputs": [], + "source": [ + "import os\n", + "os.chdir(\"../\")\n", + "\n", + "from detectmatelibrary.detectors.new_value_combo_detector import NewValueComboDetector, schemas\n", + "from detectmatelibrary.parsers.template_matcher import MatcherParser\n", + "from detectmatelibrary.readers.log_file import LogFileReader\n", + "\n", + "from detectmatelibrary.common.persistency.event_data_structures.trackers import (\n", + " EventVariableTracker, StabilityTracker\n", + ")\n", + "from detectmatelibrary.common.persistency.event_data_structures.dataframes import (\n", + " EventDataFrame, ChunkedEventDataFrame\n", + ")\n", + "from detectmatelibrary.common.persistency.event_persistency import EventPersistency\n", + "\n", + "import logging\n", + "logging.getLogger().setLevel(logging.ERROR) # Only show errors" + ] + }, + { + "cell_type": "code", + "execution_count": 8, + "id": "4cd73416", + "metadata": {}, + "outputs": [], + "source": [ + "import yaml\n", + "\n", + "\n", + "with open(\"config/pipeline_config_default.yaml\", 'r') as f:\n", + " config = yaml.safe_load(f)" + ] + }, + { + "cell_type": "code", + "execution_count": 9, + "id": "54ae5e78", + "metadata": {}, + "outputs": [], + "source": [ + "reader = LogFileReader(config=config)\n", + "parser = MatcherParser(config=config)\n", + "detector = NewValueComboDetector(config=config)\n", + "\n", + "output = schemas.DetectorSchema()" + ] + }, + { + "cell_type": "code", + "execution_count": 10, + "id": "f23c07d8", + "metadata": {}, + "outputs": [], + "source": [ + "reader.reset()\n", + "for i in range(1000):\n", + " log = reader.process(as_bytes=False)\n", + " parsed_log = parser.process(log)\n", + " detector.configure(parsed_log)\n", + "\n", + "detector.set_configuration()" + ] + }, + { + "cell_type": "code", + "execution_count": 11, + "id": "ddc59204", + "metadata": {}, + "outputs": [], + "source": [ + "reader.reset()\n", + "for i in range(1000):\n", + " log = reader.process(as_bytes=False)\n", + " parsed_log = parser.process(log)\n", + " detector.train(parsed_log)" + ] + }, + { + "cell_type": "code", + "execution_count": 12, + "id": "651e272e", + "metadata": {}, + "outputs": [], + "source": [ + "predictions = {}\n", + "\n", + "for i in range(1000):\n", + " log = reader.process(as_bytes=False)\n", + " parsed_log = parser.process(log)\n", + " prediction = detector.detect(parsed_log, output_=output)\n", + " predictions[i] = prediction\n" + ] + }, + { + "cell_type": "code", + "execution_count": 13, + "id": "51daa602", + "metadata": {}, + "outputs": [ + { + "data": { + "text/plain": [ + "[(859, True),\n", + " (860, True),\n", + " (861, True),\n", + " (862, True),\n", + " (864, True),\n", + " (865, True),\n", + " (866, True),\n", + " (867, True)]" + ] + }, + "execution_count": 13, + "metadata": {}, + "output_type": "execute_result" + } + ], + "source": [ + "# get true predictions\n", + "[(i, is_anomaly) for i, is_anomaly in predictions.items() if is_anomaly]" + ] + } + ], + "metadata": { + "kernelspec": { + "display_name": "detectmatelibrary (3.12.3)", + "language": "python", + "name": "python3" + }, + "language_info": { + "codemirror_mode": { + "name": "ipython", + "version": 3 + }, + "file_extension": ".py", + "mimetype": "text/x-python", + "name": "python", + "nbconvert_exporter": "python", + "pygments_lexer": "ipython3", + "version": "3.12.3" + } + }, + "nbformat": 4, + "nbformat_minor": 5 +} From 31838dc35a7d157c6ba6543bc0bf70ba93560ea0 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Sun, 18 Jan 2026 17:06:08 +0100 Subject: [PATCH 11/28] minor changes --- config/pipeline_config_default.yaml | 2 +- src/detectmatelibrary/detectors/new_value_combo_detector.py | 6 ++++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/config/pipeline_config_default.yaml b/config/pipeline_config_default.yaml index 3a89431..16ac77b 100644 --- a/config/pipeline_config_default.yaml +++ b/config/pipeline_config_default.yaml @@ -3,7 +3,7 @@ readers: method_type: log_file_reader auto_config: False params: - file: local/miranda.json + file: tests/test_folder/audit.log parsers: MatcherParser: diff --git a/src/detectmatelibrary/detectors/new_value_combo_detector.py b/src/detectmatelibrary/detectors/new_value_combo_detector.py index 6aaa5fc..59cadbc 100644 --- a/src/detectmatelibrary/detectors/new_value_combo_detector.py +++ b/src/detectmatelibrary/detectors/new_value_combo_detector.py @@ -149,7 +149,7 @@ def detect_combo_detector( if not unique_combos.issubset(combos_set): for combo in unique_combos - combos_set: overall_score += 1 - alerts.update({"Not found combo": str(combo)}) + alerts.update({f"EventID_{input_['EventID']}": f"Values: {combo}"}) return overall_score @@ -210,7 +210,9 @@ def detect( if overall_score > 0: output_["score"] = overall_score - output_["description"] = f"The detector check combinations of {self.config.comb_size} variables" + output_["description"] = ( + f"The detector checks for new value combinations of size {self.config.comb_size}." + ) output_["alertsObtain"].update(alerts) return True return False From e96a0ca3ad0f9cf81c1ea424c748e6a0734faee8 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Sun, 18 Jan 2026 17:58:36 +0100 Subject: [PATCH 12/28] add auto configuration capabilities to ComboDetector --- .../common/_config/__init__.py | 60 +++++- .../common/_config/_compile.py | 61 +++++- .../detectors/new_value_combo_detector.py | 57 +---- .../test_new_value_combo_detector.py | 197 +++++++++++++++++- 4 files changed, 317 insertions(+), 58 deletions(-) diff --git a/src/detectmatelibrary/common/_config/__init__.py b/src/detectmatelibrary/common/_config/__init__.py index eca49b2..5aa90ff 100644 --- a/src/detectmatelibrary/common/_config/__init__.py +++ b/src/detectmatelibrary/common/_config/__init__.py @@ -3,7 +3,7 @@ from pydantic import BaseModel, ConfigDict from typing_extensions import Self -from typing import Any, Dict +from typing import Any, Dict, List, Optional from copy import deepcopy @@ -35,3 +35,61 @@ def from_dict(cls, data: Dict[str, Any], method_id: str) -> Self: ConfigMethods.check_type(config_, method_type=aux.method_type) return cls(**ConfigMethods.process(config_)) + + +def generate_detector_config( + variable_selection: Dict[int, List[str]], + templates: Dict[Any, str | None], + detector_name: str, + method_type: str, + base_config: Optional[Dict[str, Any]] = None, + **additional_params: Any, +) -> Dict[str, Any]: + """Generate the configuration for detectors. Output is a dictionary. + + Args: + variable_selection (Dict[int, List[str]]): Mapping of event IDs to variable names. + templates (Dict[Any, str | None]): Mapping of event IDs to their templates. + detector_name (str): Name of the detector. + method_type (str): Type of the detection method. + base_config (Optional[Dict[str, Any]]): Base configuration to build upon. + **additional_params: Additional parameters for the detector. + """ + + if base_config is None: + base_config = { + "detectors": { + detector_name: { + "method_type": method_type, + "auto_config": False, + "params": { + "log_variables": [] + }, + } + } + } + config = deepcopy(base_config) + + detectors = config.setdefault("detectors", {}) + detector = detectors.setdefault(detector_name, {}) + detector.setdefault("method_type", method_type) + detector.setdefault("auto_config", False) + params = detector.setdefault("params", {}) + params.update(additional_params) + log_variables = params.setdefault("log_variables", []) + + for event_id, all_variables in variable_selection.items(): + variables = [ + {"pos": int(name.split("_")[1]), "name": name} + for name in all_variables if name.startswith("var_") + ] + header_variables = [{"pos": name} for name in all_variables if not name.startswith("var_")] + + log_variables.append({ + "id": f"id_{event_id}", + "event": event_id, + "template": templates.get(event_id, ""), + "variables": variables, + "header_variables": header_variables, + }) + return config diff --git a/src/detectmatelibrary/common/_config/_compile.py b/src/detectmatelibrary/common/_config/_compile.py index c965c3b..8de129b 100644 --- a/src/detectmatelibrary/common/_config/_compile.py +++ b/src/detectmatelibrary/common/_config/_compile.py @@ -2,7 +2,8 @@ from detectmatelibrary.common._config._formats import apply_format -from typing import Any, Dict +from typing import Any, Dict, List, Optional +from copy import deepcopy import warnings @@ -82,3 +83,61 @@ def process(config: Dict[str, Any]) -> Dict[str, Any]: config.update(config["params"]) config.pop("params") return config + + +def generate_detector_config( + variable_selection: Dict[int, List[str]], + templates: Dict[Any, str | None], + detector_name: str, + method_type: str, + base_config: Optional[Dict[str, Any]] = None, + **additional_params: Any, +) -> Dict[str, Any]: + """Generate the configuration for detectors. Output is a dictionary. + + Args: + variable_selection (Dict[int, List[str]]): Mapping of event IDs to variable names. + templates (Dict[Any, str | None]): Mapping of event IDs to their templates. + detector_name (str): Name of the detector. + method_type (str): Type of the detection method. + base_config (Optional[Dict[str, Any]]): Base configuration to build upon. + **additional_params: Additional parameters for the detector. + """ + + if base_config is None: + base_config = { + "detectors": { + detector_name: { + "method_type": method_type, + "auto_config": False, + "params": { + "log_variables": [] + }, + } + } + } + config = deepcopy(base_config) + + detectors = config.setdefault("detectors", {}) + detector = detectors.setdefault(detector_name, {}) + detector.setdefault("method_type", method_type) + detector.setdefault("auto_config", False) + params = detector.setdefault("params", {}) + params.update(additional_params) + log_variables = params.setdefault("log_variables", []) + + for event_id, all_variables in variable_selection.items(): + variables = [ + {"pos": int(name.split("_")[1]), "name": name} + for name in all_variables if name.startswith("var_") + ] + header_variables = [{"pos": name} for name in all_variables if not name.startswith("var_")] + + log_variables.append({ + "id": f"id_{event_id}", + "event": event_id, + "template": templates.get(event_id, ""), + "variables": variables, + "header_variables": header_variables, + }) + return config diff --git a/src/detectmatelibrary/detectors/new_value_combo_detector.py b/src/detectmatelibrary/detectors/new_value_combo_detector.py index 59cadbc..02c48ab 100644 --- a/src/detectmatelibrary/detectors/new_value_combo_detector.py +++ b/src/detectmatelibrary/detectors/new_value_combo_detector.py @@ -1,4 +1,5 @@ from detectmatelibrary.common._config._formats import LogVariables, AllLogVariables +from detectmatelibrary.common._config import generate_detector_config from detectmatelibrary.common.detector import CoreDetectorConfig from detectmatelibrary.common.detector import CoreDetector @@ -12,60 +13,8 @@ import detectmatelibrary.schemas as schemas -from itertools import combinations - from typing import Any, Set, Dict, cast - -from copy import deepcopy -from typing import List, Optional - - -def generate_detector_config( - variable_selection: Dict[int, List[str]], - templates: Dict[Any, str | None], - detector_name: str, - method_type: str, - base_config: Optional[Dict[str, Any]] = None, - max_combo_size: int = 6, -) -> Dict[str, Any]: - - if base_config is None: - base_config = { - "detectors": { - detector_name: { - "method_type": method_type, - "auto_config": False, - "params": { - "log_variables": [] - }, - } - } - } - config = deepcopy(base_config) - - detectors = config.setdefault("detectors", {}) - detector = detectors.setdefault(detector_name, {}) - detector.setdefault("method_type", method_type) - detector.setdefault("auto_config", False) - params = detector.setdefault("params", {}) - params["comb_size"] = max_combo_size - log_variables = params.setdefault("log_variables", []) - - for event_id, all_variables in variable_selection.items(): - variables = [ - {"pos": int(name.split("_")[1]), "name": name} - for name in all_variables if name.startswith("var_") - ] - header_variables = [{"pos": name} for name in all_variables if not name.startswith("var_")] - - log_variables.append({ - "id": f"id_{event_id}", - "event": event_id, - "template": templates.get(event_id, ""), - "variables": variables, - "header_variables": header_variables, - }) - return config +from itertools import combinations # Auxiliar methods ******************************************************** @@ -238,7 +187,7 @@ def set_configuration(self, max_combo_size: int = 6) -> None: templates=templates, detector_name=self.name, method_type=self.config.method_type, - max_combo_size=max_combo_size + comb_size=max_combo_size ) # Update the config object from the dictionary instead of replacing it self.config = NewValueComboDetectorConfig.from_dict(config_dict, self.name) diff --git a/tests/test_detectors/test_new_value_combo_detector.py b/tests/test_detectors/test_new_value_combo_detector.py index 07e7de5..9bf8183 100644 --- a/tests/test_detectors/test_new_value_combo_detector.py +++ b/tests/test_detectors/test_new_value_combo_detector.py @@ -1,6 +1,6 @@ from detectmatelibrary.detectors.new_value_combo_detector import ( - NewValueComboDetector, BufferMode + NewValueComboDetector, BufferMode, generate_detector_config ) import detectmatelibrary.schemas as schemas @@ -19,7 +19,7 @@ "params": { "comb_size": 4, "log_variables": [{ - "id": "instanace1", + "id": "instance1", "event": 1, "template": "adsdas", "variables": [{ @@ -366,3 +366,196 @@ def test_detect_known_value_alert(self): assert result assert output.score == 1.0 + + +class TestNewValueComboDetectorConfiguration: + """Test NewValueComboDetector configuration functionality.""" + + def test_generate_detector_config_basic(self): + """Test basic config generation with single event.""" + variable_selection = { + 1: ["var_0", "var_1"] + } + templates = {1: "Test template"} + + config_dict = generate_detector_config( + variable_selection=variable_selection, + templates=templates, + detector_name="TestDetector", + method_type="new_value_combo_detector", + comb_size=2 + ) + + assert "detectors" in config_dict + assert "TestDetector" in config_dict["detectors"] + detector_config = config_dict["detectors"]["TestDetector"] + assert detector_config["method_type"] == "new_value_combo_detector" + assert detector_config["params"]["comb_size"] == 2 + assert len(detector_config["params"]["log_variables"]) == 1 + + def test_generate_detector_config_multiple_events(self): + """Test config generation with multiple events.""" + variable_selection = { + 1: ["var_0", "var_1"], + 2: ["var_0", "var_2", "var_3"], + 3: ["level"] + } + templates = {1: "Template 1", 2: "Template 2", 3: "Template 3"} + + config_dict = generate_detector_config( + variable_selection=variable_selection, + templates=templates, + detector_name="MultiEventDetector", + method_type="new_value_combo_detector" + ) + + assert len(config_dict["detectors"]["MultiEventDetector"]["params"]["log_variables"]) == 3 + + def test_configure_method_ingests_events(self): + """Test that configure method properly ingests events.""" + detector = NewValueComboDetector() + + # Configure with sample events + for event_id in [1, 2, 3]: + parser_data = schemas.ParserSchema({ + "parserType": "test", + "EventID": event_id, + "template": f"Template {event_id}", + "variables": ["val1", "val2", "val3"], + "logID": event_id, + "parsedLogID": event_id, + "parserID": "test_parser", + "log": "test log", + "logFormatVariables": {"level": "INFO"} + }) + detector.configure(parser_data) + + # Verify events were ingested + events_data = detector.persistency.get_events_data() + assert len(events_data) == 3 + assert 1 in events_data + assert 2 in events_data + assert 3 in events_data + + def test_set_configuration_updates_config(self): + """Test that set_configuration properly updates detector config.""" + detector = NewValueComboDetector() + + # Configure with events that have varying stability + for i in range(10): + parser_data = schemas.ParserSchema({ + "parserType": "test", + "EventID": 1, + "template": "Template 1", + "variables": ["constant", f"varying_{i}", "another_constant"], + "logID": i, + "parsedLogID": i, + "parserID": "test_parser", + "log": "test log", + "logFormatVariables": {"level": "INFO"} + }) + detector.configure(parser_data) + + # Set configuration + detector.set_configuration(max_combo_size=2) + + # Verify config was updated + assert detector.config.log_variables is not None + assert detector.config.comb_size == 2 + + def test_configuration_workflow(self): + """Test complete configuration workflow like in notebook.""" + detector = NewValueComboDetector() + + # Step 1: Configure phase - ingest events + training_data = [] + for i in range(20): + for event_id in [1, 2]: + parser_data = schemas.ParserSchema({ + "parserType": "test", + "EventID": event_id, + "template": f"Template {event_id}", + "variables": ["stable_val", f"var_{i % 3}", "another_stable"], + "logID": len(training_data), + "parsedLogID": len(training_data), + "parserID": "test_parser", + "log": "test log", + "logFormatVariables": {"level": "INFO"} + }) + training_data.append(parser_data) + detector.configure(parser_data) + + # Step 2: Set configuration based on stable variables + detector.set_configuration(max_combo_size=3) + + # Step 3: Train detector with configuration + for data in training_data: + detector.train(data) + + # Step 4: Verify detector can detect anomalies + test_data = schemas.ParserSchema({ + "parserType": "test", + "EventID": 1, + "template": "Template 1", + "variables": ["stable_val", "new_value", "another_stable"], + "logID": 999, + "parsedLogID": 999, + "parserID": "test_parser", + "log": "test log", + "logFormatVariables": {"level": "INFO"} + }) + output = schemas.DetectorSchema() + + # Should detect anomaly due to new combination + result = detector.detect(test_data, output) + assert isinstance(result, bool) + + def test_set_configuration_with_combo_size(self): + """Test set_configuration respects max_combo_size parameter.""" + detector = NewValueComboDetector() + + # Configure with multiple variable events + for i in range(15): + parser_data = schemas.ParserSchema({ + "parserType": "test", + "EventID": 1, + "template": "Multi-var template", + "variables": ["v1", "v2", "v3", "v4", "v5"], + "logID": i, + "parsedLogID": i, + "parserID": "test_parser", + "log": "test log", + "logFormatVariables": {} + }) + detector.configure(parser_data) + + # Set configuration with specific combo size + detector.set_configuration(max_combo_size=4) + + # Verify comb_size was updated + assert detector.config.comb_size == 4 + + def test_configuration_with_no_stable_variables(self): + """Test configuration when no stable variables are found.""" + detector = NewValueComboDetector() + + # Configure with highly variable data + for i in range(10): + parser_data = schemas.ParserSchema({ + "parserType": "test", + "EventID": 1, + "template": "Variable template", + "variables": [f"val_{i}_0", f"val_{i}_1"], + "logID": i, + "parsedLogID": i, + "parserID": "test_parser", + "log": "test log", + "logFormatVariables": {} + }) + detector.configure(parser_data) + + # Set configuration + detector.set_configuration() + + # Should handle gracefully without stable variables + assert detector.config is not None From e1997b22c86b4297cbbd58ccbaa95f55ffa7ee84 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Thu, 22 Jan 2026 16:06:32 +0100 Subject: [PATCH 13/28] adapt templatematcher and json parser --- pyproject.toml | 1 + src/detectmatelibrary/parsers/json_parser.py | 36 ++-- .../parsers/template_matcher/_matcher_op.py | 163 +++++++++++++++++- 3 files changed, 182 insertions(+), 18 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 2c3ca72..e3c2c5c 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -14,6 +14,7 @@ dependencies = [ "pyyaml>=6.0.3", "regex>=2025.11.3", "kafka-python>=2.3.0", + "ujson>=5.11.0", ] [project.optional-dependencies] diff --git a/src/detectmatelibrary/parsers/json_parser.py b/src/detectmatelibrary/parsers/json_parser.py index 713b8f2..aee11d0 100644 --- a/src/detectmatelibrary/parsers/json_parser.py +++ b/src/detectmatelibrary/parsers/json_parser.py @@ -4,8 +4,8 @@ from detectmatelibrary import schemas from collections.abc import Mapping -from typing import Any, Iterable -import json +from typing import Any, Iterable, Optional +import ujson as json # type: ignore def iter_flatten(obj: dict[str, Any], sep: str = '.') -> Iterable[tuple[str, Any]]: @@ -47,10 +47,13 @@ class JsonParserConfig(CoreParserConfig): method_type: str = "json_parser" timestamp_name: str = "time" content_name: str = "message" - content_parser: str = "JsonMatcherParser" + remove_content_key: bool = False + content_parser: Optional[str] = None class JsonParser(CoreParser): + config: JsonParserConfig # type annotation to help mypy + def __init__( self, name: str = "JsonParser", @@ -58,24 +61,33 @@ def __init__( ) -> None: if isinstance(config, dict): - content_parser_name = config.get("content_parser", "JsonMatcherParser") - content_parser_config = MatcherParserConfig.from_dict(config, content_parser_name) - self.content_parser = MatcherParser(config=content_parser_config) - config = JsonParserConfig.from_dict(config, name) - super().__init__(name=name, config=config) + self.config = JsonParserConfig.from_dict(config, name) + else: + self.config = config + + # Set up content parser if specified + self.content_parser = None + if self.config.content_parser: + if isinstance(config, dict): + content_parser_config = MatcherParserConfig.from_dict(config, self.config.content_parser) + self.content_parser = MatcherParser(config=content_parser_config) + else: + content_parser_config = MatcherParserConfig() + self.content_parser = MatcherParser(config=content_parser_config) - self.time_extractor = KeyExtractor(key_substr=config.timestamp_name) - self.content_extractor = KeyExtractor(key_substr=config.content_name) + super().__init__(name=name, config=self.config) + self.time_extractor = KeyExtractor(key_substr=self.config.timestamp_name) + self.content_extractor = KeyExtractor(key_substr=self.config.content_name) def parse(self, input_: schemas.LogSchema, output_: schemas.ParserSchema) -> None: log = json.loads(input_["log"]) # extract timestamp and content in the most efficient way from the json log timestamp = self.time_extractor.extract(obj=log, delete=True) - content = self.content_extractor.extract(obj=log, delete=True) + content = self.content_extractor.extract(obj=log, delete=self.config.remove_content_key) parsed = {"EventTemplate": "", "Params": [], "EventId": 0} # if the json also contains a message field, parse it for template and parameters - if content: + if self.content_parser is not None and content is not None: log_ = schemas.LogSchema({"log": content}) parsed_content = self.content_parser.process(log_) parsed["EventTemplate"] = parsed_content["template"] # type: ignore diff --git a/src/detectmatelibrary/parsers/template_matcher/_matcher_op.py b/src/detectmatelibrary/parsers/template_matcher/_matcher_op.py index 8760ab2..4195aee 100644 --- a/src/detectmatelibrary/parsers/template_matcher/_matcher_op.py +++ b/src/detectmatelibrary/parsers/template_matcher/_matcher_op.py @@ -14,6 +14,150 @@ def safe_search(pattern: str, string: str, timeout: int = 1) -> regex.Match[str] return result +def tokenize_template(string: str) -> List[str]: + """Split template string treating <*> as tokens.""" + # Split by <*> but keep <*> in the result, then filter empty strings + return [token for token in re.split(r'(<\*>)', string) if token] + + +def exclude_digits(string: str) -> bool: + """Exclude the digits-domain words from partial constant.""" + pattern = r'\d' + digits = re.findall(pattern, string) + if len(digits) == 0 or string[0].isalpha() or any(c.isupper() for c in string): + return False + elif len(digits) >= 4: + return True + else: + return len(digits) / len(string) > 0.3 + + +def normalize_spaces(text: str) -> str: + """Replace consecutive spaces with a single space.""" + return re.sub(r' +', ' ', text) + + +def correct_single_template(template: str, user_strings: set[str] | None = None) -> str: + """Apply all rules to process a template. + + DS (Double Space) BL (Boolean) US (User String) DG (Digit) PS (Path- + like String) WV (Word concatenated with Variable) DV (Dot-separated + Variables) CV (Consecutive Variables) + """ + + boolean = {'true', 'false'} + default_strings = {'null', 'root'} # 'null', 'root', 'admin' + path_delimiters = { # reduced set of delimiters for tokenizing for checking the path-like strings + r'\s', r'\,', r'\!', r'\;', r'\:', + r'\=', r'\|', r'\"', r'\'', r'\+', + r'\[', r'\]', r'\(', r'\)', r'\{', r'\}' + } + token_delimiters = path_delimiters.union({ # all delimiters for tokenizing the remaining rules + r'\.', r'\-', r'\@', r'\#', r'\$', r'\%', r'\&', r'\/' + }) + + if user_strings: + default_strings = default_strings.union(user_strings) + + # apply DS + template = template.strip() + template = re.sub(r'\s+', ' ', template) + + # apply PS + p_tokens = re.split('(' + '|'.join(path_delimiters) + ')', template) + new_p_tokens = [] + for p_token in p_tokens: + if ( + re.match(r'^(\/[^\/]+)+\/?$', p_token) or + re.match(r'.*/.*\..*', p_token) or + re.match(r'^([a-zA-Z0-9-]+\.){3,}[a-z]+$', p_token) + ): + p_token = '<*>' # nosec B105 + + new_p_tokens.append(p_token) + template = ''.join(new_p_tokens) + # tokenize for the remaining rules + tokens = re.split('(' + '|'.join(token_delimiters) + ')', template) # tokenizing while keeping delimiters + new_tokens = [] + for token in tokens: + # apply BL, US + for to_replace in boolean.union(default_strings): + # if token.lower() == to_replace.lower(): + if token == to_replace: + token = '<*>' # nosec B105 + + # apply DG + # Note: hexadecimal num also appears a lot in the logs + # if re.match(r'^\d+$', token) or re.match(r'\b0[xX][0-9a-fA-F]+\b', token): + # token = '<*>' + if exclude_digits(token): + token = '<*>' # nosec B105 + + # apply WV + if re.match(r'^[^\s\/]*<\*>[^\s\/]*$', token) or re.match(r'^<\*>.*<\*>$', token): + token = '<*>' # nosec B105 + # collect the result + new_tokens.append(token) + + # make the template using new_tokens + template = ''.join(new_tokens) + + # Substitute consecutive variables only if separated with any delimiter including "." (DV) + while True: + prev = template + template = re.sub(r'<\*>\.<\*>', '<*>', template) + if prev == template: + break + + # Substitute consecutive variables only if not separated with any delimiter including space (CV) + # NOTE: this should be done at the end + while True: + prev = template + template = re.sub(r'<\*><\*>', '<*>', template) + if prev == template: + break + + while "#<*>#" in template: + template = template.replace("#<*>#", "<*>") + + while "<*>:<*>" in template: + template = template.replace("<*>:<*>", "<*>") + + while "<*>/<*>" in template: + template = template.replace("<*>/<*>", "<*>") + + while " #<*> " in template: + template = template.replace(" #<*> ", " <*> ") + + while "<*>:<*>" in template: + template = template.replace("<*>:<*>", "<*>") + + while "<*>#<*>" in template: + template = template.replace("<*>#<*>", "<*>") + + while "<*>/<*>" in template: + template = template.replace("<*>/<*>", "<*>") + + while "<*>@<*>" in template: + template = template.replace("<*>@<*>", "<*>") + + while "<*>.<*>" in template: + template = template.replace("<*>.<*>", "<*>") + + while ' "<*>" ' in template: + template = template.replace(' "<*>" ', ' <*> ') + + while " '<*>' " in template: + template = template.replace(" '<*>' ", " <*> ") + + while "<*><*>" in template: + template = template.replace("<*><*>", "<*>") + + template = re.sub(r'<\*> [KGTM]?B\b', '<*>', template) + + return template + + class Preprocess: def __init__( self, @@ -43,7 +187,7 @@ def _to_lowercase(s: str) -> str: def __call__(self, text: str) -> str: if self.__re_spaces: - text = text.replace(" ", "") + text = normalize_spaces(text) if self.__re_punctuation: text = text.replace("<*>", "WILDCARD") @@ -80,7 +224,7 @@ def __init__( event_id = 0 for tpl in template_list: cleaned_tpl = self.preprocess(tpl) - tokens = cleaned_tpl.split("<*>") + tokens = tokenize_template(cleaned_tpl) min_len = sum(len(t) for t in tokens) # lower bound to skip impossibles info = { @@ -137,14 +281,21 @@ def extract_parameters(log: str, template: str) -> tuple[str, ...] | None: else: return None + @staticmethod + def correct_single_template(template: str) -> str: + """Apply all rules to process a template.""" + return correct_single_template(template) + def match_template_with_params(self, log: str) -> tuple[str, tuple[str, ...]] | None: """Return (template_string, [param1, param2, ...]) or None.""" - s, candidates = self.manager.candidate_indices(log) - for i in candidates: + for i in range(len(self.manager.templates)): t = self.manager.templates[i] - if len(s) < t["min_len"]: + if len(log) < t["min_len"]: continue - params = self.extract_parameters(log, t["raw"]) + t = self.manager.templates[i] + preprocessed_log = self.manager.preprocess(log) + preprocessed_template = self.correct_single_template(self.manager.preprocess(t["raw"])) + params = self.extract_parameters(preprocessed_log, preprocessed_template) if params is not None: t["count"] += 1 return t["raw"], params From cedefea2727969544f695f62bc5dcb276a116df1 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Thu, 22 Jan 2026 16:09:23 +0100 Subject: [PATCH 14/28] adapt tests --- tests/test_common/test_stability_tracking.py | 8 ++++---- tests/test_parsers/test_json_parser.py | 1 + 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/tests/test_common/test_stability_tracking.py b/tests/test_common/test_stability_tracking.py index 9d5171a..cb06c07 100644 --- a/tests/test_common/test_stability_tracking.py +++ b/tests/test_common/test_stability_tracking.py @@ -290,7 +290,7 @@ def test_get_stable_variables(self): "random_var": f"unique_{i}", }) - stable_vars = trackers.get_stable_variables() + stable_vars = trackers.get_variables_by_classification("STABLE") assert isinstance(stable_vars, list) # "stable_var" should be classified as STATIC @@ -360,7 +360,7 @@ def test_get_stable_variables(self): "random_var": f"unique_{i}", }) - stable_vars = evt.get_stable_variables() + stable_vars = evt.get_variables_by_classification("STABLE") assert isinstance(stable_vars, list) def test_integration_with_stability_tracker(self): @@ -377,7 +377,7 @@ def test_integration_with_stability_tracker(self): # Get data and variables var_names = evt.get_variables() - stable_vars = evt.get_stable_variables() + stable_vars = evt.get_variables_by_classification("STABLE") assert len(var_names) == 3 assert isinstance(stable_vars, list) @@ -481,7 +481,7 @@ def test_event_variable_tracker_real_world_scenario(self): }) var_names = evt.get_variables() - stable_vars = evt.get_stable_variables() + stable_vars = evt.get_variables_by_classification("STABLE") assert len(var_names) == 5 assert isinstance(stable_vars, list) diff --git a/tests/test_parsers/test_json_parser.py b/tests/test_parsers/test_json_parser.py index 74b22b3..8bab108 100644 --- a/tests/test_parsers/test_json_parser.py +++ b/tests/test_parsers/test_json_parser.py @@ -134,6 +134,7 @@ def test_parse_with_content_parser(self): "method_type": "json_parser", "timestamp_name": "time", "content_name": "message", + "content_parser": "JsonMatcherParser" }, "JsonMatcherParser": { "auto_config": True, From 9d996ed531cc5cbb4d0551eed5d83dd33220eb53 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Thu, 22 Jan 2026 16:09:52 +0100 Subject: [PATCH 15/28] adapt trackers --- .../event_data_structures/trackers.py | 29 ++++++++++++------- 1 file changed, 18 insertions(+), 11 deletions(-) diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py index 1514cc4..7332618 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py @@ -4,7 +4,7 @@ # It is interchangable with other EventDataStructure implementations. # from src.detectmatelibrary.utils.data_buffer import DataBuffer, ArgsBuffer, BufferMode -from typing import Any, Dict, Set, Type, List +from typing import Any, Dict, Literal, Set, Type, List from dataclasses import dataclass, field import numpy as np @@ -189,14 +189,18 @@ def classify(self) -> Dict[str, Any]: classifications[var_name] = tracker.classify() return classifications - def get_stable_variables(self) -> List[str]: - """Get a list of variable names that are classified as stable.""" - stable_vars = [] + def get_variables_by_classification( + self, + classification_type: Literal["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] + ) -> List[str]: + """Get a list of variable names that are classified as the given + type.""" + variables = [] for var_name, tracker in self.trackers.items(): classification = tracker.classify() - if classification.type == "STABLE": - stable_vars.append(var_name) - return stable_vars + if classification.type == classification_type: + variables.append(var_name) + return variables def __repr__(self) -> str: strs = format_dict_repr(self.trackers, indent="\t") @@ -225,9 +229,12 @@ def get_variables(self) -> list[str]: """Get the list of tracked variable names.""" return list(self.variable_trackers.get_trackers().keys()) - def get_stable_variables(self) -> List[str]: - """Get a list of variable names that are classified as stable.""" - return self.variable_trackers.get_stable_variables() + def get_variables_by_classification( + self, classification_type: Literal["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] + ) -> List[str]: + """Get a list of variable names that are classified as the given + type.""" + return self.variable_trackers.get_variables_by_classification(classification_type) @staticmethod def to_data(raw_data: Dict[str, Any]) -> Dict[str, Any]: @@ -236,4 +243,4 @@ def to_data(raw_data: Dict[str, Any]) -> Dict[str, Any]: def __repr__(self) -> str: strs = format_dict_repr(self.variable_trackers.get_trackers(), indent="\t") - return f"EventVariableTracker(data={{\n\t{strs}\n}}" + return f"EventVariableTracker(data={{\n\t{strs}\n}})" From 11c28f1f111fd63c2012a01d0332934ce3abfbdc Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Mon, 26 Jan 2026 14:40:25 +0100 Subject: [PATCH 16/28] add a function to get the number of logs in the log file --- src/detectmatelibrary/readers/log_file.py | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/src/detectmatelibrary/readers/log_file.py b/src/detectmatelibrary/readers/log_file.py index ea55b07..4949fa6 100644 --- a/src/detectmatelibrary/readers/log_file.py +++ b/src/detectmatelibrary/readers/log_file.py @@ -60,4 +60,17 @@ def read(self, output_: schemas.LogSchema) -> bool: def reset(self) -> None: self.__log_generator = self.read_logs() - self.is_over = False \ No newline at end of file + self.is_over = False + + def get_number_of_logs(self) -> int: + """Returns the number of lines in the log file.""" + path = self.config.file + if not os.path.exists(path): + raise LogsNotFoundError(f"Logs file not found at: {path}") + if not os.access(path, os.R_OK): + raise LogsNoPermissionError( + f"You do not have the permission to access logs: {path}" + ) + + with open(path, "r") as file: + return sum(1 for _ in file) \ No newline at end of file From 77d0754db515cc8b1589d7b6bfcc4692fc67c621 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Tue, 27 Jan 2026 16:04:01 +0100 Subject: [PATCH 17/28] refactor trackers module into package structure and remove notebooks Reorganize trackers.py into a proper package with separate modules for event tracking, multi-tracking, stability classification and conversion. Also removes unused demo notebooks and fixes method signatures for consistency. Co-Authored-By: Claude Opus 4.5 --- notebooks/persistency_demo.ipynb | 533 ------------------ notebooks/reader_parser_detector.ipynb | 154 ----- .../persistency/event_data_structures/base.py | 3 +- .../event_data_structures/dataframes.py | 6 +- .../event_data_structures/trackers.py | 246 -------- .../trackers/__init__.py | 22 + .../classifiers/stability_classifier.py | 90 +++ .../trackers/converter.py | 30 + .../trackers/event_tracker.py | 59 ++ .../trackers/multi_tracker.py | 49 ++ .../trackers/single_trackers/base.py | 28 + .../single_trackers/stability_tracker.py | 69 +++ .../common/persistency/event_persistency.py | 2 +- .../detectors/new_value_combo_detector.py | 14 +- tests/test_common/test_persistency.py | 12 +- tests/test_common/test_stability_tracking.py | 117 ++-- uv.lock | 54 ++ 17 files changed, 503 insertions(+), 985 deletions(-) delete mode 100644 notebooks/persistency_demo.ipynb delete mode 100644 notebooks/reader_parser_detector.ipynb delete mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/__init__.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/classifiers/stability_classifier.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/converter.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/event_tracker.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/multi_tracker.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/base.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/stability_tracker.py diff --git a/notebooks/persistency_demo.ipynb b/notebooks/persistency_demo.ipynb deleted file mode 100644 index db6af59..0000000 --- a/notebooks/persistency_demo.ipynb +++ /dev/null @@ -1,533 +0,0 @@ -{ - "cells": [ - { - "cell_type": "code", - "execution_count": null, - "id": "54215189", - "metadata": {}, - "outputs": [], - "source": [ - "import os\n", - "os.chdir(\"../\")\n", - "\n", - "from detectmatelibrary.detectors.new_value_combo_detector import NewValueComboDetector, schemas\n", - "from detectmatelibrary.parsers.template_matcher import MatcherParser\n", - "from detectmatelibrary.readers.log_file import LogFileReader\n", - "\n", - "from detectmatelibrary.common.persistency.event_data_structures.trackers import (\n", - " EventVariableTracker, StabilityTracker\n", - ")\n", - "from detectmatelibrary.common.persistency.event_data_structures.dataframes import (\n", - " EventDataFrame, ChunkedEventDataFrame\n", - ")\n", - "from detectmatelibrary.common.persistency.event_persistency import EventPersistency\n", - "\n", - "import logging\n", - "logging.getLogger().setLevel(logging.ERROR) # Only show errors" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "id": "4cd73416", - "metadata": {}, - "outputs": [], - "source": [ - "import yaml\n", - "\n", - "\n", - "with open(\"config/pipeline_config_default.yaml\", 'r') as f:\n", - " config = yaml.safe_load(f)" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "id": "54ae5e78", - "metadata": {}, - "outputs": [], - "source": [ - "reader = LogFileReader(config=config)\n", - "parser = MatcherParser(config=config)\n", - "detector = NewValueComboDetector(config=config)\n", - "\n", - "persistency1 = EventPersistency(\n", - " event_data_class=EventVariableTracker,\n", - " event_data_kwargs={\"tracker_type\": StabilityTracker},\n", - ")\n", - "\n", - "persistency2 = EventPersistency(\n", - " event_data_class=EventDataFrame,\n", - ")\n", - "\n", - "persistency3 = EventPersistency(\n", - " event_data_class=ChunkedEventDataFrame,\n", - ")" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "id": "f23c07d8", - "metadata": {}, - "outputs": [], - "source": [ - "for i in range(1000):\n", - " log = reader.process(as_bytes=False)\n", - " parsed_log = parser.process(log)\n", - "\n", - " persistency1.ingest_event(\n", - " event_id=parsed_log['EventID'],\n", - " event_template=parsed_log['template'],\n", - " variables=parsed_log['variables'],\n", - " log_format_variables=parsed_log['logFormatVariables'],\n", - " )\n", - " persistency2.ingest_event(\n", - " event_id=parsed_log['EventID'],\n", - " event_template=parsed_log['template'],\n", - " variables=parsed_log['variables'],\n", - " log_format_variables=parsed_log['logFormatVariables'],\n", - " )\n", - " persistency3.ingest_event(\n", - " event_id=parsed_log['EventID'],\n", - " event_template=parsed_log['template'],\n", - " variables=parsed_log['variables'],\n", - " log_format_variables=parsed_log['logFormatVariables'],\n", - " )" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "id": "651e272e", - "metadata": {}, - "outputs": [ - { - "data": { - "text/plain": [ - "{0: EventVariableTracker(data={\n", - " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (642)'), change_series=[1, 1, 1, '...', 1, 1, 1], unique_set={(1642820941.151:1057), (1642847941.596:1245), (1642785421.190:843), ..., (1642833541.196:1147), (1642799821.579:931), (1642822741.217:1074)}, RLE=[(True, 642)])\n", - " \tType: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.03125, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 1, 1, '...', 0, 0, 0], unique_set={USER_START, CRED_DISP, USER_ACCT, USER_END, CRED_ACQ}, RLE=[(True, 5), (False, 637)])\n", - " \tvar_0: StabilityTracker(classification=Classification(type='UNSTABLE', reason='No classification matched; variable is unstable'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={16092, 14930, 15774, ..., 10883, 13737, 19301}, RLE=[(True, 1), (False, 4), (True, 1), '...', (False, 4), (True, 1), (False, 3)])\n", - " \tvar_1: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 641)])\n", - " \tvar_2: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.01875, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 1, '...', 0, 0, 0], unique_set={1002, 4294967295, 0}, RLE=[(True, 1), (False, 1), (True, 1), (False, 127), (True, 1), (False, 511)])\n", - " \tvar_3: StabilityTracker(classification=Classification(type='UNSTABLE', reason='No classification matched; variable is unstable'), change_series=[1, 0, 1, '...', 0, 1, 0], unique_set={120, 110, 117, ..., 183, 133, 162}, RLE=[(True, 1), (False, 1), (True, 1), '...', (False, 4), (True, 1), (False, 1)])\n", - " \tvar_4: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.025, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 1, 1, '...', 0, 0, 0], unique_set={PAM:session_open, PAM:session_close, PAM:accounting, PAM:setcred}, RLE=[(True, 3), (False, 1), (True, 1), (False, 637)])\n", - " \tvar_5: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.0125, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={\"root\", \"jhall\"}, RLE=[(True, 1), (False, 129), (True, 1), (False, 511)])\n", - " \tvar_6: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.0125, 0.006211180124223602, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={\"/usr/sbin/sshd\", \"/usr/sbin/cron\", \"/lib/systemd/systemd\"}, RLE=[(True, 1), (False, 129), (True, 1), (False, 48), (True, 1), (False, 462)])\n", - " \tvar_7: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.0125, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={172.19.131.174, ?}, RLE=[(True, 1), (False, 129), (True, 1), (False, 511)])\n", - " \tvar_8: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.0125, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={172.19.131.174, ?}, RLE=[(True, 1), (False, 129), (True, 1), (False, 511)])\n", - " \tvar_9: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.0125, 0.006211180124223602, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={ssh, cron, ?}, RLE=[(True, 1), (False, 129), (True, 1), (False, 48), (True, 1), (False, 462)])\n", - " \tvar_10: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={success}, RLE=[(True, 1), (False, 641)])\n", - " },\n", - " 2: EventVariableTracker(data={\n", - " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (129)'), change_series=[1, 1, 1, '...', 1, 1, 1], unique_set={(1642774000.779:760), (1642748941.234:583), (1642820941.151:1058), ..., (1642819141.100:1050), (1642763341.623:689), (1642749421.260:591)}, RLE=[(True, 129)])\n", - " \tType: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={LOGIN}, RLE=[(True, 1), (False, 128)])\n", - " \tvar_0: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (129)'), change_series=[1, 1, 1, '...', 1, 1, 1], unique_set={16092, 14930, 15774, ..., 10883, 13737, 19301}, RLE=[(True, 129)])\n", - " \tvar_1: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 128)])\n", - " \tvar_2: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 128)])\n", - " \tvar_3: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.03125, 0.03125, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={1002, 0}, RLE=[(True, 1), (False, 34), (True, 1), (False, 93)])\n", - " \tvar_4: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={(none)}, RLE=[(True, 1), (False, 128)])\n", - " \tvar_5: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 128)])\n", - " \tvar_6: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (129)'), change_series=[1, 1, 1, '...', 1, 1, 1], unique_set={120, 110, 117, ..., 183, 133, 162}, RLE=[(True, 129)])\n", - " \tvar_7: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={1}, RLE=[(True, 1), (False, 128)])\n", - " },\n", - " 1: EventVariableTracker(data={\n", - " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (215)'), change_series=[1, 1, 1, '...', 1, 1, 1], unique_set={(1642790352.631:877), (1642764532.512:701), (1642746730.000:557), ..., (1642846152.628:1232), (1642761573.588:680), (1642726457.339:397)}, RLE=[(True, 215)])\n", - " \tType: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.03773584905660377, 0.0, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 1, 0, '...', 0, 0, 0], unique_set={SERVICE_START, SERVICE_STOP}, RLE=[(True, 2), (False, 213)])\n", - " \tvar_0: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={1}, RLE=[(True, 1), (False, 214)])\n", - " \tvar_1: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 214)])\n", - " \tvar_2: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 214)])\n", - " \tvar_3: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 214)])\n", - " \tvar_4: StabilityTracker(classification=Classification(type='STABLE', reason='Segment means of change series [0.20754716981132076, 0.09259259259259259, 0.0, 0.0] are below segment thresholds: [1.1, 0.3, 0.1, 0.01]'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={systemd-udevd, systemd-journald, systemd-tmpfiles-clean, ..., apt-daily-upgrade, user@1002, systemd-timesyncd}, RLE=[(True, 1), (False, 3), (True, 1), '...', (False, 17), (True, 1), (False, 128)])\n", - " \tvar_5: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={\"systemd\"}, RLE=[(True, 1), (False, 214)])\n", - " \tvar_6: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={\"/lib/systemd/systemd\"}, RLE=[(True, 1), (False, 214)])\n", - " \tvar_7: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={?}, RLE=[(True, 1), (False, 214)])\n", - " \tvar_8: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={?}, RLE=[(True, 1), (False, 214)])\n", - " \tvar_9: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={?}, RLE=[(True, 1), (False, 214)])\n", - " \tvar_10: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, '...', 0, 0, 0], unique_set={success}, RLE=[(True, 1), (False, 214)])\n", - " },\n", - " 3: EventVariableTracker(data={\n", - " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={(1642746582.133:531), (1642746582.137:532), (1642746582.133:530), (1642746582.129:529)}, RLE=[(True, 4)])\n", - " \tType: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={AVC}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_0: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"STATUS\"}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_1: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"profile_replace\"}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_2: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"same as current profile, skipping\"}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_3: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"unconfined\"}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_4: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={\"/usr/lib/connman/scripts/dhclient-script\", \"/usr/lib/NetworkManager/nm-dhcp-helper\", \"/usr/lib/NetworkManager/nm-dhcp-client.action\", \"/sbin/dhclient\"}, RLE=[(True, 4)])\n", - " \tvar_5: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={23662}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_6: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"apparmor_parser\"}, RLE=[(True, 1), (False, 3)])\n", - " },\n", - " 4: EventVariableTracker(data={\n", - " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={(1642746582.133:531), (1642746582.137:532), (1642746582.133:530), (1642746582.129:529)}, RLE=[(True, 4)])\n", - " \tType: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={SYSCALL}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_0: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={c000003e}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_1: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={1}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_2: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={yes}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_3: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={25025, 24993, 44953, 23625}, RLE=[(True, 4)])\n", - " \tvar_4: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={6}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_5: StabilityTracker(classification=Classification(type='UNSTABLE', reason='No classification matched; variable is unstable'), change_series=[1, 1, 0, 0], unique_set={55688bbce110, 55688bbf9b10}, RLE=[(True, 2), (False, 2)])\n", - " \tvar_6: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={5c49, 61a1, af99, 61c1}, RLE=[(True, 4)])\n", - " \tvar_7: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_8: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_9: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={23661}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_10: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={23662}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_11: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_12: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_13: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_14: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_15: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_16: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_17: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_18: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_19: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={0}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_20: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={pts1}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_21: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={4294967295}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_22: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"apparmor_parser\"}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_23: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={\"/sbin/apparmor_parser\"}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_24: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={(null)}, RLE=[(True, 1), (False, 3)])\n", - " },\n", - " 5: EventVariableTracker(data={\n", - " \tTime: StabilityTracker(classification=Classification(type='RANDOM', reason='Unique set size equals number of samples (4)'), change_series=[1, 1, 1, 1], unique_set={(1642746582.133:531), (1642746582.137:532), (1642746582.133:530), (1642746582.129:529)}, RLE=[(True, 4)])\n", - " \tType: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={PROCTITLE}, RLE=[(True, 1), (False, 3)])\n", - " \tvar_0: StabilityTracker(classification=Classification(type='STATIC', reason='Unique set size is 1'), change_series=[1, 0, 0, 0], unique_set={61707061726D6F725F706172736572002D72002D54002D57002F6574632F61707061726D6F722E642F7362696E2E6468636C69656E74}, RLE=[(True, 1), (False, 3)])\n", - " },\n", - " 6: EventVariableTracker(data={\n", - " \tTime: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 1], unique_set={(1642774001.811:765), (1642761574.840:683)}, RLE=[(True, 2)])\n", - " \tType: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={USER_LOGIN}, RLE=[(True, 1), (False, 1)])\n", - " \tvar_0: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 1], unique_set={15014, 14362}, RLE=[(True, 2)])\n", - " \tvar_1: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={0}, RLE=[(True, 1), (False, 1)])\n", - " \tvar_2: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={1002}, RLE=[(True, 1), (False, 1)])\n", - " \tvar_3: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 1], unique_set={100, 111}, RLE=[(True, 2)])\n", - " \tvar_4: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={login}, RLE=[(True, 1), (False, 1)])\n", - " \tvar_5: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={1002}, RLE=[(True, 1), (False, 1)])\n", - " \tvar_6: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={\"/usr/sbin/sshd\"}, RLE=[(True, 1), (False, 1)])\n", - " \tvar_7: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={172.19.131.174}, RLE=[(True, 1), (False, 1)])\n", - " \tvar_8: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={172.19.131.174}, RLE=[(True, 1), (False, 1)])\n", - " \tvar_9: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={/dev/pts/0}, RLE=[(True, 1), (False, 1)])\n", - " \tvar_10: StabilityTracker(classification=Classification(type='INSUFFICIENT_DATA', reason='Not enough data (have 2, need 3)'), change_series=[1, 0], unique_set={success}, RLE=[(True, 1), (False, 1)])\n", - " }}" - ] - }, - "execution_count": 5, - "metadata": {}, - "output_type": "execute_result" - } - ], - "source": [ - "persistency1.get_events_data()" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "id": "6e70d2b3", - "metadata": {}, - "outputs": [ - { - "data": { - "text/html": [ - "
\n", - "\n", - "\n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - " \n", - "
TimeTypevar_0var_1var_2var_3var_4var_5var_6var_7var_8var_9var_10
0(1642723741.072:375)USER_ACCT10125042949672954294967295PAM:accounting\"root\"\"/usr/sbin/cron\"??cronsuccess
1(1642723741.072:376)CRED_ACQ10125042949672954294967295PAM:setcred\"root\"\"/usr/sbin/cron\"??cronsuccess
2(1642723741.080:378)USER_START101250065PAM:session_open\"root\"\"/usr/sbin/cron\"??cronsuccess
3(1642723741.084:379)CRED_DISP101250065PAM:setcred\"root\"\"/usr/sbin/cron\"??cronsuccess
4(1642723741.084:380)USER_END101250065PAM:session_close\"root\"\"/usr/sbin/cron\"??cronsuccess
..........................................
637(1642865941.046:1359)USER_END2019100192PAM:session_close\"root\"\"/usr/sbin/cron\"??cronsuccess
638(1642867741.073:1362)USER_ACCT20264042949672954294967295PAM:accounting\"root\"\"/usr/sbin/cron\"??cronsuccess
639(1642867741.077:1363)CRED_ACQ20264042949672954294967295PAM:setcred\"root\"\"/usr/sbin/cron\"??cronsuccess
640(1642867741.081:1365)USER_START2026400193PAM:session_open\"root\"\"/usr/sbin/cron\"??cronsuccess
641(1642867741.085:1366)CRED_DISP2026400193PAM:setcred\"root\"\"/usr/sbin/cron\"??cronsuccess
\n", - "

642 rows × 13 columns

\n", - "
" - ], - "text/plain": [ - " Time Type var_0 var_1 var_2 var_3 \\\n", - "0 (1642723741.072:375) USER_ACCT 10125 0 4294967295 4294967295 \n", - "1 (1642723741.072:376) CRED_ACQ 10125 0 4294967295 4294967295 \n", - "2 (1642723741.080:378) USER_START 10125 0 0 65 \n", - "3 (1642723741.084:379) CRED_DISP 10125 0 0 65 \n", - "4 (1642723741.084:380) USER_END 10125 0 0 65 \n", - ".. ... ... ... ... ... ... \n", - "637 (1642865941.046:1359) USER_END 20191 0 0 192 \n", - "638 (1642867741.073:1362) USER_ACCT 20264 0 4294967295 4294967295 \n", - "639 (1642867741.077:1363) CRED_ACQ 20264 0 4294967295 4294967295 \n", - "640 (1642867741.081:1365) USER_START 20264 0 0 193 \n", - "641 (1642867741.085:1366) CRED_DISP 20264 0 0 193 \n", - "\n", - " var_4 var_5 var_6 var_7 var_8 var_9 var_10 \n", - "0 PAM:accounting \"root\" \"/usr/sbin/cron\" ? ? cron success \n", - "1 PAM:setcred \"root\" \"/usr/sbin/cron\" ? ? cron success \n", - "2 PAM:session_open \"root\" \"/usr/sbin/cron\" ? ? cron success \n", - "3 PAM:setcred \"root\" \"/usr/sbin/cron\" ? ? cron success \n", - "4 PAM:session_close \"root\" \"/usr/sbin/cron\" ? ? cron success \n", - ".. ... ... ... ... ... ... ... \n", - "637 PAM:session_close \"root\" \"/usr/sbin/cron\" ? ? cron success \n", - "638 PAM:accounting \"root\" \"/usr/sbin/cron\" ? ? cron success \n", - "639 PAM:setcred \"root\" \"/usr/sbin/cron\" ? ? cron success \n", - "640 PAM:session_open \"root\" \"/usr/sbin/cron\" ? ? cron success \n", - "641 PAM:setcred \"root\" \"/usr/sbin/cron\" ? ? cron success \n", - "\n", - "[642 rows x 13 columns]" - ] - }, - "execution_count": 9, - "metadata": {}, - "output_type": "execute_result" - } - ], - "source": [ - "persistency2.get_event_data(0)" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "id": "8580b0d3", - "metadata": {}, - "outputs": [ - { - "data": { - "text/plain": [ - "{0: ChunkedEventDataFrame(df=..., rows=642, chunks=642, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6', 'var_7', 'var_8', 'var_9', 'var_10']),\n", - " 2: ChunkedEventDataFrame(df=..., rows=129, chunks=129, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6', 'var_7']),\n", - " 1: ChunkedEventDataFrame(df=..., rows=215, chunks=215, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6', 'var_7', 'var_8', 'var_9', 'var_10']),\n", - " 3: ChunkedEventDataFrame(df=..., rows=4, chunks=4, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6']),\n", - " 4: ChunkedEventDataFrame(df=..., rows=4, chunks=4, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6', 'var_7', 'var_8', 'var_9', 'var_10', 'var_11', 'var_12', 'var_13', 'var_14', 'var_15', 'var_16', 'var_17', 'var_18', 'var_19', 'var_20', 'var_21', 'var_22', 'var_23', 'var_24']),\n", - " 5: ChunkedEventDataFrame(df=..., rows=4, chunks=4, variables=['Time', 'Type', 'var_0']),\n", - " 6: ChunkedEventDataFrame(df=..., rows=2, chunks=2, variables=['Time', 'Type', 'var_0', 'var_1', 'var_2', 'var_3', 'var_4', 'var_5', 'var_6', 'var_7', 'var_8', 'var_9', 'var_10'])}" - ] - }, - "execution_count": 10, - "metadata": {}, - "output_type": "execute_result" - } - ], - "source": [ - "persistency3.get_events_data()" - ] - } - ], - "metadata": { - "kernelspec": { - "display_name": "detectmatelibrary (3.12.3)", - "language": "python", - "name": "python3" - }, - "language_info": { - "codemirror_mode": { - "name": "ipython", - "version": 3 - }, - "file_extension": ".py", - "mimetype": "text/x-python", - "name": "python", - "nbconvert_exporter": "python", - "pygments_lexer": "ipython3", - "version": "3.12.3" - } - }, - "nbformat": 4, - "nbformat_minor": 5 -} diff --git a/notebooks/reader_parser_detector.ipynb b/notebooks/reader_parser_detector.ipynb deleted file mode 100644 index 8e36449..0000000 --- a/notebooks/reader_parser_detector.ipynb +++ /dev/null @@ -1,154 +0,0 @@ -{ - "cells": [ - { - "cell_type": "code", - "execution_count": null, - "id": "54215189", - "metadata": {}, - "outputs": [], - "source": [ - "import os\n", - "os.chdir(\"../\")\n", - "\n", - "from detectmatelibrary.detectors.new_value_combo_detector import NewValueComboDetector, schemas\n", - "from detectmatelibrary.parsers.template_matcher import MatcherParser\n", - "from detectmatelibrary.readers.log_file import LogFileReader\n", - "\n", - "from detectmatelibrary.common.persistency.event_data_structures.trackers import (\n", - " EventVariableTracker, StabilityTracker\n", - ")\n", - "from detectmatelibrary.common.persistency.event_data_structures.dataframes import (\n", - " EventDataFrame, ChunkedEventDataFrame\n", - ")\n", - "from detectmatelibrary.common.persistency.event_persistency import EventPersistency\n", - "\n", - "import logging\n", - "logging.getLogger().setLevel(logging.ERROR) # Only show errors" - ] - }, - { - "cell_type": "code", - "execution_count": 8, - "id": "4cd73416", - "metadata": {}, - "outputs": [], - "source": [ - "import yaml\n", - "\n", - "\n", - "with open(\"config/pipeline_config_default.yaml\", 'r') as f:\n", - " config = yaml.safe_load(f)" - ] - }, - { - "cell_type": "code", - "execution_count": 9, - "id": "54ae5e78", - "metadata": {}, - "outputs": [], - "source": [ - "reader = LogFileReader(config=config)\n", - "parser = MatcherParser(config=config)\n", - "detector = NewValueComboDetector(config=config)\n", - "\n", - "output = schemas.DetectorSchema()" - ] - }, - { - "cell_type": "code", - "execution_count": 10, - "id": "f23c07d8", - "metadata": {}, - "outputs": [], - "source": [ - "reader.reset()\n", - "for i in range(1000):\n", - " log = reader.process(as_bytes=False)\n", - " parsed_log = parser.process(log)\n", - " detector.configure(parsed_log)\n", - "\n", - "detector.set_configuration()" - ] - }, - { - "cell_type": "code", - "execution_count": 11, - "id": "ddc59204", - "metadata": {}, - "outputs": [], - "source": [ - "reader.reset()\n", - "for i in range(1000):\n", - " log = reader.process(as_bytes=False)\n", - " parsed_log = parser.process(log)\n", - " detector.train(parsed_log)" - ] - }, - { - "cell_type": "code", - "execution_count": 12, - "id": "651e272e", - "metadata": {}, - "outputs": [], - "source": [ - "predictions = {}\n", - "\n", - "for i in range(1000):\n", - " log = reader.process(as_bytes=False)\n", - " parsed_log = parser.process(log)\n", - " prediction = detector.detect(parsed_log, output_=output)\n", - " predictions[i] = prediction\n" - ] - }, - { - "cell_type": "code", - "execution_count": 13, - "id": "51daa602", - "metadata": {}, - "outputs": [ - { - "data": { - "text/plain": [ - "[(859, True),\n", - " (860, True),\n", - " (861, True),\n", - " (862, True),\n", - " (864, True),\n", - " (865, True),\n", - " (866, True),\n", - " (867, True)]" - ] - }, - "execution_count": 13, - "metadata": {}, - "output_type": "execute_result" - } - ], - "source": [ - "# get true predictions\n", - "[(i, is_anomaly) for i, is_anomaly in predictions.items() if is_anomaly]" - ] - } - ], - "metadata": { - "kernelspec": { - "display_name": "detectmatelibrary (3.12.3)", - "language": "python", - "name": "python3" - }, - "language_info": { - "codemirror_mode": { - "name": "ipython", - "version": 3 - }, - "file_extension": ".py", - "mimetype": "text/x-python", - "name": "python", - "nbconvert_exporter": "python", - "pygments_lexer": "ipython3", - "version": "3.12.3" - } - }, - "nbformat": 4, - "nbformat_minor": 5 -} diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/base.py b/src/detectmatelibrary/common/persistency/event_data_structures/base.py index 86ac25e..8319e33 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/base.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/base.py @@ -19,9 +19,8 @@ def get_data(self) -> Any: ... @abstractmethod def get_variables(self) -> List[str]: ... - @classmethod @abstractmethod - def to_data(cls, raw_data: Any) -> Any: + def to_data(self, raw_data: Any) -> Any: """Convert raw data into the appropriate data format for storage.""" pass diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py index b3009a2..16921f4 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py @@ -31,8 +31,7 @@ def get_data(self) -> pd.DataFrame: def get_variables(self) -> List[str]: return list(self.data.columns) - @staticmethod - def to_data(raw_data: Dict[int | str, Any]) -> pd.DataFrame: + def to_data(self, raw_data: Dict[int | str, Any]) -> pd.DataFrame: data = {key: [value] for key, value in raw_data.items()} return pd.DataFrame(data) @@ -105,8 +104,7 @@ def get_variables(self) -> Any: return [] return self.chunks[0].columns - @staticmethod - def to_data(raw_data: Dict[str, List[Any]]) -> pl.DataFrame: + def to_data(self, raw_data: Dict[str, List[Any]]) -> pl.DataFrame: return pl.DataFrame(raw_data) def __repr__(self) -> str: diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py deleted file mode 100644 index 7332618..0000000 --- a/src/detectmatelibrary/common/persistency/event_data_structures/trackers.py +++ /dev/null @@ -1,246 +0,0 @@ -# A tracker is a data structure that stores a specific feature of a variable -# and tracks the behavior of that feature over time/events. -# It operates within the persistency framework to monitor how variables evolve. -# It is interchangable with other EventDataStructure implementations. - -# from src.detectmatelibrary.utils.data_buffer import DataBuffer, ArgsBuffer, BufferMode -from typing import Any, Dict, Literal, Set, Type, List -from dataclasses import dataclass, field -import numpy as np - -from detectmatelibrary.utils.preview_helpers import list_preview_str, format_dict_repr -from detectmatelibrary.utils.RLE_list import RLEList - -from .base import EventDataStructure - - -class StabilityClassifier: - """Classifier for stability based on segment means.""" - def __init__(self, segment_thresholds: List[float], min_samples: int = 10): - self.segment_threshs = segment_thresholds - self.min_samples = min_samples - # for RLELists - self.segment_sums = [0.0] * len(segment_thresholds) - self.segment_counts = [0] * len(segment_thresholds) - self.n_segments = len(self.segment_threshs) - # for lists - self.segment_means: List[float] = [] - - def is_stable(self, change_series: RLEList[bool] | List[bool]) -> bool: - """Determine if a list of segment means is stable. - - Works efficiently with RLEList without expanding to a full list. - """ - # Handle both RLEList and regular list - if isinstance(change_series, RLEList): - total_len = len(change_series) - if total_len == 0: - return True - - # Calculate segment boundaries - segment_size = total_len / self.n_segments - segment_boundaries = [int(i * segment_size) for i in range(self.n_segments + 1)] - segment_boundaries[-1] = total_len - - # Compute segment means directly from RLE runs - segment_sums = [0.0] * self.n_segments - segment_counts = [0] * self.n_segments - - position = 0 - for value, count in change_series.runs(): - run_start = position - run_end = position + count - - # Find which segments this run overlaps with - for seg_idx in range(self.n_segments): - seg_start = segment_boundaries[seg_idx] - seg_end = segment_boundaries[seg_idx + 1] - - # Calculate overlap between run and segment - overlap_start = max(run_start, seg_start) - overlap_end = min(run_end, seg_end) - overlap_count = max(0, overlap_end - overlap_start) - - if overlap_count > 0: - segment_sums[seg_idx] += value * overlap_count - segment_counts[seg_idx] += overlap_count - - position = run_end - - # Calculate means - self.segment_means = [ - segment_sums[i] / segment_counts[i] if segment_counts[i] > 0 else np.nan - for i in range(self.n_segments) - ] - else: - # Original implementation for regular lists - self.segment_means = self._compute_segment_means(change_series) - return all([not q >= thresh for q, thresh in zip(self.segment_means, self.segment_threshs)]) - - def _compute_segment_means(self, change_series: List[bool]) -> List[float]: - """Get means of each segment for a normal list.""" - segments = np.array_split(change_series, self.n_segments) - return list(map(lambda x: np.mean(x) if len(x) > 0 else np.nan, segments)) - - def get_last_segment_means(self) -> List[float]: - return self.segment_means - - def get_segment_thresholds(self) -> List[float]: - return self.segment_threshs - - def __call__(self, change_series: RLEList[bool] | List[bool]) -> bool: - return self.is_stable(change_series) - - def __repr__(self) -> str: - return ( - f"StabilityClassifier(segment_threshs={self.segment_threshs}, " - f"segment_means={self.segment_means})" - ) - - -@dataclass -class Classification: - type: str = "" - reason: str = "" - - -class StabilityTracker: - """Tracks whether a variable is converging to a constant value.""" - - def __init__(self, min_samples: int = 3) -> None: - self.min_samples = min_samples - self.change_series: RLEList[bool] = RLEList() - self.unique_set: Set[Any] = set() - self.stability_classifier: StabilityClassifier = StabilityClassifier( - segment_thresholds=[1.1, 0.3, 0.1, 0.01], - ) - - def add_value(self, value: Any) -> None: - """Add a new value to the tracker.""" - unique_set_size_before = len(self.unique_set) - self.unique_set.add(value) - has_changed = len(self.unique_set) - unique_set_size_before > 0 - self.change_series.append(has_changed) - - def classify(self) -> Classification: - """Classify the variable.""" - if len(self.change_series) < self.min_samples: - return Classification( - type="INSUFFICIENT_DATA", - reason=f"Not enough data (have {len(self.change_series)}, need {self.min_samples})" - ) - elif len(self.unique_set) == 1: - return Classification( - type="STATIC", - reason="Unique set size is 1" - ) - elif len(self.unique_set) == len(self.change_series): - return Classification( - type="RANDOM", - reason=f"Unique set size equals number of samples ({len(self.change_series)})" - ) - elif self.stability_classifier.is_stable(self.change_series): - return Classification( - type="STABLE", - reason=( - f"Segment means of change series {self.stability_classifier.get_last_segment_means()} " - f"are below segment thresholds: {self.stability_classifier.get_segment_thresholds()}" - ) - ) - else: - return Classification( - type="UNSTABLE", - reason="No classification matched; variable is unstable" - ) - - def __repr__(self) -> str: - # show only part of the series for brevity - series_str = list_preview_str(self.change_series) - unique_set_str = "{" + ", ".join(map(str, list_preview_str(self.unique_set))) + "}" - RLE_str = list_preview_str(self.change_series.runs()) - return ( - f"StabilityTracker(classification={self.classify()}, change_series={series_str}, " - f"unique_set={unique_set_str}, RLE={RLE_str})" - ) - - -class VariableTrackers: - """Tracks multiple variables using individual trackers.""" - - def __init__(self, tracker_type: Type[StabilityTracker] = StabilityTracker) -> None: - self.trackers: Dict[str, StabilityTracker] = {} - self.tracker_type: Type[StabilityTracker] = tracker_type - - def add_data(self, data_object: Dict[str, Any]) -> None: - """Add data to the appropriate variable trackers.""" - for var_name, value in data_object.items(): - if var_name not in self.trackers: - self.trackers[var_name] = self.tracker_type() - self.trackers[var_name].add_value(value) - - def get_trackers(self) -> Dict[str, StabilityTracker]: - """Get the current variable trackers.""" - return self.trackers - - def classify(self) -> Dict[str, Any]: - """Classify all tracked variables.""" - classifications = {} - for var_name, tracker in self.trackers.items(): - classifications[var_name] = tracker.classify() - return classifications - - def get_variables_by_classification( - self, - classification_type: Literal["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] - ) -> List[str]: - """Get a list of variable names that are classified as the given - type.""" - variables = [] - for var_name, tracker in self.trackers.items(): - classification = tracker.classify() - if classification.type == classification_type: - variables.append(var_name) - return variables - - def __repr__(self) -> str: - strs = format_dict_repr(self.trackers, indent="\t") - return f"VariableTrackers{{\n\t{strs}\n}}\n" - - -@dataclass -class EventVariableTracker(EventDataStructure): - """Event data structure that tracks variable behaviors over time/events.""" - - tracker_type: Type[StabilityTracker] = StabilityTracker - variable_trackers: VariableTrackers = field(init=False) - - def __post_init__(self) -> None: - self.variable_trackers = VariableTrackers(tracker_type=self.tracker_type) - - def add_data(self, data_object: Any) -> None: - """Add data to the variable trackers.""" - self.variable_trackers.add_data(data_object) - - def get_data(self) -> Any: - """Retrieve the tracker's stored data.""" - return self.variable_trackers.get_trackers() - - def get_variables(self) -> list[str]: - """Get the list of tracked variable names.""" - return list(self.variable_trackers.get_trackers().keys()) - - def get_variables_by_classification( - self, classification_type: Literal["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] - ) -> List[str]: - """Get a list of variable names that are classified as the given - type.""" - return self.variable_trackers.get_variables_by_classification(classification_type) - - @staticmethod - def to_data(raw_data: Dict[str, Any]) -> Dict[str, Any]: - """Transform raw data into the format expected by the tracker.""" - return raw_data - - def __repr__(self) -> str: - strs = format_dict_repr(self.variable_trackers.get_trackers(), indent="\t") - return f"EventVariableTracker(data={{\n\t{strs}\n}})" diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/__init__.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/__init__.py new file mode 100644 index 0000000..6f030c1 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/__init__.py @@ -0,0 +1,22 @@ +"""Trackers module for tracking variable behaviors over time/events. + +A tracker is a data structure that stores a specific feature of a +variable and tracks the behavior of that feature over time/events. It +operates within the persistency framework to monitor how variables +evolve. It is interchangable with other EventDataStructure +implementations. +""" + +from .classifiers.stability_classifier import StabilityClassifier +from .single_trackers.stability_tracker import StabilityTracker +from .single_trackers.base import Classification +from .multi_tracker import MultiTracker +from .event_tracker import EventTracker + +__all__ = [ + "StabilityClassifier", + "StabilityTracker", + "Classification", + "MultiTracker", + "EventTracker", +] diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/classifiers/stability_classifier.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/classifiers/stability_classifier.py new file mode 100644 index 0000000..5c2237c --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/classifiers/stability_classifier.py @@ -0,0 +1,90 @@ +"""Classifier for stability based on segment means.""" + +from typing import List +import numpy as np + +from detectmatelibrary.utils.RLE_list import RLEList + + +class StabilityClassifier: + """Classifier for stability based on segment means.""" + def __init__(self, segment_thresholds: List[float], min_samples: int = 10): + self.segment_threshs = segment_thresholds + self.min_samples = min_samples + # for RLELists + self.segment_sums = [0.0] * len(segment_thresholds) + self.segment_counts = [0] * len(segment_thresholds) + self.n_segments = len(self.segment_threshs) + # for lists + self.segment_means: List[float] = [] + + def is_stable(self, change_series: RLEList[bool] | List[bool]) -> bool: + """Determine if a list of segment means is stable. + + Works efficiently with RLEList without expanding to a full list. + """ + # Handle both RLEList and regular list + if isinstance(change_series, RLEList): + total_len = len(change_series) + if total_len == 0: + return True + + # Calculate segment boundaries + segment_size = total_len / self.n_segments + segment_boundaries = [int(i * segment_size) for i in range(self.n_segments + 1)] + segment_boundaries[-1] = total_len + + # Compute segment means directly from RLE runs + segment_sums = [0.0] * self.n_segments + segment_counts = [0] * self.n_segments + + position = 0 + for value, count in change_series.runs(): + run_start = position + run_end = position + count + + # Find which segments this run overlaps with + for seg_idx in range(self.n_segments): + seg_start = segment_boundaries[seg_idx] + seg_end = segment_boundaries[seg_idx + 1] + + # Calculate overlap between run and segment + overlap_start = max(run_start, seg_start) + overlap_end = min(run_end, seg_end) + overlap_count = max(0, overlap_end - overlap_start) + + if overlap_count > 0: + segment_sums[seg_idx] += value * overlap_count + segment_counts[seg_idx] += overlap_count + + position = run_end + + # Calculate means + self.segment_means = [ + segment_sums[i] / segment_counts[i] if segment_counts[i] > 0 else np.nan + for i in range(self.n_segments) + ] + else: + # Original implementation for regular lists + self.segment_means = self._compute_segment_means(change_series) + return all([not q >= thresh for q, thresh in zip(self.segment_means, self.segment_threshs)]) + + def _compute_segment_means(self, change_series: List[bool]) -> List[float]: + """Get means of each segment for a normal list.""" + segments = np.array_split(change_series, self.n_segments) + return list(map(lambda x: np.mean(x) if len(x) > 0 else np.nan, segments)) + + def get_last_segment_means(self) -> List[float]: + return self.segment_means + + def get_segment_thresholds(self) -> List[float]: + return self.segment_threshs + + def __call__(self, change_series: RLEList[bool] | List[bool]) -> bool: + return self.is_stable(change_series) + + def __repr__(self) -> str: + return ( + f"StabilityClassifier(segment_threshs={self.segment_threshs}, " + f"segment_means={self.segment_means})" + ) diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/converter.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/converter.py new file mode 100644 index 0000000..5b01413 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/converter.py @@ -0,0 +1,30 @@ +"""Converter classes for transforming input data in EventTracker.""" + +from abc import ABC, abstractmethod +from typing import Any, Dict + + +class Converter(ABC): + """Abstract base class for data converters.""" + + @abstractmethod + def convert(self, values_dict: Dict[str, Any]) -> Dict[str, Any]: + """Transform raw data into the format expected by the tracker.""" + pass + + +class InvariantConverter(Converter): + """Converter that returns data unchanged.""" + + def convert(self, values_dict: Dict[str, Any]) -> Dict[str, Any]: + """Return the input data unchanged.""" + return values_dict + + +class ComboConverter(Converter): + """Converter for combo data.""" + + def convert(self, values_dict: Dict[str, Any]) -> Dict[str, Any]: + """Transform raw combo data into the format expected by the tracker.""" + + return values_dict diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/event_tracker.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/event_tracker.py new file mode 100644 index 0000000..5f23d0d --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/event_tracker.py @@ -0,0 +1,59 @@ +"""Event data structure that tracks variable behaviors over time/events.""" + +from typing import Any, Dict, Type, List, Literal +from dataclasses import dataclass, field + +from detectmatelibrary.utils.preview_helpers import format_dict_repr + +from ..base import EventDataStructure +from .single_trackers.stability_tracker import StabilityTracker +from .multi_tracker import MultiTracker +from .converter import Converter, InvariantConverter, ComboConverter + + +@dataclass +class EventTracker(EventDataStructure): + """Event data structure that tracks the behavior of each event over time / + number of events.""" + + tracker_type: Type[StabilityTracker] = StabilityTracker + multi_tracker: MultiTracker = field(init=False) + feature_type: Literal["variable", "variable_combo"] = "variable" + converter: Converter = field(init=False) + + def __post_init__(self) -> None: + self.multi_tracker = MultiTracker(tracker_type=self.tracker_type) + + if self.feature_type == "variable": + self.converter = InvariantConverter() + elif self.feature_type == "variable_combo": + self.converter = ComboConverter() + else: + raise ValueError(f"Invalid feature: {self.feature_type}") + + def add_data(self, data_object: Any) -> None: + """Add data to the variable trackers.""" + self.multi_tracker.add_data(data_object) + + def get_data(self) -> Any: + """Retrieve the tracker's stored data.""" + return self.multi_tracker.get_trackers() + + def get_variables(self) -> list[str]: + """Get the list of tracked variable names.""" + return list(self.multi_tracker.get_trackers().keys()) + + def get_variables_by_classification( + self, classification_type: Literal["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] + ) -> List[str]: + """Get a list of variable names that are classified as the given + type.""" + return self.multi_tracker.get_variables_by_classification(classification_type) + + def to_data(self, raw_data: Dict[str, Any]) -> Dict[str, Any]: + """Transform raw data into the format expected by the tracker.""" + return self.converter.convert(raw_data) + + def __repr__(self) -> str: + strs = format_dict_repr(self.multi_tracker.get_trackers(), indent="\t") + return f"{self.__class__.__name__}(data={{\n\t{strs}\n}})" diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/multi_tracker.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/multi_tracker.py new file mode 100644 index 0000000..d416bc6 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/multi_tracker.py @@ -0,0 +1,49 @@ +from typing import Any, Dict, Type, List, Literal + +from detectmatelibrary.utils.preview_helpers import format_dict_repr + +from .single_trackers.base import SingleTracker + + +class MultiTracker: + """Tracks multiple features (e.g. variables or variable combos) using + individual trackers.""" + + def __init__(self, tracker_type: Type[SingleTracker] = SingleTracker) -> None: + self.trackers: Dict[str, SingleTracker] = {} + self.tracker_type: Type[SingleTracker] = tracker_type + + def add_data(self, data_object: Dict[str, Any]) -> None: + """Add data to the appropriate feature trackers.""" + for name, value in data_object.items(): + if name not in self.trackers: + self.trackers[name] = self.tracker_type() + self.trackers[name].add_value(value) + + def get_trackers(self) -> Dict[str, SingleTracker]: + """Get the current feature trackers.""" + return self.trackers + + def classify(self) -> Dict[str, Any]: + """Classify all tracked features.""" + classifications = {} + for name, tracker in self.trackers.items(): + classifications[name] = tracker.classify() + return classifications + + def get_variables_by_classification( + self, + classification_type: Literal["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] + ) -> List[str]: + """Get a list of variable names that are classified as the given + type.""" + variables = [] + for name, tracker in self.trackers.items(): + classification = tracker.classify() + if classification.type == classification_type: + variables.append(name) + return variables + + def __repr__(self) -> str: + strs = format_dict_repr(self.trackers, indent="\t") + return f"{self.__class__.__name__}{{\n\t{strs}\n}}\n" diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/base.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/base.py new file mode 100644 index 0000000..de6a017 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/base.py @@ -0,0 +1,28 @@ +"""Tracks whether a variable is converging to a constant value.""" + +from typing import Any +from dataclasses import dataclass +from abc import ABC, abstractmethod + + +@dataclass +class Classification: + type: str = "" + reason: str = "" + + +class SingleTracker(ABC): + """Tracks whether a single variable is converging to a constant value.""" + + @abstractmethod + def add_value(self, value: Any) -> None: + """Add a new value to the tracker.""" + + @abstractmethod + def classify(self) -> Classification: + """Classify the tracker based on the current data.""" + pass + + @abstractmethod + def __repr__(self) -> str: + pass diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/stability_tracker.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/stability_tracker.py new file mode 100644 index 0000000..5ff580b --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/stability_tracker.py @@ -0,0 +1,69 @@ +"""Tracks whether a variable is converging to a constant value.""" + +from typing import Any, Set + +from detectmatelibrary.utils.preview_helpers import list_preview_str +from detectmatelibrary.utils.RLE_list import RLEList + +from ..classifiers.stability_classifier import StabilityClassifier +from .base import SingleTracker, Classification + + +class StabilityTracker(SingleTracker): + """Tracks whether a single variable is converging to a constant value.""" + + def __init__(self, min_samples: int = 3) -> None: + self.min_samples = min_samples + self.change_series: RLEList[bool] = RLEList() + self.unique_set: Set[Any] = set() + self.stability_classifier: StabilityClassifier = StabilityClassifier( + segment_thresholds=[1.1, 0.3, 0.1, 0.01], + ) + + def add_value(self, value: Any) -> None: + """Add a new value to the tracker.""" + unique_set_size_before = len(self.unique_set) + self.unique_set.add(value) + has_changed = len(self.unique_set) - unique_set_size_before > 0 + self.change_series.append(has_changed) + + def classify(self) -> Classification: + """Classify the variable.""" + if len(self.change_series) < self.min_samples: + return Classification( + type="INSUFFICIENT_DATA", + reason=f"Not enough data (have {len(self.change_series)}, need {self.min_samples})" + ) + elif len(self.unique_set) == 1: + return Classification( + type="STATIC", + reason="Unique set size is 1" + ) + elif len(self.unique_set) == len(self.change_series): + return Classification( + type="RANDOM", + reason=f"Unique set size equals number of samples ({len(self.change_series)})" + ) + elif self.stability_classifier.is_stable(self.change_series): + return Classification( + type="STABLE", + reason=( + f"Segment means of change series {self.stability_classifier.get_last_segment_means()} " + f"are below segment thresholds: {self.stability_classifier.get_segment_thresholds()}" + ) + ) + else: + return Classification( + type="UNSTABLE", + reason="No classification matched; variable is unstable" + ) + + def __repr__(self) -> str: + # show only part of the series for brevity + series_str = list_preview_str(self.change_series) + unique_set_str = "{" + ", ".join(map(str, list_preview_str(self.unique_set))) + "}" + RLE_str = list_preview_str(self.change_series.runs()) + return ( + f"{self.__class__.__name__}(classification={self.classify()}, change_series={series_str}, " + f"unique_set={unique_set_str}, RLE={RLE_str})" + ) diff --git a/src/detectmatelibrary/common/persistency/event_persistency.py b/src/detectmatelibrary/common/persistency/event_persistency.py index 3a2362c..6c56b8a 100644 --- a/src/detectmatelibrary/common/persistency/event_persistency.py +++ b/src/detectmatelibrary/common/persistency/event_persistency.py @@ -41,13 +41,13 @@ def ingest_event( """Ingest event data into the appropriate EventData store.""" self.event_templates[event_id] = event_template all_variables = self.get_all_variables(variables, log_format_variables, self.variable_blacklist) - data = self.event_data_class.to_data(all_variables) data_structure = self.events_data.get(event_id) if data_structure is None: data_structure = self.event_data_class(**self.event_data_kwargs) self.events_data[event_id] = data_structure + data = data_structure.to_data(all_variables) data_structure.add_data(data) def get_event_data(self, event_id: int) -> Any | None: diff --git a/src/detectmatelibrary/detectors/new_value_combo_detector.py b/src/detectmatelibrary/detectors/new_value_combo_detector.py index 02c48ab..485296a 100644 --- a/src/detectmatelibrary/detectors/new_value_combo_detector.py +++ b/src/detectmatelibrary/detectors/new_value_combo_detector.py @@ -7,7 +7,7 @@ from detectmatelibrary.utils.data_buffer import BufferMode from detectmatelibrary.common.persistency.event_data_structures.trackers import ( - EventVariableTracker, StabilityTracker + EventTracker, StabilityTracker ) from detectmatelibrary.common.persistency.event_persistency import EventPersistency @@ -126,8 +126,11 @@ def __init__( self.config = cast(NewValueComboDetectorConfig, self.config) self.known_combos: Dict[str | int, Set[Any]] = {"all": set()} self.persistency = EventPersistency( - event_data_class=EventVariableTracker, - event_data_kwargs={"tracker_type": StabilityTracker} + event_data_class=EventTracker, + event_data_kwargs={ + "tracker_type": StabilityTracker, + "feature_type": "variable_combo" + } ) def train(self, input_: schemas.ParserSchema) -> None: # type: ignore @@ -160,7 +163,8 @@ def detect( if overall_score > 0: output_["score"] = overall_score output_["description"] = ( - f"The detector checks for new value combinations of size {self.config.comb_size}." + f"Monitoring value combinations of size {self.config.comb_size}. " + "Unseen combinations lead to alerts" ) output_["alertsObtain"].update(alerts) return True @@ -178,7 +182,7 @@ def set_configuration(self, max_combo_size: int = 6) -> None: variable_combos = {} templates = {} for event_id, tracker in self.persistency.get_events_data().items(): - stable_vars = tracker.get_stable_variables() # type: ignore + stable_vars = tracker.get_variables_by_classification("STABLE") # type: ignore if len(stable_vars) > 1: variable_combos[event_id] = stable_vars templates[event_id] = self.persistency.get_event_template(event_id) diff --git a/tests/test_common/test_persistency.py b/tests/test_common/test_persistency.py index 38883de..10708a2 100644 --- a/tests/test_common/test_persistency.py +++ b/tests/test_common/test_persistency.py @@ -13,7 +13,7 @@ ChunkedEventDataFrame, ) from detectmatelibrary.common.persistency.event_data_structures.trackers import ( - EventVariableTracker, + EventTracker, StabilityTracker, ) @@ -60,13 +60,13 @@ def test_initialization_with_polars_backend(self): assert persistency.event_data_class == ChunkedEventDataFrame def test_initialization_with_tracker_backend(self): - """Test initialization with EventVariableTracker backend.""" + """Test initialization with EventVariableTrackerData backend.""" persistency = EventPersistency( - event_data_class=EventVariableTracker, + event_data_class=EventTracker, event_data_kwargs={"tracker_type": StabilityTracker}, ) assert persistency is not None - assert persistency.event_data_class == EventVariableTracker + assert persistency.event_data_class == EventTracker def test_ingest_single_event(self): """Test ingesting a single event.""" @@ -349,7 +349,7 @@ def test_polars_backend_full_workflow(self): def test_tracker_backend_full_workflow(self): """Test complete workflow with Tracker backend.""" persistency = EventPersistency( - event_data_class=EventVariableTracker, + event_data_class=EventTracker, event_data_kwargs={"tracker_type": StabilityTracker}, ) @@ -364,7 +364,7 @@ def test_tracker_backend_full_workflow(self): # Verify tracker functionality data_structure = persistency.events_data["E001"] - assert isinstance(data_structure, EventVariableTracker) + assert isinstance(data_structure, EventTracker) def test_mixed_event_ids_and_templates(self): """Test handling mixed event IDs and templates.""" diff --git a/tests/test_common/test_stability_tracking.py b/tests/test_common/test_stability_tracking.py index cb06c07..a8aa6e0 100644 --- a/tests/test_common/test_stability_tracking.py +++ b/tests/test_common/test_stability_tracking.py @@ -1,15 +1,15 @@ """Tests for the stability tracking module. -This module tests StabilityClassifier, StabilityTracker, -VariableTrackers, and EventVariableTracker for variable convergence and -stability analysis. +This module tests StabilityClassifier, SingleVariableTracker, +MultiVariableTracker, and EventVariableTrackerData for variable +convergence and stability analysis. """ from detectmatelibrary.common.persistency.event_data_structures.trackers import ( StabilityClassifier, StabilityTracker, - VariableTrackers, - EventVariableTracker, + MultiTracker, + EventTracker, Classification, ) from detectmatelibrary.utils.RLE_list import RLEList @@ -81,11 +81,11 @@ def test_different_segment_thresholds(self): assert isinstance(result_lenient, bool) -class TestStabilityTracker: - """Test suite for StabilityTracker.""" +class TestSingleVariableTracker: + """Test suite for SingleVariableTracker.""" def test_initialization_default(self): - """Test StabilityTracker initialization with defaults.""" + """Test SingleVariableTracker initialization with defaults.""" tracker = StabilityTracker() assert tracker.min_samples == 3 assert isinstance(tracker.change_series, RLEList) @@ -218,23 +218,23 @@ def test_change_detection(self): assert len(tracker.change_series) == 3 -class TestVariableTrackers: - """Test suite for VariableTrackers manager.""" +class TestMultiVariableTracker: + """Test suite for MultiVariableTracker manager.""" def test_initialization_default(self): - """Test VariableTrackers initialization.""" - trackers = VariableTrackers(tracker_type=StabilityTracker) + """Test MultiVariableTracker initialization.""" + trackers = MultiTracker(tracker_type=StabilityTracker) assert trackers is not None assert trackers.tracker_type == StabilityTracker def test_initialization_with_kwargs(self): - """Test initialization without kwargs - VariableTrackers doesn't store tracker kwargs.""" - trackers = VariableTrackers(tracker_type=StabilityTracker) + """Test initialization without kwargs - MultiVariableTracker doesn't store tracker kwargs.""" + trackers = MultiTracker(tracker_type=StabilityTracker) assert trackers.tracker_type == StabilityTracker def test_add_data_single_variable(self): """Test adding data for a single variable.""" - trackers = VariableTrackers(tracker_type=StabilityTracker) + trackers = MultiTracker(tracker_type=StabilityTracker) data = {"var1": "value1"} trackers.add_data(data) @@ -244,7 +244,7 @@ def test_add_data_single_variable(self): def test_add_data_multiple_variables(self): """Test adding data for multiple variables.""" - trackers = VariableTrackers(tracker_type=StabilityTracker) + trackers = MultiTracker(tracker_type=StabilityTracker) data = {"var1": "value1", "var2": "value2", "var3": "value3"} trackers.add_data(data) @@ -256,7 +256,7 @@ def test_add_data_multiple_variables(self): def test_add_data_multiple_times(self): """Test adding data multiple times.""" - trackers = VariableTrackers(tracker_type=StabilityTracker) + trackers = MultiTracker(tracker_type=StabilityTracker) trackers.add_data({"var1": "a", "var2": "x"}) trackers.add_data({"var1": "b", "var2": "y"}) @@ -268,7 +268,7 @@ def test_add_data_multiple_times(self): def test_classify_all_variables(self): """Test classifying all variables.""" - trackers = VariableTrackers(tracker_type=StabilityTracker) + trackers = MultiTracker(tracker_type=StabilityTracker) # Add enough data for classification for i in range(10): @@ -281,7 +281,7 @@ def test_classify_all_variables(self): def test_get_stable_variables(self): """Test retrieving stable variables.""" - trackers = VariableTrackers(tracker_type=StabilityTracker) + trackers = MultiTracker(tracker_type=StabilityTracker) # Create stable pattern for i in range(40): @@ -296,7 +296,7 @@ def test_get_stable_variables(self): def test_get_trackers(self): """Test retrieving all trackers.""" - trackers = VariableTrackers(tracker_type=StabilityTracker) + trackers = MultiTracker(tracker_type=StabilityTracker) trackers.add_data({"var1": "a", "var2": "b"}) all_trackers = trackers.get_trackers() @@ -305,7 +305,7 @@ def test_get_trackers(self): def test_dynamic_tracker_creation(self): """Test that trackers are created dynamically.""" - trackers = VariableTrackers(tracker_type=StabilityTracker) + trackers = MultiTracker(tracker_type=StabilityTracker) # First add trackers.add_data({"var1": "a"}) @@ -320,18 +320,18 @@ def test_dynamic_tracker_creation(self): assert len(trackers.get_trackers()) == 3 -class TestEventVariableTracker: - """Test suite for EventVariableTracker.""" +class TestEventVariableTrackerData: + """Test suite for EventVariableTrackerData.""" def test_initialization(self): - """Test EventVariableTracker initialization.""" - evt = EventVariableTracker(tracker_type=StabilityTracker) + """Test EventVariableTrackerData initialization.""" + evt = EventTracker(tracker_type=StabilityTracker) assert evt is not None - assert isinstance(evt.variable_trackers, VariableTrackers) + assert isinstance(evt.multi_tracker, MultiTracker) def test_add_data(self): """Test adding data.""" - evt = EventVariableTracker(tracker_type=StabilityTracker) + evt = EventTracker(tracker_type=StabilityTracker) data = {"var1": "value1", "var2": "value2"} evt.add_data(data) @@ -341,7 +341,7 @@ def test_add_data(self): def test_get_variables(self): """Test retrieving variable names.""" - evt = EventVariableTracker(tracker_type=StabilityTracker) + evt = EventTracker(tracker_type=StabilityTracker) evt.add_data({"var1": "a", "var2": "b", "var3": "c"}) var_names = evt.get_variables() @@ -352,7 +352,7 @@ def test_get_variables(self): def test_get_stable_variables(self): """Test retrieving stable variables.""" - evt = EventVariableTracker(tracker_type=StabilityTracker) + evt = EventTracker(tracker_type=StabilityTracker) for i in range(40): evt.add_data({ @@ -364,8 +364,8 @@ def test_get_stable_variables(self): assert isinstance(stable_vars, list) def test_integration_with_stability_tracker(self): - """Test full integration with StabilityTracker.""" - evt = EventVariableTracker(tracker_type=StabilityTracker) + """Test full integration with SingleVariableTracker.""" + evt = EventTracker(tracker_type=StabilityTracker) # Simulate log processing for i in range(50): @@ -382,6 +382,55 @@ def test_integration_with_stability_tracker(self): assert len(var_names) == 3 assert isinstance(stable_vars, list) + def test_to_data_with_variable_level(self): + """Test to_data method with variable level (default).""" + evt = EventTracker(tracker_type=StabilityTracker, feature_type="variable") + + raw_data = {"var1": "value1", "var2": "value2"} + converted_data = evt.to_data(raw_data) + + # Should use invariant_conversion which returns the dict as-is + assert converted_data == raw_data + assert "var1" in converted_data + assert "var2" in converted_data + + def test_to_data_with_variable_combo_level(self): + """Test to_data method with variable_combo level.""" + evt = EventTracker(tracker_type=StabilityTracker, feature_type="variable_combo") + + raw_data = {"combo1": ("a", "b"), "combo2": ("x", "y")} + converted_data = evt.to_data(raw_data) + + # Should use combo_conversion which returns the dict as-is + assert converted_data == raw_data + assert "combo1" in converted_data + assert "combo2" in converted_data + + def test_to_data_integration_with_add_data(self): + """Test that to_data and add_data work together correctly.""" + evt = EventTracker(tracker_type=StabilityTracker, feature_type="variable") + + # Use to_data to convert raw data, then add it + raw_data = {"user": "alice", "ip": "192.168.1.1"} + converted_data = evt.to_data(raw_data) + evt.add_data(converted_data) + + # Verify data was added correctly + trackers = evt.get_data() + assert len(trackers) == 2 + assert "user" in trackers + assert "ip" in trackers + + def test_conversion_function_assignment(self): + """Test that conversion_function is correctly assigned based on + level.""" + evt_var = EventTracker(tracker_type=StabilityTracker, feature_type="variable") + evt_combo = EventTracker(tracker_type=StabilityTracker, feature_type="variable_combo") + + # Check that the correct conversion functions are assigned + assert evt_var.conversion_function == evt_var.invariant_conversion + assert evt_combo.conversion_function == evt_combo.combo_conversion + class TestClassification: """Test suite for Classification dataclass.""" @@ -443,7 +492,7 @@ def test_full_workflow_stabilizing_variable(self): def test_multiple_variables_with_different_patterns(self): """Test tracking multiple variables with different patterns.""" - trackers = VariableTrackers(tracker_type=StabilityTracker) + trackers = MultiTracker(tracker_type=StabilityTracker) # Simulate 100 events for i in range(100): @@ -467,8 +516,8 @@ def test_multiple_variables_with_different_patterns(self): assert isinstance(classifications["status"], Classification) def test_event_variable_tracker_real_world_scenario(self): - """Test EventVariableTracker with realistic log data.""" - evt = EventVariableTracker(tracker_type=StabilityTracker) + """Test EventVariableTrackerData with realistic log data.""" + evt = EventTracker(tracker_type=StabilityTracker) # Simulate web server logs for i in range(200): diff --git a/uv.lock b/uv.lock index c9a83ad..3087634 100644 --- a/uv.lock +++ b/uv.lock @@ -117,6 +117,7 @@ dependencies = [ { name = "pydantic" }, { name = "pyyaml" }, { name = "regex" }, + { name = "ujson" }, ] [package.optional-dependencies] @@ -140,6 +141,7 @@ requires-dist = [ { name = "pytest-cov", marker = "extra == 'dev'", specifier = ">=6.2.1" }, { name = "pyyaml", specifier = ">=6.0.3" }, { name = "regex", specifier = ">=2025.11.3" }, + { name = "ujson", specifier = ">=5.11.0" }, ] provides-extras = ["dev"] @@ -640,3 +642,55 @@ sdist = { url = "https://files.pythonhosted.org/packages/95/32/1a225d6164441be76 wheels = [ { url = "https://files.pythonhosted.org/packages/5c/23/c7abc0ca0a1526a0774eca151daeb8de62ec457e77262b66b359c3c7679e/tzdata-2025.2-py2.py3-none-any.whl", hash = "sha256:1a403fada01ff9221ca8044d701868fa132215d84beb92242d9acd2147f667a8", size = 347839, upload-time = "2025-03-23T13:54:41.845Z" }, ] + +[[package]] +name = "ujson" +version = "5.11.0" +source = { registry = "https://pypi.org/simple" } +sdist = { url = "https://files.pythonhosted.org/packages/43/d9/3f17e3c5773fb4941c68d9a37a47b1a79c9649d6c56aefbed87cc409d18a/ujson-5.11.0.tar.gz", hash = "sha256:e204ae6f909f099ba6b6b942131cee359ddda2b6e4ea39c12eb8b991fe2010e0", size = 7156583, upload-time = "2025-08-20T11:57:02.452Z" } +wheels = [ + { url = "https://files.pythonhosted.org/packages/b9/ef/a9cb1fce38f699123ff012161599fb9f2ff3f8d482b4b18c43a2dc35073f/ujson-5.11.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:7895f0d2d53bd6aea11743bd56e3cb82d729980636cd0ed9b89418bf66591702", size = 55434, upload-time = "2025-08-20T11:55:34.987Z" }, + { url = "https://files.pythonhosted.org/packages/b1/05/dba51a00eb30bd947791b173766cbed3492269c150a7771d2750000c965f/ujson-5.11.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:12b5e7e22a1fe01058000d1b317d3b65cc3daf61bd2ea7a2b76721fe160fa74d", size = 53190, upload-time = "2025-08-20T11:55:36.384Z" }, + { url = "https://files.pythonhosted.org/packages/03/3c/fd11a224f73fbffa299fb9644e425f38b38b30231f7923a088dd513aabb4/ujson-5.11.0-cp312-cp312-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:0180a480a7d099082501cad1fe85252e4d4bf926b40960fb3d9e87a3a6fbbc80", size = 57600, upload-time = "2025-08-20T11:55:37.692Z" }, + { url = "https://files.pythonhosted.org/packages/55/b9/405103cae24899df688a3431c776e00528bd4799e7d68820e7ebcf824f92/ujson-5.11.0-cp312-cp312-manylinux_2_24_i686.manylinux_2_28_i686.whl", hash = "sha256:fa79fdb47701942c2132a9dd2297a1a85941d966d8c87bfd9e29b0cf423f26cc", size = 59791, upload-time = "2025-08-20T11:55:38.877Z" }, + { url = "https://files.pythonhosted.org/packages/17/7b/2dcbc2bbfdbf68f2368fb21ab0f6735e872290bb604c75f6e06b81edcb3f/ujson-5.11.0-cp312-cp312-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:8254e858437c00f17cb72e7a644fc42dad0ebb21ea981b71df6e84b1072aaa7c", size = 57356, upload-time = "2025-08-20T11:55:40.036Z" }, + { url = "https://files.pythonhosted.org/packages/d1/71/fea2ca18986a366c750767b694430d5ded6b20b6985fddca72f74af38a4c/ujson-5.11.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:1aa8a2ab482f09f6c10fba37112af5f957689a79ea598399c85009f2f29898b5", size = 1036313, upload-time = "2025-08-20T11:55:41.408Z" }, + { url = "https://files.pythonhosted.org/packages/a3/bb/d4220bd7532eac6288d8115db51710fa2d7d271250797b0bfba9f1e755af/ujson-5.11.0-cp312-cp312-musllinux_1_2_i686.whl", hash = "sha256:a638425d3c6eed0318df663df44480f4a40dc87cc7c6da44d221418312f6413b", size = 1195782, upload-time = "2025-08-20T11:55:43.357Z" }, + { url = "https://files.pythonhosted.org/packages/80/47/226e540aa38878ce1194454385701d82df538ccb5ff8db2cf1641dde849a/ujson-5.11.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:7e3cff632c1d78023b15f7e3a81c3745cd3f94c044d1e8fa8efbd6b161997bbc", size = 1088817, upload-time = "2025-08-20T11:55:45.262Z" }, + { url = "https://files.pythonhosted.org/packages/7e/81/546042f0b23c9040d61d46ea5ca76f0cc5e0d399180ddfb2ae976ebff5b5/ujson-5.11.0-cp312-cp312-win32.whl", hash = "sha256:be6b0eaf92cae8cdee4d4c9e074bde43ef1c590ed5ba037ea26c9632fb479c88", size = 39757, upload-time = "2025-08-20T11:55:46.522Z" }, + { url = "https://files.pythonhosted.org/packages/44/1b/27c05dc8c9728f44875d74b5bfa948ce91f6c33349232619279f35c6e817/ujson-5.11.0-cp312-cp312-win_amd64.whl", hash = "sha256:b7b136cc6abc7619124fd897ef75f8e63105298b5ca9bdf43ebd0e1fa0ee105f", size = 43859, upload-time = "2025-08-20T11:55:47.987Z" }, + { url = "https://files.pythonhosted.org/packages/22/2d/37b6557c97c3409c202c838aa9c960ca3896843b4295c4b7bb2bbd260664/ujson-5.11.0-cp312-cp312-win_arm64.whl", hash = "sha256:6cd2df62f24c506a0ba322d5e4fe4466d47a9467b57e881ee15a31f7ecf68ff6", size = 38361, upload-time = "2025-08-20T11:55:49.122Z" }, + { url = "https://files.pythonhosted.org/packages/1c/ec/2de9dd371d52c377abc05d2b725645326c4562fc87296a8907c7bcdf2db7/ujson-5.11.0-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:109f59885041b14ee9569bf0bb3f98579c3fa0652317b355669939e5fc5ede53", size = 55435, upload-time = "2025-08-20T11:55:50.243Z" }, + { url = "https://files.pythonhosted.org/packages/5b/a4/f611f816eac3a581d8a4372f6967c3ed41eddbae4008d1d77f223f1a4e0a/ujson-5.11.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:a31c6b8004438e8c20fc55ac1c0e07dad42941db24176fe9acf2815971f8e752", size = 53193, upload-time = "2025-08-20T11:55:51.373Z" }, + { url = "https://files.pythonhosted.org/packages/e9/c5/c161940967184de96f5cbbbcce45b562a4bf851d60f4c677704b1770136d/ujson-5.11.0-cp313-cp313-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:78c684fb21255b9b90320ba7e199780f653e03f6c2528663768965f4126a5b50", size = 57603, upload-time = "2025-08-20T11:55:52.583Z" }, + { url = "https://files.pythonhosted.org/packages/2b/d6/c7b2444238f5b2e2d0e3dab300b9ddc3606e4b1f0e4bed5a48157cebc792/ujson-5.11.0-cp313-cp313-manylinux_2_24_i686.manylinux_2_28_i686.whl", hash = "sha256:4c9f5d6a27d035dd90a146f7761c2272cf7103de5127c9ab9c4cd39ea61e878a", size = 59794, upload-time = "2025-08-20T11:55:53.69Z" }, + { url = "https://files.pythonhosted.org/packages/fe/a3/292551f936d3d02d9af148f53e1bc04306b00a7cf1fcbb86fa0d1c887242/ujson-5.11.0-cp313-cp313-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:837da4d27fed5fdc1b630bd18f519744b23a0b5ada1bbde1a36ba463f2900c03", size = 57363, upload-time = "2025-08-20T11:55:54.843Z" }, + { url = "https://files.pythonhosted.org/packages/90/a6/82cfa70448831b1a9e73f882225980b5c689bf539ec6400b31656a60ea46/ujson-5.11.0-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:787aff4a84da301b7f3bac09bc696e2e5670df829c6f8ecf39916b4e7e24e701", size = 1036311, upload-time = "2025-08-20T11:55:56.197Z" }, + { url = "https://files.pythonhosted.org/packages/84/5c/96e2266be50f21e9b27acaee8ca8f23ea0b85cb998c33d4f53147687839b/ujson-5.11.0-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:6dd703c3e86dc6f7044c5ac0b3ae079ed96bf297974598116aa5fb7f655c3a60", size = 1195783, upload-time = "2025-08-20T11:55:58.081Z" }, + { url = "https://files.pythonhosted.org/packages/8d/20/78abe3d808cf3bb3e76f71fca46cd208317bf461c905d79f0d26b9df20f1/ujson-5.11.0-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:3772e4fe6b0c1e025ba3c50841a0ca4786825a4894c8411bf8d3afe3a8061328", size = 1088822, upload-time = "2025-08-20T11:55:59.469Z" }, + { url = "https://files.pythonhosted.org/packages/d8/50/8856e24bec5e2fc7f775d867aeb7a3f137359356200ac44658f1f2c834b2/ujson-5.11.0-cp313-cp313-win32.whl", hash = "sha256:8fa2af7c1459204b7a42e98263b069bd535ea0cd978b4d6982f35af5a04a4241", size = 39753, upload-time = "2025-08-20T11:56:01.345Z" }, + { url = "https://files.pythonhosted.org/packages/5b/d8/1baee0f4179a4d0f5ce086832147b6cc9b7731c24ca08e14a3fdb8d39c32/ujson-5.11.0-cp313-cp313-win_amd64.whl", hash = "sha256:34032aeca4510a7c7102bd5933f59a37f63891f30a0706fb46487ab6f0edf8f0", size = 43866, upload-time = "2025-08-20T11:56:02.552Z" }, + { url = "https://files.pythonhosted.org/packages/a9/8c/6d85ef5be82c6d66adced3ec5ef23353ed710a11f70b0b6a836878396334/ujson-5.11.0-cp313-cp313-win_arm64.whl", hash = "sha256:ce076f2df2e1aa62b685086fbad67f2b1d3048369664b4cdccc50707325401f9", size = 38363, upload-time = "2025-08-20T11:56:03.688Z" }, + { url = "https://files.pythonhosted.org/packages/28/08/4518146f4984d112764b1dfa6fb7bad691c44a401adadaa5e23ccd930053/ujson-5.11.0-cp314-cp314-macosx_10_13_x86_64.whl", hash = "sha256:65724738c73645db88f70ba1f2e6fb678f913281804d5da2fd02c8c5839af302", size = 55462, upload-time = "2025-08-20T11:56:04.873Z" }, + { url = "https://files.pythonhosted.org/packages/29/37/2107b9a62168867a692654d8766b81bd2fd1e1ba13e2ec90555861e02b0c/ujson-5.11.0-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:29113c003ca33ab71b1b480bde952fbab2a0b6b03a4ee4c3d71687cdcbd1a29d", size = 53246, upload-time = "2025-08-20T11:56:06.054Z" }, + { url = "https://files.pythonhosted.org/packages/9b/f8/25583c70f83788edbe3ca62ce6c1b79eff465d78dec5eb2b2b56b3e98b33/ujson-5.11.0-cp314-cp314-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:c44c703842024d796b4c78542a6fcd5c3cb948b9fc2a73ee65b9c86a22ee3638", size = 57631, upload-time = "2025-08-20T11:56:07.374Z" }, + { url = "https://files.pythonhosted.org/packages/ed/ca/19b3a632933a09d696f10dc1b0dfa1d692e65ad507d12340116ce4f67967/ujson-5.11.0-cp314-cp314-manylinux_2_24_i686.manylinux_2_28_i686.whl", hash = "sha256:e750c436fb90edf85585f5c62a35b35082502383840962c6983403d1bd96a02c", size = 59877, upload-time = "2025-08-20T11:56:08.534Z" }, + { url = "https://files.pythonhosted.org/packages/55/7a/4572af5324ad4b2bfdd2321e898a527050290147b4ea337a79a0e4e87ec7/ujson-5.11.0-cp314-cp314-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:f278b31a7c52eb0947b2db55a5133fbc46b6f0ef49972cd1a80843b72e135aba", size = 57363, upload-time = "2025-08-20T11:56:09.758Z" }, + { url = "https://files.pythonhosted.org/packages/7b/71/a2b8c19cf4e1efe53cf439cdf7198ac60ae15471d2f1040b490c1f0f831f/ujson-5.11.0-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:ab2cb8351d976e788669c8281465d44d4e94413718af497b4e7342d7b2f78018", size = 1036394, upload-time = "2025-08-20T11:56:11.168Z" }, + { url = "https://files.pythonhosted.org/packages/7a/3e/7b98668cba3bb3735929c31b999b374ebc02c19dfa98dfebaeeb5c8597ca/ujson-5.11.0-cp314-cp314-musllinux_1_2_i686.whl", hash = "sha256:090b4d11b380ae25453100b722d0609d5051ffe98f80ec52853ccf8249dfd840", size = 1195837, upload-time = "2025-08-20T11:56:12.6Z" }, + { url = "https://files.pythonhosted.org/packages/a1/ea/8870f208c20b43571a5c409ebb2fe9b9dba5f494e9e60f9314ac01ea8f78/ujson-5.11.0-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:80017e870d882d5517d28995b62e4e518a894f932f1e242cbc802a2fd64d365c", size = 1088837, upload-time = "2025-08-20T11:56:14.15Z" }, + { url = "https://files.pythonhosted.org/packages/63/b6/c0e6607e37fa47929920a685a968c6b990a802dec65e9c5181e97845985d/ujson-5.11.0-cp314-cp314-win32.whl", hash = "sha256:1d663b96eb34c93392e9caae19c099ec4133ba21654b081956613327f0e973ac", size = 41022, upload-time = "2025-08-20T11:56:15.509Z" }, + { url = "https://files.pythonhosted.org/packages/4e/56/f4fe86b4c9000affd63e9219e59b222dc48b01c534533093e798bf617a7e/ujson-5.11.0-cp314-cp314-win_amd64.whl", hash = "sha256:849e65b696f0d242833f1df4182096cedc50d414215d1371fca85c541fbff629", size = 45111, upload-time = "2025-08-20T11:56:16.597Z" }, + { url = "https://files.pythonhosted.org/packages/0a/f3/669437f0280308db4783b12a6d88c00730b394327d8334cc7a32ef218e64/ujson-5.11.0-cp314-cp314-win_arm64.whl", hash = "sha256:e73df8648c9470af2b6a6bf5250d4744ad2cf3d774dcf8c6e31f018bdd04d764", size = 39682, upload-time = "2025-08-20T11:56:17.763Z" }, + { url = "https://files.pythonhosted.org/packages/6e/cd/e9809b064a89fe5c4184649adeb13c1b98652db3f8518980b04227358574/ujson-5.11.0-cp314-cp314t-macosx_10_13_x86_64.whl", hash = "sha256:de6e88f62796372fba1de973c11138f197d3e0e1d80bcb2b8aae1e826096d433", size = 55759, upload-time = "2025-08-20T11:56:18.882Z" }, + { url = "https://files.pythonhosted.org/packages/1b/be/ae26a6321179ebbb3a2e2685b9007c71bcda41ad7a77bbbe164005e956fc/ujson-5.11.0-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:49e56ef8066f11b80d620985ae36869a3ff7e4b74c3b6129182ec5d1df0255f3", size = 53634, upload-time = "2025-08-20T11:56:20.012Z" }, + { url = "https://files.pythonhosted.org/packages/ae/e9/fb4a220ee6939db099f4cfeeae796ecb91e7584ad4d445d4ca7f994a9135/ujson-5.11.0-cp314-cp314t-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:1a325fd2c3a056cf6c8e023f74a0c478dd282a93141356ae7f16d5309f5ff823", size = 58547, upload-time = "2025-08-20T11:56:21.175Z" }, + { url = "https://files.pythonhosted.org/packages/bd/f8/fc4b952b8f5fea09ea3397a0bd0ad019e474b204cabcb947cead5d4d1ffc/ujson-5.11.0-cp314-cp314t-manylinux_2_24_i686.manylinux_2_28_i686.whl", hash = "sha256:a0af6574fc1d9d53f4ff371f58c96673e6d988ed2b5bf666a6143c782fa007e9", size = 60489, upload-time = "2025-08-20T11:56:22.342Z" }, + { url = "https://files.pythonhosted.org/packages/2e/e5/af5491dfda4f8b77e24cf3da68ee0d1552f99a13e5c622f4cef1380925c3/ujson-5.11.0-cp314-cp314t-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:10f29e71ecf4ecd93a6610bd8efa8e7b6467454a363c3d6416db65de883eb076", size = 58035, upload-time = "2025-08-20T11:56:23.92Z" }, + { url = "https://files.pythonhosted.org/packages/c4/09/0945349dd41f25cc8c38d78ace49f14c5052c5bbb7257d2f466fa7bdb533/ujson-5.11.0-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:1a0a9b76a89827a592656fe12e000cf4f12da9692f51a841a4a07aa4c7ecc41c", size = 1037212, upload-time = "2025-08-20T11:56:25.274Z" }, + { url = "https://files.pythonhosted.org/packages/49/44/8e04496acb3d5a1cbee3a54828d9652f67a37523efa3d3b18a347339680a/ujson-5.11.0-cp314-cp314t-musllinux_1_2_i686.whl", hash = "sha256:b16930f6a0753cdc7d637b33b4e8f10d5e351e1fb83872ba6375f1e87be39746", size = 1196500, upload-time = "2025-08-20T11:56:27.517Z" }, + { url = "https://files.pythonhosted.org/packages/64/ae/4bc825860d679a0f208a19af2f39206dfd804ace2403330fdc3170334a2f/ujson-5.11.0-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:04c41afc195fd477a59db3a84d5b83a871bd648ef371cf8c6f43072d89144eef", size = 1089487, upload-time = "2025-08-20T11:56:29.07Z" }, + { url = "https://files.pythonhosted.org/packages/30/ed/5a057199fb0a5deabe0957073a1c1c1c02a3e99476cd03daee98ea21fa57/ujson-5.11.0-cp314-cp314t-win32.whl", hash = "sha256:aa6d7a5e09217ff93234e050e3e380da62b084e26b9f2e277d2606406a2fc2e5", size = 41859, upload-time = "2025-08-20T11:56:30.495Z" }, + { url = "https://files.pythonhosted.org/packages/aa/03/b19c6176bdf1dc13ed84b886e99677a52764861b6cc023d5e7b6ebda249d/ujson-5.11.0-cp314-cp314t-win_amd64.whl", hash = "sha256:48055e1061c1bb1f79e75b4ac39e821f3f35a9b82de17fce92c3140149009bec", size = 46183, upload-time = "2025-08-20T11:56:31.574Z" }, + { url = "https://files.pythonhosted.org/packages/5d/ca/a0413a3874b2dc1708b8796ca895bf363292f9c70b2e8ca482b7dbc0259d/ujson-5.11.0-cp314-cp314t-win_arm64.whl", hash = "sha256:1194b943e951092db611011cb8dbdb6cf94a3b816ed07906e14d3bc6ce0e90ab", size = 40264, upload-time = "2025-08-20T11:56:32.773Z" }, +] From 27553aadeee775e430faa0b15912e0639ebc7a04 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Tue, 27 Jan 2026 16:06:52 +0100 Subject: [PATCH 18/28] adapt tests --- tests/test_common/test_persistency.py | 23 ++++++++++---------- tests/test_common/test_stability_tracking.py | 13 ++++++----- 2 files changed, 20 insertions(+), 16 deletions(-) diff --git a/tests/test_common/test_persistency.py b/tests/test_common/test_persistency.py index 10708a2..9b366d8 100644 --- a/tests/test_common/test_persistency.py +++ b/tests/test_common/test_persistency.py @@ -190,7 +190,7 @@ def test_add_single_data(self): """Test adding single data entry.""" edf = EventDataFrame() data_dict = {"user": "alice", "ip": "192.168.1.1"} - data_df = EventDataFrame.to_data(data_dict) + data_df = edf.to_data(data_dict) edf.add_data(data_df) assert edf.data is not None @@ -200,8 +200,8 @@ def test_add_single_data(self): def test_add_multiple_data(self): """Test adding multiple data entries.""" edf = EventDataFrame() - edf.add_data(EventDataFrame.to_data({"user": "alice", "ip": "192.168.1.1"})) - edf.add_data(EventDataFrame.to_data({"user": "bob", "ip": "192.168.1.2"})) + edf.add_data(edf.to_data({"user": "alice", "ip": "192.168.1.1"})) + edf.add_data(edf.to_data({"user": "bob", "ip": "192.168.1.2"})) assert len(edf.data) == 2 assert edf.data["user"].tolist() == ["alice", "bob"] @@ -209,7 +209,7 @@ def test_add_multiple_data(self): def test_get_data(self): """Test retrieving data.""" edf = EventDataFrame() - edf.add_data(EventDataFrame.to_data({"user": "alice", "ip": "192.168.1.1"})) + edf.add_data(edf.to_data({"user": "alice", "ip": "192.168.1.1"})) data = edf.get_data() assert isinstance(data, pd.DataFrame) @@ -218,7 +218,7 @@ def test_get_data(self): def test_get_variable_names(self): """Test retrieving variable names.""" edf = EventDataFrame() - edf.add_data(EventDataFrame.to_data({"user": "alice", "ip": "192.168.1.1", "port": "22"})) + edf.add_data(edf.to_data({"user": "alice", "ip": "192.168.1.1", "port": "22"})) var_names = edf.get_variables() assert "user" in var_names @@ -246,7 +246,7 @@ def test_add_single_data(self): """Test adding single data entry.""" cedf = ChunkedEventDataFrame(max_rows=10) data_dict = {"user": ["alice"], "ip": ["192.168.1.1"]} - data_df = ChunkedEventDataFrame.to_data(data_dict) + data_df = cedf.to_data(data_dict) cedf.add_data(data_df) data = cedf.get_data() @@ -259,7 +259,7 @@ def test_add_data_triggers_compaction(self): # Add 6 entries (should trigger compaction at 5) for i in range(6): - cedf.add_data(ChunkedEventDataFrame.to_data({"user": [f"user{i}"], "value": [i]})) + cedf.add_data(cedf.to_data({"user": [f"user{i}"], "value": [i]})) # After compaction, should have 1 chunk data = cedf.get_data() @@ -271,7 +271,7 @@ def test_chunked_storage(self): # Add more than max_rows for i in range(8): - cedf.add_data(ChunkedEventDataFrame.to_data({"user": [f"user{i}"], "value": [i]})) + cedf.add_data(cedf.to_data({"user": [f"user{i}"], "value": [i]})) # Should have evicted oldest to stay within max_rows data = cedf.get_data() @@ -282,7 +282,7 @@ def test_get_variable_names(self): """Test retrieving variable names from chunks.""" cedf = ChunkedEventDataFrame() cedf.add_data( - ChunkedEventDataFrame.to_data({"user": ["alice"], "ip": ["192.168.1.1"], "port": ["22"]}) + cedf.to_data({"user": ["alice"], "ip": ["192.168.1.1"], "port": ["22"]}) ) var_names = cedf.get_variables() @@ -291,9 +291,10 @@ def test_get_variable_names(self): assert "port" in var_names def test_dict_to_dataframe_conversion(self): - """Test static method to_data.""" + """Test to_data method.""" + cedf = ChunkedEventDataFrame() data_dict = {"user": ["alice"], "ip": ["192.168.1.1"]} - df = ChunkedEventDataFrame.to_data(data_dict) + df = cedf.to_data(data_dict) assert isinstance(df, pl.DataFrame) assert len(df) == 1 diff --git a/tests/test_common/test_stability_tracking.py b/tests/test_common/test_stability_tracking.py index a8aa6e0..d135e8a 100644 --- a/tests/test_common/test_stability_tracking.py +++ b/tests/test_common/test_stability_tracking.py @@ -12,6 +12,10 @@ EventTracker, Classification, ) +from detectmatelibrary.common.persistency.event_data_structures.trackers.converter import ( + InvariantConverter, + ComboConverter, +) from detectmatelibrary.utils.RLE_list import RLEList @@ -422,14 +426,13 @@ def test_to_data_integration_with_add_data(self): assert "ip" in trackers def test_conversion_function_assignment(self): - """Test that conversion_function is correctly assigned based on - level.""" + """Test that converter is correctly assigned based on feature_type.""" evt_var = EventTracker(tracker_type=StabilityTracker, feature_type="variable") evt_combo = EventTracker(tracker_type=StabilityTracker, feature_type="variable_combo") - # Check that the correct conversion functions are assigned - assert evt_var.conversion_function == evt_var.invariant_conversion - assert evt_combo.conversion_function == evt_combo.combo_conversion + # Check that the correct converters are assigned + assert isinstance(evt_var.converter, InvariantConverter) + assert isinstance(evt_combo.converter, ComboConverter) class TestClassification: From d694edc168de3cb7b2f6eb85351511999307f76c Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Thu, 29 Jan 2026 14:51:58 +0100 Subject: [PATCH 19/28] adapt trackers + adapt ComboDetector --- anomalies.json | 87 +++++ src/detectmatelibrary/common/detector.py | 4 +- .../dataframes/__init__.py | 4 + .../chunked_event_dataframe.py} | 35 +- .../dataframes/event_dataframe.py | 39 +++ .../trackers/__init__.py | 28 +- .../trackers/base/__init__.py | 10 + .../trackers/base/event_tracker.py | 45 +++ .../trackers/base/multi_tracker.py | 36 +++ .../base.py => base/single_tracker.py} | 0 .../trackers/converter.py | 30 -- .../trackers/event_tracker.py | 59 ---- .../trackers/multi_tracker.py | 49 --- .../trackers/stability/__init__.py | 9 + .../stability_classifier.py | 0 .../stability_tracker.py | 48 ++- .../common/persistency/event_persistency.py | 10 +- .../detectors/new_value_combo_detector.py | 303 +++++++++++------- src/detectmatelibrary/utils/persistency.py | 1 - tests/test_common/test_persistency.py | 6 +- tests/test_common/test_stability_tracking.py | 82 ++--- 21 files changed, 526 insertions(+), 359 deletions(-) create mode 100644 anomalies.json create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/dataframes/__init__.py rename src/detectmatelibrary/common/persistency/event_data_structures/{dataframes.py => dataframes/chunked_event_dataframe.py} (69%) create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/dataframes/event_dataframe.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/__init__.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/event_tracker.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/multi_tracker.py rename src/detectmatelibrary/common/persistency/event_data_structures/trackers/{single_trackers/base.py => base/single_tracker.py} (100%) delete mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/converter.py delete mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/event_tracker.py delete mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/multi_tracker.py create mode 100644 src/detectmatelibrary/common/persistency/event_data_structures/trackers/stability/__init__.py rename src/detectmatelibrary/common/persistency/event_data_structures/trackers/{classifiers => stability}/stability_classifier.py (100%) rename src/detectmatelibrary/common/persistency/event_data_structures/trackers/{single_trackers => stability}/stability_tracker.py (59%) delete mode 100644 src/detectmatelibrary/utils/persistency.py diff --git a/anomalies.json b/anomalies.json new file mode 100644 index 0000000..d656ad7 --- /dev/null +++ b/anomalies.json @@ -0,0 +1,87 @@ +[ + { + "logIDs": [ + 342759 + ], + "detectionTimestamp": 1769673821, + "description": "Monitoring value combinations of size 1. Unseen combinations lead to alerts", + "alertID": 51421, + "detectorID": "NewValueComboDetector", + "extractedTimestamps": [ + 1762273708 + ], + "__version__": "1.0.0", + "alertsObtain": "{'EventID_9': \"Values: ('fakeuser',)\"}", + "detectorType": "new_value_combo_detector", + "score": 2, + "receivedTimestamp": 1769673821 + }, + { + "logIDs": [ + 342759 + ], + "detectionTimestamp": 1769673821, + "description": "Monitoring value combinations of size 1. Unseen combinations lead to alerts", + "alertID": 51421, + "detectorID": "NewValueComboDetector", + "extractedTimestamps": [ + 1762273708 + ], + "__version__": "1.0.0", + "alertsObtain": "{'EventID_9': \"Values: ('fakeuser',)\"}", + "detectorType": "new_value_combo_detector", + "score": 2, + "receivedTimestamp": 1769673821 + }, + { + "logIDs": [ + 342759 + ], + "detectionTimestamp": 1769673821, + "description": "Monitoring value combinations of size 1. Unseen combinations lead to alerts", + "alertID": 51421, + "detectorID": "NewValueComboDetector", + "extractedTimestamps": [ + 1762273708 + ], + "__version__": "1.0.0", + "alertsObtain": "{'EventID_9': \"Values: ('fakeuser',)\"}", + "detectorType": "new_value_combo_detector", + "score": 2, + "receivedTimestamp": 1769673821 + }, + { + "logIDs": [ + 342759 + ], + "detectionTimestamp": 1769673821, + "description": "Monitoring value combinations of size 1. Unseen combinations lead to alerts", + "alertID": 51421, + "detectorID": "NewValueComboDetector", + "extractedTimestamps": [ + 1762273708 + ], + "__version__": "1.0.0", + "alertsObtain": "{'EventID_9': \"Values: ('fakeuser',)\"}", + "detectorType": "new_value_combo_detector", + "score": 2, + "receivedTimestamp": 1769673821 + }, + { + "logIDs": [ + 342759 + ], + "detectionTimestamp": 1769673821, + "description": "Monitoring value combinations of size 1. Unseen combinations lead to alerts", + "alertID": 51421, + "detectorID": "NewValueComboDetector", + "extractedTimestamps": [ + 1762273708 + ], + "__version__": "1.0.0", + "alertsObtain": "{'EventID_9': \"Values: ('fakeuser',)\"}", + "detectorType": "new_value_combo_detector", + "score": 2, + "receivedTimestamp": 1769673821 + } +] diff --git a/src/detectmatelibrary/common/detector.py b/src/detectmatelibrary/common/detector.py index 1592d54..43965b1 100644 --- a/src/detectmatelibrary/common/detector.py +++ b/src/detectmatelibrary/common/detector.py @@ -66,8 +66,8 @@ def run( output_["detectorID"] = self.name output_["detectorType"] = self.config.method_type - output_["logIDs"].extend(_extract_logIDs(input_)) - output_["extractedTimestamps"].extend(_extract_timestamp(input_)) + output_["logIDs"] = _extract_logIDs(input_) + output_["extractedTimestamps"] = _extract_timestamp(input_) output_["alertID"] = self.id_generator() output_["receivedTimestamp"] = get_timestamp() diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes/__init__.py b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes/__init__.py new file mode 100644 index 0000000..52c22b1 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes/__init__.py @@ -0,0 +1,4 @@ +from .event_dataframe import EventDataFrame +from .chunked_event_dataframe import ChunkedEventDataFrame + +__all__ = ["EventDataFrame", "ChunkedEventDataFrame"] diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes/chunked_event_dataframe.py similarity index 69% rename from src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py rename to src/detectmatelibrary/common/persistency/event_data_structures/dataframes/chunked_event_dataframe.py index 16921f4..8b15bff 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes/chunked_event_dataframe.py @@ -1,42 +1,9 @@ from typing import Any, Dict, List, Optional from dataclasses import dataclass, field -import pandas as pd import polars as pl -from .base import EventDataStructure - - -# -------- Pandas backend -------- - -@dataclass -class EventDataFrame(EventDataStructure): - """ - Pandas DataFrame backend: - - Ingest appends data (expensive) - - Retention is not handled (can be extended) - - DataFrame is always materialized - """ - data: pd.DataFrame = field(default_factory=pd.DataFrame) - - def add_data(self, data: pd.DataFrame) -> None: - if len(self.data) > 0: - self.data = pd.concat([self.data, data], ignore_index=True) - else: - self.data = data - - def get_data(self) -> pd.DataFrame: - return self.data - - def get_variables(self) -> List[str]: - return list(self.data.columns) - - def to_data(self, raw_data: Dict[int | str, Any]) -> pd.DataFrame: - data = {key: [value] for key, value in raw_data.items()} - return pd.DataFrame(data) - - def __repr__(self) -> str: - return f"EventDataFrame(df=..., rows={len(self.data)}, variables={self.get_variables()})" +from ..base import EventDataStructure # -------- Polars backends -------- diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/dataframes/event_dataframe.py b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes/event_dataframe.py new file mode 100644 index 0000000..a823f28 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/dataframes/event_dataframe.py @@ -0,0 +1,39 @@ +from typing import Any, Dict, List + +from dataclasses import dataclass, field + +import pandas as pd + +from ..base import EventDataStructure + + +# -------- Pandas backend -------- + +@dataclass +class EventDataFrame(EventDataStructure): + """ + Pandas DataFrame backend: + - Ingest appends data (expensive) + - Retention is not handled (can be extended) + - DataFrame is always materialized + """ + data: pd.DataFrame = field(default_factory=pd.DataFrame) + + def add_data(self, data: pd.DataFrame) -> None: + if len(self.data) > 0: + self.data = pd.concat([self.data, data], ignore_index=True) + else: + self.data = data + + def get_data(self) -> pd.DataFrame: + return self.data + + def get_variables(self) -> List[str]: + return list(self.data.columns) + + def to_data(self, raw_data: Dict[int | str, Any]) -> pd.DataFrame: + data = {key: [value] for key, value in raw_data.items()} + return pd.DataFrame(data) + + def __repr__(self) -> str: + return f"EventDataFrame(df=..., rows={len(self.data)}, variables={self.get_variables()})" diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/__init__.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/__init__.py index 6f030c1..6b7e531 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/__init__.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/__init__.py @@ -7,16 +7,26 @@ implementations. """ -from .classifiers.stability_classifier import StabilityClassifier -from .single_trackers.stability_tracker import StabilityTracker -from .single_trackers.base import Classification -from .multi_tracker import MultiTracker -from .event_tracker import EventTracker +from .stability import ( + StabilityClassifier, + SingleStabilityTracker, + MultiStabilityTracker, + EventStabilityTracker +) +from .base import ( + EventTracker, + MultiTracker, + SingleTracker, + Classification, +) __all__ = [ - "StabilityClassifier", - "StabilityTracker", - "Classification", - "MultiTracker", "EventTracker", + "SingleTracker", + "MultiTracker", + "Classification", + "StabilityClassifier", + "SingleStabilityTracker", + "MultiStabilityTracker", + "EventStabilityTracker", ] diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/__init__.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/__init__.py new file mode 100644 index 0000000..33a8ecd --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/__init__.py @@ -0,0 +1,10 @@ +from .single_tracker import SingleTracker, Classification +from .multi_tracker import MultiTracker +from .event_tracker import EventTracker + +__all__ = [ + "EventTracker", + "MultiTracker", + "SingleTracker", + "Classification", +] diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/event_tracker.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/event_tracker.py new file mode 100644 index 0000000..7dd474d --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/event_tracker.py @@ -0,0 +1,45 @@ +"""Event data structure that tracks variable behaviors over time/events.""" + +from typing import Any, Callable, Dict, Type + +from detectmatelibrary.utils.preview_helpers import format_dict_repr + +from .multi_tracker import MultiTracker +from .single_tracker import SingleTracker +from ...base import EventDataStructure + + +class EventTracker(EventDataStructure): + """Event data structure that tracks the behavior of each event over time / + number of events.""" + + def __init__( + self, + single_tracker_type: Type[SingleTracker] = SingleTracker, + multi_tracker_type: Type[MultiTracker] = MultiTracker, + converter_function: Callable[[Any], Any] = lambda x: x, + ) -> None: + self.single_tracker_type = single_tracker_type + self.multi_tracker_type = multi_tracker_type + self.converter_function = converter_function + self.multi_tracker = self.multi_tracker_type(single_tracker_type=self.single_tracker_type) + + def add_data(self, data_object: Any) -> None: + """Add data to the variable trackers.""" + self.multi_tracker.add_data(data_object) + + def get_data(self) -> Dict[str, SingleTracker]: + """Retrieve the tracker's stored data.""" + return self.multi_tracker.get_trackers() + + def get_variables(self) -> list[str]: + """Get the list of tracked variable names.""" + return list(self.multi_tracker.get_trackers().keys()) + + def to_data(self, raw_data: Dict[str, Any]) -> Any: + """Transform raw data into the format expected by the tracker.""" + return self.converter_function(raw_data) + + def __repr__(self) -> str: + strs = format_dict_repr(self.multi_tracker.get_trackers(), indent="\t") + return f"{self.__class__.__name__}(data={{\n\t{strs}\n}})" diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/multi_tracker.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/multi_tracker.py new file mode 100644 index 0000000..d6fea78 --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/multi_tracker.py @@ -0,0 +1,36 @@ +from typing import Any, Dict, Type + +from detectmatelibrary.utils.preview_helpers import format_dict_repr + +from .single_tracker import SingleTracker, Classification + + +class MultiTracker: + """Tracks multiple features (e.g. variables or variable combos) using + individual trackers.""" + + def __init__(self, single_tracker_type: Type[SingleTracker] = SingleTracker) -> None: + self.single_trackers: Dict[str, SingleTracker] = {} + self.single_tracker_type: Type[SingleTracker] = single_tracker_type + + def add_data(self, data_object: Dict[str, Any]) -> None: + """Add data to the appropriate feature trackers.""" + for name, value in data_object.items(): + if name not in self.single_trackers: + self.single_trackers[name] = self.single_tracker_type() + self.single_trackers[name].add_value(value) + + def get_trackers(self) -> Dict[str, SingleTracker]: + """Get the current feature trackers.""" + return self.single_trackers + + def classify(self) -> Dict[str, Classification]: + """Classify all tracked features.""" + classifications = {} + for name, tracker in self.single_trackers.items(): + classifications[name] = tracker.classify() + return classifications + + def __repr__(self) -> str: + strs = format_dict_repr(self.single_trackers, indent="\t") + return f"{self.__class__.__name__}{{\n\t{strs}\n}}\n" diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/base.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/single_tracker.py similarity index 100% rename from src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/base.py rename to src/detectmatelibrary/common/persistency/event_data_structures/trackers/base/single_tracker.py diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/converter.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/converter.py deleted file mode 100644 index 5b01413..0000000 --- a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/converter.py +++ /dev/null @@ -1,30 +0,0 @@ -"""Converter classes for transforming input data in EventTracker.""" - -from abc import ABC, abstractmethod -from typing import Any, Dict - - -class Converter(ABC): - """Abstract base class for data converters.""" - - @abstractmethod - def convert(self, values_dict: Dict[str, Any]) -> Dict[str, Any]: - """Transform raw data into the format expected by the tracker.""" - pass - - -class InvariantConverter(Converter): - """Converter that returns data unchanged.""" - - def convert(self, values_dict: Dict[str, Any]) -> Dict[str, Any]: - """Return the input data unchanged.""" - return values_dict - - -class ComboConverter(Converter): - """Converter for combo data.""" - - def convert(self, values_dict: Dict[str, Any]) -> Dict[str, Any]: - """Transform raw combo data into the format expected by the tracker.""" - - return values_dict diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/event_tracker.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/event_tracker.py deleted file mode 100644 index 5f23d0d..0000000 --- a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/event_tracker.py +++ /dev/null @@ -1,59 +0,0 @@ -"""Event data structure that tracks variable behaviors over time/events.""" - -from typing import Any, Dict, Type, List, Literal -from dataclasses import dataclass, field - -from detectmatelibrary.utils.preview_helpers import format_dict_repr - -from ..base import EventDataStructure -from .single_trackers.stability_tracker import StabilityTracker -from .multi_tracker import MultiTracker -from .converter import Converter, InvariantConverter, ComboConverter - - -@dataclass -class EventTracker(EventDataStructure): - """Event data structure that tracks the behavior of each event over time / - number of events.""" - - tracker_type: Type[StabilityTracker] = StabilityTracker - multi_tracker: MultiTracker = field(init=False) - feature_type: Literal["variable", "variable_combo"] = "variable" - converter: Converter = field(init=False) - - def __post_init__(self) -> None: - self.multi_tracker = MultiTracker(tracker_type=self.tracker_type) - - if self.feature_type == "variable": - self.converter = InvariantConverter() - elif self.feature_type == "variable_combo": - self.converter = ComboConverter() - else: - raise ValueError(f"Invalid feature: {self.feature_type}") - - def add_data(self, data_object: Any) -> None: - """Add data to the variable trackers.""" - self.multi_tracker.add_data(data_object) - - def get_data(self) -> Any: - """Retrieve the tracker's stored data.""" - return self.multi_tracker.get_trackers() - - def get_variables(self) -> list[str]: - """Get the list of tracked variable names.""" - return list(self.multi_tracker.get_trackers().keys()) - - def get_variables_by_classification( - self, classification_type: Literal["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] - ) -> List[str]: - """Get a list of variable names that are classified as the given - type.""" - return self.multi_tracker.get_variables_by_classification(classification_type) - - def to_data(self, raw_data: Dict[str, Any]) -> Dict[str, Any]: - """Transform raw data into the format expected by the tracker.""" - return self.converter.convert(raw_data) - - def __repr__(self) -> str: - strs = format_dict_repr(self.multi_tracker.get_trackers(), indent="\t") - return f"{self.__class__.__name__}(data={{\n\t{strs}\n}})" diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/multi_tracker.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/multi_tracker.py deleted file mode 100644 index d416bc6..0000000 --- a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/multi_tracker.py +++ /dev/null @@ -1,49 +0,0 @@ -from typing import Any, Dict, Type, List, Literal - -from detectmatelibrary.utils.preview_helpers import format_dict_repr - -from .single_trackers.base import SingleTracker - - -class MultiTracker: - """Tracks multiple features (e.g. variables or variable combos) using - individual trackers.""" - - def __init__(self, tracker_type: Type[SingleTracker] = SingleTracker) -> None: - self.trackers: Dict[str, SingleTracker] = {} - self.tracker_type: Type[SingleTracker] = tracker_type - - def add_data(self, data_object: Dict[str, Any]) -> None: - """Add data to the appropriate feature trackers.""" - for name, value in data_object.items(): - if name not in self.trackers: - self.trackers[name] = self.tracker_type() - self.trackers[name].add_value(value) - - def get_trackers(self) -> Dict[str, SingleTracker]: - """Get the current feature trackers.""" - return self.trackers - - def classify(self) -> Dict[str, Any]: - """Classify all tracked features.""" - classifications = {} - for name, tracker in self.trackers.items(): - classifications[name] = tracker.classify() - return classifications - - def get_variables_by_classification( - self, - classification_type: Literal["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] - ) -> List[str]: - """Get a list of variable names that are classified as the given - type.""" - variables = [] - for name, tracker in self.trackers.items(): - classification = tracker.classify() - if classification.type == classification_type: - variables.append(name) - return variables - - def __repr__(self) -> str: - strs = format_dict_repr(self.trackers, indent="\t") - return f"{self.__class__.__name__}{{\n\t{strs}\n}}\n" diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/stability/__init__.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/stability/__init__.py new file mode 100644 index 0000000..32ead5d --- /dev/null +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/stability/__init__.py @@ -0,0 +1,9 @@ +from .stability_tracker import SingleStabilityTracker, MultiStabilityTracker, EventStabilityTracker +from .stability_classifier import StabilityClassifier + +__all__ = [ + "EventStabilityTracker", + "MultiStabilityTracker", + "SingleStabilityTracker", + "StabilityClassifier", +] diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/classifiers/stability_classifier.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/stability/stability_classifier.py similarity index 100% rename from src/detectmatelibrary/common/persistency/event_data_structures/trackers/classifiers/stability_classifier.py rename to src/detectmatelibrary/common/persistency/event_data_structures/trackers/stability/stability_classifier.py diff --git a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/stability_tracker.py b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/stability/stability_tracker.py similarity index 59% rename from src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/stability_tracker.py rename to src/detectmatelibrary/common/persistency/event_data_structures/trackers/stability/stability_tracker.py index 5ff580b..a37ab3d 100644 --- a/src/detectmatelibrary/common/persistency/event_data_structures/trackers/single_trackers/stability_tracker.py +++ b/src/detectmatelibrary/common/persistency/event_data_structures/trackers/stability/stability_tracker.py @@ -1,16 +1,16 @@ """Tracks whether a variable is converging to a constant value.""" -from typing import Any, Set +from typing import Any, Callable, List, Literal, Set from detectmatelibrary.utils.preview_helpers import list_preview_str from detectmatelibrary.utils.RLE_list import RLEList -from ..classifiers.stability_classifier import StabilityClassifier -from .base import SingleTracker, Classification +from ..base import SingleTracker, MultiTracker, EventTracker, Classification +from .stability_classifier import StabilityClassifier -class StabilityTracker(SingleTracker): - """Tracks whether a single variable is converging to a constant value.""" +class SingleStabilityTracker(SingleTracker): + """Tracks stability of a single feature.""" def __init__(self, min_samples: int = 3) -> None: self.min_samples = min_samples @@ -67,3 +67,41 @@ def __repr__(self) -> str: f"{self.__class__.__name__}(classification={self.classify()}, change_series={series_str}, " f"unique_set={unique_set_str}, RLE={RLE_str})" ) + + +class MultiStabilityTracker(MultiTracker): + """Tracks multiple features (e.g. variables or variable combos) using + individual trackers.""" + + def get_variables_by_classification( + self, + classification_type: Literal["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] + ) -> List[str]: + """Get a list of variable names that are classified as the given + type.""" + variables = [] + for name, tracker in self.single_trackers.items(): + classification = tracker.classify() + if classification.type == classification_type: + variables.append(name) + return variables + + +class EventStabilityTracker(EventTracker): + """Event data structure that tracks the stability of each event over time / + number of events.""" + + def __init__(self, converter_function: Callable[[Any], Any] = lambda x: x) -> None: + self.multi_tracker: MultiStabilityTracker # for type hinting + super().__init__( + single_tracker_type=SingleStabilityTracker, + multi_tracker_type=MultiStabilityTracker, + converter_function=converter_function, + ) + + def get_variables_by_classification( + self, classification_type: Literal["INSUFFICIENT_DATA", "STATIC", "RANDOM", "STABLE", "UNSTABLE"] + ) -> List[str]: + """Get a list of variable names that are classified as the given + type.""" + return self.multi_tracker.get_variables_by_classification(classification_type) diff --git a/src/detectmatelibrary/common/persistency/event_persistency.py b/src/detectmatelibrary/common/persistency/event_persistency.py index 6c56b8a..7d922ab 100644 --- a/src/detectmatelibrary/common/persistency/event_persistency.py +++ b/src/detectmatelibrary/common/persistency/event_persistency.py @@ -40,7 +40,7 @@ def ingest_event( ) -> None: """Ingest event data into the appropriate EventData store.""" self.event_templates[event_id] = event_template - all_variables = self.get_all_variables(variables, log_format_variables, self.variable_blacklist) + all_variables = self.get_all_variables(variables, log_format_variables) data_structure = self.events_data.get(event_id) if data_structure is None: @@ -67,11 +67,11 @@ def get_event_templates(self) -> Dict[int, str]: """Retrieve all event templates.""" return self.event_templates - @staticmethod def get_all_variables( + self, variables: list[Any], log_format_variables: Dict[str, Any], - variable_blacklist: List[str | int], + # variable_blacklist: List[str | int], event_var_prefix: str = "var_", ) -> dict[str, list[Any]]: """Combine log format variables and event variables into a single @@ -81,11 +81,11 @@ def get_all_variables( """ all_vars: dict[str, list[Any]] = { k: v for k, v in log_format_variables.items() - if k not in variable_blacklist + if k not in self.variable_blacklist } all_vars.update({ f"{event_var_prefix}{i}": val for i, val in enumerate(variables) - if i not in variable_blacklist + if i not in self.variable_blacklist }) return all_vars diff --git a/src/detectmatelibrary/detectors/new_value_combo_detector.py b/src/detectmatelibrary/detectors/new_value_combo_detector.py index 485296a..b376325 100644 --- a/src/detectmatelibrary/detectors/new_value_combo_detector.py +++ b/src/detectmatelibrary/detectors/new_value_combo_detector.py @@ -7,100 +7,18 @@ from detectmatelibrary.utils.data_buffer import BufferMode from detectmatelibrary.common.persistency.event_data_structures.trackers import ( - EventTracker, StabilityTracker + EventStabilityTracker ) from detectmatelibrary.common.persistency.event_persistency import EventPersistency import detectmatelibrary.schemas as schemas -from typing import Any, Set, Dict, cast -from itertools import combinations +from typing import Any, Set, Dict, cast, Tuple -# Auxiliar methods ******************************************************** -class ComboTooBigError(Exception): - def __init__(self, exp_size: int, max_size: int) -> None: - super().__init__(f"Expected size {exp_size} but the max it got {max_size}") - - -def _check_size(exp_size: int, max_size: int) -> None | ComboTooBigError: - if max_size < exp_size: - raise ComboTooBigError(exp_size, max_size) - return None - - -def _get_element(input_: schemas.ParserSchema, var_pos: str | int) -> Any: - if isinstance(var_pos, str): - return input_["logFormatVariables"][var_pos] - elif len(input_["variables"]) > var_pos: - return input_["variables"][var_pos] - - -def _get_combos( - input_: schemas.ParserSchema, - combo_size: int, - log_variables: LogVariables | AllLogVariables -) -> Set[Any]: - - relevant_log_fields = log_variables[input_["EventID"]] - if relevant_log_fields is None: - return set() - - relevant_log_fields = relevant_log_fields.get_all().keys() # type: ignore - # _check_size(combo_size, len(relevant_log_fields)) # type: ignore - - return set(combinations([ - _get_element(input_, var_pos=field) for field in relevant_log_fields # type: ignore - ], combo_size)) - - -# Combo detector methods ******************************************************** -def train_combo_detector( - input_: schemas.ParserSchema, - known_combos: Dict[str | int, Set[Any]], - combo_size: int, - log_variables: LogVariables | AllLogVariables -) -> None: - - if input_["EventID"] not in log_variables: - return None - unique_combos = _get_combos( - input_=input_, combo_size=combo_size, log_variables=log_variables - ) - - if isinstance(log_variables, LogVariables): - if input_["EventID"] not in known_combos: - known_combos[input_["EventID"]] = set() - known_combos[input_["EventID"]] = known_combos[input_["EventID"]].union(unique_combos) - else: - known_combos["all"] = known_combos["all"].union(unique_combos) - - -def detect_combo_detector( - input_: schemas.ParserSchema, - known_combos: Dict[str | int, Set[Any]], - combo_size: int, - log_variables: LogVariables | AllLogVariables, - alerts: dict[str, str], -) -> int: - - overall_score = 0 - if input_["EventID"] in log_variables: - unique_combos = _get_combos( - input_=input_, combo_size=combo_size, log_variables=log_variables - ) - - if isinstance(log_variables, AllLogVariables): - combos_set = known_combos["all"] - else: - combos_set = known_combos[input_["EventID"]] - - if not unique_combos.issubset(combos_set): - for combo in unique_combos - combos_set: - overall_score += 1 - alerts.update({f"EventID_{input_['EventID']}": f"Values: {combo}"}) - - return overall_score +def get_combo(variables: Dict[str, Any]) -> Dict[str, Tuple[Any, ...]]: + """Get a single combination of all variables as a key-value pair.""" + return {"-".join(variables.keys()): tuple(variables.values())} # ********************************************************************* @@ -121,30 +39,24 @@ def __init__( if isinstance(config, dict): config = NewValueComboDetectorConfig.from_dict(config, name) super().__init__(name=name, buffer_mode=BufferMode.NO_BUF, config=config) - self.config: NewValueComboDetectorConfig self.config = cast(NewValueComboDetectorConfig, self.config) self.known_combos: Dict[str | int, Set[Any]] = {"all": set()} self.persistency = EventPersistency( - event_data_class=EventTracker, - event_data_kwargs={ - "tracker_type": StabilityTracker, - "feature_type": "variable_combo" - } + event_data_class=EventStabilityTracker, + event_data_kwargs={"converter_function": get_combo} + ) + # auto config checks if individual variables are stable to select combos from + self.auto_conf_persistency = EventPersistency( + event_data_class=EventStabilityTracker ) def train(self, input_: schemas.ParserSchema) -> None: # type: ignore - # self.persistency.ingest_event( - # event_id=input_["EventID"], - # event_template=input_["template"], - # variables=input_["variables"], - # log_format_variables=input_["logFormatVariables"], - # ) - train_combo_detector( - input_=input_, - known_combos=self.known_combos, - combo_size=self.config.comb_size, - log_variables=self.config.log_variables # type: ignore + self.persistency.ingest_event( + event_id=input_["EventID"], + event_template=input_["template"], + variables=input_["variables"], + log_format_variables=input_["logFormatVariables"], ) def detect( @@ -152,26 +64,25 @@ def detect( ) -> bool: alerts: Dict[str, str] = {} - overall_score = detect_combo_detector( - input_=input_, - known_combos=self.known_combos, - combo_size=self.config.comb_size, - log_variables=self.config.log_variables, # type: ignore - alerts=alerts, + all_variables = self.persistency.get_all_variables( + variables=input_["variables"], + log_format_variables=input_["logFormatVariables"], ) - - if overall_score > 0: - output_["score"] = overall_score - output_["description"] = ( - f"Monitoring value combinations of size {self.config.comb_size}. " - "Unseen combinations lead to alerts" - ) - output_["alertsObtain"].update(alerts) + combo = tuple(get_combo(all_variables).items())[0] + + for event_id, event_tracker in self.persistency.get_events_data().items(): + for event_id, multi_tracker in event_tracker.get_data().items(): + if combo not in multi_tracker.unique_set: + alerts[f"EventID {event_id}"] = ( + f"Unknown value combination: {combo}" + ) + if alerts: + output_["alertsObtain"] = alerts return True return False def configure(self, input_: schemas.ParserSchema) -> None: - self.persistency.ingest_event( + self.auto_conf_persistency.ingest_event( event_id=input_["EventID"], event_template=input_["template"], variables=input_["variables"], @@ -181,11 +92,11 @@ def configure(self, input_: schemas.ParserSchema) -> None: def set_configuration(self, max_combo_size: int = 6) -> None: variable_combos = {} templates = {} - for event_id, tracker in self.persistency.get_events_data().items(): + for event_id, tracker in self.auto_conf_persistency.get_events_data().items(): stable_vars = tracker.get_variables_by_classification("STABLE") # type: ignore if len(stable_vars) > 1: variable_combos[event_id] = stable_vars - templates[event_id] = self.persistency.get_event_template(event_id) + templates[event_id] = self.auto_conf_persistency.get_event_template(event_id) config_dict = generate_detector_config( variable_selection=variable_combos, templates=templates, @@ -195,3 +106,153 @@ def set_configuration(self, max_combo_size: int = 6) -> None: ) # Update the config object from the dictionary instead of replacing it self.config = NewValueComboDetectorConfig.from_dict(config_dict, self.name) + + +# if __name__ == "__main__": +# # Example: Testing the NewValueComboDetector +# # This demonstrates the configuration and training workflow + +# # Create sample parsed log events (simulating authentication logs) +# sample_events = [ +# # Normal login patterns - user1 always logs in from office IP +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user1", "192.168.1.100"], +# "logFormatVariables": {"username": "user1", "src_ip": "192.168.1.100"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user1", "192.168.1.100"], +# "logFormatVariables": {"username": "user1", "src_ip": "192.168.1.100"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user1", "192.168.1.100"], +# "logFormatVariables": {"username": "user1", "src_ip": "192.168.1.100"}}, + +# # user2 always logs in from home IP +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user2", "10.0.0.50"], +# "logFormatVariables": {"username": "user2", "src_ip": "10.0.0.50"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user2", "10.0.0.50"], +# "logFormatVariables": {"username": "user2", "src_ip": "10.0.0.50"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user2", "10.0.0.50"], +# "logFormatVariables": {"username": "user2", "src_ip": "10.0.0.50"}}, + +# # Different event type - file access +# {"EventID": 4663, "template": "User <*> accessed file <*>", +# "variables": ["user1", "/data/report.pdf"], +# "logFormatVariables": {"username": "user1", "filepath": "/data/report.pdf"}}, +# {"EventID": 4663, "template": "User <*> accessed file <*>", +# "variables": ["user1", "/data/report.pdf"], +# "logFormatVariables": {"username": "user1", "filepath": "/data/report.pdf"}}, +# # Normal login patterns - user1 always logs in from office IP +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user1", "192.168.1.100"], +# "logFormatVariables": {"username": "user1", "src_ip": "192.168.1.100"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user1", "192.168.1.100"], +# "logFormatVariables": {"username": "user1", "src_ip": "192.168.1.100"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user1", "192.168.1.100"], +# "logFormatVariables": {"username": "user1", "src_ip": "192.168.1.100"}}, + +# # user2 always logs in from home IP +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user2", "10.0.0.50"], +# "logFormatVariables": {"username": "user2", "src_ip": "10.0.0.50"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user2", "10.0.0.50"], +# "logFormatVariables": {"username": "user2", "src_ip": "10.0.0.50"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user2", "10.0.0.50"], +# "logFormatVariables": {"username": "user2", "src_ip": "10.0.0.50"}}, + +# # Different event type - file access +# {"EventID": 4663, "template": "User <*> accessed file <*>", +# "variables": ["user1", "/data/report.pdf"], +# "logFormatVariables": {"username": "user1", "filepath": "/data/report.pdf"}}, +# {"EventID": 4663, "template": "User <*> accessed file <*>", +# "variables": ["user1", "/data/report.pdf"], +# "logFormatVariables": {"username": "user1", "filepath": "/data/report.pdf"}}, +# # Normal login patterns - user1 always logs in from office IP +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user1", "192.168.1.100"], +# "logFormatVariables": {"username": "user1", "src_ip": "192.168.1.100"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user1", "192.168.1.100"], +# "logFormatVariables": {"username": "user1", "src_ip": "192.168.1.100"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user1", "192.168.1.100"], +# "logFormatVariables": {"username": "user1", "src_ip": "192.168.1.100"}}, + +# # user2 always logs in from home IP +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user2", "10.0.0.50"], +# "logFormatVariables": {"username": "user2", "src_ip": "10.0.0.50"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user2", "10.0.0.50"], +# "logFormatVariables": {"username": "user2", "src_ip": "10.0.0.50"}}, +# {"EventID": 4624, "template": "User <*> logged in from <*>", +# "variables": ["user2", "10.0.0.50"], +# "logFormatVariables": {"username": "user2", "src_ip": "10.0.0.50"}}, + +# # Different event type - file access +# {"EventID": 4663, "template": "User <*> accessed file <*>", +# "variables": ["user1", "/data/report.pdf"], +# "logFormatVariables": {"username": "user1", "filepath": "/data/report.pdf"}}, +# {"EventID": 4663, "template": "User <*> accessed file <*>", +# "variables": ["user1", "/data/report.pdf"], +# "logFormatVariables": {"username": "user1", "filepath": "/data/report.pdf"}}, +# ] + +# # Create ParserSchema objects from sample data +# parser_schemas = [schemas.ParserSchema(kwargs=event) for event in sample_events] + +# # Initialize the detector +# detector = NewValueComboDetector(name="TestComboDetector") + +# print("=" * 60) +# print("NewValueComboDetector Example") +# print("=" * 60) + +# # Phase 1: Configuration - learn which variables are stable +# print("\n[Phase 1] Running configuration phase...") +# for schema in parser_schemas: +# detector.configure(schema) + +# # Set configuration based on learned stable variables +# detector.set_configuration(max_combo_size=2) + +# print(f"Configured log_variables: {detector.config.log_variables}") +# print(f"Combo size: {detector.config.comb_size}") + +# # Phase 2: Training - learn normal value combinations +# print("\n[Phase 2] Running training phase...") +# for schema in parser_schemas: +# detector.train(schema) + +# # Show what the detector learned +# print("\nLearned event data:") +# for event_id, tracker in detector.persistency.get_events_data().items(): +# print(f" EventID {event_id}: {tracker}") + +# # Phase 3: Detection (note: detect method is incomplete in current code) +# print("\n[Phase 3] Detection phase...") +# print("Note: The detect() method is currently incomplete.") + +# # Example anomalous event - user1 logging in from unusual IP +# anomalous_event = { +# "EventID": 4624, +# "template": "User <*> logged in from <*>", +# "variables": ["MALICIOUS_USER", "MALICIOUS_IP"], +# "logFormatVariables": {"username": "MALICIOUS_USER", "src_ip": "MALICIOUS_IP"}, +# } +# anomalous_schema = schemas.ParserSchema(kwargs=anomalous_event) + + +# # Create output schema for detection results +# output_schema = schemas.DetectorSchema(kwargs={"alertsObtain": {}}) + +# for schema in [anomalous_schema]: +# detector.detect(schema, output_=output_schema) + +# print("\nDetection output:") +# print(output_schema) diff --git a/src/detectmatelibrary/utils/persistency.py b/src/detectmatelibrary/utils/persistency.py deleted file mode 100644 index a107634..0000000 --- a/src/detectmatelibrary/utils/persistency.py +++ /dev/null @@ -1 +0,0 @@ -# placeholder for the persistency class that handles all kinds of persistency diff --git a/tests/test_common/test_persistency.py b/tests/test_common/test_persistency.py index 9b366d8..e730619 100644 --- a/tests/test_common/test_persistency.py +++ b/tests/test_common/test_persistency.py @@ -14,7 +14,7 @@ ) from detectmatelibrary.common.persistency.event_data_structures.trackers import ( EventTracker, - StabilityTracker, + SingleStabilityTracker, ) @@ -63,7 +63,7 @@ def test_initialization_with_tracker_backend(self): """Test initialization with EventVariableTrackerData backend.""" persistency = EventPersistency( event_data_class=EventTracker, - event_data_kwargs={"tracker_type": StabilityTracker}, + event_data_kwargs={"tracker_type": SingleStabilityTracker}, ) assert persistency is not None assert persistency.event_data_class == EventTracker @@ -351,7 +351,7 @@ def test_tracker_backend_full_workflow(self): """Test complete workflow with Tracker backend.""" persistency = EventPersistency( event_data_class=EventTracker, - event_data_kwargs={"tracker_type": StabilityTracker}, + event_data_kwargs={"tracker_type": SingleStabilityTracker}, ) # Ingest events with patterns diff --git a/tests/test_common/test_stability_tracking.py b/tests/test_common/test_stability_tracking.py index d135e8a..1ea0d90 100644 --- a/tests/test_common/test_stability_tracking.py +++ b/tests/test_common/test_stability_tracking.py @@ -7,7 +7,7 @@ from detectmatelibrary.common.persistency.event_data_structures.trackers import ( StabilityClassifier, - StabilityTracker, + SingleStabilityTracker, MultiTracker, EventTracker, Classification, @@ -90,19 +90,19 @@ class TestSingleVariableTracker: def test_initialization_default(self): """Test SingleVariableTracker initialization with defaults.""" - tracker = StabilityTracker() + tracker = SingleStabilityTracker() assert tracker.min_samples == 3 assert isinstance(tracker.change_series, RLEList) assert isinstance(tracker.unique_set, set) def test_initialization_custom_params(self): """Test initialization with custom parameters.""" - tracker = StabilityTracker(min_samples=20) + tracker = SingleStabilityTracker(min_samples=20) assert tracker.min_samples == 20 def test_add_value_single(self): """Test adding a single value.""" - tracker = StabilityTracker() + tracker = SingleStabilityTracker() tracker.add_value("value1") assert len(tracker.unique_set) == 1 @@ -110,7 +110,7 @@ def test_add_value_single(self): def test_add_value_multiple_same(self): """Test adding multiple same values.""" - tracker = StabilityTracker() + tracker = SingleStabilityTracker() for i in range(10): tracker.add_value("constant") @@ -120,7 +120,7 @@ def test_add_value_multiple_same(self): def test_add_value_multiple_different(self): """Test adding multiple different values.""" - tracker = StabilityTracker() + tracker = SingleStabilityTracker() for i in range(10): tracker.add_value(f"value_{i}") @@ -129,7 +129,7 @@ def test_add_value_multiple_different(self): def test_classification_insufficient_data(self): """Test classification with insufficient data.""" - tracker = StabilityTracker(min_samples=30) + tracker = SingleStabilityTracker(min_samples=30) for i in range(10): # Less than min_samples tracker.add_value(f"value_{i}") @@ -139,7 +139,7 @@ def test_classification_insufficient_data(self): def test_classification_static(self): """Test classification as STATIC (single unique value).""" - tracker = StabilityTracker(min_samples=10) + tracker = SingleStabilityTracker(min_samples=10) for i in range(40): tracker.add_value("constant") @@ -149,7 +149,7 @@ def test_classification_static(self): def test_classification_random(self): """Test classification as RANDOM (all unique values).""" - tracker = StabilityTracker(min_samples=10) + tracker = SingleStabilityTracker(min_samples=10) for i in range(40): tracker.add_value(f"unique_{i}") @@ -159,7 +159,7 @@ def test_classification_random(self): def test_classification_stable(self): """Test classification as STABLE (converging pattern).""" - tracker = StabilityTracker(min_samples=10) + tracker = SingleStabilityTracker(min_samples=10) # Pattern: changing values that stabilize for i in range(15): @@ -172,7 +172,7 @@ def test_classification_stable(self): def test_classification_unstable(self): """Test classification as UNSTABLE (no clear pattern).""" - tracker = StabilityTracker(min_samples=10) + tracker = SingleStabilityTracker(min_samples=10) # Alternating pattern for i in range(40): @@ -184,7 +184,7 @@ def test_classification_unstable(self): def test_rle_list_integration(self): """Test that RLEList is used for efficient storage.""" - tracker = StabilityTracker() + tracker = SingleStabilityTracker() # Add values that create runs for i in range(20): @@ -197,7 +197,7 @@ def test_rle_list_integration(self): def test_unique_values_tracking(self): """Test unique values are tracked in a set.""" - tracker = StabilityTracker() + tracker = SingleStabilityTracker() values = ["a", "b", "c", "a", "b", "a"] for v in values: @@ -210,7 +210,7 @@ def test_unique_values_tracking(self): def test_change_detection(self): """Test that add_value correctly detects changes.""" - tracker = StabilityTracker() + tracker = SingleStabilityTracker() tracker.add_value("a") tracker.add_value("a") @@ -227,28 +227,28 @@ class TestMultiVariableTracker: def test_initialization_default(self): """Test MultiVariableTracker initialization.""" - trackers = MultiTracker(tracker_type=StabilityTracker) + trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) assert trackers is not None - assert trackers.tracker_type == StabilityTracker + assert trackers.tracker_type == SingleStabilityTracker def test_initialization_with_kwargs(self): """Test initialization without kwargs - MultiVariableTracker doesn't store tracker kwargs.""" - trackers = MultiTracker(tracker_type=StabilityTracker) - assert trackers.tracker_type == StabilityTracker + trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) + assert trackers.tracker_type == SingleStabilityTracker def test_add_data_single_variable(self): """Test adding data for a single variable.""" - trackers = MultiTracker(tracker_type=StabilityTracker) + trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) data = {"var1": "value1"} trackers.add_data(data) all_trackers = trackers.get_trackers() assert "var1" in all_trackers - assert isinstance(all_trackers["var1"], StabilityTracker) + assert isinstance(all_trackers["var1"], SingleStabilityTracker) def test_add_data_multiple_variables(self): """Test adding data for multiple variables.""" - trackers = MultiTracker(tracker_type=StabilityTracker) + trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) data = {"var1": "value1", "var2": "value2", "var3": "value3"} trackers.add_data(data) @@ -260,7 +260,7 @@ def test_add_data_multiple_variables(self): def test_add_data_multiple_times(self): """Test adding data multiple times.""" - trackers = MultiTracker(tracker_type=StabilityTracker) + trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) trackers.add_data({"var1": "a", "var2": "x"}) trackers.add_data({"var1": "b", "var2": "y"}) @@ -272,7 +272,7 @@ def test_add_data_multiple_times(self): def test_classify_all_variables(self): """Test classifying all variables.""" - trackers = MultiTracker(tracker_type=StabilityTracker) + trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) # Add enough data for classification for i in range(10): @@ -285,7 +285,7 @@ def test_classify_all_variables(self): def test_get_stable_variables(self): """Test retrieving stable variables.""" - trackers = MultiTracker(tracker_type=StabilityTracker) + trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) # Create stable pattern for i in range(40): @@ -300,7 +300,7 @@ def test_get_stable_variables(self): def test_get_trackers(self): """Test retrieving all trackers.""" - trackers = MultiTracker(tracker_type=StabilityTracker) + trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) trackers.add_data({"var1": "a", "var2": "b"}) all_trackers = trackers.get_trackers() @@ -309,7 +309,7 @@ def test_get_trackers(self): def test_dynamic_tracker_creation(self): """Test that trackers are created dynamically.""" - trackers = MultiTracker(tracker_type=StabilityTracker) + trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) # First add trackers.add_data({"var1": "a"}) @@ -329,13 +329,13 @@ class TestEventVariableTrackerData: def test_initialization(self): """Test EventVariableTrackerData initialization.""" - evt = EventTracker(tracker_type=StabilityTracker) + evt = EventTracker(tracker_type=SingleStabilityTracker) assert evt is not None assert isinstance(evt.multi_tracker, MultiTracker) def test_add_data(self): """Test adding data.""" - evt = EventTracker(tracker_type=StabilityTracker) + evt = EventTracker(tracker_type=SingleStabilityTracker) data = {"var1": "value1", "var2": "value2"} evt.add_data(data) @@ -345,7 +345,7 @@ def test_add_data(self): def test_get_variables(self): """Test retrieving variable names.""" - evt = EventTracker(tracker_type=StabilityTracker) + evt = EventTracker(tracker_type=SingleStabilityTracker) evt.add_data({"var1": "a", "var2": "b", "var3": "c"}) var_names = evt.get_variables() @@ -356,7 +356,7 @@ def test_get_variables(self): def test_get_stable_variables(self): """Test retrieving stable variables.""" - evt = EventTracker(tracker_type=StabilityTracker) + evt = EventTracker(tracker_type=SingleStabilityTracker) for i in range(40): evt.add_data({ @@ -369,7 +369,7 @@ def test_get_stable_variables(self): def test_integration_with_stability_tracker(self): """Test full integration with SingleVariableTracker.""" - evt = EventTracker(tracker_type=StabilityTracker) + evt = EventTracker(tracker_type=SingleStabilityTracker) # Simulate log processing for i in range(50): @@ -388,7 +388,7 @@ def test_integration_with_stability_tracker(self): def test_to_data_with_variable_level(self): """Test to_data method with variable level (default).""" - evt = EventTracker(tracker_type=StabilityTracker, feature_type="variable") + evt = EventTracker(tracker_type=SingleStabilityTracker, feature_type="variable") raw_data = {"var1": "value1", "var2": "value2"} converted_data = evt.to_data(raw_data) @@ -400,7 +400,7 @@ def test_to_data_with_variable_level(self): def test_to_data_with_variable_combo_level(self): """Test to_data method with variable_combo level.""" - evt = EventTracker(tracker_type=StabilityTracker, feature_type="variable_combo") + evt = EventTracker(tracker_type=SingleStabilityTracker, feature_type="variable_combo") raw_data = {"combo1": ("a", "b"), "combo2": ("x", "y")} converted_data = evt.to_data(raw_data) @@ -412,7 +412,7 @@ def test_to_data_with_variable_combo_level(self): def test_to_data_integration_with_add_data(self): """Test that to_data and add_data work together correctly.""" - evt = EventTracker(tracker_type=StabilityTracker, feature_type="variable") + evt = EventTracker(tracker_type=SingleStabilityTracker, feature_type="variable") # Use to_data to convert raw data, then add it raw_data = {"user": "alice", "ip": "192.168.1.1"} @@ -427,8 +427,8 @@ def test_to_data_integration_with_add_data(self): def test_conversion_function_assignment(self): """Test that converter is correctly assigned based on feature_type.""" - evt_var = EventTracker(tracker_type=StabilityTracker, feature_type="variable") - evt_combo = EventTracker(tracker_type=StabilityTracker, feature_type="variable_combo") + evt_var = EventTracker(tracker_type=SingleStabilityTracker, feature_type="variable") + evt_combo = EventTracker(tracker_type=SingleStabilityTracker, feature_type="variable_combo") # Check that the correct converters are assigned assert isinstance(evt_var.converter, InvariantConverter) @@ -459,7 +459,7 @@ class TestStabilityTrackingIntegration: def test_full_workflow_static_variable(self): """Test full workflow with static variable.""" - tracker = StabilityTracker(min_samples=10) + tracker = SingleStabilityTracker(min_samples=10) # Add 50 identical values for i in range(50): @@ -470,7 +470,7 @@ def test_full_workflow_static_variable(self): def test_full_workflow_random_variable(self): """Test full workflow with random variable.""" - tracker = StabilityTracker(min_samples=10) + tracker = SingleStabilityTracker(min_samples=10) # Add 50 unique values for i in range(50): @@ -481,7 +481,7 @@ def test_full_workflow_random_variable(self): def test_full_workflow_stabilizing_variable(self): """Test full workflow with stabilizing variable.""" - tracker = StabilityTracker(min_samples=10) + tracker = SingleStabilityTracker(min_samples=10) # Start with varied values, then stabilize for i in range(15): @@ -495,7 +495,7 @@ def test_full_workflow_stabilizing_variable(self): def test_multiple_variables_with_different_patterns(self): """Test tracking multiple variables with different patterns.""" - trackers = MultiTracker(tracker_type=StabilityTracker) + trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) # Simulate 100 events for i in range(100): @@ -520,7 +520,7 @@ def test_multiple_variables_with_different_patterns(self): def test_event_variable_tracker_real_world_scenario(self): """Test EventVariableTrackerData with realistic log data.""" - evt = EventTracker(tracker_type=StabilityTracker) + evt = EventTracker(tracker_type=SingleStabilityTracker) # Simulate web server logs for i in range(200): From c3cc89892c61e88061a8be8e7e573f6e3d417e6c Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Thu, 29 Jan 2026 16:13:21 +0100 Subject: [PATCH 20/28] remove file --- anomalies.json | 87 -------------------------------------------------- 1 file changed, 87 deletions(-) delete mode 100644 anomalies.json diff --git a/anomalies.json b/anomalies.json deleted file mode 100644 index d656ad7..0000000 --- a/anomalies.json +++ /dev/null @@ -1,87 +0,0 @@ -[ - { - "logIDs": [ - 342759 - ], - "detectionTimestamp": 1769673821, - "description": "Monitoring value combinations of size 1. Unseen combinations lead to alerts", - "alertID": 51421, - "detectorID": "NewValueComboDetector", - "extractedTimestamps": [ - 1762273708 - ], - "__version__": "1.0.0", - "alertsObtain": "{'EventID_9': \"Values: ('fakeuser',)\"}", - "detectorType": "new_value_combo_detector", - "score": 2, - "receivedTimestamp": 1769673821 - }, - { - "logIDs": [ - 342759 - ], - "detectionTimestamp": 1769673821, - "description": "Monitoring value combinations of size 1. Unseen combinations lead to alerts", - "alertID": 51421, - "detectorID": "NewValueComboDetector", - "extractedTimestamps": [ - 1762273708 - ], - "__version__": "1.0.0", - "alertsObtain": "{'EventID_9': \"Values: ('fakeuser',)\"}", - "detectorType": "new_value_combo_detector", - "score": 2, - "receivedTimestamp": 1769673821 - }, - { - "logIDs": [ - 342759 - ], - "detectionTimestamp": 1769673821, - "description": "Monitoring value combinations of size 1. Unseen combinations lead to alerts", - "alertID": 51421, - "detectorID": "NewValueComboDetector", - "extractedTimestamps": [ - 1762273708 - ], - "__version__": "1.0.0", - "alertsObtain": "{'EventID_9': \"Values: ('fakeuser',)\"}", - "detectorType": "new_value_combo_detector", - "score": 2, - "receivedTimestamp": 1769673821 - }, - { - "logIDs": [ - 342759 - ], - "detectionTimestamp": 1769673821, - "description": "Monitoring value combinations of size 1. Unseen combinations lead to alerts", - "alertID": 51421, - "detectorID": "NewValueComboDetector", - "extractedTimestamps": [ - 1762273708 - ], - "__version__": "1.0.0", - "alertsObtain": "{'EventID_9': \"Values: ('fakeuser',)\"}", - "detectorType": "new_value_combo_detector", - "score": 2, - "receivedTimestamp": 1769673821 - }, - { - "logIDs": [ - 342759 - ], - "detectionTimestamp": 1769673821, - "description": "Monitoring value combinations of size 1. Unseen combinations lead to alerts", - "alertID": 51421, - "detectorID": "NewValueComboDetector", - "extractedTimestamps": [ - 1762273708 - ], - "__version__": "1.0.0", - "alertsObtain": "{'EventID_9': \"Values: ('fakeuser',)\"}", - "detectorType": "new_value_combo_detector", - "score": 2, - "receivedTimestamp": 1769673821 - } -] From d6dacfac94a052a1896a432ad1a025add96efdff Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Thu, 29 Jan 2026 16:18:05 +0100 Subject: [PATCH 21/28] add data for testing --- tests/test_folder/Apache_2k.log | 2000 +++++++++++++++++++++++++++++++ 1 file changed, 2000 insertions(+) create mode 100644 tests/test_folder/Apache_2k.log diff --git a/tests/test_folder/Apache_2k.log b/tests/test_folder/Apache_2k.log new file mode 100644 index 0000000..c072657 --- /dev/null +++ b/tests/test_folder/Apache_2k.log @@ -0,0 +1,2000 @@ +[Sun Dec 04 04:47:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:47:44 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:51:08 2005] [notice] jk2_init() Found child 6725 in scoreboard slot 10 +[Sun Dec 04 04:51:09 2005] [notice] jk2_init() Found child 6726 in scoreboard slot 8 +[Sun Dec 04 04:51:09 2005] [notice] jk2_init() Found child 6728 in scoreboard slot 6 +[Sun Dec 04 04:51:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:51:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:51:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:51:18 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:51:18 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:51:18 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:51:37 2005] [notice] jk2_init() Found child 6736 in scoreboard slot 10 +[Sun Dec 04 04:51:38 2005] [notice] jk2_init() Found child 6733 in scoreboard slot 7 +[Sun Dec 04 04:51:38 2005] [notice] jk2_init() Found child 6734 in scoreboard slot 9 +[Sun Dec 04 04:51:52 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:51:52 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:51:55 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:52:04 2005] [notice] jk2_init() Found child 6738 in scoreboard slot 6 +[Sun Dec 04 04:52:04 2005] [notice] jk2_init() Found child 6741 in scoreboard slot 9 +[Sun Dec 04 04:52:05 2005] [notice] jk2_init() Found child 6740 in scoreboard slot 7 +[Sun Dec 04 04:52:05 2005] [notice] jk2_init() Found child 6737 in scoreboard slot 8 +[Sun Dec 04 04:52:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:52:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:52:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:52:15 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:52:15 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 04:52:15 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 04:52:36 2005] [notice] jk2_init() Found child 6748 in scoreboard slot 6 +[Sun Dec 04 04:52:36 2005] [notice] jk2_init() Found child 6744 in scoreboard slot 10 +[Sun Dec 04 04:52:36 2005] [notice] jk2_init() Found child 6745 in scoreboard slot 8 +[Sun Dec 04 04:52:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:52:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:52:52 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 04:52:52 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:53:05 2005] [notice] jk2_init() Found child 6750 in scoreboard slot 7 +[Sun Dec 04 04:53:05 2005] [notice] jk2_init() Found child 6751 in scoreboard slot 9 +[Sun Dec 04 04:53:05 2005] [notice] jk2_init() Found child 6752 in scoreboard slot 10 +[Sun Dec 04 04:53:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:53:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:53:16 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 04:53:16 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:53:29 2005] [notice] jk2_init() Found child 6754 in scoreboard slot 8 +[Sun Dec 04 04:53:29 2005] [notice] jk2_init() Found child 6755 in scoreboard slot 6 +[Sun Dec 04 04:53:40 2005] [notice] jk2_init() Found child 6756 in scoreboard slot 7 +[Sun Dec 04 04:53:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:53:54 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 04:54:15 2005] [notice] jk2_init() Found child 6763 in scoreboard slot 10 +[Sun Dec 04 04:54:15 2005] [notice] jk2_init() Found child 6766 in scoreboard slot 6 +[Sun Dec 04 04:54:15 2005] [notice] jk2_init() Found child 6767 in scoreboard slot 7 +[Sun Dec 04 04:54:15 2005] [notice] jk2_init() Found child 6765 in scoreboard slot 8 +[Sun Dec 04 04:54:18 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:54:18 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:54:18 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:54:18 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:54:18 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:54:18 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:54:18 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 04:54:18 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 04:54:20 2005] [notice] jk2_init() Found child 6768 in scoreboard slot 9 +[Sun Dec 04 04:54:20 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:54:20 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:56:52 2005] [notice] jk2_init() Found child 8527 in scoreboard slot 10 +[Sun Dec 04 04:56:52 2005] [notice] jk2_init() Found child 8533 in scoreboard slot 8 +[Sun Dec 04 04:56:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:56:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:56:59 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:57:00 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:57:20 2005] [notice] jk2_init() Found child 8536 in scoreboard slot 6 +[Sun Dec 04 04:57:20 2005] [notice] jk2_init() Found child 8539 in scoreboard slot 7 +[Sun Dec 04 04:57:24 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:57:24 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:57:24 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:57:24 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:57:49 2005] [notice] jk2_init() Found child 8541 in scoreboard slot 9 +[Sun Dec 04 04:58:11 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:58:18 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:58:45 2005] [notice] jk2_init() Found child 8547 in scoreboard slot 10 +[Sun Dec 04 04:58:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:58:58 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:59:28 2005] [notice] jk2_init() Found child 8554 in scoreboard slot 6 +[Sun Dec 04 04:59:27 2005] [notice] jk2_init() Found child 8553 in scoreboard slot 8 +[Sun Dec 04 04:59:35 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:59:35 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 04:59:38 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 04:59:38 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:00:03 2005] [notice] jk2_init() Found child 8560 in scoreboard slot 7 +[Sun Dec 04 05:00:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:00:09 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:00:13 2005] [notice] jk2_init() Found child 8565 in scoreboard slot 9 +[Sun Dec 04 05:00:13 2005] [notice] jk2_init() Found child 8573 in scoreboard slot 10 +[Sun Dec 04 05:00:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:00:15 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:00:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:00:15 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:01:20 2005] [notice] jk2_init() Found child 8584 in scoreboard slot 7 +[Sun Dec 04 05:01:20 2005] [notice] jk2_init() Found child 8587 in scoreboard slot 9 +[Sun Dec 04 05:02:14 2005] [notice] jk2_init() Found child 8603 in scoreboard slot 10 +[Sun Dec 04 05:02:14 2005] [notice] jk2_init() Found child 8605 in scoreboard slot 8 +[Sun Dec 04 05:04:03 2005] [notice] jk2_init() Found child 8764 in scoreboard slot 10 +[Sun Dec 04 05:04:03 2005] [notice] jk2_init() Found child 8765 in scoreboard slot 11 +[Sun Dec 04 05:04:03 2005] [notice] jk2_init() Found child 8763 in scoreboard slot 9 +[Sun Dec 04 05:04:03 2005] [notice] jk2_init() Found child 8744 in scoreboard slot 8 +[Sun Dec 04 05:04:03 2005] [notice] jk2_init() Found child 8743 in scoreboard slot 7 +[Sun Dec 04 05:04:03 2005] [notice] jk2_init() Found child 8738 in scoreboard slot 6 +[Sun Dec 04 05:04:03 2005] [notice] jk2_init() Found child 8766 in scoreboard slot 12 +[Sun Dec 04 05:04:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:04:04 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 05:04:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:04:04 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:04:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:04:04 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 05:04:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:04:04 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 05:04:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:04:04 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 05:04:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:04:04 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:04:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:04:04 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:11:51 2005] [notice] jk2_init() Found child 25792 in scoreboard slot 6 +[Sun Dec 04 05:12:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:12:10 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:12:26 2005] [notice] jk2_init() Found child 25798 in scoreboard slot 7 +[Sun Dec 04 05:12:26 2005] [notice] jk2_init() Found child 25803 in scoreboard slot 8 +[Sun Dec 04 05:12:28 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:12:28 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:12:28 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:12:28 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:12:30 2005] [notice] jk2_init() Found child 25805 in scoreboard slot 9 +[Sun Dec 04 05:12:30 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:12:30 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 05:15:09 2005] [error] [client 222.166.160.184] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 05:15:13 2005] [notice] jk2_init() Found child 1000 in scoreboard slot 10 +[Sun Dec 04 05:15:16 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 05:15:16 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:01:00 2005] [notice] jk2_init() Found child 32347 in scoreboard slot 6 +[Sun Dec 04 06:01:00 2005] [notice] jk2_init() Found child 32348 in scoreboard slot 7 +[Sun Dec 04 06:01:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:01:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:01:30 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:01:42 2005] [notice] jk2_init() Found child 32352 in scoreboard slot 9 +[Sun Dec 04 06:01:42 2005] [notice] jk2_init() Found child 32353 in scoreboard slot 10 +[Sun Dec 04 06:01:42 2005] [notice] jk2_init() Found child 32354 in scoreboard slot 6 +[Sun Dec 04 06:02:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:02:02 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:02:05 2005] [notice] jk2_init() Found child 32359 in scoreboard slot 9 +[Sun Dec 04 06:02:05 2005] [notice] jk2_init() Found child 32360 in scoreboard slot 11 +[Sun Dec 04 06:02:05 2005] [notice] jk2_init() Found child 32358 in scoreboard slot 8 +[Sun Dec 04 06:02:05 2005] [notice] jk2_init() Found child 32355 in scoreboard slot 7 +[Sun Dec 04 06:02:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:02:07 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:02:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:02:07 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:02:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:02:07 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:02:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:02:07 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:06:00 2005] [notice] jk2_init() Found child 32388 in scoreboard slot 8 +[Sun Dec 04 06:06:00 2005] [notice] jk2_init() Found child 32387 in scoreboard slot 7 +[Sun Dec 04 06:06:00 2005] [notice] jk2_init() Found child 32386 in scoreboard slot 6 +[Sun Dec 04 06:06:10 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:06:11 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:06:12 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:06:12 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:06:20 2005] [notice] jk2_init() Found child 32389 in scoreboard slot 9 +[Sun Dec 04 06:06:24 2005] [notice] jk2_init() Found child 32391 in scoreboard slot 10 +[Sun Dec 04 06:06:24 2005] [notice] jk2_init() Found child 32390 in scoreboard slot 8 +[Sun Dec 04 06:06:24 2005] [notice] jk2_init() Found child 32392 in scoreboard slot 6 +[Sun Dec 04 06:06:26 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:06:26 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:06:26 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:06:26 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:06:26 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:06:26 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:06:26 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:06:26 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:11:11 2005] [notice] jk2_init() Found child 32410 in scoreboard slot 7 +[Sun Dec 04 06:11:11 2005] [notice] jk2_init() Found child 32411 in scoreboard slot 9 +[Sun Dec 04 06:12:31 2005] [notice] jk2_init() Found child 32423 in scoreboard slot 9 +[Sun Dec 04 06:12:31 2005] [notice] jk2_init() Found child 32422 in scoreboard slot 8 +[Sun Dec 04 06:12:31 2005] [notice] jk2_init() Found child 32419 in scoreboard slot 6 +[Sun Dec 04 06:12:31 2005] [notice] jk2_init() Found child 32421 in scoreboard slot 11 +[Sun Dec 04 06:12:31 2005] [notice] jk2_init() Found child 32420 in scoreboard slot 7 +[Sun Dec 04 06:12:31 2005] [notice] jk2_init() Found child 32424 in scoreboard slot 10 +[Sun Dec 04 06:12:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:12:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:12:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:12:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:12:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:12:40 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:12:40 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:12:40 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:12:40 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:12:40 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:12:59 2005] [notice] jk2_init() Found child 32425 in scoreboard slot 6 +[Sun Dec 04 06:13:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:13:01 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:16:10 2005] [notice] jk2_init() Found child 32432 in scoreboard slot 7 +[Sun Dec 04 06:16:10 2005] [notice] jk2_init() Found child 32434 in scoreboard slot 9 +[Sun Dec 04 06:16:10 2005] [notice] jk2_init() Found child 32433 in scoreboard slot 8 +[Sun Dec 04 06:16:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:16:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:16:23 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:16:23 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:16:21 2005] [notice] jk2_init() Found child 32435 in scoreboard slot 10 +[Sun Dec 04 06:16:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:16:23 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:16:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:16:39 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:16:51 2005] [notice] jk2_init() Found child 32436 in scoreboard slot 6 +[Sun Dec 04 06:16:51 2005] [notice] jk2_init() Found child 32437 in scoreboard slot 7 +[Sun Dec 04 06:17:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:17:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:17:05 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:17:06 2005] [notice] jk2_init() Found child 32438 in scoreboard slot 8 +[Sun Dec 04 06:17:18 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:17:24 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:17:23 2005] [notice] jk2_init() Found child 32440 in scoreboard slot 10 +[Sun Dec 04 06:17:23 2005] [notice] jk2_init() Found child 32439 in scoreboard slot 9 +[Sun Dec 04 06:17:23 2005] [notice] jk2_init() Found child 32441 in scoreboard slot 6 +[Sun Dec 04 06:17:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:17:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:17:35 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:17:35 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:17:55 2005] [notice] jk2_init() Found child 32442 in scoreboard slot 7 +[Sun Dec 04 06:17:55 2005] [notice] jk2_init() Found child 32443 in scoreboard slot 8 +[Sun Dec 04 06:17:55 2005] [notice] jk2_init() Found child 32444 in scoreboard slot 9 +[Sun Dec 04 06:18:08 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:18:08 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:18:11 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:18:11 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:18:12 2005] [notice] jk2_init() Found child 32445 in scoreboard slot 10 +[Sun Dec 04 06:18:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:18:31 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:18:41 2005] [notice] jk2_init() Found child 32447 in scoreboard slot 7 +[Sun Dec 04 06:18:39 2005] [notice] jk2_init() Found child 32446 in scoreboard slot 6 +[Sun Dec 04 06:18:40 2005] [notice] jk2_init() Found child 32448 in scoreboard slot 8 +[Sun Dec 04 06:18:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:18:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:18:55 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:18:55 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:19:05 2005] [notice] jk2_init() Found child 32449 in scoreboard slot 9 +[Sun Dec 04 06:19:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:19:19 2005] [notice] jk2_init() Found child 32450 in scoreboard slot 10 +[Sun Dec 04 06:19:18 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:19:19 2005] [notice] jk2_init() Found child 32452 in scoreboard slot 7 +[Sun Dec 04 06:19:19 2005] [notice] jk2_init() Found child 32451 in scoreboard slot 6 +[Sun Dec 04 06:19:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:19:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:19:34 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:19:34 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:19:56 2005] [notice] jk2_init() Found child 32454 in scoreboard slot 7 +[Sun Dec 04 06:19:56 2005] [notice] jk2_init() Found child 32453 in scoreboard slot 8 +[Sun Dec 04 06:19:56 2005] [notice] jk2_init() Found child 32455 in scoreboard slot 9 +[Sun Dec 04 06:20:30 2005] [notice] jk2_init() Found child 32467 in scoreboard slot 9 +[Sun Dec 04 06:20:30 2005] [notice] jk2_init() Found child 32464 in scoreboard slot 8 +[Sun Dec 04 06:20:30 2005] [notice] jk2_init() Found child 32465 in scoreboard slot 7 +[Sun Dec 04 06:20:30 2005] [notice] jk2_init() Found child 32466 in scoreboard slot 11 +[Sun Dec 04 06:20:30 2005] [notice] jk2_init() Found child 32457 in scoreboard slot 6 +[Sun Dec 04 06:20:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:20:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:20:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:20:46 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:20:46 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:20:46 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 06:22:18 2005] [notice] jk2_init() Found child 32475 in scoreboard slot 8 +[Sun Dec 04 06:22:48 2005] [notice] jk2_init() Found child 32478 in scoreboard slot 11 +[Sun Dec 04 06:22:48 2005] [notice] jk2_init() Found child 32477 in scoreboard slot 10 +[Sun Dec 04 06:22:48 2005] [notice] jk2_init() Found child 32479 in scoreboard slot 6 +[Sun Dec 04 06:22:48 2005] [notice] jk2_init() Found child 32480 in scoreboard slot 8 +[Sun Dec 04 06:22:48 2005] [notice] jk2_init() Found child 32476 in scoreboard slot 7 +[Sun Dec 04 06:22:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:22:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:22:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:22:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:22:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:22:55 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:22:55 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:22:55 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:22:55 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:22:55 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 06:23:12 2005] [notice] jk2_init() Found child 32483 in scoreboard slot 7 +[Sun Dec 04 06:23:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:23:15 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:30:41 2005] [notice] jk2_init() Found child 32507 in scoreboard slot 9 +[Sun Dec 04 06:30:43 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:30:43 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:36:07 2005] [notice] jk2_init() Found child 32529 in scoreboard slot 6 +[Sun Dec 04 06:36:07 2005] [notice] jk2_init() Found child 32528 in scoreboard slot 10 +[Sun Dec 04 06:36:10 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:36:10 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:36:10 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:36:10 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:40:54 2005] [notice] jk2_init() Found child 32548 in scoreboard slot 9 +[Sun Dec 04 06:40:54 2005] [notice] jk2_init() Found child 32546 in scoreboard slot 8 +[Sun Dec 04 06:40:55 2005] [notice] jk2_init() Found child 32547 in scoreboard slot 7 +[Sun Dec 04 06:41:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:41:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:41:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:41:07 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:41:08 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:41:08 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:41:29 2005] [notice] jk2_init() Found child 32549 in scoreboard slot 10 +[Sun Dec 04 06:41:29 2005] [notice] jk2_init() Found child 32550 in scoreboard slot 6 +[Sun Dec 04 06:41:45 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:41:45 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:41:46 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:41:46 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:42:11 2005] [notice] jk2_init() Found child 32551 in scoreboard slot 8 +[Sun Dec 04 06:42:11 2005] [notice] jk2_init() Found child 32552 in scoreboard slot 7 +[Sun Dec 04 06:42:25 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:42:23 2005] [notice] jk2_init() Found child 32554 in scoreboard slot 10 +[Sun Dec 04 06:42:25 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:42:23 2005] [notice] jk2_init() Found child 32553 in scoreboard slot 9 +[Sun Dec 04 06:42:30 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:42:30 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:42:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:42:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:42:58 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:42:58 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:43:20 2005] [notice] jk2_init() Found child 32556 in scoreboard slot 8 +[Sun Dec 04 06:43:20 2005] [notice] jk2_init() Found child 32555 in scoreboard slot 6 +[Sun Dec 04 06:43:20 2005] [notice] jk2_init() Found child 32557 in scoreboard slot 7 +[Sun Dec 04 06:43:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:43:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:43:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:43:40 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:43:40 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:43:56 2005] [notice] jk2_init() Found child 32558 in scoreboard slot 9 +[Sun Dec 04 06:44:18 2005] [notice] jk2_init() Found child 32560 in scoreboard slot 6 +[Sun Dec 04 06:44:18 2005] [notice] jk2_init() Found child 32561 in scoreboard slot 8 +[Sun Dec 04 06:44:39 2005] [notice] jk2_init() Found child 32563 in scoreboard slot 9 +[Sun Dec 04 06:44:39 2005] [notice] jk2_init() Found child 32564 in scoreboard slot 10 +[Sun Dec 04 06:44:39 2005] [notice] jk2_init() Found child 32565 in scoreboard slot 11 +[Sun Dec 04 06:45:32 2005] [notice] jk2_init() Found child 32575 in scoreboard slot 6 +[Sun Dec 04 06:45:32 2005] [notice] jk2_init() Found child 32576 in scoreboard slot 7 +[Sun Dec 04 06:45:32 2005] [notice] jk2_init() Found child 32569 in scoreboard slot 9 +[Sun Dec 04 06:45:32 2005] [notice] jk2_init() Found child 32572 in scoreboard slot 10 +[Sun Dec 04 06:45:32 2005] [notice] jk2_init() Found child 32577 in scoreboard slot 11 +[Sun Dec 04 06:45:50 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:45:50 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:45:57 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:46:13 2005] [notice] jk2_init() Found child 32578 in scoreboard slot 8 +[Sun Dec 04 06:46:13 2005] [notice] jk2_init() Found child 32580 in scoreboard slot 6 +[Sun Dec 04 06:46:12 2005] [notice] jk2_init() Found child 32581 in scoreboard slot 7 +[Sun Dec 04 06:46:13 2005] [notice] jk2_init() Found child 32579 in scoreboard slot 9 +[Sun Dec 04 06:46:30 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:46:30 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:46:31 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 06:46:31 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:46:32 2005] [notice] jk2_init() Found child 32582 in scoreboard slot 10 +[Sun Dec 04 06:46:32 2005] [notice] jk2_init() Found child 32584 in scoreboard slot 9 +[Sun Dec 04 06:46:32 2005] [notice] jk2_init() Found child 32583 in scoreboard slot 8 +[Sun Dec 04 06:46:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:46:33 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 06:46:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:46:34 2005] [error] mod_jk child workerEnv in error state 10 +[Sun Dec 04 06:46:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:46:34 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 06:47:19 2005] [notice] jk2_init() Found child 32585 in scoreboard slot 6 +[Sun Dec 04 06:47:30 2005] [notice] jk2_init() Found child 32587 in scoreboard slot 10 +[Sun Dec 04 06:47:30 2005] [notice] jk2_init() Found child 32586 in scoreboard slot 7 +[Sun Dec 04 06:47:34 2005] [notice] jk2_init() Found child 32588 in scoreboard slot 8 +[Sun Dec 04 06:47:38 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:47:39 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:47:39 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:47:43 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:48:09 2005] [notice] jk2_init() Found child 32592 in scoreboard slot 10 +[Sun Dec 04 06:48:09 2005] [notice] jk2_init() Found child 32591 in scoreboard slot 7 +[Sun Dec 04 06:48:22 2005] [notice] jk2_init() Found child 32594 in scoreboard slot 6 +[Sun Dec 04 06:48:22 2005] [notice] jk2_init() Found child 32593 in scoreboard slot 8 +[Sun Dec 04 06:48:48 2005] [notice] jk2_init() Found child 32597 in scoreboard slot 10 +[Sun Dec 04 06:49:06 2005] [notice] jk2_init() Found child 32600 in scoreboard slot 9 +[Sun Dec 04 06:49:06 2005] [notice] jk2_init() Found child 32601 in scoreboard slot 7 +[Sun Dec 04 06:49:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:49:24 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 06:49:40 2005] [notice] jk2_init() Found child 32605 in scoreboard slot 9 +[Sun Dec 04 06:49:40 2005] [notice] jk2_init() Found child 32604 in scoreboard slot 6 +[Sun Dec 04 06:51:13 2005] [notice] jk2_init() Found child 32622 in scoreboard slot 7 +[Sun Dec 04 06:51:14 2005] [notice] jk2_init() Found child 32623 in scoreboard slot 11 +[Sun Dec 04 06:51:13 2005] [notice] jk2_init() Found child 32624 in scoreboard slot 8 +[Sun Dec 04 06:51:13 2005] [notice] jk2_init() Found child 32621 in scoreboard slot 9 +[Sun Dec 04 06:51:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:51:23 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:51:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:51:23 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:51:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:51:23 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 06:51:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:51:23 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:51:25 2005] [notice] jk2_init() Found child 32626 in scoreboard slot 6 +[Sun Dec 04 06:51:26 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:51:26 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 06:52:07 2005] [notice] jk2_init() Found child 32627 in scoreboard slot 9 +[Sun Dec 04 06:52:08 2005] [notice] jk2_init() Found child 32628 in scoreboard slot 7 +[Sun Dec 04 06:52:13 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:52:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:52:15 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:52:15 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:52:27 2005] [notice] jk2_init() Found child 32630 in scoreboard slot 8 +[Sun Dec 04 06:52:27 2005] [notice] jk2_init() Found child 32629 in scoreboard slot 10 +[Sun Dec 04 06:52:39 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:52:39 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:52:41 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 06:52:41 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:53:04 2005] [notice] jk2_init() Found child 32633 in scoreboard slot 9 +[Sun Dec 04 06:53:04 2005] [notice] jk2_init() Found child 32634 in scoreboard slot 11 +[Sun Dec 04 06:53:04 2005] [notice] jk2_init() Found child 32632 in scoreboard slot 7 +[Sun Dec 04 06:53:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:53:26 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:53:38 2005] [notice] jk2_init() Found child 32636 in scoreboard slot 6 +[Sun Dec 04 06:53:37 2005] [notice] jk2_init() Found child 32637 in scoreboard slot 7 +[Sun Dec 04 06:53:37 2005] [notice] jk2_init() Found child 32638 in scoreboard slot 9 +[Sun Dec 04 06:54:04 2005] [notice] jk2_init() Found child 32640 in scoreboard slot 8 +[Sun Dec 04 06:54:04 2005] [notice] jk2_init() Found child 32641 in scoreboard slot 6 +[Sun Dec 04 06:54:04 2005] [notice] jk2_init() Found child 32642 in scoreboard slot 7 +[Sun Dec 04 06:54:35 2005] [notice] jk2_init() Found child 32646 in scoreboard slot 6 +[Sun Dec 04 06:55:00 2005] [notice] jk2_init() Found child 32648 in scoreboard slot 9 +[Sun Dec 04 06:55:00 2005] [notice] jk2_init() Found child 32652 in scoreboard slot 7 +[Sun Dec 04 06:55:00 2005] [notice] jk2_init() Found child 32649 in scoreboard slot 10 +[Sun Dec 04 06:55:00 2005] [notice] jk2_init() Found child 32651 in scoreboard slot 6 +[Sun Dec 04 06:55:00 2005] [notice] jk2_init() Found child 32650 in scoreboard slot 8 +[Sun Dec 04 06:55:19 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:55:19 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:55:19 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:55:23 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:55:23 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 06:55:23 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 06:55:55 2005] [notice] jk2_init() Found child 32660 in scoreboard slot 6 +[Sun Dec 04 06:55:54 2005] [notice] jk2_init() Found child 32658 in scoreboard slot 10 +[Sun Dec 04 06:55:54 2005] [notice] jk2_init() Found child 32659 in scoreboard slot 8 +[Sun Dec 04 06:55:54 2005] [notice] jk2_init() Found child 32657 in scoreboard slot 9 +[Sun Dec 04 06:56:10 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:56:17 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:56:37 2005] [notice] jk2_init() Found child 32663 in scoreboard slot 10 +[Sun Dec 04 06:56:37 2005] [notice] jk2_init() Found child 32664 in scoreboard slot 8 +[Sun Dec 04 06:57:19 2005] [notice] jk2_init() Found child 32670 in scoreboard slot 6 +[Sun Dec 04 06:57:19 2005] [notice] jk2_init() Found child 32667 in scoreboard slot 9 +[Sun Dec 04 06:57:19 2005] [notice] jk2_init() Found child 32668 in scoreboard slot 10 +[Sun Dec 04 06:57:19 2005] [notice] jk2_init() Found child 32669 in scoreboard slot 8 +[Sun Dec 04 06:57:19 2005] [notice] jk2_init() Found child 32671 in scoreboard slot 7 +[Sun Dec 04 06:57:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:57:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:57:23 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:57:23 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:57:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:57:23 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 06:57:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:57:23 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 06:57:24 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:57:24 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 06:58:12 2005] [notice] jk2_init() Found child 32674 in scoreboard slot 8 +[Sun Dec 04 06:58:13 2005] [notice] jk2_init() Found child 32672 in scoreboard slot 9 +[Sun Dec 04 06:58:13 2005] [notice] jk2_init() Found child 32673 in scoreboard slot 10 +[Sun Dec 04 06:58:27 2005] [notice] jk2_init() Found child 32675 in scoreboard slot 6 +[Sun Dec 04 06:58:28 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:58:28 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:58:29 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:58:29 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:58:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:58:53 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:58:54 2005] [notice] jk2_init() Found child 32677 in scoreboard slot 7 +[Sun Dec 04 06:58:54 2005] [notice] jk2_init() Found child 32676 in scoreboard slot 9 +[Sun Dec 04 06:58:54 2005] [notice] jk2_init() Found child 32678 in scoreboard slot 10 +[Sun Dec 04 06:59:28 2005] [notice] jk2_init() Found child 32679 in scoreboard slot 8 +[Sun Dec 04 06:59:28 2005] [notice] jk2_init() Found child 32680 in scoreboard slot 6 +[Sun Dec 04 06:59:34 2005] [notice] jk2_init() Found child 32681 in scoreboard slot 9 +[Sun Dec 04 06:59:34 2005] [notice] jk2_init() Found child 32682 in scoreboard slot 7 +[Sun Dec 04 06:59:38 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:59:40 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 06:59:45 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:59:45 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 06:59:47 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 06:59:47 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 06:59:59 2005] [notice] jk2_init() Found child 32683 in scoreboard slot 10 +[Sun Dec 04 07:00:06 2005] [notice] jk2_init() Found child 32685 in scoreboard slot 6 +[Sun Dec 04 07:00:32 2005] [notice] jk2_init() Found child 32688 in scoreboard slot 11 +[Sun Dec 04 07:00:32 2005] [notice] jk2_init() Found child 32695 in scoreboard slot 8 +[Sun Dec 04 07:00:32 2005] [notice] jk2_init() Found child 32696 in scoreboard slot 6 +[Sun Dec 04 07:01:25 2005] [notice] jk2_init() Found child 32701 in scoreboard slot 10 +[Sun Dec 04 07:01:26 2005] [notice] jk2_init() Found child 32702 in scoreboard slot 11 +[Sun Dec 04 07:01:55 2005] [notice] jk2_init() Found child 32711 in scoreboard slot 10 +[Sun Dec 04 07:01:55 2005] [notice] jk2_init() Found child 32708 in scoreboard slot 7 +[Sun Dec 04 07:01:55 2005] [notice] jk2_init() Found child 32710 in scoreboard slot 9 +[Sun Dec 04 07:01:55 2005] [notice] jk2_init() Found child 32709 in scoreboard slot 8 +[Sun Dec 04 07:01:57 2005] [notice] jk2_init() Found child 32712 in scoreboard slot 6 +[Sun Dec 04 07:02:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:02:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:02:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:02:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:02:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:02:03 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 07:02:03 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 07:02:03 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 07:02:03 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:02:03 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:02:52 2005] [notice] jk2_init() Found child 32713 in scoreboard slot 7 +[Sun Dec 04 07:03:23 2005] [notice] jk2_init() Found child 32717 in scoreboard slot 10 +[Sun Dec 04 07:03:48 2005] [notice] jk2_init() Found child 32720 in scoreboard slot 8 +[Sun Dec 04 07:04:27 2005] [notice] jk2_init() Found child 32726 in scoreboard slot 8 +[Sun Dec 04 07:04:55 2005] [notice] jk2_init() Found child 32730 in scoreboard slot 7 +[Sun Dec 04 07:04:55 2005] [notice] jk2_init() Found child 32729 in scoreboard slot 6 +[Sun Dec 04 07:04:55 2005] [notice] jk2_init() Found child 32731 in scoreboard slot 8 +[Sun Dec 04 07:05:44 2005] [notice] jk2_init() Found child 32739 in scoreboard slot 7 +[Sun Dec 04 07:05:44 2005] [notice] jk2_init() Found child 32740 in scoreboard slot 8 +[Sun Dec 04 07:06:11 2005] [notice] jk2_init() Found child 32742 in scoreboard slot 10 +[Sun Dec 04 07:07:23 2005] [notice] jk2_init() Found child 32758 in scoreboard slot 7 +[Sun Dec 04 07:07:23 2005] [notice] jk2_init() Found child 32755 in scoreboard slot 8 +[Sun Dec 04 07:07:23 2005] [notice] jk2_init() Found child 32754 in scoreboard slot 11 +[Sun Dec 04 07:07:30 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:07:30 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:07:30 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:07:30 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 07:07:30 2005] [error] mod_jk child workerEnv in error state 10 +[Sun Dec 04 07:07:30 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 07:08:02 2005] [notice] jk2_init() Found child 32761 in scoreboard slot 6 +[Sun Dec 04 07:08:02 2005] [notice] jk2_init() Found child 32762 in scoreboard slot 9 +[Sun Dec 04 07:08:02 2005] [notice] jk2_init() Found child 32763 in scoreboard slot 10 +[Sun Dec 04 07:08:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:08:04 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 07:08:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:08:04 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:08:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:08:04 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 07:10:54 2005] [notice] jk2_init() Found child 308 in scoreboard slot 8 +[Sun Dec 04 07:11:04 2005] [notice] jk2_init() Found child 310 in scoreboard slot 6 +[Sun Dec 04 07:11:04 2005] [notice] jk2_init() Found child 309 in scoreboard slot 7 +[Sun Dec 04 07:11:05 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:11:05 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:11:13 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:11:13 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:11:22 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:11:22 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:11:49 2005] [notice] jk2_init() Found child 311 in scoreboard slot 9 +[Sun Dec 04 07:12:05 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:12:08 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:12:22 2005] [notice] jk2_init() Found child 312 in scoreboard slot 10 +[Sun Dec 04 07:12:22 2005] [notice] jk2_init() Found child 313 in scoreboard slot 8 +[Sun Dec 04 07:12:40 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:12:40 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:12:44 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:12:44 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:13:09 2005] [notice] jk2_init() Found child 314 in scoreboard slot 7 +[Sun Dec 04 07:13:09 2005] [notice] jk2_init() Found child 315 in scoreboard slot 6 +[Sun Dec 04 07:13:10 2005] [notice] jk2_init() Found child 316 in scoreboard slot 9 +[Sun Dec 04 07:13:36 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:13:36 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:13:36 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:13:41 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:13:41 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:14:07 2005] [notice] jk2_init() Found child 319 in scoreboard slot 7 +[Sun Dec 04 07:14:07 2005] [notice] jk2_init() Found child 317 in scoreboard slot 10 +[Sun Dec 04 07:14:08 2005] [notice] jk2_init() Found child 318 in scoreboard slot 8 +[Sun Dec 04 07:14:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:14:29 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 07:14:47 2005] [notice] jk2_init() Found child 321 in scoreboard slot 9 +[Sun Dec 04 07:15:09 2005] [notice] jk2_init() Found child 324 in scoreboard slot 11 +[Sun Dec 04 07:15:09 2005] [notice] jk2_init() Found child 323 in scoreboard slot 8 +[Sun Dec 04 07:17:56 2005] [notice] jk2_init() Found child 350 in scoreboard slot 9 +[Sun Dec 04 07:17:56 2005] [notice] jk2_init() Found child 353 in scoreboard slot 12 +[Sun Dec 04 07:17:56 2005] [notice] jk2_init() Found child 352 in scoreboard slot 11 +[Sun Dec 04 07:17:56 2005] [notice] jk2_init() Found child 349 in scoreboard slot 8 +[Sun Dec 04 07:17:56 2005] [notice] jk2_init() Found child 348 in scoreboard slot 7 +[Sun Dec 04 07:17:56 2005] [notice] jk2_init() Found child 347 in scoreboard slot 6 +[Sun Dec 04 07:17:56 2005] [notice] jk2_init() Found child 351 in scoreboard slot 10 +[Sun Dec 04 07:18:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:18:00 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 07:18:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:18:00 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:18:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:18:00 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 07:18:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:18:00 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 07:18:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:18:00 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 07:18:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:18:00 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 07:18:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 07:18:00 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 07:45:45 2005] [error] [client 63.13.186.196] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 08:54:17 2005] [error] [client 147.31.138.75] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 09:35:12 2005] [error] [client 207.203.80.15] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 10:53:30 2005] [error] [client 218.76.139.20] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 11:11:07 2005] [error] [client 24.147.151.74] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 11:33:18 2005] [error] [client 211.141.93.88] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 11:42:43 2005] [error] [client 216.127.124.16] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 12:33:13 2005] [error] [client 208.51.151.210] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 13:32:32 2005] [error] [client 65.68.235.27] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 14:29:00 2005] [error] [client 4.245.93.87] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 15:18:36 2005] [error] [client 67.154.58.130] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 15:59:01 2005] [error] [client 24.83.37.136] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 16:24:03 2005] [notice] jk2_init() Found child 1219 in scoreboard slot 6 +[Sun Dec 04 16:24:05 2005] [error] [client 58.225.62.140] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 16:24:06 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:24:06 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:31:07 2005] [notice] jk2_init() Found child 1248 in scoreboard slot 7 +[Sun Dec 04 16:32:37 2005] [notice] jk2_init() Found child 1253 in scoreboard slot 9 +[Sun Dec 04 16:32:56 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:32:56 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:32:58 2005] [notice] jk2_init() Found child 1254 in scoreboard slot 7 +[Sun Dec 04 16:32:58 2005] [notice] jk2_init() Found child 1256 in scoreboard slot 6 +[Sun Dec 04 16:32:58 2005] [notice] jk2_init() Found child 1255 in scoreboard slot 8 +[Sun Dec 04 16:32:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:32:58 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 16:32:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:32:58 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:32:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:32:58 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:35:49 2005] [notice] jk2_init() Found child 1262 in scoreboard slot 9 +[Sun Dec 04 16:35:52 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:35:52 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:41:15 2005] [notice] jk2_init() Found child 1275 in scoreboard slot 6 +[Sun Dec 04 16:41:16 2005] [notice] jk2_init() Found child 1276 in scoreboard slot 9 +[Sun Dec 04 16:41:22 2005] [notice] jk2_init() Found child 1277 in scoreboard slot 7 +[Sun Dec 04 16:41:22 2005] [notice] jk2_init() Found child 1278 in scoreboard slot 8 +[Sun Dec 04 16:41:22 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:41:22 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:41:22 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:41:22 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:41:22 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:41:22 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:41:22 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:41:22 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:45:52 2005] [notice] jk2_init() Found child 1283 in scoreboard slot 6 +[Sun Dec 04 16:45:52 2005] [notice] jk2_init() Found child 1284 in scoreboard slot 9 +[Sun Dec 04 16:46:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:46:13 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:46:45 2005] [notice] jk2_init() Found child 1288 in scoreboard slot 9 +[Sun Dec 04 16:47:11 2005] [notice] jk2_init() Found child 1291 in scoreboard slot 6 +[Sun Dec 04 16:47:59 2005] [notice] jk2_init() Found child 1296 in scoreboard slot 6 +[Sun Dec 04 16:47:59 2005] [notice] jk2_init() Found child 1300 in scoreboard slot 10 +[Sun Dec 04 16:47:59 2005] [notice] jk2_init() Found child 1298 in scoreboard slot 8 +[Sun Dec 04 16:47:59 2005] [notice] jk2_init() Found child 1297 in scoreboard slot 7 +[Sun Dec 04 16:47:59 2005] [notice] jk2_init() Found child 1299 in scoreboard slot 9 +[Sun Dec 04 16:48:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:48:01 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 16:48:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:48:01 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 16:48:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:48:01 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:48:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:48:01 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:48:01 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:48:01 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:50:53 2005] [notice] jk2_init() Found child 1308 in scoreboard slot 6 +[Sun Dec 04 16:50:53 2005] [notice] jk2_init() Found child 1309 in scoreboard slot 7 +[Sun Dec 04 16:51:26 2005] [notice] jk2_init() Found child 1313 in scoreboard slot 6 +[Sun Dec 04 16:51:26 2005] [notice] jk2_init() Found child 1312 in scoreboard slot 10 +[Sun Dec 04 16:52:34 2005] [notice] jk2_init() Found child 1320 in scoreboard slot 8 +[Sun Dec 04 16:52:45 2005] [notice] jk2_init() Found child 1321 in scoreboard slot 9 +[Sun Dec 04 16:52:45 2005] [notice] jk2_init() Found child 1322 in scoreboard slot 10 +[Sun Dec 04 16:52:45 2005] [notice] jk2_init() Found child 1323 in scoreboard slot 6 +[Sun Dec 04 16:52:46 2005] [notice] jk2_init() Found child 1324 in scoreboard slot 7 +[Sun Dec 04 16:52:46 2005] [notice] jk2_init() Found child 1325 in scoreboard slot 8 +[Sun Dec 04 16:52:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:52:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:52:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:52:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:52:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:52:49 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:52:49 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 16:52:49 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 16:52:49 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 16:52:49 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:55:54 2005] [notice] jk2_init() Found child 1331 in scoreboard slot 10 +[Sun Dec 04 16:56:25 2005] [notice] jk2_init() Found child 1338 in scoreboard slot 7 +[Sun Dec 04 16:56:25 2005] [notice] jk2_init() Found child 1334 in scoreboard slot 8 +[Sun Dec 04 16:56:25 2005] [notice] jk2_init() Found child 1336 in scoreboard slot 10 +[Sun Dec 04 16:56:25 2005] [notice] jk2_init() Found child 1337 in scoreboard slot 6 +[Sun Dec 04 16:56:25 2005] [notice] jk2_init() Found child 1335 in scoreboard slot 9 +[Sun Dec 04 16:56:27 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:56:27 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:56:27 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:56:27 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 16:56:27 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:56:27 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:56:27 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:56:27 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 16:56:27 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 16:56:27 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:01:43 2005] [notice] jk2_init() Found child 1358 in scoreboard slot 8 +[Sun Dec 04 17:01:43 2005] [notice] jk2_init() Found child 1356 in scoreboard slot 6 +[Sun Dec 04 17:01:43 2005] [notice] jk2_init() Found child 1354 in scoreboard slot 9 +[Sun Dec 04 17:01:43 2005] [notice] jk2_init() Found child 1357 in scoreboard slot 7 +[Sun Dec 04 17:01:43 2005] [notice] jk2_init() Found child 1355 in scoreboard slot 10 +[Sun Dec 04 17:01:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:01:47 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:01:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:01:47 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:01:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:01:47 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:01:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:01:47 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:01:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:01:47 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:05:45 2005] [notice] jk2_init() Found child 1375 in scoreboard slot 9 +[Sun Dec 04 17:05:45 2005] [notice] jk2_init() Found child 1376 in scoreboard slot 10 +[Sun Dec 04 17:05:45 2005] [notice] jk2_init() Found child 1377 in scoreboard slot 6 +[Sun Dec 04 17:05:48 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:05:48 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:05:48 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:05:48 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:05:48 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:05:48 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:11:23 2005] [notice] jk2_init() Found child 1387 in scoreboard slot 7 +[Sun Dec 04 17:11:37 2005] [notice] jk2_init() Found child 1390 in scoreboard slot 10 +[Sun Dec 04 17:11:37 2005] [notice] jk2_init() Found child 1388 in scoreboard slot 8 +[Sun Dec 04 17:11:37 2005] [notice] jk2_init() Found child 1389 in scoreboard slot 9 +[Sun Dec 04 17:12:42 2005] [notice] jk2_init() Found child 1393 in scoreboard slot 8 +[Sun Dec 04 17:12:50 2005] [notice] jk2_init() Found child 1395 in scoreboard slot 10 +[Sun Dec 04 17:12:50 2005] [notice] jk2_init() Found child 1396 in scoreboard slot 6 +[Sun Dec 04 17:12:50 2005] [notice] jk2_init() Found child 1394 in scoreboard slot 9 +[Sun Dec 04 17:12:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:12:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:12:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:12:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:12:55 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:12:55 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 17:12:55 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 17:12:55 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 17:12:56 2005] [notice] jk2_init() Found child 1397 in scoreboard slot 7 +[Sun Dec 04 17:12:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:12:57 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 17:17:07 2005] [notice] jk2_init() Found child 1414 in scoreboard slot 7 +[Sun Dec 04 17:17:07 2005] [notice] jk2_init() Found child 1412 in scoreboard slot 10 +[Sun Dec 04 17:17:07 2005] [notice] jk2_init() Found child 1413 in scoreboard slot 6 +[Sun Dec 04 17:20:38 2005] [notice] jk2_init() Found child 1448 in scoreboard slot 6 +[Sun Dec 04 17:20:38 2005] [notice] jk2_init() Found child 1439 in scoreboard slot 7 +[Sun Dec 04 17:20:38 2005] [notice] jk2_init() Found child 1441 in scoreboard slot 9 +[Sun Dec 04 17:20:38 2005] [notice] jk2_init() Found child 1450 in scoreboard slot 11 +[Sun Dec 04 17:20:39 2005] [notice] jk2_init() Found child 1449 in scoreboard slot 10 +[Sun Dec 04 17:20:39 2005] [notice] jk2_init() Found child 1440 in scoreboard slot 8 +[Sun Dec 04 17:20:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:20:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:20:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:20:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:20:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:20:46 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 17:20:46 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:20:46 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:20:46 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 17:20:46 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:21:01 2005] [notice] jk2_init() Found child 1452 in scoreboard slot 7 +[Sun Dec 04 17:21:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:21:04 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 17:26:04 2005] [notice] jk2_init() Found child 1461 in scoreboard slot 8 +[Sun Dec 04 17:26:39 2005] [notice] jk2_init() Found child 1462 in scoreboard slot 6 +[Sun Dec 04 17:27:13 2005] [notice] jk2_init() Found child 1466 in scoreboard slot 8 +[Sun Dec 04 17:28:00 2005] [notice] jk2_init() Found child 1470 in scoreboard slot 7 +[Sun Dec 04 17:28:42 2005] [notice] jk2_init() Found child 1477 in scoreboard slot 6 +[Sun Dec 04 17:28:41 2005] [notice] jk2_init() Found child 1476 in scoreboard slot 8 +[Sun Dec 04 17:31:00 2005] [notice] jk2_init() Found child 1501 in scoreboard slot 7 +[Sun Dec 04 17:31:00 2005] [notice] jk2_init() Found child 1502 in scoreboard slot 6 +[Sun Dec 04 17:31:00 2005] [notice] jk2_init() Found child 1498 in scoreboard slot 8 +[Sun Dec 04 17:31:00 2005] [notice] jk2_init() Found child 1499 in scoreboard slot 11 +[Sun Dec 04 17:31:10 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:31:10 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:31:10 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:31:11 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:31:12 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:31:12 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:31:12 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 17:31:12 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 17:31:43 2005] [notice] jk2_init() Found child 1503 in scoreboard slot 9 +[Sun Dec 04 17:31:43 2005] [notice] jk2_init() Found child 1504 in scoreboard slot 8 +[Sun Dec 04 17:31:45 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:31:45 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:31:45 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:31:45 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:34:52 2005] [notice] jk2_init() Found child 1507 in scoreboard slot 10 +[Sun Dec 04 17:34:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:34:57 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:34:57 2005] [error] [client 61.138.216.82] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 17:36:14 2005] [notice] jk2_init() Found child 1512 in scoreboard slot 7 +[Sun Dec 04 17:36:14 2005] [notice] jk2_init() Found child 1513 in scoreboard slot 6 +[Sun Dec 04 17:37:08 2005] [notice] jk2_init() Found child 1517 in scoreboard slot 7 +[Sun Dec 04 17:37:08 2005] [notice] jk2_init() Found child 1518 in scoreboard slot 6 +[Sun Dec 04 17:37:47 2005] [notice] jk2_init() Found child 1520 in scoreboard slot 8 +[Sun Dec 04 17:37:47 2005] [notice] jk2_init() Found child 1521 in scoreboard slot 10 +[Sun Dec 04 17:39:00 2005] [notice] jk2_init() Found child 1529 in scoreboard slot 9 +[Sun Dec 04 17:39:01 2005] [notice] jk2_init() Found child 1530 in scoreboard slot 8 +[Sun Dec 04 17:39:00 2005] [notice] jk2_init() Found child 1528 in scoreboard slot 7 +[Sun Dec 04 17:39:00 2005] [notice] jk2_init() Found child 1527 in scoreboard slot 6 +[Sun Dec 04 17:43:08 2005] [notice] jk2_init() Found child 1565 in scoreboard slot 9 +[Sun Dec 04 17:43:08 2005] [error] jk2_init() Can't find child 1566 in scoreboard +[Sun Dec 04 17:43:08 2005] [notice] jk2_init() Found child 1561 in scoreboard slot 6 +[Sun Dec 04 17:43:08 2005] [notice] jk2_init() Found child 1563 in scoreboard slot 8 +[Sun Dec 04 17:43:08 2005] [notice] jk2_init() Found child 1562 in scoreboard slot 7 +[Sun Dec 04 17:43:08 2005] [error] jk2_init() Can't find child 1567 in scoreboard +[Sun Dec 04 17:43:08 2005] [notice] jk2_init() Found child 1568 in scoreboard slot 13 +[Sun Dec 04 17:43:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:43:12 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 17:43:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:43:12 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 17:43:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:43:12 2005] [error] mod_jk child init 1 -2 +[Sun Dec 04 17:43:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:43:12 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 17:43:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:43:12 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 17:43:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:43:12 2005] [error] mod_jk child init 1 -2 +[Sun Dec 04 17:43:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 17:43:12 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 17:53:43 2005] [error] [client 218.39.132.175] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 18:24:22 2005] [error] [client 125.30.38.52] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 19:25:51 2005] [notice] jk2_init() Found child 1763 in scoreboard slot 6 +[Sun Dec 04 19:25:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:25:53 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:32:20 2005] [notice] jk2_init() Found child 1786 in scoreboard slot 8 +[Sun Dec 04 19:32:20 2005] [notice] jk2_init() Found child 1787 in scoreboard slot 9 +[Sun Dec 04 19:32:32 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:32:33 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:32:34 2005] [notice] jk2_init() Found child 1788 in scoreboard slot 6 +[Sun Dec 04 19:32:34 2005] [notice] jk2_init() Found child 1790 in scoreboard slot 8 +[Sun Dec 04 19:32:34 2005] [notice] jk2_init() Found child 1789 in scoreboard slot 7 +[Sun Dec 04 19:32:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:32:34 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:32:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:32:34 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 19:32:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:32:34 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:35:58 2005] [notice] jk2_init() Found child 1797 in scoreboard slot 9 +[Sun Dec 04 19:35:58 2005] [notice] jk2_init() Found child 1798 in scoreboard slot 6 +[Sun Dec 04 19:35:58 2005] [notice] jk2_init() Found child 1799 in scoreboard slot 7 +[Sun Dec 04 19:35:58 2005] [notice] jk2_init() Found child 1800 in scoreboard slot 10 +[Sun Dec 04 19:35:58 2005] [notice] jk2_init() Found child 1801 in scoreboard slot 12 +[Sun Dec 04 19:36:05 2005] [error] [client 61.37.222.240] Directory index forbidden by rule: /var/www/html/ +[Sun Dec 04 19:36:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:36:07 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:36:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:36:07 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:36:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:36:07 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:36:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:36:07 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:36:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:36:07 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:41:20 2005] [notice] jk2_init() Found child 1816 in scoreboard slot 9 +[Sun Dec 04 19:41:20 2005] [notice] jk2_init() Found child 1814 in scoreboard slot 7 +[Sun Dec 04 19:41:20 2005] [notice] jk2_init() Found child 1813 in scoreboard slot 6 +[Sun Dec 04 19:41:20 2005] [notice] jk2_init() Found child 1815 in scoreboard slot 8 +[Sun Dec 04 19:41:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:41:21 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:41:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:41:21 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:41:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:41:21 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:41:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:41:21 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:46:04 2005] [notice] jk2_init() Found child 1821 in scoreboard slot 6 +[Sun Dec 04 19:46:04 2005] [notice] jk2_init() Found child 1822 in scoreboard slot 7 +[Sun Dec 04 19:46:13 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:46:13 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:46:13 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:46:13 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:46:16 2005] [notice] jk2_init() Found child 1823 in scoreboard slot 8 +[Sun Dec 04 19:46:19 2005] [notice] jk2_init() Found child 1824 in scoreboard slot 9 +[Sun Dec 04 19:46:20 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:46:20 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:46:20 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:46:20 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:50:39 2005] [notice] jk2_init() Found child 1833 in scoreboard slot 7 +[Sun Dec 04 19:50:39 2005] [notice] jk2_init() Found child 1832 in scoreboard slot 6 +[Sun Dec 04 19:50:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:50:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:50:55 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:50:57 2005] [notice] jk2_init() Found child 1834 in scoreboard slot 8 +[Sun Dec 04 19:50:55 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:51:16 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:51:18 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:51:43 2005] [notice] jk2_init() Found child 1835 in scoreboard slot 9 +[Sun Dec 04 19:51:52 2005] [notice] jk2_init() Found child 1836 in scoreboard slot 6 +[Sun Dec 04 19:51:52 2005] [notice] jk2_init() Found child 1837 in scoreboard slot 7 +[Sun Dec 04 19:51:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:51:54 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:51:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:51:54 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:51:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:51:54 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:56:51 2005] [notice] jk2_init() Found child 1851 in scoreboard slot 6 +[Sun Dec 04 19:56:51 2005] [notice] jk2_init() Found child 1852 in scoreboard slot 9 +[Sun Dec 04 19:56:51 2005] [notice] jk2_init() Found child 1853 in scoreboard slot 7 +[Sun Dec 04 19:56:51 2005] [notice] jk2_init() Found child 1850 in scoreboard slot 8 +[Sun Dec 04 19:56:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:56:53 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:56:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:56:53 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:56:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:56:53 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 19:56:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 19:56:53 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:01:00 2005] [notice] jk2_init() Found child 1861 in scoreboard slot 8 +[Sun Dec 04 20:01:00 2005] [notice] jk2_init() Found child 1862 in scoreboard slot 6 +[Sun Dec 04 20:01:30 2005] [notice] jk2_init() Found child 1867 in scoreboard slot 8 +[Sun Dec 04 20:01:30 2005] [notice] jk2_init() Found child 1864 in scoreboard slot 7 +[Sun Dec 04 20:01:30 2005] [notice] jk2_init() Found child 1868 in scoreboard slot 6 +[Sun Dec 04 20:01:30 2005] [notice] jk2_init() Found child 1863 in scoreboard slot 9 +[Sun Dec 04 20:01:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:01:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:01:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:01:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:01:37 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:01:37 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:01:37 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:01:37 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 20:05:55 2005] [notice] jk2_init() Found child 1887 in scoreboard slot 8 +[Sun Dec 04 20:05:55 2005] [notice] jk2_init() Found child 1885 in scoreboard slot 9 +[Sun Dec 04 20:05:55 2005] [notice] jk2_init() Found child 1888 in scoreboard slot 6 +[Sun Dec 04 20:05:55 2005] [notice] jk2_init() Found child 1886 in scoreboard slot 7 +[Sun Dec 04 20:05:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:05:59 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:05:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:05:59 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:05:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:05:59 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:05:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:05:59 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:11:09 2005] [notice] jk2_init() Found child 1899 in scoreboard slot 7 +[Sun Dec 04 20:11:09 2005] [notice] jk2_init() Found child 1900 in scoreboard slot 8 +[Sun Dec 04 20:11:09 2005] [notice] jk2_init() Found child 1901 in scoreboard slot 6 +[Sun Dec 04 20:11:09 2005] [notice] jk2_init() Found child 1898 in scoreboard slot 9 +[Sun Dec 04 20:11:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:11:14 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:11:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:11:14 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:11:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:11:14 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:11:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:11:14 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:16:10 2005] [notice] jk2_init() Found child 1912 in scoreboard slot 9 +[Sun Dec 04 20:16:10 2005] [notice] jk2_init() Found child 1915 in scoreboard slot 6 +[Sun Dec 04 20:16:10 2005] [notice] jk2_init() Found child 1913 in scoreboard slot 7 +[Sun Dec 04 20:16:10 2005] [notice] jk2_init() Found child 1914 in scoreboard slot 8 +[Sun Dec 04 20:16:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:16:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:16:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:16:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:16:15 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:16:15 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:16:15 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:16:15 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:20:57 2005] [notice] jk2_init() Found child 1931 in scoreboard slot 7 +[Sun Dec 04 20:21:09 2005] [notice] jk2_init() Found child 1932 in scoreboard slot 8 +[Sun Dec 04 20:21:08 2005] [notice] jk2_init() Found child 1933 in scoreboard slot 6 +[Sun Dec 04 20:21:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:21:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:21:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:21:37 2005] [notice] jk2_init() Found child 1934 in scoreboard slot 9 +[Sun Dec 04 20:21:36 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:22:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:22:12 2005] [notice] jk2_init() Found child 1936 in scoreboard slot 8 +[Sun Dec 04 20:22:12 2005] [notice] jk2_init() Found child 1935 in scoreboard slot 7 +[Sun Dec 04 20:22:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:22:52 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 20:22:57 2005] [notice] jk2_init() Found child 1937 in scoreboard slot 6 +[Sun Dec 04 20:23:12 2005] [notice] jk2_init() Found child 1938 in scoreboard slot 9 +[Sun Dec 04 20:24:45 2005] [notice] jk2_init() Found child 1950 in scoreboard slot 9 +[Sun Dec 04 20:24:45 2005] [notice] jk2_init() Found child 1951 in scoreboard slot 7 +[Sun Dec 04 20:24:45 2005] [notice] jk2_init() Found child 1949 in scoreboard slot 6 +[Sun Dec 04 20:24:45 2005] [notice] jk2_init() Found child 1948 in scoreboard slot 8 +[Sun Dec 04 20:24:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:24:49 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 20:24:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:24:49 2005] [error] mod_jk child workerEnv in error state 8 +[Sun Dec 04 20:24:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:24:49 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:24:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:24:49 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 20:26:10 2005] [notice] jk2_init() Found child 1957 in scoreboard slot 8 +[Sun Dec 04 20:26:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:26:54 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:26:58 2005] [notice] jk2_init() Found child 1959 in scoreboard slot 9 +[Sun Dec 04 20:26:58 2005] [notice] jk2_init() Found child 1958 in scoreboard slot 6 +[Sun Dec 04 20:27:43 2005] [notice] jk2_init() Found child 1961 in scoreboard slot 8 +[Sun Dec 04 20:28:00 2005] [notice] jk2_init() Found child 1962 in scoreboard slot 6 +[Sun Dec 04 20:28:00 2005] [notice] jk2_init() Found child 1963 in scoreboard slot 9 +[Sun Dec 04 20:28:26 2005] [notice] jk2_init() Found child 1964 in scoreboard slot 7 +[Sun Dec 04 20:28:39 2005] [notice] jk2_init() Found child 1966 in scoreboard slot 6 +[Sun Dec 04 20:28:39 2005] [notice] jk2_init() Found child 1967 in scoreboard slot 9 +[Sun Dec 04 20:28:39 2005] [notice] jk2_init() Found child 1965 in scoreboard slot 8 +[Sun Dec 04 20:29:34 2005] [notice] jk2_init() Found child 1970 in scoreboard slot 6 +[Sun Dec 04 20:30:59 2005] [notice] jk2_init() Found child 1984 in scoreboard slot 10 +[Sun Dec 04 20:31:35 2005] [notice] jk2_init() Found child 1990 in scoreboard slot 9 +[Sun Dec 04 20:32:37 2005] [notice] jk2_init() Found child 1999 in scoreboard slot 6 +[Sun Dec 04 20:32:37 2005] [notice] jk2_init() Found child 2000 in scoreboard slot 7 +[Sun Dec 04 20:32:37 2005] [notice] jk2_init() Found child 1998 in scoreboard slot 9 +[Sun Dec 04 20:32:50 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:32:50 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:32:50 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:32:55 2005] [error] mod_jk child workerEnv in error state 10 +[Sun Dec 04 20:32:55 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:32:55 2005] [error] mod_jk child workerEnv in error state 10 +[Sun Dec 04 20:33:35 2005] [notice] jk2_init() Found child 2002 in scoreboard slot 8 +[Sun Dec 04 20:33:35 2005] [notice] jk2_init() Found child 2001 in scoreboard slot 9 +[Sun Dec 04 20:33:47 2005] [notice] jk2_init() Found child 2005 in scoreboard slot 7 +[Sun Dec 04 20:33:47 2005] [notice] jk2_init() Found child 2004 in scoreboard slot 6 +[Sun Dec 04 20:34:13 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:34:14 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:34:20 2005] [notice] jk2_init() Found child 2007 in scoreboard slot 8 +[Sun Dec 04 20:34:20 2005] [notice] jk2_init() Found child 2006 in scoreboard slot 9 +[Sun Dec 04 20:34:21 2005] [notice] jk2_init() Found child 2008 in scoreboard slot 6 +[Sun Dec 04 20:34:25 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:34:25 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 20:34:25 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:34:25 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 20:34:25 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:34:25 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 20:37:29 2005] [notice] jk2_init() Found child 2028 in scoreboard slot 9 +[Sun Dec 04 20:37:29 2005] [notice] jk2_init() Found child 2027 in scoreboard slot 7 +[Sun Dec 04 20:37:29 2005] [notice] jk2_init() Found child 2029 in scoreboard slot 8 +[Sun Dec 04 20:37:46 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:37:46 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:37:49 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:37:49 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:38:10 2005] [notice] jk2_init() Found child 2030 in scoreboard slot 6 +[Sun Dec 04 20:38:10 2005] [notice] jk2_init() Found child 2031 in scoreboard slot 7 +[Sun Dec 04 20:38:11 2005] [notice] jk2_init() Found child 2032 in scoreboard slot 9 +[Sun Dec 04 20:38:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:38:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:38:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:38:14 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:38:14 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:38:14 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 20:41:12 2005] [notice] jk2_init() Found child 2042 in scoreboard slot 8 +[Sun Dec 04 20:41:47 2005] [notice] jk2_init() Found child 2045 in scoreboard slot 9 +[Sun Dec 04 20:42:42 2005] [notice] jk2_init() Found child 2051 in scoreboard slot 8 +[Sun Dec 04 20:44:29 2005] [notice] jk2_init() Found child 2059 in scoreboard slot 7 +[Sun Dec 04 20:44:29 2005] [notice] jk2_init() Found child 2060 in scoreboard slot 9 +[Sun Dec 04 20:44:30 2005] [notice] jk2_init() Found child 2061 in scoreboard slot 8 +[Sun Dec 04 20:47:16 2005] [notice] jk2_init() Found child 2081 in scoreboard slot 6 +[Sun Dec 04 20:47:16 2005] [error] jk2_init() Can't find child 2082 in scoreboard +[Sun Dec 04 20:47:16 2005] [notice] jk2_init() Found child 2083 in scoreboard slot 8 +[Sun Dec 04 20:47:16 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:47:16 2005] [error] mod_jk child workerEnv in error state 6 +[Sun Dec 04 20:47:16 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:47:16 2005] [error] mod_jk child init 1 -2 +[Sun Dec 04 20:47:16 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:47:16 2005] [error] mod_jk child workerEnv in error state 9 +[Sun Dec 04 20:47:17 2005] [error] jk2_init() Can't find child 2085 in scoreboard +[Sun Dec 04 20:47:17 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:47:17 2005] [error] mod_jk child init 1 -2 +[Sun Dec 04 20:47:17 2005] [error] jk2_init() Can't find child 2086 in scoreboard +[Sun Dec 04 20:47:17 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:47:17 2005] [error] mod_jk child init 1 -2 +[Sun Dec 04 20:47:17 2005] [error] jk2_init() Can't find child 2087 in scoreboard +[Sun Dec 04 20:47:17 2005] [notice] jk2_init() Found child 2084 in scoreboard slot 9 +[Sun Dec 04 20:47:17 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:47:17 2005] [error] mod_jk child workerEnv in error state 7 +[Sun Dec 04 20:47:17 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Sun Dec 04 20:47:17 2005] [error] mod_jk child init 1 -2 +[Mon Dec 05 01:04:31 2005] [error] [client 218.62.18.218] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 01:30:32 2005] [error] [client 211.62.201.48] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 03:21:00 2005] [notice] jk2_init() Found child 2760 in scoreboard slot 6 +[Mon Dec 05 03:21:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:21:02 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:23:21 2005] [notice] jk2_init() Found child 2763 in scoreboard slot 7 +[Mon Dec 05 03:23:24 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:23:24 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:23:24 2005] [error] [client 218.207.61.7] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 03:25:44 2005] [notice] jk2_init() Found child 2773 in scoreboard slot 6 +[Mon Dec 05 03:25:46 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:25:46 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:36:51 2005] [notice] jk2_init() Found child 2813 in scoreboard slot 7 +[Mon Dec 05 03:36:51 2005] [notice] jk2_init() Found child 2815 in scoreboard slot 8 +[Mon Dec 05 03:36:51 2005] [notice] jk2_init() Found child 2812 in scoreboard slot 6 +[Mon Dec 05 03:36:51 2005] [notice] jk2_init() Found child 2811 in scoreboard slot 9 +[Mon Dec 05 03:36:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:36:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:36:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:36:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:36:57 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:36:57 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:36:57 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:36:57 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:40:46 2005] [notice] jk2_init() Found child 2823 in scoreboard slot 9 +[Mon Dec 05 03:40:55 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:40:55 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:44:50 2005] [notice] jk2_init() Found child 2824 in scoreboard slot 10 +[Mon Dec 05 03:44:50 2005] [error] [client 168.20.198.21] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 03:44:50 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:44:50 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:46:38 2005] [notice] jk2_init() Found child 2838 in scoreboard slot 10 +[Mon Dec 05 03:46:38 2005] [notice] jk2_init() Found child 2836 in scoreboard slot 9 +[Mon Dec 05 03:46:38 2005] [notice] jk2_init() Found child 2837 in scoreboard slot 6 +[Mon Dec 05 03:46:50 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:47:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:47:19 2005] [notice] jk2_init() Found child 2840 in scoreboard slot 8 +[Mon Dec 05 03:47:19 2005] [notice] jk2_init() Found child 2841 in scoreboard slot 6 +[Mon Dec 05 03:47:19 2005] [notice] jk2_init() Found child 2842 in scoreboard slot 9 +[Mon Dec 05 03:47:53 2005] [notice] jk2_init() Found child 2846 in scoreboard slot 9 +[Mon Dec 05 03:47:53 2005] [notice] jk2_init() Found child 2843 in scoreboard slot 7 +[Mon Dec 05 03:47:53 2005] [notice] jk2_init() Found child 2844 in scoreboard slot 8 +[Mon Dec 05 03:47:53 2005] [notice] jk2_init() Found child 2845 in scoreboard slot 6 +[Mon Dec 05 03:47:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:47:54 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 03:47:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:47:54 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 03:47:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:47:54 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 03:47:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:47:54 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:50:49 2005] [notice] jk2_init() Found child 2857 in scoreboard slot 9 +[Mon Dec 05 03:50:50 2005] [notice] jk2_init() Found child 2854 in scoreboard slot 7 +[Mon Dec 05 03:50:49 2005] [notice] jk2_init() Found child 2855 in scoreboard slot 8 +[Mon Dec 05 03:50:49 2005] [notice] jk2_init() Found child 2856 in scoreboard slot 6 +[Mon Dec 05 03:50:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:50:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:50:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:50:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:50:59 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:50:59 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:50:59 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:50:59 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:56:12 2005] [notice] jk2_init() Found child 2866 in scoreboard slot 7 +[Mon Dec 05 03:56:12 2005] [notice] jk2_init() Found child 2867 in scoreboard slot 8 +[Mon Dec 05 03:56:12 2005] [notice] jk2_init() Found child 2865 in scoreboard slot 9 +[Mon Dec 05 03:56:12 2005] [notice] jk2_init() Found child 2864 in scoreboard slot 6 +[Mon Dec 05 03:56:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:56:15 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:56:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:56:15 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:56:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:56:15 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 03:56:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 03:56:15 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 04:00:55 2005] [notice] jk2_init() Found child 2877 in scoreboard slot 10 +[Mon Dec 05 04:01:18 2005] [notice] jk2_init() Found child 2883 in scoreboard slot 9 +[Mon Dec 05 04:01:18 2005] [notice] jk2_init() Found child 2878 in scoreboard slot 7 +[Mon Dec 05 04:01:18 2005] [notice] jk2_init() Found child 2880 in scoreboard slot 8 +[Mon Dec 05 04:01:18 2005] [notice] jk2_init() Found child 2879 in scoreboard slot 6 +[Mon Dec 05 04:01:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:01:23 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 04:01:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:01:23 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 04:01:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:01:23 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 04:01:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:01:23 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 04:06:19 2005] [notice] jk2_init() Found child 3667 in scoreboard slot 7 +[Mon Dec 05 04:06:19 2005] [notice] jk2_init() Found child 3669 in scoreboard slot 6 +[Mon Dec 05 04:06:27 2005] [notice] jk2_init() Found child 3670 in scoreboard slot 8 +[Mon Dec 05 04:06:43 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:06:43 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:06:45 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 04:06:45 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 04:07:23 2005] [notice] jk2_init() Found child 3672 in scoreboard slot 7 +[Mon Dec 05 04:07:37 2005] [notice] jk2_init() Found child 3673 in scoreboard slot 6 +[Mon Dec 05 04:07:48 2005] [notice] jk2_init() Found child 3675 in scoreboard slot 9 +[Mon Dec 05 04:07:48 2005] [notice] jk2_init() Found child 3674 in scoreboard slot 8 +[Mon Dec 05 04:08:37 2005] [notice] jk2_init() Found child 3678 in scoreboard slot 8 +[Mon Dec 05 04:08:37 2005] [notice] jk2_init() Found child 3681 in scoreboard slot 6 +[Mon Dec 05 04:08:37 2005] [notice] jk2_init() Found child 3679 in scoreboard slot 9 +[Mon Dec 05 04:08:37 2005] [notice] jk2_init() Found child 3680 in scoreboard slot 7 +[Mon Dec 05 04:08:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:09:32 2005] [notice] jk2_init() Found child 3685 in scoreboard slot 6 +[Mon Dec 05 04:10:47 2005] [notice] jk2_init() Found child 3698 in scoreboard slot 9 +[Mon Dec 05 04:10:47 2005] [notice] jk2_init() Found child 3690 in scoreboard slot 6 +[Mon Dec 05 04:10:47 2005] [notice] jk2_init() Found child 3691 in scoreboard slot 8 +[Mon Dec 05 04:13:54 2005] [notice] jk2_init() Found child 3744 in scoreboard slot 6 +[Mon Dec 05 04:13:54 2005] [notice] jk2_init() Found child 3747 in scoreboard slot 8 +[Mon Dec 05 04:13:54 2005] [notice] jk2_init() Found child 3754 in scoreboard slot 12 +[Mon Dec 05 04:13:54 2005] [notice] jk2_init() Found child 3755 in scoreboard slot 13 +[Mon Dec 05 04:13:54 2005] [notice] jk2_init() Found child 3753 in scoreboard slot 10 +[Mon Dec 05 04:13:54 2005] [notice] jk2_init() Found child 3752 in scoreboard slot 9 +[Mon Dec 05 04:13:54 2005] [notice] jk2_init() Found child 3746 in scoreboard slot 7 +[Mon Dec 05 04:14:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:14:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:14:00 2005] [error] mod_jk child workerEnv in error state 9 +[Mon Dec 05 04:14:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:14:00 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 04:14:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:14:00 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 04:14:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:14:00 2005] [error] mod_jk child workerEnv in error state 9 +[Mon Dec 05 04:14:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:14:00 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 04:14:00 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 04:14:00 2005] [error] mod_jk child workerEnv in error state 10 +[Mon Dec 05 04:14:00 2005] [error] mod_jk child workerEnv in error state 9 +[Mon Dec 05 05:06:42 2005] [notice] jk2_init() Found child 4596 in scoreboard slot 8 +[Mon Dec 05 05:06:42 2005] [notice] jk2_init() Found child 4595 in scoreboard slot 7 +[Mon Dec 05 05:06:42 2005] [notice] jk2_init() Found child 4594 in scoreboard slot 6 +[Mon Dec 05 05:06:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 05:06:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 05:06:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 05:06:47 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 05:06:47 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 05:06:47 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 05:11:04 2005] [notice] jk2_init() Found child 4609 in scoreboard slot 7 +[Mon Dec 05 05:11:04 2005] [notice] jk2_init() Found child 4608 in scoreboard slot 6 +[Mon Dec 05 05:11:34 2005] [notice] jk2_init() Found child 4611 in scoreboard slot 9 +[Mon Dec 05 05:11:54 2005] [notice] jk2_init() Found child 4613 in scoreboard slot 7 +[Mon Dec 05 05:11:54 2005] [notice] jk2_init() Found child 4612 in scoreboard slot 6 +[Mon Dec 05 05:12:32 2005] [notice] jk2_init() Found child 4615 in scoreboard slot 9 +[Mon Dec 05 05:12:56 2005] [notice] jk2_init() Found child 4616 in scoreboard slot 6 +[Mon Dec 05 05:12:56 2005] [notice] jk2_init() Found child 4617 in scoreboard slot 7 +[Mon Dec 05 05:12:56 2005] [notice] jk2_init() Found child 4618 in scoreboard slot 8 +[Mon Dec 05 05:15:29 2005] [notice] jk2_init() Found child 4634 in scoreboard slot 6 +[Mon Dec 05 05:15:29 2005] [notice] jk2_init() Found child 4637 in scoreboard slot 7 +[Mon Dec 05 05:15:29 2005] [notice] jk2_init() Found child 4631 in scoreboard slot 9 +[Mon Dec 05 05:15:29 2005] [notice] jk2_init() Found child 4630 in scoreboard slot 8 +[Mon Dec 05 05:15:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 05:15:33 2005] [error] mod_jk child workerEnv in error state 9 +[Mon Dec 05 05:15:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 05:15:33 2005] [error] mod_jk child workerEnv in error state 9 +[Mon Dec 05 05:15:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 05:15:33 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 05:15:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 05:15:33 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 06:35:27 2005] [notice] jk2_init() Found child 4820 in scoreboard slot 8 +[Mon Dec 05 06:35:27 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 06:35:27 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 06:36:58 2005] [notice] jk2_init() Found child 4821 in scoreboard slot 10 +[Mon Dec 05 06:36:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 06:36:58 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 06:36:59 2005] [error] [client 221.232.178.24] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 07:16:00 2005] [notice] jk2_init() Found child 4893 in scoreboard slot 7 +[Mon Dec 05 07:16:00 2005] [notice] jk2_init() Found child 4892 in scoreboard slot 6 +[Mon Dec 05 07:16:03 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:16:03 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:16:03 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:16:03 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:21:03 2005] [notice] jk2_init() Found child 4907 in scoreboard slot 6 +[Mon Dec 05 07:21:02 2005] [notice] jk2_init() Found child 4906 in scoreboard slot 9 +[Mon Dec 05 07:21:02 2005] [notice] jk2_init() Found child 4905 in scoreboard slot 8 +[Mon Dec 05 07:21:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:21:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:21:09 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:21:09 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:21:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:21:09 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:25:55 2005] [notice] jk2_init() Found child 4916 in scoreboard slot 8 +[Mon Dec 05 07:25:55 2005] [notice] jk2_init() Found child 4917 in scoreboard slot 9 +[Mon Dec 05 07:25:55 2005] [notice] jk2_init() Found child 4915 in scoreboard slot 7 +[Mon Dec 05 07:25:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:25:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:25:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:26:00 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:26:00 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:26:00 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:31:22 2005] [notice] jk2_init() Found child 4932 in scoreboard slot 6 +[Mon Dec 05 07:32:03 2005] [notice] jk2_init() Found child 4938 in scoreboard slot 8 +[Mon Dec 05 07:32:03 2005] [notice] jk2_init() Found child 4935 in scoreboard slot 9 +[Mon Dec 05 07:32:03 2005] [notice] jk2_init() Found child 4936 in scoreboard slot 6 +[Mon Dec 05 07:32:03 2005] [notice] jk2_init() Found child 4937 in scoreboard slot 7 +[Mon Dec 05 07:32:06 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:32:06 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:32:06 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:32:06 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:32:06 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:32:06 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:32:06 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:32:06 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:36:19 2005] [notice] jk2_init() Found child 4950 in scoreboard slot 7 +[Mon Dec 05 07:37:47 2005] [notice] jk2_init() Found child 4961 in scoreboard slot 6 +[Mon Dec 05 07:37:48 2005] [notice] jk2_init() Found child 4962 in scoreboard slot 7 +[Mon Dec 05 07:37:48 2005] [notice] jk2_init() Found child 4960 in scoreboard slot 9 +[Mon Dec 05 07:37:48 2005] [notice] jk2_init() Found child 4959 in scoreboard slot 8 +[Mon Dec 05 07:37:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:37:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:37:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:37:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:37:58 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:37:58 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:37:58 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:37:58 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:41:07 2005] [notice] jk2_init() Found child 4974 in scoreboard slot 9 +[Mon Dec 05 07:41:35 2005] [notice] jk2_init() Found child 4975 in scoreboard slot 6 +[Mon Dec 05 07:41:50 2005] [notice] jk2_init() Found child 4977 in scoreboard slot 8 +[Mon Dec 05 07:41:50 2005] [notice] jk2_init() Found child 4976 in scoreboard slot 7 +[Mon Dec 05 07:43:07 2005] [notice] jk2_init() Found child 4984 in scoreboard slot 7 +[Mon Dec 05 07:43:08 2005] [notice] jk2_init() Found child 4985 in scoreboard slot 10 +[Mon Dec 05 07:43:07 2005] [notice] jk2_init() Found child 4983 in scoreboard slot 6 +[Mon Dec 05 07:43:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:43:16 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 07:43:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:43:16 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 07:43:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:43:16 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:43:19 2005] [notice] jk2_init() Found child 4986 in scoreboard slot 8 +[Mon Dec 05 07:43:19 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:43:19 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 07:46:01 2005] [notice] jk2_init() Found child 4991 in scoreboard slot 6 +[Mon Dec 05 07:46:01 2005] [notice] jk2_init() Found child 4992 in scoreboard slot 7 +[Mon Dec 05 07:46:46 2005] [notice] jk2_init() Found child 4996 in scoreboard slot 7 +[Mon Dec 05 07:46:46 2005] [notice] jk2_init() Found child 4995 in scoreboard slot 6 +[Mon Dec 05 07:47:13 2005] [notice] jk2_init() Found child 4998 in scoreboard slot 8 +[Mon Dec 05 07:47:13 2005] [notice] jk2_init() Found child 4999 in scoreboard slot 6 +[Mon Dec 05 07:47:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:47:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:47:21 2005] [notice] jk2_init() Found child 5000 in scoreboard slot 7 +[Mon Dec 05 07:47:22 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 07:47:21 2005] [notice] jk2_init() Found child 5001 in scoreboard slot 9 +[Mon Dec 05 07:47:23 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:47:36 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:47:36 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:47:40 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 07:47:40 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 07:48:04 2005] [notice] jk2_init() Found child 5002 in scoreboard slot 8 +[Mon Dec 05 07:48:04 2005] [notice] jk2_init() Found child 5003 in scoreboard slot 6 +[Mon Dec 05 07:48:46 2005] [notice] jk2_init() Found child 5005 in scoreboard slot 9 +[Mon Dec 05 07:48:46 2005] [notice] jk2_init() Found child 5006 in scoreboard slot 8 +[Mon Dec 05 07:48:55 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:48:55 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:48:55 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:48:55 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 07:48:56 2005] [notice] jk2_init() Found child 5007 in scoreboard slot 6 +[Mon Dec 05 07:48:56 2005] [notice] jk2_init() Found child 5008 in scoreboard slot 7 +[Mon Dec 05 07:48:56 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:48:56 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:48:56 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:48:56 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 07:50:54 2005] [notice] jk2_init() Found child 5017 in scoreboard slot 8 +[Mon Dec 05 07:50:54 2005] [notice] jk2_init() Found child 5016 in scoreboard slot 9 +[Mon Dec 05 07:51:22 2005] [notice] jk2_init() Found child 5018 in scoreboard slot 6 +[Mon Dec 05 07:51:20 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:51:23 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:51:39 2005] [notice] jk2_init() Found child 5020 in scoreboard slot 9 +[Mon Dec 05 07:51:39 2005] [notice] jk2_init() Found child 5019 in scoreboard slot 7 +[Mon Dec 05 07:51:56 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:51:56 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:52:02 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:52:02 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 07:52:29 2005] [notice] jk2_init() Found child 5021 in scoreboard slot 8 +[Mon Dec 05 07:52:29 2005] [notice] jk2_init() Found child 5022 in scoreboard slot 6 +[Mon Dec 05 07:52:56 2005] [notice] jk2_init() Found child 5024 in scoreboard slot 9 +[Mon Dec 05 07:52:56 2005] [notice] jk2_init() Found child 5023 in scoreboard slot 7 +[Mon Dec 05 07:52:55 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:53:01 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 07:53:24 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:54:01 2005] [notice] jk2_init() Found child 5029 in scoreboard slot 8 +[Mon Dec 05 07:54:02 2005] [notice] jk2_init() Found child 5030 in scoreboard slot 6 +[Mon Dec 05 07:54:48 2005] [notice] jk2_init() Found child 5033 in scoreboard slot 8 +[Mon Dec 05 07:54:48 2005] [notice] jk2_init() Found child 5032 in scoreboard slot 9 +[Mon Dec 05 07:55:00 2005] [notice] jk2_init() Found child 5035 in scoreboard slot 7 +[Mon Dec 05 07:55:00 2005] [notice] jk2_init() Found child 5034 in scoreboard slot 6 +[Mon Dec 05 07:55:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:55:08 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 07:55:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:55:08 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 07:55:07 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:55:08 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 07:55:13 2005] [notice] jk2_init() Found child 5036 in scoreboard slot 9 +[Mon Dec 05 07:57:01 2005] [notice] jk2_init() Found child 5050 in scoreboard slot 8 +[Mon Dec 05 07:57:01 2005] [notice] jk2_init() Found child 5049 in scoreboard slot 7 +[Mon Dec 05 07:57:01 2005] [notice] jk2_init() Found child 5048 in scoreboard slot 6 +[Mon Dec 05 07:57:02 2005] [notice] jk2_init() Found child 5051 in scoreboard slot 9 +[Mon Dec 05 07:57:02 2005] [error] jk2_init() Can't find child 5053 in scoreboard +[Mon Dec 05 07:57:02 2005] [error] jk2_init() Can't find child 5054 in scoreboard +[Mon Dec 05 07:57:02 2005] [notice] jk2_init() Found child 5052 in scoreboard slot 10 +[Mon Dec 05 07:57:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:57:02 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:57:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:57:02 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:57:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:57:02 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:57:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:57:02 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 07:57:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:57:02 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 07:57:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:57:02 2005] [error] mod_jk child init 1 -2 +[Mon Dec 05 07:57:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 07:57:02 2005] [error] mod_jk child init 1 -2 +[Mon Dec 05 09:09:48 2005] [error] [client 207.12.15.211] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 09:36:13 2005] [notice] jk2_init() Found child 5271 in scoreboard slot 7 +[Mon Dec 05 09:36:13 2005] [notice] jk2_init() Found child 5270 in scoreboard slot 6 +[Mon Dec 05 09:36:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 09:36:14 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 09:36:14 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 09:36:14 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 09:55:21 2005] [notice] jk2_init() Found child 5295 in scoreboard slot 8 +[Mon Dec 05 09:55:21 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 09:55:21 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:10:32 2005] [notice] jk2_init() Found child 5330 in scoreboard slot 9 +[Mon Dec 05 10:10:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:10:33 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:16:20 2005] [notice] jk2_init() Found child 5344 in scoreboard slot 7 +[Mon Dec 05 10:16:52 2005] [notice] jk2_init() Found child 5347 in scoreboard slot 6 +[Mon Dec 05 10:16:53 2005] [notice] jk2_init() Found child 5348 in scoreboard slot 7 +[Mon Dec 05 10:17:45 2005] [notice] jk2_init() Found child 5350 in scoreboard slot 9 +[Mon Dec 05 10:17:45 2005] [notice] jk2_init() Found child 5349 in scoreboard slot 8 +[Mon Dec 05 10:17:49 2005] [notice] jk2_init() Found child 5352 in scoreboard slot 7 +[Mon Dec 05 10:17:50 2005] [notice] jk2_init() Found child 5351 in scoreboard slot 6 +[Mon Dec 05 10:17:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:17:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:17:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:17:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:17:51 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:17:51 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:17:51 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:17:51 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:21:05 2005] [notice] jk2_init() Found child 5366 in scoreboard slot 9 +[Mon Dec 05 10:21:05 2005] [notice] jk2_init() Found child 5365 in scoreboard slot 8 +[Mon Dec 05 10:21:05 2005] [notice] jk2_init() Found child 5367 in scoreboard slot 6 +[Mon Dec 05 10:21:07 2005] [notice] jk2_init() Found child 5368 in scoreboard slot 7 +[Mon Dec 05 10:21:13 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:21:13 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:21:13 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:21:13 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:21:13 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:21:13 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:21:13 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:21:13 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:26:26 2005] [notice] jk2_init() Found child 5384 in scoreboard slot 7 +[Mon Dec 05 10:26:26 2005] [notice] jk2_init() Found child 5385 in scoreboard slot 8 +[Mon Dec 05 10:26:25 2005] [notice] jk2_init() Found child 5386 in scoreboard slot 9 +[Mon Dec 05 10:26:25 2005] [notice] jk2_init() Found child 5387 in scoreboard slot 6 +[Mon Dec 05 10:26:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:26:31 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:26:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:26:31 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:26:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:26:31 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:26:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:26:31 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:26:36 2005] [notice] jk2_init() Found child 5388 in scoreboard slot 10 +[Mon Dec 05 10:26:36 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:26:36 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:26:39 2005] [error] [client 141.153.150.164] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 10:28:44 2005] [error] [client 198.232.168.9] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 10:31:40 2005] [notice] jk2_init() Found child 5404 in scoreboard slot 8 +[Mon Dec 05 10:31:40 2005] [notice] jk2_init() Found child 5405 in scoreboard slot 9 +[Mon Dec 05 10:33:41 2005] [notice] jk2_init() Found child 5418 in scoreboard slot 6 +[Mon Dec 05 10:33:41 2005] [notice] jk2_init() Found child 5419 in scoreboard slot 7 +[Mon Dec 05 10:33:41 2005] [notice] jk2_init() Found child 5417 in scoreboard slot 9 +[Mon Dec 05 10:33:41 2005] [notice] jk2_init() Found child 5416 in scoreboard slot 8 +[Mon Dec 05 10:33:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:33:44 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:33:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:33:44 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:33:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:33:44 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:33:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:33:44 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:36:10 2005] [notice] jk2_init() Found child 5426 in scoreboard slot 6 +[Mon Dec 05 10:36:10 2005] [notice] jk2_init() Found child 5425 in scoreboard slot 9 +[Mon Dec 05 10:36:58 2005] [notice] jk2_init() Found child 5428 in scoreboard slot 8 +[Mon Dec 05 10:37:27 2005] [notice] jk2_init() Found child 5429 in scoreboard slot 9 +[Mon Dec 05 10:37:27 2005] [notice] jk2_init() Found child 5430 in scoreboard slot 6 +[Mon Dec 05 10:38:00 2005] [notice] jk2_init() Found child 5434 in scoreboard slot 6 +[Mon Dec 05 10:38:00 2005] [notice] jk2_init() Found child 5433 in scoreboard slot 9 +[Mon Dec 05 10:38:00 2005] [notice] jk2_init() Found child 5435 in scoreboard slot 7 +[Mon Dec 05 10:38:00 2005] [notice] jk2_init() Found child 5432 in scoreboard slot 8 +[Mon Dec 05 10:38:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:38:04 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 10:38:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:38:04 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:38:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:38:04 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:38:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:38:04 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:41:14 2005] [notice] jk2_init() Found child 5470 in scoreboard slot 9 +[Mon Dec 05 10:41:14 2005] [notice] jk2_init() Found child 5469 in scoreboard slot 8 +[Mon Dec 05 10:42:23 2005] [notice] jk2_init() Found child 5474 in scoreboard slot 9 +[Mon Dec 05 10:42:23 2005] [notice] jk2_init() Found child 5475 in scoreboard slot 6 +[Mon Dec 05 10:43:19 2005] [notice] jk2_init() Found child 5482 in scoreboard slot 9 +[Mon Dec 05 10:43:19 2005] [notice] jk2_init() Found child 5480 in scoreboard slot 7 +[Mon Dec 05 10:43:19 2005] [notice] jk2_init() Found child 5479 in scoreboard slot 6 +[Mon Dec 05 10:43:19 2005] [notice] jk2_init() Found child 5481 in scoreboard slot 8 +[Mon Dec 05 10:43:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:43:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:43:39 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 10:43:41 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:43:41 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:43:48 2005] [notice] jk2_init() Found child 5484 in scoreboard slot 7 +[Mon Dec 05 10:43:48 2005] [notice] jk2_init() Found child 5483 in scoreboard slot 6 +[Mon Dec 05 10:43:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:43:51 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:43:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:43:51 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 10:46:55 2005] [notice] jk2_init() Found child 5497 in scoreboard slot 7 +[Mon Dec 05 10:46:55 2005] [notice] jk2_init() Found child 5495 in scoreboard slot 9 +[Mon Dec 05 10:46:55 2005] [notice] jk2_init() Found child 5494 in scoreboard slot 8 +[Mon Dec 05 10:46:55 2005] [notice] jk2_init() Found child 5496 in scoreboard slot 6 +[Mon Dec 05 10:47:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:47:12 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:47:17 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:47:17 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:47:32 2005] [notice] jk2_init() Found child 5499 in scoreboard slot 9 +[Mon Dec 05 10:47:33 2005] [notice] jk2_init() Found child 5498 in scoreboard slot 8 +[Mon Dec 05 10:47:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:47:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:47:45 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:47:45 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:47:47 2005] [notice] jk2_init() Found child 5500 in scoreboard slot 6 +[Mon Dec 05 10:47:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:47:47 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:48:43 2005] [notice] jk2_init() Found child 5503 in scoreboard slot 10 +[Mon Dec 05 10:48:46 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:48:46 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:48:48 2005] [error] [client 67.166.248.235] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 10:51:12 2005] [notice] jk2_init() Found child 5515 in scoreboard slot 7 +[Mon Dec 05 10:51:12 2005] [notice] jk2_init() Found child 5516 in scoreboard slot 8 +[Mon Dec 05 10:51:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:51:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:51:35 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:51:35 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:51:59 2005] [notice] jk2_init() Found child 5517 in scoreboard slot 6 +[Mon Dec 05 10:52:00 2005] [notice] jk2_init() Found child 5518 in scoreboard slot 9 +[Mon Dec 05 10:52:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:52:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:52:21 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:53:42 2005] [notice] jk2_init() Found child 5527 in scoreboard slot 7 +[Mon Dec 05 10:53:42 2005] [notice] jk2_init() Found child 5526 in scoreboard slot 9 +[Mon Dec 05 10:55:47 2005] [notice] jk2_init() Found child 5538 in scoreboard slot 9 +[Mon Dec 05 10:59:25 2005] [notice] jk2_init() Found child 5565 in scoreboard slot 9 +[Mon Dec 05 10:59:25 2005] [notice] jk2_init() Found child 5563 in scoreboard slot 7 +[Mon Dec 05 10:59:25 2005] [notice] jk2_init() Found child 5562 in scoreboard slot 6 +[Mon Dec 05 10:59:25 2005] [notice] jk2_init() Found child 5564 in scoreboard slot 8 +[Mon Dec 05 10:59:25 2005] [notice] jk2_init() Found child 5567 in scoreboard slot 12 +[Mon Dec 05 10:59:25 2005] [notice] jk2_init() Found child 5568 in scoreboard slot 13 +[Mon Dec 05 10:59:25 2005] [notice] jk2_init() Found child 5566 in scoreboard slot 10 +[Mon Dec 05 10:59:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:59:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:59:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:59:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:59:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:59:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:59:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 10:59:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:59:29 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 10:59:29 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 10:59:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:59:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:59:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 10:59:29 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 11:02:05 2005] [notice] jk2_init() Found child 5579 in scoreboard slot 6 +[Mon Dec 05 11:04:16 2005] [notice] jk2_init() Found child 5592 in scoreboard slot 8 +[Mon Dec 05 11:04:16 2005] [notice] jk2_init() Found child 5593 in scoreboard slot 9 +[Mon Dec 05 11:06:50 2005] [notice] jk2_init() Found child 5616 in scoreboard slot 6 +[Mon Dec 05 11:06:51 2005] [notice] jk2_init() Found child 5617 in scoreboard slot 7 +[Mon Dec 05 11:06:51 2005] [notice] jk2_init() Found child 5618 in scoreboard slot 8 +[Mon Dec 05 11:06:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 11:06:51 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 11:06:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 11:06:51 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 11:06:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 11:06:51 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 11:06:52 2005] [error] jk2_init() Can't find child 5619 in scoreboard +[Mon Dec 05 11:06:52 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 11:06:52 2005] [error] mod_jk child init 1 -2 +[Mon Dec 05 11:06:52 2005] [error] jk2_init() Can't find child 5620 in scoreboard +[Mon Dec 05 11:06:52 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 11:06:52 2005] [error] mod_jk child init 1 -2 +[Mon Dec 05 11:06:52 2005] [error] jk2_init() Can't find child 5621 in scoreboard +[Mon Dec 05 11:06:52 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 11:06:52 2005] [error] mod_jk child init 1 -2 +[Mon Dec 05 11:06:52 2005] [error] jk2_init() Can't find child 5622 in scoreboard +[Mon Dec 05 11:06:52 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 11:06:52 2005] [error] mod_jk child init 1 -2 +[Mon Dec 05 12:35:57 2005] [notice] jk2_init() Found child 5785 in scoreboard slot 6 +[Mon Dec 05 12:35:57 2005] [notice] jk2_init() Found child 5786 in scoreboard slot 7 +[Mon Dec 05 12:36:36 2005] [notice] jk2_init() Found child 5790 in scoreboard slot 7 +[Mon Dec 05 12:36:36 2005] [notice] jk2_init() Found child 5788 in scoreboard slot 9 +[Mon Dec 05 12:36:36 2005] [notice] jk2_init() Found child 5789 in scoreboard slot 6 +[Mon Dec 05 12:36:36 2005] [notice] jk2_init() Found child 5787 in scoreboard slot 8 +[Mon Dec 05 12:36:39 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 12:36:39 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 12:36:39 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 12:36:39 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 12:36:39 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 12:36:39 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 12:36:39 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 12:36:39 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 12:40:37 2005] [notice] jk2_init() Found child 5798 in scoreboard slot 8 +[Mon Dec 05 12:40:38 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 12:40:38 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 12:50:42 2005] [notice] jk2_init() Found child 5811 in scoreboard slot 6 +[Mon Dec 05 12:50:42 2005] [notice] jk2_init() Found child 5810 in scoreboard slot 9 +[Mon Dec 05 12:50:43 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 12:50:43 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 12:50:43 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 12:50:43 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 12:55:48 2005] [notice] jk2_init() Found child 5817 in scoreboard slot 8 +[Mon Dec 05 12:55:48 2005] [notice] jk2_init() Found child 5816 in scoreboard slot 7 +[Mon Dec 05 12:55:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 12:55:49 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 12:55:49 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 12:55:49 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:00:33 2005] [notice] jk2_init() Found child 5825 in scoreboard slot 9 +[Mon Dec 05 13:00:33 2005] [notice] jk2_init() Found child 5826 in scoreboard slot 6 +[Mon Dec 05 13:00:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:00:34 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:00:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:00:34 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:05:24 2005] [notice] jk2_init() Found child 5845 in scoreboard slot 7 +[Mon Dec 05 13:05:24 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:05:24 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:10:55 2005] [notice] jk2_init() Found child 5856 in scoreboard slot 8 +[Mon Dec 05 13:10:59 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:10:59 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:16:27 2005] [notice] jk2_init() Found child 5877 in scoreboard slot 9 +[Mon Dec 05 13:16:27 2005] [notice] jk2_init() Found child 5876 in scoreboard slot 8 +[Mon Dec 05 13:16:27 2005] [notice] jk2_init() Found child 5878 in scoreboard slot 6 +[Mon Dec 05 13:16:27 2005] [notice] jk2_init() Found child 5875 in scoreboard slot 7 +[Mon Dec 05 13:16:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:16:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:16:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:16:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:16:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:16:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:16:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:16:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:21:35 2005] [notice] jk2_init() Found child 5893 in scoreboard slot 9 +[Mon Dec 05 13:21:34 2005] [notice] jk2_init() Found child 5892 in scoreboard slot 8 +[Mon Dec 05 13:22:45 2005] [notice] jk2_init() Found child 5901 in scoreboard slot 9 +[Mon Dec 05 13:22:45 2005] [notice] jk2_init() Found child 5899 in scoreboard slot 7 +[Mon Dec 05 13:22:45 2005] [notice] jk2_init() Found child 5900 in scoreboard slot 8 +[Mon Dec 05 13:22:45 2005] [notice] jk2_init() Found child 5898 in scoreboard slot 6 +[Mon Dec 05 13:22:48 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:22:48 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 13:22:48 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:22:48 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 13:22:48 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:22:48 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:22:48 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:22:48 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:26:03 2005] [notice] jk2_init() Found child 5912 in scoreboard slot 7 +[Mon Dec 05 13:26:37 2005] [notice] jk2_init() Found child 5914 in scoreboard slot 9 +[Mon Dec 05 13:26:37 2005] [notice] jk2_init() Found child 5915 in scoreboard slot 6 +[Mon Dec 05 13:27:15 2005] [notice] jk2_init() Found child 5917 in scoreboard slot 8 +[Mon Dec 05 13:27:14 2005] [notice] jk2_init() Found child 5916 in scoreboard slot 7 +[Mon Dec 05 13:27:15 2005] [notice] jk2_init() Found child 5919 in scoreboard slot 6 +[Mon Dec 05 13:27:15 2005] [notice] jk2_init() Found child 5918 in scoreboard slot 9 +[Mon Dec 05 13:28:14 2005] [notice] jk2_init() Found child 5925 in scoreboard slot 8 +[Mon Dec 05 13:28:14 2005] [notice] jk2_init() Found child 5923 in scoreboard slot 6 +[Mon Dec 05 13:28:14 2005] [notice] jk2_init() Found child 5924 in scoreboard slot 7 +[Mon Dec 05 13:28:14 2005] [notice] jk2_init() Found child 5922 in scoreboard slot 9 +[Mon Dec 05 13:28:17 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:28:17 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 13:28:17 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:28:17 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 13:28:17 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:28:17 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 13:28:17 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:28:17 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 13:31:19 2005] [notice] jk2_init() Found child 5935 in scoreboard slot 9 +[Mon Dec 05 13:31:19 2005] [notice] jk2_init() Found child 5936 in scoreboard slot 6 +[Mon Dec 05 13:31:53 2005] [notice] jk2_init() Found child 5938 in scoreboard slot 8 +[Mon Dec 05 13:31:53 2005] [notice] jk2_init() Found child 5937 in scoreboard slot 7 +[Mon Dec 05 13:32:01 2005] [notice] jk2_init() Found child 5940 in scoreboard slot 6 +[Mon Dec 05 13:32:01 2005] [notice] jk2_init() Found child 5939 in scoreboard slot 9 +[Mon Dec 05 13:32:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:32:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:32:04 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:32:04 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:32:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:32:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:32:10 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 13:32:10 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 13:32:28 2005] [notice] jk2_init() Found child 5942 in scoreboard slot 8 +[Mon Dec 05 13:32:28 2005] [notice] jk2_init() Found child 5941 in scoreboard slot 7 +[Mon Dec 05 13:32:30 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:32:30 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:32:30 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:32:30 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:36:27 2005] [notice] jk2_init() Found child 5954 in scoreboard slot 7 +[Mon Dec 05 13:36:27 2005] [notice] jk2_init() Found child 5953 in scoreboard slot 6 +[Mon Dec 05 13:36:58 2005] [notice] jk2_init() Found child 5956 in scoreboard slot 9 +[Mon Dec 05 13:36:58 2005] [notice] jk2_init() Found child 5957 in scoreboard slot 6 +[Mon Dec 05 13:36:58 2005] [notice] jk2_init() Found child 5955 in scoreboard slot 8 +[Mon Dec 05 13:37:47 2005] [notice] jk2_init() Found child 5961 in scoreboard slot 6 +[Mon Dec 05 13:37:47 2005] [notice] jk2_init() Found child 5960 in scoreboard slot 9 +[Mon Dec 05 13:38:52 2005] [notice] jk2_init() Found child 5968 in scoreboard slot 9 +[Mon Dec 05 13:38:53 2005] [notice] jk2_init() Found child 5965 in scoreboard slot 6 +[Mon Dec 05 13:38:52 2005] [notice] jk2_init() Found child 5967 in scoreboard slot 8 +[Mon Dec 05 13:38:53 2005] [notice] jk2_init() Found child 5969 in scoreboard slot 10 +[Mon Dec 05 13:38:52 2005] [notice] jk2_init() Found child 5966 in scoreboard slot 7 +[Mon Dec 05 13:39:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:39:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:39:14 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:39:13 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 13:39:36 2005] [notice] jk2_init() Found child 5970 in scoreboard slot 6 +[Mon Dec 05 13:39:36 2005] [notice] jk2_init() Found child 5971 in scoreboard slot 7 +[Mon Dec 05 13:39:41 2005] [notice] jk2_init() Found child 5972 in scoreboard slot 8 +[Mon Dec 05 13:39:41 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:39:41 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:39:41 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:39:41 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 13:39:41 2005] [error] mod_jk child workerEnv in error state 9 +[Mon Dec 05 13:39:41 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 13:41:11 2005] [notice] jk2_init() Found child 5981 in scoreboard slot 9 +[Mon Dec 05 13:41:12 2005] [notice] jk2_init() Found child 5982 in scoreboard slot 6 +[Mon Dec 05 13:41:58 2005] [notice] jk2_init() Found child 5984 in scoreboard slot 8 +[Mon Dec 05 13:41:58 2005] [notice] jk2_init() Found child 5985 in scoreboard slot 9 +[Mon Dec 05 13:43:27 2005] [notice] jk2_init() Found child 5992 in scoreboard slot 8 +[Mon Dec 05 13:43:27 2005] [notice] jk2_init() Found child 5993 in scoreboard slot 9 +[Mon Dec 05 13:43:27 2005] [notice] jk2_init() Found child 5990 in scoreboard slot 6 +[Mon Dec 05 13:43:27 2005] [notice] jk2_init() Found child 5991 in scoreboard slot 7 +[Mon Dec 05 13:43:43 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:43:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:43:43 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:43:46 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:43:46 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 13:43:46 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 13:44:18 2005] [notice] jk2_init() Found child 5995 in scoreboard slot 7 +[Mon Dec 05 13:44:18 2005] [notice] jk2_init() Found child 5996 in scoreboard slot 8 +[Mon Dec 05 13:44:32 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:44:35 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:44:38 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:44:38 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:44:53 2005] [notice] jk2_init() Found child 5997 in scoreboard slot 9 +[Mon Dec 05 13:45:01 2005] [notice] jk2_init() Found child 5998 in scoreboard slot 6 +[Mon Dec 05 13:45:01 2005] [notice] jk2_init() Found child 5999 in scoreboard slot 7 +[Mon Dec 05 13:45:08 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:45:08 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:45:08 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:45:08 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:45:08 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 13:45:08 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:46:20 2005] [notice] jk2_init() Found child 6007 in scoreboard slot 7 +[Mon Dec 05 13:46:20 2005] [notice] jk2_init() Found child 6006 in scoreboard slot 6 +[Mon Dec 05 13:46:20 2005] [notice] jk2_init() Found child 6005 in scoreboard slot 9 +[Mon Dec 05 13:46:50 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:47:06 2005] [notice] jk2_init() Found child 6008 in scoreboard slot 8 +[Mon Dec 05 13:47:06 2005] [notice] jk2_init() Found child 6009 in scoreboard slot 9 +[Mon Dec 05 13:47:09 2005] [notice] jk2_init() Found child 6011 in scoreboard slot 7 +[Mon Dec 05 13:47:09 2005] [notice] jk2_init() Found child 6010 in scoreboard slot 6 +[Mon Dec 05 13:47:11 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:47:11 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:47:11 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:47:11 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:47:11 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 13:47:11 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:47:11 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 13:47:11 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 13:51:17 2005] [notice] jk2_init() Found child 6028 in scoreboard slot 9 +[Mon Dec 05 13:52:19 2005] [notice] jk2_init() Found child 6036 in scoreboard slot 9 +[Mon Dec 05 13:52:19 2005] [notice] jk2_init() Found child 6033 in scoreboard slot 6 +[Mon Dec 05 13:52:19 2005] [notice] jk2_init() Found child 6035 in scoreboard slot 8 +[Mon Dec 05 13:52:19 2005] [notice] jk2_init() Found child 6034 in scoreboard slot 7 +[Mon Dec 05 13:52:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:52:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:52:36 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:52:36 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:53:00 2005] [notice] jk2_init() Found child 6038 in scoreboard slot 7 +[Mon Dec 05 13:53:00 2005] [notice] jk2_init() Found child 6037 in scoreboard slot 6 +[Mon Dec 05 13:53:00 2005] [notice] jk2_init() Found child 6039 in scoreboard slot 10 +[Mon Dec 05 13:53:31 2005] [notice] jk2_init() Found child 6043 in scoreboard slot 9 +[Mon Dec 05 13:53:31 2005] [notice] jk2_init() Found child 6042 in scoreboard slot 7 +[Mon Dec 05 13:53:31 2005] [notice] jk2_init() Found child 6041 in scoreboard slot 6 +[Mon Dec 05 13:53:34 2005] [notice] jk2_init() Found child 6044 in scoreboard slot 8 +[Mon Dec 05 13:53:35 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:53:35 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:53:35 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:53:35 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 13:53:35 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:53:35 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 13:53:35 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 13:53:35 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 13:56:21 2005] [notice] jk2_init() Found child 6052 in scoreboard slot 6 +[Mon Dec 05 13:56:38 2005] [notice] jk2_init() Found child 6053 in scoreboard slot 7 +[Mon Dec 05 13:57:07 2005] [notice] jk2_init() Found child 6054 in scoreboard slot 9 +[Mon Dec 05 13:57:07 2005] [notice] jk2_init() Found child 6055 in scoreboard slot 8 +[Mon Dec 05 13:58:31 2005] [notice] jk2_init() Found child 6063 in scoreboard slot 8 +[Mon Dec 05 13:58:31 2005] [notice] jk2_init() Found child 6062 in scoreboard slot 9 +[Mon Dec 05 13:59:43 2005] [notice] jk2_init() Found child 6069 in scoreboard slot 7 +[Mon Dec 05 13:59:43 2005] [notice] jk2_init() Found child 6070 in scoreboard slot 9 +[Mon Dec 05 13:59:43 2005] [notice] jk2_init() Found child 6071 in scoreboard slot 8 +[Mon Dec 05 14:01:47 2005] [notice] jk2_init() Found child 6100 in scoreboard slot 7 +[Mon Dec 05 14:01:47 2005] [notice] jk2_init() Found child 6101 in scoreboard slot 8 +[Mon Dec 05 14:01:47 2005] [notice] jk2_init() Found child 6099 in scoreboard slot 6 +[Mon Dec 05 14:01:48 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 14:01:48 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 14:01:48 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 14:01:48 2005] [error] mod_jk child workerEnv in error state 9 +[Mon Dec 05 14:01:48 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 14:01:48 2005] [error] mod_jk child workerEnv in error state 8 +[Mon Dec 05 14:11:40 2005] [notice] jk2_init() Found child 6115 in scoreboard slot 10 +[Mon Dec 05 14:11:43 2005] [error] [client 141.154.18.244] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 14:11:45 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 14:11:45 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 15:31:06 2005] [notice] jk2_init() Found child 6259 in scoreboard slot 6 +[Mon Dec 05 15:31:06 2005] [notice] jk2_init() Found child 6260 in scoreboard slot 7 +[Mon Dec 05 15:31:09 2005] [notice] jk2_init() Found child 6261 in scoreboard slot 8 +[Mon Dec 05 15:31:10 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:31:10 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 15:31:10 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:31:10 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 15:31:10 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:31:10 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 15:40:59 2005] [notice] jk2_init() Found child 6277 in scoreboard slot 7 +[Mon Dec 05 15:40:59 2005] [notice] jk2_init() Found child 6276 in scoreboard slot 6 +[Mon Dec 05 15:41:32 2005] [notice] jk2_init() Found child 6280 in scoreboard slot 7 +[Mon Dec 05 15:41:32 2005] [notice] jk2_init() Found child 6278 in scoreboard slot 8 +[Mon Dec 05 15:41:32 2005] [notice] jk2_init() Found child 6279 in scoreboard slot 6 +[Mon Dec 05 15:41:32 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:41:32 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 15:41:32 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:41:32 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 15:41:32 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:41:32 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 15:45:42 2005] [notice] jk2_init() Found child 6285 in scoreboard slot 8 +[Mon Dec 05 15:45:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:45:44 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 15:50:53 2005] [notice] jk2_init() Found child 6293 in scoreboard slot 6 +[Mon Dec 05 15:50:53 2005] [notice] jk2_init() Found child 6294 in scoreboard slot 7 +[Mon Dec 05 15:51:18 2005] [notice] jk2_init() Found child 6297 in scoreboard slot 7 +[Mon Dec 05 15:51:18 2005] [notice] jk2_init() Found child 6295 in scoreboard slot 8 +[Mon Dec 05 15:51:18 2005] [notice] jk2_init() Found child 6296 in scoreboard slot 6 +[Mon Dec 05 15:51:20 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:51:20 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 15:51:20 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:51:20 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 15:51:20 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:51:20 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 15:55:31 2005] [notice] jk2_init() Found child 6302 in scoreboard slot 8 +[Mon Dec 05 15:55:32 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 15:55:32 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:01:17 2005] [notice] jk2_init() Found child 6310 in scoreboard slot 6 +[Mon Dec 05 16:02:00 2005] [notice] jk2_init() Found child 6315 in scoreboard slot 6 +[Mon Dec 05 16:02:00 2005] [notice] jk2_init() Found child 6316 in scoreboard slot 7 +[Mon Dec 05 16:02:00 2005] [notice] jk2_init() Found child 6314 in scoreboard slot 8 +[Mon Dec 05 16:02:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:02:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:02:02 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:02:02 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:02:02 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 16:02:02 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:06:07 2005] [notice] jk2_init() Found child 6333 in scoreboard slot 8 +[Mon Dec 05 16:06:21 2005] [notice] jk2_init() Found child 6335 in scoreboard slot 7 +[Mon Dec 05 16:07:08 2005] [notice] jk2_init() Found child 6339 in scoreboard slot 8 +[Mon Dec 05 16:07:08 2005] [notice] jk2_init() Found child 6340 in scoreboard slot 6 +[Mon Dec 05 16:07:08 2005] [notice] jk2_init() Found child 6338 in scoreboard slot 7 +[Mon Dec 05 16:07:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:07:09 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 16:07:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:07:09 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:07:09 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:07:09 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 16:10:43 2005] [notice] jk2_init() Found child 6351 in scoreboard slot 8 +[Mon Dec 05 16:10:43 2005] [notice] jk2_init() Found child 6350 in scoreboard slot 7 +[Mon Dec 05 16:10:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:10:44 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:10:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:10:44 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:16:34 2005] [notice] jk2_init() Found child 6368 in scoreboard slot 8 +[Mon Dec 05 16:16:34 2005] [notice] jk2_init() Found child 6367 in scoreboard slot 7 +[Mon Dec 05 16:16:34 2005] [notice] jk2_init() Found child 6366 in scoreboard slot 6 +[Mon Dec 05 16:16:36 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:16:36 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:16:36 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:16:36 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:16:36 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:16:36 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:21:25 2005] [notice] jk2_init() Found child 6387 in scoreboard slot 7 +[Mon Dec 05 16:21:25 2005] [notice] jk2_init() Found child 6386 in scoreboard slot 6 +[Mon Dec 05 16:21:25 2005] [notice] jk2_init() Found child 6385 in scoreboard slot 8 +[Mon Dec 05 16:21:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:21:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:21:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:21:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:21:29 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:21:29 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:26:00 2005] [notice] jk2_init() Found child 6400 in scoreboard slot 7 +[Mon Dec 05 16:26:00 2005] [notice] jk2_init() Found child 6399 in scoreboard slot 6 +[Mon Dec 05 16:26:00 2005] [notice] jk2_init() Found child 6398 in scoreboard slot 8 +[Mon Dec 05 16:26:05 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:26:05 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:26:05 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:26:05 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:26:05 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:26:05 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:31:48 2005] [notice] jk2_init() Found child 6420 in scoreboard slot 6 +[Mon Dec 05 16:31:49 2005] [notice] jk2_init() Found child 6421 in scoreboard slot 7 +[Mon Dec 05 16:31:49 2005] [notice] jk2_init() Found child 6422 in scoreboard slot 8 +[Mon Dec 05 16:31:52 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:31:52 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:31:52 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:31:52 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:31:52 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:31:52 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:36:06 2005] [notice] jk2_init() Found child 6434 in scoreboard slot 7 +[Mon Dec 05 16:36:06 2005] [notice] jk2_init() Found child 6433 in scoreboard slot 6 +[Mon Dec 05 16:36:42 2005] [notice] jk2_init() Found child 6435 in scoreboard slot 8 +[Mon Dec 05 16:37:03 2005] [notice] jk2_init() Found child 6437 in scoreboard slot 7 +[Mon Dec 05 16:38:17 2005] [notice] jk2_init() Found child 6443 in scoreboard slot 7 +[Mon Dec 05 16:38:17 2005] [notice] jk2_init() Found child 6442 in scoreboard slot 6 +[Mon Dec 05 16:39:59 2005] [notice] jk2_init() Found child 6453 in scoreboard slot 10 +[Mon Dec 05 16:39:59 2005] [notice] jk2_init() Found child 6451 in scoreboard slot 7 +[Mon Dec 05 16:39:59 2005] [notice] jk2_init() Found child 6452 in scoreboard slot 8 +[Mon Dec 05 16:40:06 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:40:06 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:40:06 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 16:40:06 2005] [error] mod_jk child workerEnv in error state 9 +[Mon Dec 05 16:40:06 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:40:06 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 16:45:04 2005] [error] [client 216.216.185.130] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 17:31:37 2005] [notice] jk2_init() Found child 6561 in scoreboard slot 10 +[Mon Dec 05 17:31:39 2005] [error] [client 218.75.106.250] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 17:31:41 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:31:41 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 17:35:57 2005] [notice] jk2_init() Found child 6569 in scoreboard slot 8 +[Mon Dec 05 17:35:57 2005] [notice] jk2_init() Found child 6568 in scoreboard slot 7 +[Mon Dec 05 17:35:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:35:58 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 17:35:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:35:58 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 17:40:38 2005] [notice] jk2_init() Found child 6577 in scoreboard slot 7 +[Mon Dec 05 17:40:38 2005] [notice] jk2_init() Found child 6578 in scoreboard slot 8 +[Mon Dec 05 17:40:39 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:40:39 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 17:40:39 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:40:39 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 17:46:02 2005] [notice] jk2_init() Found child 6585 in scoreboard slot 7 +[Mon Dec 05 17:46:02 2005] [notice] jk2_init() Found child 6586 in scoreboard slot 8 +[Mon Dec 05 17:46:06 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:46:06 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:46:06 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 17:46:06 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 17:50:40 2005] [notice] jk2_init() Found child 6595 in scoreboard slot 8 +[Mon Dec 05 17:50:40 2005] [notice] jk2_init() Found child 6594 in scoreboard slot 7 +[Mon Dec 05 17:50:41 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:50:41 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 17:50:41 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:50:41 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 17:55:35 2005] [notice] jk2_init() Found child 6601 in scoreboard slot 8 +[Mon Dec 05 17:55:35 2005] [notice] jk2_init() Found child 6600 in scoreboard slot 7 +[Mon Dec 05 17:55:35 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:55:35 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 17:55:35 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 17:55:35 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:00:24 2005] [notice] jk2_init() Found child 6609 in scoreboard slot 7 +[Mon Dec 05 18:00:26 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:00:26 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:10:56 2005] [notice] jk2_init() Found child 6639 in scoreboard slot 7 +[Mon Dec 05 18:10:56 2005] [notice] jk2_init() Found child 6638 in scoreboard slot 8 +[Mon Dec 05 18:10:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:10:58 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:10:58 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:10:58 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:15:45 2005] [notice] jk2_init() Found child 6652 in scoreboard slot 7 +[Mon Dec 05 18:15:45 2005] [notice] jk2_init() Found child 6651 in scoreboard slot 8 +[Mon Dec 05 18:15:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:15:47 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:15:47 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:15:47 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:20:51 2005] [notice] jk2_init() Found child 6670 in scoreboard slot 7 +[Mon Dec 05 18:20:51 2005] [notice] jk2_init() Found child 6669 in scoreboard slot 8 +[Mon Dec 05 18:20:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:20:53 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:20:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:20:53 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:26:06 2005] [notice] jk2_init() Found child 6684 in scoreboard slot 7 +[Mon Dec 05 18:27:29 2005] [notice] jk2_init() Found child 6688 in scoreboard slot 8 +[Mon Dec 05 18:27:33 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:27:33 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:27:37 2005] [notice] jk2_init() Found child 6689 in scoreboard slot 7 +[Mon Dec 05 18:27:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:27:37 2005] [error] mod_jk child workerEnv in error state 7 +[Mon Dec 05 18:35:51 2005] [notice] jk2_init() Found child 6707 in scoreboard slot 8 +[Mon Dec 05 18:35:51 2005] [notice] jk2_init() Found child 6708 in scoreboard slot 7 +[Mon Dec 05 18:35:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:35:53 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:35:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:35:53 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:40:54 2005] [notice] jk2_init() Found child 6719 in scoreboard slot 7 +[Mon Dec 05 18:40:54 2005] [notice] jk2_init() Found child 6718 in scoreboard slot 8 +[Mon Dec 05 18:40:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:40:54 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:40:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:40:54 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:45:51 2005] [notice] jk2_init() Found child 6725 in scoreboard slot 7 +[Mon Dec 05 18:45:51 2005] [notice] jk2_init() Found child 6724 in scoreboard slot 8 +[Mon Dec 05 18:45:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:45:53 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:45:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:45:53 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:50:30 2005] [notice] jk2_init() Found child 6733 in scoreboard slot 8 +[Mon Dec 05 18:50:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:50:31 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:56:03 2005] [notice] jk2_init() Found child 6740 in scoreboard slot 7 +[Mon Dec 05 18:56:03 2005] [notice] jk2_init() Found child 6741 in scoreboard slot 8 +[Mon Dec 05 18:56:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:56:04 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 18:56:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 18:56:04 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 19:00:43 2005] [notice] jk2_init() Found child 6750 in scoreboard slot 8 +[Mon Dec 05 19:00:43 2005] [notice] jk2_init() Found child 6749 in scoreboard slot 7 +[Mon Dec 05 19:00:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 19:00:44 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 19:00:44 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 19:00:44 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 19:00:54 2005] [notice] jk2_init() Found child 6751 in scoreboard slot 10 +[Mon Dec 05 19:00:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 19:00:54 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 19:00:56 2005] [error] [client 68.228.3.15] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 19:11:00 2005] [notice] jk2_init() Found child 6780 in scoreboard slot 7 +[Mon Dec 05 19:11:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 19:11:04 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 19:14:08 2005] [notice] jk2_init() Found child 6784 in scoreboard slot 8 +[Mon Dec 05 19:14:09 2005] [error] [client 61.220.139.68] Directory index forbidden by rule: /var/www/html/ +[Mon Dec 05 19:14:11 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 19:14:11 2005] [error] mod_jk child workerEnv in error state 6 +[Mon Dec 05 19:15:55 2005] [notice] jk2_init() Found child 6791 in scoreboard slot 8 +[Mon Dec 05 19:15:55 2005] [notice] jk2_init() Found child 6790 in scoreboard slot 7 +[Mon Dec 05 19:15:57 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties +[Mon Dec 05 19:15:57 2005] [error] mod_jk child workerEnv in error state 6 \ No newline at end of file From 62094b664f112757cc05956a962b42d23444b24a Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Thu, 29 Jan 2026 16:20:55 +0100 Subject: [PATCH 22/28] add data for testing --- tests/test_folder/Mac_2k.log | 2000 ++++++++++++++++ .../Mac_2k.log_structured_corrected.csv | 2001 +++++++++++++++++ 2 files changed, 4001 insertions(+) create mode 100644 tests/test_folder/Mac_2k.log create mode 100644 tests/test_folder/Mac_2k.log_structured_corrected.csv diff --git a/tests/test_folder/Mac_2k.log b/tests/test_folder/Mac_2k.log new file mode 100644 index 0000000..6d64b55 --- /dev/null +++ b/tests/test_folder/Mac_2k.log @@ -0,0 +1,2000 @@ +Jul 1 09:00:55 calvisitor-10-105-160-95 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 1 09:01:05 calvisitor-10-105-160-95 com.apple.CDScheduler[43]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 1 09:01:06 calvisitor-10-105-160-95 QQ[10018]: FA||Url||taskID[2019352994] dealloc +Jul 1 09:02:26 calvisitor-10-105-160-95 kernel[0]: ARPT: 620701.011328: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 1 09:02:26 authorMacBook-Pro kernel[0]: ARPT: 620702.879952: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 1 09:03:11 calvisitor-10-105-160-95 mDNSResponder[91]: mDNS_DeregisterInterface: Frequent transitions for interface awdl0 (FE80:0000:0000:0000:D8A5:90FF:FEF5:7FFF) +Jul 1 09:03:13 calvisitor-10-105-160-95 kernel[0]: ARPT: 620749.901374: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0, +Jul 1 09:04:33 calvisitor-10-105-160-95 kernel[0]: ARPT: 620750.434035: wl0: wl_update_tcpkeep_seq: Original Seq: 3226706533, Ack: 3871687177, Win size: 4096 +Jul 1 09:04:33 authorMacBook-Pro kernel[0]: ARPT: 620752.337198: ARPT: Wake Reason: Wake on Scan offload +Jul 1 09:04:37 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 1 09:12:20 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 1 09:12:21 calvisitor-10-105-160-95 symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 1 09:18:16 calvisitor-10-105-160-95 kernel[0]: ARPT: 620896.311264: wl0: MDNS: 0 SRV Recs, 0 TXT Recs +Jul 1 09:19:03 calvisitor-10-105-160-95 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 1 09:19:03 authorMacBook-Pro configd[53]: setting hostname to "authorMacBook-Pro.local" +Jul 1 09:19:13 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 439034 seconds. Ignoring. +Jul 1 09:21:57 authorMacBook-Pro corecaptured[31174]: CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7 +Jul 1 09:21:58 calvisitor-10-105-160-95 com.apple.WebKit.WebContent[25654]: [09:21:58.929] <<<< CRABS >>>> crabsFlumeHostAvailable: [0x7f961cf08cf0] Byte flume reports host available again. +Jul 1 09:22:02 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2450 seconds. Ignoring. +Jul 1 09:22:25 calvisitor-10-105-160-95 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 1 09:23:26 calvisitor-10-105-160-95 kernel[0]: AirPort: Link Down on awdl0. Reason 1 (Unspecified). +Jul 1 09:23:26 calvisitor-10-105-160-95 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 1 09:24:13 calvisitor-10-105-160-95 kernel[0]: PM response took 2010 ms (54, powerd) +Jul 1 09:25:21 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 438666 seconds. Ignoring. +Jul 1 09:25:45 calvisitor-10-105-160-95 kernel[0]: ARPT: 621131.293163: wl0: Roamed or switched channel, reason #8, bssid 5c:50:15:4c:18:13, last RSSI -64 +Jul 1 09:25:59 calvisitor-10-105-160-95 kernel[0]: ARPT: 621145.554555: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0, +Jul 1 09:26:41 calvisitor-10-105-160-95 kernel[0]: ARPT: 621146.080894: wl0: wl_update_tcpkeep_seq: Original Seq: 3014995849, Ack: 2590995288, Win size: 4096 +Jul 1 09:26:43 calvisitor-10-105-160-95 networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000 +Jul 1 09:26:47 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2165 seconds. Ignoring. +Jul 1 09:27:01 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 13090 seconds. Ignoring. +Jul 1 09:27:06 calvisitor-10-105-160-95 kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 1 09:28:41 authorMacBook-Pro netbiosd[31198]: network_reachability_changed : network is not reachable, netbiosd is shutting down +Jul 1 09:28:41 authorMacBook-Pro corecaptured[31206]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 1 09:28:50 calvisitor-10-105-160-95 com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 1 09:28:53 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2039 seconds. Ignoring. +Jul 1 09:29:02 calvisitor-10-105-160-95 sandboxd[129] ([31211]): com.apple.Addres(31211) deny network-outbound /private/var/run/mDNSResponder +Jul 1 09:29:14 calvisitor-10-105-160-95 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 1 09:29:25 calvisitor-10-105-160-95 kernel[0]: ARPT: 621241.634070: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f +Jul 1 09:31:48 authorMacBook-Pro kernel[0]: AirPort: Link Up on en0 +Jul 1 09:31:53 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 438274 seconds. Ignoring. +Jul 1 09:32:03 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1849 seconds. Ignoring. +Jul 1 09:32:13 calvisitor-10-105-160-95 kernel[0]: Sandbox: com.apple.Addres(31229) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 1 09:32:28 calvisitor-10-105-160-95 mDNSResponder[91]: mDNS_DeregisterInterface: Frequent transitions for interface awdl0 (FE80:0000:0000:0000:D8A5:90FF:FEF5:7FFF) +Jul 1 09:33:13 calvisitor-10-105-160-95 kernel[0]: ARPT: 621342.242614: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 1 09:33:13 calvisitor-10-105-160-95 kernel[0]: AirPort: Link Up on awdl0 +Jul 1 09:33:13 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 1 09:33:58 calvisitor-10-105-160-95 kernel[0]: ARPT: 621389.379319: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f +Jul 1 09:34:42 calvisitor-10-105-160-95 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds +Jul 1 09:34:52 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 438095 seconds. Ignoring. +Jul 1 09:35:27 calvisitor-10-105-160-95 mDNSResponder[91]: mDNS_DeregisterInterface: Frequent transitions for interface en0 (2607:F140:6000:0008:C6B3:01FF:FECD:467F) +Jul 1 09:36:19 calvisitor-10-105-160-95 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 7 +Jul 1 09:39:57 calvisitor-10-105-160-95 kernel[0]: ARPT: 621490.858770: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 2119064372, Ack 3325040593, Win size 278 +Jul 1 09:39:57 calvisitor-10-105-160-95 kernel[0]: ARPT: 621490.890645: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 1 09:39:57 calvisitor-10-105-160-95 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 1 09:39:57 authorMacBook-Pro kernel[0]: ARPT: 621492.770239: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 1 09:41:34 calvisitor-10-105-160-95 kernel[0]: en0::IO80211Interface::postMessage bssid changed +Jul 1 09:41:34 authorMacBook-Pro kernel[0]: ARPT: 621542.378462: ARPT: Wake Reason: Wake on Scan offload +Jul 1 09:41:34 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 1 09:41:44 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1268 seconds. Ignoring. +Jul 1 09:41:44 calvisitor-10-105-160-95 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 12119 seconds. Ignoring. +Jul 1 09:41:54 calvisitor-10-105-160-95 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 1 09:41:54 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 437673 seconds. Ignoring. +Jul 1 09:42:16 calvisitor-10-105-160-95 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 12087 seconds. Ignoring. +Jul 1 09:42:23 calvisitor-10-105-160-95 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0 +Jul 1 09:42:54 calvisitor-10-105-160-95 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 1 09:43:22 calvisitor-10-105-160-95 mDNSResponder[91]: mDNS_RegisterInterface: Frequent transitions for interface en0 (FE80:0000:0000:0000:C6B3:01FF:FECD:467F) +Jul 1 09:44:23 authorMacBook-Pro kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 1 09:44:26 authorMacBook-Pro kernel[0]: AirPort: Link Up on en0 +Jul 1 09:44:32 calvisitor-10-105-160-95 com.apple.CDScheduler[43]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 1 09:45:08 calvisitor-10-105-160-95 kernel[0]: ARPT: 621686.164365: wl0: setup_keepalive: Local port: 62614, Remote port: 443 +Jul 1 09:45:46 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 1 09:45:52 calvisitor-10-105-160-95 networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000 +Jul 1 09:59:26 calvisitor-10-105-160-95 kernel[0]: ARPT: 621738.114066: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 1 10:08:20 calvisitor-10-105-160-95 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-01 17:08:20 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 1 10:08:20 calvisitor-10-105-160-95 kernel[0]: en0: channel changed to 1 +Jul 1 10:08:20 authorMacBook-Pro kernel[0]: ARPT: 621799.252673: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0 +Jul 1 10:08:21 authorMacBook-Pro corecaptured[31313]: CCFile::captureLog Received Capture notice id: 1498928900.759059, reason = AuthFail:sts:5_rsn:0 +Jul 1 10:08:29 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 10602 seconds. Ignoring. +Jul 1 10:08:49 calvisitor-10-105-160-95 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 1 10:08:55 calvisitor-10-105-160-95 AddressBookSourceSync[31318]: Unrecognized attribute value: t:AbchPersonItemType +Jul 1 10:09:58 calvisitor-10-105-160-95 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 1 10:10:24 calvisitor-10-105-160-95 kernel[0]: Sandbox: com.apple.Addres(31328) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 1 10:10:27 calvisitor-10-105-160-95 kernel[0]: Sandbox: com.apple.Addres(31328) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 1 10:13:39 calvisitor-10-105-160-95 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 1 10:13:43 calvisitor-10-105-160-95 SpotlightNetHelper[352]: CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data +Jul 1 10:13:57 calvisitor-10-105-160-95 kernel[0]: Sandbox: com.apple.Addres(31346) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 1 10:38:53 calvisitor-10-105-160-95 sandboxd[129] ([31376]): com.apple.Addres(31376) deny network-outbound /private/var/run/mDNSResponder +Jul 1 10:46:47 calvisitor-10-105-160-95 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 1 10:46:47 calvisitor-10-105-160-95 sharingd[30299]: 10:46:47.425 : BTLE scanner Powered On +Jul 1 10:46:48 calvisitor-10-105-160-95 QQ[10018]: button report: 0x8002be0 +Jul 1 10:47:08 calvisitor-10-105-160-95 sandboxd[129] ([31382]): com.apple.Addres(31382) deny network-outbound /private/var/run/mDNSResponder +Jul 1 11:20:51 calvisitor-10-105-160-95 sharingd[30299]: 11:20:51.293 : BTLE discovered device with hash <01faa200 00000000 0000> +Jul 1 11:24:45 calvisitor-10-105-160-95 secd[276]: securityd_xpc_dictionary_handler cloudd[326] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name} +Jul 1 11:29:32 calvisitor-10-105-160-95 locationd[82]: Location icon should now be in state 'Inactive' +Jul 1 11:38:18 calvisitor-10-105-160-95 kernel[0]: ARPT: 626126.086205: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10 +Jul 1 11:38:18 calvisitor-10-105-160-95 kernel[0]: ARPT: 626126.086246: wl0: MDNS: IPV4 Addr: 10.105.160.95 +Jul 1 11:39:47 calvisitor-10-105-160-95 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 1 11:39:47 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 1 11:39:48 authorMacBook-Pro kernel[0]: en0::IO80211Interface::postMessage bssid changed +Jul 1 11:39:48 calvisitor-10-105-160-95 networkd[195]: __42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc19060 125.39.133.143:14000 +Jul 1 11:39:48 calvisitor-10-105-160-95 kernel[0]: ARPT: 626132.740936: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 1 11:41:26 authorMacBook-Pro kernel[0]: Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0 +Jul 1 11:41:54 calvisitor-10-105-160-95 kernel[0]: Sandbox: com.apple.Addres(31432) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 1 11:41:55 calvisitor-10-105-160-95 kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 1 11:43:08 authorMacBook-Pro UserEventAgent[43]: Captive: [CNInfoNetworkActive:1748] en0: SSID 'CalVisitor' making interface primary (cache indicates network not captive) +Jul 1 11:43:23 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 16227 seconds. Ignoring. +Jul 1 11:44:20 calvisitor-10-105-160-95 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 1 11:44:25 authorMacBook-Pro kernel[0]: en0::IO80211Interface::postMessage bssid changed +Jul 1 11:44:26 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +Jul 1 11:46:16 calvisitor-10-105-160-95 symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 1 11:46:16 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 1 11:46:19 authorMacBook-Pro sharingd[30299]: 11:46:19.229 : Finished generating hashes +Jul 1 11:46:21 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Evaluating +Jul 1 11:46:36 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 16034 seconds. Ignoring. +Jul 1 11:46:48 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1277 seconds. Ignoring. +Jul 1 11:47:56 authorMacBook-Pro kernel[0]: ARPT: 626380.467130: ARPT: Wake Reason: Wake on Scan offload +Jul 1 11:48:28 calvisitor-10-105-160-95 AddressBookSourceSync[31471]: Unrecognized attribute value: t:AbchPersonItemType +Jul 1 11:48:43 calvisitor-10-105-160-95 kernel[0]: PM response took 1938 ms (54, powerd) +Jul 1 11:49:29 calvisitor-10-105-160-95 QQ[10018]: tcp_connection_destination_perform_socket_connect 19110 connectx to 183.57.48.75:80@0 failed: [50] Network is down +Jul 1 11:49:29 calvisitor-10-105-160-95 kernel[0]: AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving). +Jul 1 11:49:29 authorMacBook-Pro sharingd[30299]: 11:49:29.473 : BTLE scanner Powered On +Jul 1 11:49:29 authorMacBook-Pro kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 1 11:49:29 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 1 11:49:30 authorMacBook-Pro corecaptured[31480]: CCXPCService::setStreamEventHandler Registered for notification callback. +Jul 1 11:49:30 authorMacBook-Pro Dropbox[24019]: [0701/114930:WARNING:dns_config_service_posix.cc(306)] Failed to read DnsConfig. +Jul 1 11:49:35 calvisitor-10-105-160-95 cdpd[11807]: Saw change in network reachability (isReachable=2) +Jul 1 11:51:02 authorMacBook-Pro kernel[0]: [HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01) +Jul 1 11:51:07 authorMacBook-Pro kernel[0]: en0: BSSID changed to 5c:50:15:36:bc:03 +Jul 1 11:51:11 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 15759 seconds. Ignoring. +Jul 1 11:51:12 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4439 seconds. Ignoring. +Jul 1 11:51:22 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4429 seconds. Ignoring. +Jul 1 11:51:25 calvisitor-10-105-160-95 com.apple.AddressBook.InternetAccountsBridge[31496]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 1 11:53:45 calvisitor-10-105-160-95 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds +Jul 1 11:53:45 authorMacBook-Pro kernel[0]: Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0 +Jul 1 11:53:49 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +Jul 1 11:55:14 calvisitor-10-105-160-95 kernel[0]: AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving). +Jul 1 11:55:24 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4187 seconds. Ignoring. +Jul 1 11:55:24 calvisitor-10-105-160-95 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4099 seconds. Ignoring. +Jul 1 11:58:27 calvisitor-10-105-160-95 kernel[0]: ARPT: 626625.204595: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 3034132215, Ack 528237229, Win size 278 +Jul 1 11:58:27 authorMacBook-Pro com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 15323 seconds. Ignoring. +Jul 1 12:12:04 calvisitor-10-105-160-95 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 1 12:12:21 calvisitor-10-105-160-95 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 1 12:26:01 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 427826 seconds. Ignoring. +Jul 1 12:26:01 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2350 seconds. Ignoring. +Jul 1 12:39:29 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1542 seconds. Ignoring. +Jul 1 12:39:55 calvisitor-10-105-160-95 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1428 seconds. Ignoring. +Jul 1 12:52:57 calvisitor-10-105-160-95 kernel[0]: RTC: Maintenance 2017/7/1 19:52:56, sleep 2017/7/1 19:40:18 +Jul 1 12:52:57 calvisitor-10-105-160-95 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 1 12:52:57 calvisitor-10-105-160-95 kernel[0]: en0: channel changed to 132,+1 +Jul 1 12:53:53 calvisitor-10-105-160-95 kernel[0]: ARPT: 626908.045241: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10 +Jul 1 13:06:35 calvisitor-10-105-160-95 kernel[0]: AirPort: Link Up on awdl0 +Jul 1 13:20:12 calvisitor-10-105-160-95 sharingd[30299]: 13:20:12.402 : BTLE scanner Powered On +Jul 1 13:20:12 calvisitor-10-105-160-95 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 424575 seconds. Ignoring. +Jul 1 13:20:31 calvisitor-10-105-160-95 com.apple.AddressBook.InternetAccountsBridge[31588]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 1 13:20:33 calvisitor-10-105-160-95 sandboxd[129] ([31588]): com.apple.Addres(31588) deny network-outbound /private/var/run/mDNSResponder +Jul 1 13:34:07 calvisitor-10-105-160-95 com.apple.AddressBook.InternetAccountsBridge[31595]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 1 13:41:48 calvisitor-10-105-160-95 kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 1 13:41:58 calvisitor-10-105-160-95 com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 1 13:42:01 calvisitor-10-105-160-95 locationd[82]: Location icon should now be in state 'Active' +Jul 1 13:42:41 calvisitor-10-105-160-95 kernel[0]: ARPT: 627141.702095: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f +Jul 1 13:44:07 calvisitor-10-105-160-95 com.apple.AddressBook.InternetAccountsBridge[31608]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 1 13:47:33 calvisitor-10-105-160-95 kernel[0]: en0: 802.11d country code set to 'X3'. +Jul 1 13:47:33 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 1 13:47:53 calvisitor-10-105-160-95 kernel[0]: en0: channel changed to 6 +Jul 1 13:49:09 authorMacBook-Pro kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 1 14:01:24 calvisitor-10-105-160-95 kernel[0]: ARPT: 627305.613279: wl0: setup_keepalive: Seq: 1664112163, Ack: 818851215, Win size: 4096 +Jul 1 14:14:51 calvisitor-10-105-160-95 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 1 14:28:27 calvisitor-10-105-160-95 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 1 14:28:55 calvisitor-10-105-160-95 kernel[0]: ARPT: 627355.597577: ARPT: Wake Reason: Wake on Scan offload +Jul 1 14:29:01 calvisitor-10-105-160-95 sandboxd[129] ([10018]): QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport +Jul 1 14:38:45 calvisitor-10-105-160-95 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 1 14:52:03 calvisitor-10-105-160-95 kernel[0]: RTC: Maintenance 2017/7/1 21:52:00, sleep 2017/7/1 21:39:51 +Jul 1 14:52:03 calvisitor-10-105-160-95 kernel[0]: [HID] [MT] AppleMultitouchDevice::willTerminate entered +Jul 1 14:52:03 calvisitor-10-105-160-95 blued[85]: [BluetoothHIDDeviceController] EventServiceDisconnectedCallback +Jul 1 15:05:42 calvisitor-10-105-160-95 kernel[0]: PMStats: Hibernate read took 197 ms +Jul 1 15:05:47 calvisitor-10-105-160-95 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 1 15:05:51 calvisitor-10-105-160-95 com.apple.AddressBook.InternetAccountsBridge[31654]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 1 19:43:22 calvisitor-10-105-160-95 kernel[0]: pages 1471315, wire 491253, act 449877, inact 3, cleaned 0 spec 5, zf 23, throt 0, compr 345876, xpmapped 40000 +Jul 1 19:43:22 calvisitor-10-105-160-95 VDCAssistant[213]: VDCAssistant: Found a camera (0x1430000005ac8290) , but was not able to start it up (0x0 -- (os/kern) successful) +Jul 1 19:43:22 calvisitor-10-105-160-95 WindowServer[184]: handle_will_sleep_auth_and_shield_windows: Reordering authw 0x7fa823a04400(2004) (lock state: 3) +Jul 1 19:43:32 calvisitor-10-105-163-202 symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 1 19:43:36 calvisitor-10-105-163-202 QQ[10018]: button report: 0x8002bdf +Jul 1 19:46:26 calvisitor-10-105-163-202 GoogleSoftwareUpdateAgent[31702]: 2017-07-01 19:46:26.133 GoogleSoftwareUpdateAgent[31702/0x7000002a0000] [lvl=2] -[KSAgentApp(KeystoneThread) runKeystonesInThreadWithArg:] Checking with local engine: >> processor= isProcessing=NO actionsCompleted=0 progress=0.00 errors=0 currentActionErrors=0 events=0 currentActionEvents=0 actionQueue=( ) > delegate=(null) serverInfoStore= errors=0 > +Jul 1 19:46:42 calvisitor-10-105-163-202 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 1 19:46:42 calvisitor-10-105-163-202 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 1 19:50:12 calvisitor-10-105-163-202 quicklookd[31687]: Error returned from iconservicesagent: (null) +Jul 1 20:13:23 calvisitor-10-105-163-202 Safari[9852]: tcp_connection_tls_session_error_callback_imp 1977 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22 +Jul 1 20:17:07 calvisitor-10-105-163-202 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 1 20:17:08 calvisitor-10-105-163-202 quicklookd[31687]: Error returned from iconservicesagent: (null) +Jul 1 20:23:09 calvisitor-10-105-163-202 cloudd[326]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name} +Jul 1 21:03:00 calvisitor-10-105-163-202 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 1 21:10:19 calvisitor-10-105-163-202 Preview[11512]: WARNING: Type1 font data isn't in the correct format required by the Adobe Type 1 Font Format specification. +Jul 1 21:17:32 calvisitor-10-105-163-202 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 1 21:18:10 calvisitor-10-105-163-202 quicklookd[31687]: Error returned from iconservicesagent: (null) +Jul 1 21:18:10 calvisitor-10-105-163-202 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 1 21:19:06 calvisitor-10-105-163-202 quicklookd[31687]: Error returned from iconservicesagent: (null) +Jul 1 21:21:33 calvisitor-10-105-163-202 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 1 21:24:38 calvisitor-10-105-163-202 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 1 21:33:23 calvisitor-10-105-163-202 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 1 22:03:31 calvisitor-10-105-163-202 com.apple.cts[258]: com.apple.ical.sync.x-coredata://DB05755C-483D-44B7-B93B-ED06E57FF420/CalDAVPrincipal/p11: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 59 seconds. Ignoring. +Jul 1 22:08:16 calvisitor-10-105-163-202 WindowServer[184]: device_generate_desktop_screenshot: authw 0x7fa823c89600(2000), shield 0x7fa8258cac00(2001) +Jul 1 22:12:41 calvisitor-10-105-163-202 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 1 22:13:49 calvisitor-10-105-163-202 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 1 22:19:34 calvisitor-10-105-163-202 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 1 22:20:14 calvisitor-10-105-163-202 WindowServer[184]: device_generate_desktop_screenshot: authw 0x7fa823c89600(2000), shield 0x7fa8258cac00(2001) +Jul 1 22:20:57 calvisitor-10-105-163-202 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 1 22:20:58 calvisitor-10-105-163-202 quicklookd[31687]: Error returned from iconservicesagent: (null) +Jul 1 22:22:59 calvisitor-10-105-163-202 CalendarAgent[279]: [com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-8].] +Jul 1 22:25:38 calvisitor-10-105-163-202 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 250, items, fQueryRetries, 0, fLastRetryTimestamp, 520665636.6 +Jul 1 22:30:15 calvisitor-10-105-163-202 QQ[10018]: button report: 0x8002bdf +Jul 1 23:32:34 calvisitor-10-105-163-202 kernel[0]: ARPT: 640362.070027: wl0: wl_update_tcpkeep_seq: Original Seq: 2000710617, Ack: 2120985509, Win size: 4096 +Jul 1 23:32:34 calvisitor-10-105-163-202 kernel[0]: Previous sleep cause: 5 +Jul 1 23:32:34 calvisitor-10-105-163-202 kernel[0]: AirPort: Link Up on awdl0 +Jul 1 23:46:06 calvisitor-10-105-163-202 kernel[0]: Wake reason: RTC (Alarm) +Jul 1 23:46:06 calvisitor-10-105-163-202 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 2 us +Jul 1 23:46:06 calvisitor-10-105-163-202 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 2 02:18:39 calvisitor-10-105-163-202 sharingd[30299]: 02:18:39.156 : BTLE scanner Powered On +Jul 2 02:18:39 calvisitor-10-105-163-202 configd[53]: network changed: v4(en0-:10.105.163.202) v6(en0:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB +Jul 2 02:19:03 calvisitor-10-105-163-202 com.apple.AddressBook.InternetAccountsBridge[31953]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 2 02:32:17 calvisitor-10-105-163-202 kernel[0]: hibernate_page_list_setall found pageCount 448015 +Jul 2 02:32:17 calvisitor-10-105-163-202 kernel[0]: [HID] [ATC] [Error] AppleDeviceManagementHIDEventService::start Could not make a string from out connection notification key +Jul 2 02:32:17 calvisitor-10-105-163-202 kernel[0]: en0: BSSID changed to 5c:50:15:4c:18:1c +Jul 2 02:32:17 calvisitor-10-105-163-202 kernel[0]: [IOBluetoothFamily][staticBluetoothTransportShowsUp] -- Received Bluetooth Controller register service notification -- 0x7000 +Jul 2 10:11:17 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4 +Jul 2 10:20:52 calvisitor-10-105-163-202 QQ[10018]: FA||Url||taskID[2019353117] dealloc +Jul 2 10:27:44 calvisitor-10-105-163-202 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 250, items, fQueryRetries, 0, fLastRetryTimestamp, 520708962.7 +Jul 2 10:40:07 calvisitor-10-105-163-202 GoogleSoftwareUpdateAgent[32012]: 2017-07-02 10:40:07.676 GoogleSoftwareUpdateAgent[32012/0x7000002a0000] [lvl=2] -[KSAgentApp updateProductWithProductID:usingEngine:] Checking for updates for "com.google.Keystone" using engine >> processor= isProcessing=NO actionsCompleted=0 progress=0.00 errors=0 currentActionErrors=0 events=0 currentActionEvents=0 actionQueue=( ) > delegate=(null) serverInfoStore= errors=0 > +Jul 2 11:38:49 calvisitor-10-105-163-202 QQ[10018]: 2017/07/02 11:38:49.414 | I | VoipWrapper | DAVEngineImpl.cpp:1400:Close | close video chat. llFriendUIN = ******2341. +Jul 2 11:39:07 calvisitor-10-105-163-202 kernel[0]: ARPT: 645791.413780: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 156, +Jul 2 11:42:54 calvisitor-10-105-163-202 kernel[0]: Previous sleep cause: 5 +Jul 2 11:42:54 calvisitor-10-105-163-202 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 2 11:42:55 authorMacBook-Pro kernel[0]: ARPT: 645795.024045: ARPT: Wake Reason: Wake on Scan offload +Jul 2 11:43:53 calvisitor-10-105-163-202 kernel[0]: PM response took 28003 ms (54, powerd) +Jul 2 12:15:23 calvisitor-10-105-163-202 kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 2 12:15:23 calvisitor-10-105-163-202 sharingd[30299]: 12:15:23.005 : Discoverable mode changed to Off +Jul 2 12:15:24 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 19617 failed: 3 - No network route +Jul 2 12:15:30 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Authenticated +Jul 2 12:29:56 calvisitor-10-105-163-202 kernel[0]: ARPT: 645957.322055: wl0: setup_keepalive: Local IP: 10.105.163.202 +Jul 2 12:43:24 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Active' +Jul 2 12:56:19 calvisitor-10-105-163-202 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 4 +Jul 2 13:00:07 calvisitor-10-105-163-202 kernel[0]: AirPort: Link Down on awdl0. Reason 1 (Unspecified). +Jul 2 13:01:36 calvisitor-10-105-163-202 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 2 13:01:37 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 2 13:02:03 calvisitor-10-105-163-202 com.apple.AddressBook.InternetAccountsBridge[32155]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 2 13:03:10 calvisitor-10-105-163-202 kernel[0]: Previous sleep cause: 5 +Jul 2 13:03:10 authorMacBook-Pro kernel[0]: ARPT: 646193.687729: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 2 13:03:41 calvisitor-10-105-163-202 AddressBookSourceSync[32160]: Unrecognized attribute value: t:AbchPersonItemType +Jul 2 13:05:38 calvisitor-10-105-163-202 kernel[0]: TBT W (2): 0x0040 [x] +Jul 2 13:05:40 authorMacBook-Pro configd[53]: network changed: DNS* Proxy +Jul 2 13:06:17 calvisitor-10-105-163-202 kernel[0]: ARPT: 646292.668059: wl0: MDNS: 0 SRV Recs, 0 TXT Recs +Jul 2 13:10:47 calvisitor-10-105-163-202 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 2 13:12:08 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +Jul 2 13:12:08 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 2 13:12:41 calvisitor-10-105-163-202 symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 2 13:13:22 authorMacBook-Pro mDNSResponder[91]: mDNS_RegisterInterface: Frequent transitions for interface awdl0 (FE80:0000:0000:0000:D8A5:90FF:FEF5:7FFF) +Jul 2 13:44:22 calvisitor-10-105-163-202 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us +Jul 2 13:44:30 authorMacBook-Pro sandboxd[129] ([10018]): QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport +Jul 2 13:44:55 calvisitor-10-105-163-202 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 2 13:45:01 calvisitor-10-105-163-202 com.apple.AddressBook.InternetAccountsBridge[32208]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 2 13:56:23 calvisitor-10-105-163-202 kernel[0]: ARPT: 646509.760609: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 2 14:07:52 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Active' +Jul 2 14:33:03 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Inactive' +Jul 2 14:41:07 calvisitor-10-105-163-202 Safari[9852]: tcp_connection_tls_session_error_callback_imp 2044 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22 +Jul 2 14:44:01 calvisitor-10-105-163-202 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 2 14:52:57 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Active' +Jul 2 15:06:24 calvisitor-10-105-163-202 syslogd[44]: ASL Sender Statistics +Jul 2 15:33:55 calvisitor-10-105-163-202 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000300 +Jul 2 15:34:11 calvisitor-10-105-163-202 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 2 15:46:40 calvisitor-10-105-163-202 GoogleSoftwareUpdateAgent[32432]: 2017-07-02 15:46:40.516 GoogleSoftwareUpdateAgent[32432/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher(PrivateMethods) launchedHelperTaskForToolPath:error:] KSOutOfProcessFetcher launched '/Users/xpc/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksfetch' with process id: 32433 +Jul 2 15:46:40 calvisitor-10-105-163-202 GoogleSoftwareUpdateAgent[32432]: 2017-07-02 15:46:40.697 GoogleSoftwareUpdateAgent[32432/0x7000002a0000] [lvl=2] -[KSUpdateEngine updateAllExceptProduct:] KSUpdateEngine updating all installed products, except:'com.google.Keystone'. +Jul 2 15:46:41 calvisitor-10-105-163-202 ksfetch[32435]: 2017-07-02 15:46:41.445 ksfetch[32435/0x7fff79824000] [lvl=2] main() ksfetch fetching URL ( { URL: https://tools.google.com/service/update2?cup2hreq=53f725cf03f511fab16f19e789ce64aa1eed72395fc246e9f1100748325002f4&cup2key=7:1132320327 }) to folder:/tmp/KSOutOfProcessFetcher.YH2CjY1tnx/download +Jul 2 16:38:07 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Inactive' +Jul 2 16:51:10 calvisitor-10-105-163-202 QQ[10018]: FA||Url||taskID[2019353182] dealloc +Jul 2 16:55:53 calvisitor-10-105-163-202 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.32502): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 2 17:01:19 calvisitor-10-105-163-202 cloudd[326]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name} +Jul 2 17:07:56 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Active' +Jul 2 17:11:18 calvisitor-10-105-163-202 Safari[9852]: tcp_connection_tls_session_error_callback_imp 2068 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22 +Jul 2 17:13:46 calvisitor-10-105-163-202 com.apple.WebKit.WebContent[32514]: [17:13:46.390] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7f92413e3000) rejecting report of layer being serviced - IQ has not yet begun to update +Jul 2 17:19:15 calvisitor-10-105-163-202 com.apple.WebKit.WebContent[32514]: [17:19:15.148] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2306 +Jul 2 17:34:21 calvisitor-10-105-163-202 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 2 17:36:15 calvisitor-10-105-163-202 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 2 17:39:27 calvisitor-10-105-163-202 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.32564): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.WebFeedParser.xpc/Contents/MacOS/com.apple.Safari.WebFeedParser error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 2 17:44:05 calvisitor-10-105-163-202 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 2 17:56:40 calvisitor-10-105-163-202 com.apple.ncplugin.WorldClock[32583]: host connection connection from pid 30298 invalidated +Jul 2 17:56:40 calvisitor-10-105-163-202 com.apple.ncplugin.weather[32585]: Error in CoreDragRemoveReceiveHandler: -1856 +Jul 2 18:08:55 calvisitor-10-105-163-202 kernel[0]: ARPT: 661549.802297: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +Jul 2 18:08:55 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 2 18:08:56 authorMacBook-Pro kernel[0]: ARPT: 661552.832561: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0, +Jul 2 18:09:15 calvisitor-10-105-163-202 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 2 18:23:33 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Active' +Jul 2 18:35:12 calvisitor-10-105-163-202 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 2 18:35:12 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 2 18:35:13 authorMacBook-Pro symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 2 18:35:23 calvisitor-10-105-163-202 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 49 seconds. Ignoring. +Jul 2 18:35:44 calvisitor-10-105-163-202 sandboxd[129] ([32626]): com.apple.Addres(32626) deny network-outbound /private/var/run/mDNSResponder +Jul 2 18:35:57 calvisitor-10-105-163-202 kernel[0]: ARPT: 661708.530713: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f +Jul 2 18:36:01 calvisitor-10-105-163-202 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0 +Jul 2 18:37:25 authorMacBook-Pro configd[53]: network changed: v4(en0-:10.105.163.202) v6(en0:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB +Jul 2 18:38:31 authorMacBook-Pro com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2262 seconds. Ignoring. +Jul 2 18:38:31 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Inactive +Jul 2 18:38:32 authorMacBook-Pro corecaptured[32639]: CCXPCService::setStreamEventHandler Registered for notification callback. +Jul 2 18:38:36 calvisitor-10-105-163-202 kernel[0]: Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0 +Jul 2 18:39:18 calvisitor-10-105-163-202 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 2 18:40:01 authorMacBook-Pro kernel[0]: in6_unlink_ifa: IPv6 address 0x77c9114551ab23ab has no prefix +Jul 2 18:40:08 calvisitor-10-105-163-202 configd[53]: network changed: v4(en0:10.105.163.202) v6(en0+:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB +Jul 2 18:40:21 calvisitor-10-105-163-202 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 318966 seconds. Ignoring. +Jul 2 18:40:40 calvisitor-10-105-163-202 com.apple.AddressBook.InternetAccountsBridge[32655]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 2 18:40:46 calvisitor-10-105-163-202 kernel[0]: ARPT: 661856.313502: wl0: MDNS: 0 SRV Recs, 0 TXT Recs +Jul 2 18:53:41 calvisitor-10-105-163-202 kernel[0]: en0: BSSID changed to 5c:50:15:36:bc:03 +Jul 2 18:53:41 calvisitor-10-105-163-202 kernel[0]: en0: channel changed to 6 +Jul 2 18:53:51 calvisitor-10-105-163-202 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 318156 seconds. Ignoring. +Jul 2 18:54:02 calvisitor-10-105-163-202 com.apple.AddressBook.InternetAccountsBridge[32662]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 2 18:54:36 calvisitor-10-105-163-202 kernel[0]: ARPT: 661915.168735: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:4de9:a101:c96c:f28b +Jul 2 19:21:05 calvisitor-10-105-163-202 com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 2 19:21:15 calvisitor-10-105-163-202 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 3498 seconds. Ignoring. +Jul 2 19:34:33 calvisitor-10-105-163-202 com.apple.geod[30311]: PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x7fe133460660 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.} +Jul 2 19:35:29 calvisitor-10-105-163-202 kernel[0]: ARPT: 662096.028575: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:4de9:a101:c96c:f28b +Jul 2 19:35:32 calvisitor-10-105-163-202 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0 +Jul 2 19:48:11 calvisitor-10-105-163-202 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 314896 seconds. Ignoring. +Jul 2 19:48:20 calvisitor-10-105-163-202 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 106 seconds. Ignoring. +Jul 2 19:48:30 calvisitor-10-105-163-202 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 2 20:01:48 calvisitor-10-105-163-202 kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 2 20:01:48 calvisitor-10-105-163-202 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 5 +Jul 2 20:01:48 calvisitor-10-105-163-202 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-03 03:01:48 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 2 20:01:59 calvisitor-10-105-163-202 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 61304 seconds. Ignoring. +Jul 2 20:15:26 calvisitor-10-105-163-202 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 2 20:15:26 calvisitor-10-105-163-202 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 2 20:22:06 calvisitor-10-105-163-202 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-03 03:22:06 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 2 20:22:38 calvisitor-10-105-163-202 WindowServer[184]: device_generate_lock_screen_screenshot: authw 0x7fa823962400(2000)[0, 0, 1440, 900] shield 0x7fa82d372000(2001), dev [1440,900] +Jul 2 20:43:36 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Active' +Jul 2 20:50:47 calvisitor-10-105-163-202 ksfetch[32776]: 2017-07-02 20:50:47.457 ksfetch[32776/0x7fff79824000] [lvl=2] KSHelperReceiveAllData() KSHelperTool read 1926 bytes from stdin. +Jul 2 21:17:07 calvisitor-10-105-163-202 com.apple.WebKit.WebContent[32778]: [21:17:07.529] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 2 21:43:56 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Inactive' +Jul 2 21:44:16 calvisitor-10-105-163-202 Safari[9852]: tcp_connection_tls_session_error_callback_imp 2103 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22 +Jul 2 21:46:49 calvisitor-10-105-163-202 syslogd[44]: ASL Sender Statistics +Jul 2 21:48:53 calvisitor-10-105-163-202 sharingd[30299]: 21:48:53.041 : BTLE scanner Powered Off +Jul 2 22:09:17 calvisitor-10-105-163-202 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 2 22:24:03 authorMacBook-Pro com.apple.geod[30311]: PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline." UserInfo={NSUnderlyingError=0x7fe13512cf70 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 "The Internet connection appears to be offline." UserInfo={NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.} +Jul 2 22:24:03 authorMacBook-Pro kernel[0]: ARPT: 669592.164786: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0 +Jul 2 22:24:04 authorMacBook-Pro corecaptured[32877]: Received Capture Event +Jul 2 22:24:14 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Evaluating +Jul 2 22:24:15 authorMacBook-Pro kernel[0]: Sandbox: QQ(10018) deny(1) mach-lookup com.apple.networking.captivenetworksupport +Jul 2 22:24:18 authorMacBook-Pro com.apple.AddressBook.InternetAccountsBridge[32885]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 2 22:24:25 authorMacBook-Pro kernel[0]: Sandbox: com.apple.Addres(32885) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 2 22:24:43 authorMacBook-Pro corecaptured[32877]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 2 22:32:34 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [22:32:34.846] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 2 22:44:55 authorMacBook-Pro locationd[82]: Location icon should now be in state 'Active' +Jul 2 23:21:43 authorMacBook-Pro kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 2 23:22:08 authorMacBook-Pro kernel[0]: ARPT: 671682.028482: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f +Jul 2 23:22:10 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 2 23:35:17 authorMacBook-Pro kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 2 us +Jul 2 23:35:17 authorMacBook-Pro kernel[0]: AirPort: Link Down on awdl0. Reason 1 (Unspecified). +Jul 2 23:35:17 authorMacBook-Pro syslogd[44]: ASL Sender Statistics +Jul 2 23:35:17 authorMacBook-Pro kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 2 23:35:21 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 2 23:48:54 authorMacBook-Pro secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 3 00:02:22 authorMacBook-Pro kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 3 00:02:22 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 00:02:27 authorMacBook-Pro Safari[9852]: tcp_connection_tls_session_error_callback_imp 2115 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22 +Jul 3 00:27:35 authorMacBook-Pro ntpd[207]: sigio_handler: sigio_handler_active != 0 +Jul 3 00:27:54 authorMacBook-Pro QQ[10018]: ############################## _getSysMsgList +Jul 3 00:41:11 authorMacBook-Pro syslogd[44]: Configuration Notice: ASL Module "com.apple.performance" claims selected messages. Those messages may not appear in standard system log files or in the ASL database. +Jul 3 00:55:12 authorMacBook-Pro kernel[0]: ARPT: 671856.784669: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 18011, +Jul 3 01:06:37 authorMacBook-Pro kernel[0]: Wake reason: ? +Jul 3 01:06:37 authorMacBook-Pro kernel[0]: en0: channel changed to 132,+1 +Jul 3 01:06:37 authorMacBook-Pro sharingd[30299]: 01:06:37.436 : Scanning mode Contacts Only +Jul 3 01:06:37 authorMacBook-Pro kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 3 01:06:48 authorMacBook-Pro com.apple.CDScheduler[43]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 3 01:07:08 authorMacBook-Pro kernel[0]: ARPT: 671889.268467: wl0: setup_keepalive: Seq: 2040703749, Ack: 3006590414, Win size: 4096 +Jul 3 01:31:00 authorMacBook-Pro kernel[0]: ARPT: 671958.142550: wl0: setup_keepalive: Local port: 49791, Remote port: 5223 +Jul 3 01:42:26 authorMacBook-Pro sharingd[30299]: 01:42:26.004 : BTLE scanning stopped +Jul 3 01:54:51 authorMacBook-Pro sandboxd[129] ([32992]): com.apple.Addres(32992) deny network-outbound /private/var/run/mDNSResponder +Jul 3 01:58:00 authorMacBook-Pro ntpd[207]: wake time set +0.270003 s +Jul 3 01:58:04 authorMacBook-Pro kernel[0]: ARPT: 672041.595629: wl0: setup_keepalive: interval 258, retry_interval 30, retry_count 10 +Jul 3 02:07:59 authorMacBook-Pro kernel[0]: Previous sleep cause: 5 +Jul 3 02:07:59 authorMacBook-Pro hidd[98]: [HID] [MT] MTActuatorManagement::getActuatorRef Calling MTActuatorOpen() outside of MTTrackpadHIDManager. +Jul 3 02:08:34 authorMacBook-Pro kernel[0]: ARPT: 672113.005012: wl0: setup_keepalive: interval 258, retry_interval 30, retry_count 10 +Jul 3 02:08:34 authorMacBook-Pro kernel[0]: ARPT: 672113.005034: wl0: setup_keepalive: Seq: 1128495564, Ack: 3106452487, Win size: 4096 +Jul 3 02:19:59 authorMacBook-Pro kernel[0]: ARPT: 672115.511090: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 3 02:20:05 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000300 +Jul 3 02:32:01 authorMacBook-Pro Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-03 09:32:01 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 3 03:07:51 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 03:07:55 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 03:31:43 authorMacBook-Pro sharingd[30299]: 03:31:43.005 : BTLE scanning stopped +Jul 3 03:31:43 authorMacBook-Pro kernel[0]: in6_unlink_ifa: IPv6 address 0x77c9114551ab225b has no prefix +Jul 3 03:31:43 authorMacBook-Pro kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 3 03:43:40 authorMacBook-Pro kernel[0]: Previous sleep cause: 5 +Jul 3 03:43:40 authorMacBook-Pro kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us +Jul 3 03:44:10 authorMacBook-Pro kernel[0]: ARPT: 672405.912863: wl0: MDNS: IPV6 Addr: 2607:f140:400:a01b:c6b3:1ff:fecd:467f +Jul 3 03:55:39 authorMacBook-Pro locationd[82]: NETWORK: requery, 0, 0, 0, 0, 252, items, fQueryRetries, 0, fLastRetryTimestamp, 520765684.9 +Jul 3 03:55:49 authorMacBook-Pro locationd[82]: Location icon should now be in state 'Inactive' +Jul 3 03:56:18 authorMacBook-Pro mDNSResponder[91]: mDNS_DeregisterInterface: Frequent transitions for interface en0 (10.142.110.44) +Jul 3 04:08:14 authorMacBook-Pro kernel[0]: ARPT: 672487.663921: wl0: MDNS: IPV6 Addr: 2607:f140:400:a01b:c6b3:1ff:fecd:467f +Jul 3 04:19:59 authorMacBook-Pro sandboxd[129] ([33047]): com.apple.Addres(33047) deny network-outbound /private/var/run/mDNSResponder +Jul 3 04:31:30 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 04:31:31 authorMacBook-Pro ntpd[207]: wake time set -0.331349 s +Jul 3 04:43:26 authorMacBook-Pro kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 3 04:43:49 authorMacBook-Pro sandboxd[129] ([33056]): com.apple.Addres(33056) deny network-outbound /private/var/run/mDNSResponder +Jul 3 04:55:22 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 04:55:22 authorMacBook-Pro kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 3 05:07:13 authorMacBook-Pro kernel[0]: en0: channel changed to 132,+1 +Jul 3 05:19:07 authorMacBook-Pro kernel[0]: ARPT: 672663.206073: wl0: wl_update_tcpkeep_seq: Original Seq: 2185760336, Ack: 2085655440, Win size: 4096 +Jul 3 05:30:59 authorMacBook-Pro kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 5 +Jul 3 05:31:00 authorMacBook-Pro QQ[10018]: button report: 0x80039B7 +Jul 3 05:31:03 authorMacBook-Pro kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 3 05:33:53 authorMacBook-Pro kernel[0]: ARPT: 672735.825491: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +Jul 3 05:33:53 authorMacBook-Pro kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 6 +Jul 3 05:57:59 authorMacBook-Pro com.apple.CDScheduler[43]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 3 05:58:10 authorMacBook-Pro com.apple.AddressBook.InternetAccountsBridge[33109]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 3 06:09:46 authorMacBook-Pro ntpd[207]: sigio_handler: sigio_handler_active != 0 +Jul 3 06:09:56 authorMacBook-Pro com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 3 06:22:02 authorMacBook-Pro kernel[0]: Sandbox: com.apple.Addres(33119) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 3 06:22:20 authorMacBook-Pro kernel[0]: ARPT: 672922.026642: wl0: MDNS: 0 SRV Recs, 0 TXT Recs +Jul 3 06:33:47 authorMacBook-Pro kernel[0]: ARPT: 672925.537944: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 3 06:33:47 authorMacBook-Pro kernel[0]: ARPT: 672925.539048: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 3 06:33:47 authorMacBook-Pro kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 3 06:45:42 authorMacBook-Pro kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 3 06:45:43 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 06:46:03 authorMacBook-Pro com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 3 06:46:24 authorMacBook-Pro kernel[0]: ARPT: 673002.849007: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f +Jul 3 06:57:52 authorMacBook-Pro kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 3 06:57:52 authorMacBook-Pro sharingd[30299]: 06:57:52.002 : Purged contact hashes +Jul 3 07:09:47 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 07:10:10 authorMacBook-Pro sandboxd[129] ([33139]): com.apple.Addres(33139) deny network-outbound /private/var/run/mDNSResponder +Jul 3 07:10:13 authorMacBook-Pro sandboxd[129] ([33139]): com.apple.Addres(33139) deny network-outbound /private/var/run/mDNSResponder +Jul 3 07:21:45 authorMacBook-Pro kernel[0]: ARPT: 673078.174655: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 3 07:33:34 authorMacBook-Pro kernel[0]: ARPT: 673110.784021: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 4039579370, Ack 2406464715, Win size 278 +Jul 3 07:33:34 authorMacBook-Pro kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 3 07:33:34 authorMacBook-Pro sharingd[30299]: 07:33:34.878 : BTLE scanning started +Jul 3 07:33:34 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 07:33:35 authorMacBook-Pro kernel[0]: IOPMrootDomain: idle cancel, state 1 +Jul 3 07:45:34 authorMacBook-Pro kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us +Jul 3 07:45:55 authorMacBook-Pro com.apple.CDScheduler[43]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 3 08:21:18 authorMacBook-Pro kernel[0]: ARPT: 673255.225425: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 3 08:21:18 authorMacBook-Pro sharingd[30299]: 08:21:18.004 : Discoverable mode changed to Off +Jul 3 08:33:15 authorMacBook-Pro kernel[0]: ARPT: 673289.745639: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 1578355965, Ack 2401645769, Win size 278 +Jul 3 08:33:41 authorMacBook-Pro locationd[82]: NETWORK: requery, 0, 0, 0, 0, 252, items, fQueryRetries, 0, fLastRetryTimestamp, 520783088.4 +Jul 3 08:33:45 authorMacBook-Pro kernel[0]: ARPT: 673321.718258: wl0: setup_keepalive: Local port: 50542, Remote port: 5223 +Jul 3 08:33:47 authorMacBook-Pro kernel[0]: PM response took 1857 ms (54, powerd) +Jul 3 08:45:12 authorMacBook-Pro kernel[0]: ARPT: 673324.060219: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 815278018, Ack 1982345407, Win size 278 +Jul 3 08:45:12 authorMacBook-Pro kernel[0]: ARPT: 673325.798753: ARPT: Wake Reason: Wake on TCP Timeout +Jul 3 08:59:58 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 09:00:02 authorMacBook-Pro kernel[0]: ARPT: 673399.580233: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 13027, +Jul 3 09:09:20 authorMacBook-Pro kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 8 +Jul 3 09:09:50 authorMacBook-Pro kernel[0]: ARPT: 673431.714836: wl0: setup_keepalive: Local port: 50601, Remote port: 5223 +Jul 3 09:09:58 authorMacBook-Pro kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 3 09:21:24 authorMacBook-Pro kernel[0]: hibernate_alloc_pages act 173850, inact 24957, anon 891, throt 0, spec 73492, wire 527143, wireinit 39927 +Jul 3 09:21:24 authorMacBook-Pro kernel[0]: hibernate_teardown_pmap_structs done: last_valid_compact_indx 282563 +Jul 3 09:21:59 authorMacBook-Pro kernel[0]: ARPT: 673493.721766: wl0: MDNS: 0 SRV Recs, 0 TXT Recs +Jul 3 09:22:01 authorMacBook-Pro kernel[0]: PM response took 1936 ms (54, powerd) +Jul 3 09:57:10 authorMacBook-Pro sharingd[30299]: 09:57:10.384 : Scanning mode Contacts Only +Jul 3 09:57:11 authorMacBook-Pro kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 3 09:57:29 authorMacBook-Pro com.apple.AddressBook.InternetAccountsBridge[33216]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 3 09:57:35 authorMacBook-Pro com.apple.AddressBook.InternetAccountsBridge[33216]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 3 10:09:01 authorMacBook-Pro kernel[0]: Previous sleep cause: 5 +Jul 3 10:09:01 authorMacBook-Pro kernel[0]: AirPort: Link Up on awdl0 +Jul 3 10:09:01 authorMacBook-Pro ntpd[207]: sigio_handler: sigio_handler_active != 1 +Jul 3 10:20:32 authorMacBook-Pro QQ[10018]: button report: 0x80039B7 +Jul 3 10:28:07 authorMacBook-Pro pkd[324]: enabling pid=30298 for plug-in com.apple.ncplugin.weather(1.0) 131FE7ED-87F7-471D-8797-C11107688DF7 /System/Library/CoreServices/Weather.app/Contents/PlugIns/com.apple.ncplugin.weather.appex +Jul 3 10:32:45 authorMacBook-Pro QQ[10018]: FA||Url||taskID[2019353296] dealloc +Jul 3 10:40:41 authorMacBook-Pro GoogleSoftwareUpdateAgent[33263]: 2017-07-03 10:40:41.730 GoogleSoftwareUpdateAgent[33263/0x700000323000] [lvl=2] -[KSAgentApp performSelfUpdateWithEngine:] Checking for self update with Engine: >> processor= isProcessing=NO actionsCompleted=0 progress=0.00 errors=0 currentActionErrors=0 events=0 currentActionEvents=0 actionQueue=( ) > delegate=(null) serverInfoStore= errors=0 > +Jul 3 10:40:42 authorMacBook-Pro GoogleSoftwareUpdateAgent[33263]: 2017-07-03 10:40:42.940 GoogleSoftwareUpdateAgent[33263/0x700000323000] [lvl=2] -[KSOmahaServer updateInfosForUpdateResponse:updateRequest:infoStore:upToDateTickets:updatedTickets:events:errors:] Response passed CUP validation. +Jul 3 11:22:49 authorMacBook-Pro QQ[10018]: FA||Url||taskID[2019353306] dealloc +Jul 3 11:27:14 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:27:14.923] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 3 11:31:49 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:31:49.472] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 3 11:31:49 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:31:49.593] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2092 +Jul 3 11:34:44 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:34:44.290] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2092 +Jul 3 11:38:27 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:38:27.892] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7fce1406d600) rejecting report of layer being serviced - IQ has not yet begun to update +Jul 3 11:39:18 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:39:18.356] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7fce15069400) rejecting report of layer being serviced - IQ has not yet begun to update +Jul 3 11:41:18 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:41:18.041] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7fce16267800) rejecting report of layer being serviced - IQ has not yet begun to update +Jul 3 11:48:35 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:48:35.539] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 3 11:50:02 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:50:02.531] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2306 +Jul 3 11:50:13 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:50:13.362] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2306 +Jul 3 11:51:29 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:51:29.334] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2306 +Jul 3 11:56:05 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:56:05.232] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 3 11:58:00 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:58:00.829] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 3 11:58:36 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [11:58:36.563] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2092 +Jul 3 12:02:22 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [12:02:22.126] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 3 12:03:48 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [12:03:48.669] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 3 12:04:32 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [12:04:32.065] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 3 12:11:47 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [12:11:47.043] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2092 +Jul 3 12:22:42 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [12:22:42.202] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2306 +Jul 3 12:31:16 authorMacBook-Pro ntpd[207]: wake time set -0.855670 s +Jul 3 12:31:55 authorMacBook-Pro kernel[0]: Opened file /var/log/SleepWakeStacks.bin, size 172032, extents 1, maxio 2000000 ssd 1 +Jul 3 12:35:55 authorMacBook-Pro locationd[82]: NETWORK: no response from server, reachability, 2, queryRetries, 0 +Jul 3 12:35:56 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 3 12:36:01 authorMacBook-Pro symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 3 12:36:01 authorMacBook-Pro kernel[0]: Unexpected payload found for message 9, dataLen 0 +Jul 3 12:36:38 calvisitor-10-105-160-237 corecaptured[33373]: CCFile::captureLog +Jul 3 12:36:44 calvisitor-10-105-160-237 kernel[0]: en0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 12 13 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161 +Jul 3 12:54:59 calvisitor-10-105-160-237 AddressBookSourceSync[33405]: Unrecognized attribute value: t:AbchPersonItemType +Jul 3 12:55:31 calvisitor-10-105-160-237 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 13:21:50 calvisitor-10-105-160-237 kernel[0]: ARPT: 681387.132167: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 3 13:31:32 calvisitor-10-105-160-237 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 13:31:32 calvisitor-10-105-160-237 kernel[0]: ARPT: 681446.072377: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 3 13:31:35 calvisitor-10-105-160-237 CrashReporterSupportHelper[252]: Internal name did not resolve to internal address! +Jul 3 13:31:51 calvisitor-10-105-160-237 com.apple.AddressBook.InternetAccountsBridge[33427]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 3 13:39:50 calvisitor-10-105-160-237 com.apple.xpc.launchd[1] (com.apple.WebKit.Networking.A546008E-07AF-4FFC-8FF8-D8FD260359D9[33438]): Service exited with abnormal code: 1 +Jul 3 13:40:27 calvisitor-10-105-160-237 wirelessproxd[75]: Central manager is not powered on +Jul 3 13:48:22 calvisitor-10-105-160-237 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 6 +Jul 3 13:48:22 authorMacBook-Pro configd[53]: setting hostname to "authorMacBook-Pro.local" +Jul 3 13:48:39 calvisitor-10-105-160-237 corecaptured[33452]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_13,48,39.362458]-CCIOReporter-002.xml, Current File [2017-07-03_13,48,39.362458]-CCIOReporter-002.xml +Jul 3 13:50:09 authorMacBook-Pro networkd[195]: __42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc20795 14.17.42.14:14000 +Jul 3 13:50:14 authorMacBook-Pro corecaptured[33452]: CCFile::copyFile fileName is [2017-07-03_13,48,39.308188]-io80211Family-002.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-03_13,48,39.308188]-io80211Family-002.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_13,50,14.954481]=AssocFail:sts:2_rsn:0/IO80211AWDLPeerManager//[2017-07-03_13,48,39.308188]-io80211Family-002.pcapng +Jul 3 13:50:15 authorMacBook-Pro kernel[0]: ARPT: 682068.402171: framerdy 0x0 bmccmd 7 framecnt 1024 +Jul 3 13:51:03 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 20835 failed: 3 - No network route +Jul 3 13:51:03 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 20851 failed: 3 - No network route +Jul 3 13:51:32 calvisitor-10-105-160-237 com.apple.AddressBook.InternetAccountsBridge[33469]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 3 13:53:27 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +Jul 3 13:53:39 calvisitor-10-105-160-237 kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 3 13:53:53 calvisitor-10-105-160-237 sandboxd[129] ([33476]): com.apple.Addres(33476) deny network-outbound /private/var/run/mDNSResponder +Jul 3 13:54:18 calvisitor-10-105-160-237 identityservicesd[272]: : DND Enabled: YES +Jul 3 13:54:35 calvisitor-10-105-160-237 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 3 13:54:36 calvisitor-10-105-160-237 symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 3 13:54:53 calvisitor-10-105-160-237 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +Jul 3 13:55:56 calvisitor-10-105-160-237 sharingd[30299]: 13:55:56.094 : Starting AirDrop server for user 501 on wake +Jul 3 14:20:59 calvisitor-10-105-160-237 kernel[0]: Sandbox: com.apple.Addres(33493) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 3 14:34:22 calvisitor-10-105-160-237 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 14:35:17 calvisitor-10-105-160-237 kernel[0]: ARPT: 682406.173418: wl0: setup_keepalive: Remote IP: 17.249.28.77 +Jul 3 14:47:59 calvisitor-10-105-160-237 kernel[0]: ARPT: 682407.704265: wl0: wl_update_tcpkeep_seq: Original Seq: 1181052579, Ack: 1862377178, Win size: 4096 +Jul 3 14:47:59 calvisitor-10-105-160-237 kernel[0]: RTC: Maintenance 2017/7/3 21:47:58, sleep 2017/7/3 21:35:20 +Jul 3 14:48:22 calvisitor-10-105-160-237 kernel[0]: Sandbox: com.apple.Addres(33508) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 3 15:01:36 calvisitor-10-105-160-237 kernel[0]: ARPT: 682466.260119: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +Jul 3 15:01:36 calvisitor-10-105-160-237 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-03 22:01:36 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 3 15:01:36 calvisitor-10-105-160-237 kernel[0]: ARPT: 682468.243050: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 3 15:01:36 calvisitor-10-105-160-237 kernel[0]: ARPT: 682468.243133: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 3 15:15:13 calvisitor-10-105-160-237 kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 3 15:15:31 calvisitor-10-105-160-237 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 3 15:15:34 calvisitor-10-105-160-237 com.apple.AddressBook.InternetAccountsBridge[33518]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 3 15:28:51 calvisitor-10-105-160-237 com.apple.WebKit.WebContent[32778]: <<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of 4812 bytes @ 358800 took 1.053312 secs. to complete, 5 reads >= 1 sec. +Jul 3 15:28:56 calvisitor-10-105-160-237 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0 +Jul 3 15:42:36 calvisitor-10-105-160-237 sandboxd[129] ([33523]): com.apple.Addres(33523) deny network-outbound /private/var/run/mDNSResponder +Jul 3 15:42:59 calvisitor-10-105-160-237 kernel[0]: ARPT: 682634.998705: wl0: setup_keepalive: Remote IP: 17.249.28.93 +Jul 3 15:46:27 calvisitor-10-105-160-237 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 3 15:46:27 authorMacBook-Pro kernel[0]: ARPT: 682638.445688: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 3 15:46:28 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +Jul 3 15:46:29 authorMacBook-Pro UserEventAgent[43]: Captive: [CNInfoNetworkActive:1748] en0: SSID 'CalVisitor' making interface primary (cache indicates network not captive) +Jul 3 15:46:31 calvisitor-10-105-160-237 configd[53]: network changed: v4(en0:10.105.160.237) v6(en0!:2607:f140:6000:8:f1dc:a608:863:19ad) DNS Proxy SMB +Jul 3 15:47:12 calvisitor-10-105-160-237 corecaptured[33533]: Received Capture Event +Jul 3 15:47:13 calvisitor-10-105-160-237 corecaptured[33533]: CCFile::captureLog Received Capture notice id: 1499122032.492037, reason = AuthFail:sts:5_rsn:0 +Jul 3 15:47:15 calvisitor-10-105-160-237 corecaptured[33533]: CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +Jul 3 15:47:15 calvisitor-10-105-160-237 corecaptured[33533]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 3 15:47:15 calvisitor-10-105-160-237 corecaptured[33533]: CCFile::copyFile fileName is [2017-07-03_15,47,15.246620]-AirPortBrcm4360_Logs-007.txt, source path:/var/log/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/DriverLogs//[2017-07-03_15,47,15.246620]-AirPortBrcm4360_Logs-007.txt, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/[2017-07-03_15,47,15.349129]=AuthFail:sts:5_rsn:0/DriverLogs//[2017-07-03_15,47,15.246620]-AirPortBrcm4360_Logs-007.txt +Jul 3 15:53:05 calvisitor-10-105-160-237 kernel[0]: en0: channel changed to 1 +Jul 3 15:53:38 calvisitor-10-105-160-237 kernel[0]: Sandbox: com.apple.Addres(33540) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 3 15:53:49 calvisitor-10-105-160-237 corecaptured[33533]: CCLogTap::profileRemoved, Owner: com.apple.iokit.IO80211Family, Name: OneStats +Jul 3 16:05:45 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: <<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of 4321 bytes @ 48 took 0.607292 sec. to complete, 7 reads >= 0.5 sec. +Jul 3 16:05:45 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 3 16:05:49 authorMacBook-Pro kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 3 16:05:51 authorMacBook-Pro corecaptured[33544]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,05,51.031703]-AirPortBrcm4360_Logs-003.txt, Current File [2017-07-03_16,05,51.031703]-AirPortBrcm4360_Logs-003.txt +Jul 3 16:05:51 authorMacBook-Pro corecaptured[33544]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,05,51.075268]-AirPortBrcm4360_Logs-005.txt, Current File [2017-07-03_16,05,51.075268]-AirPortBrcm4360_Logs-005.txt +Jul 3 16:05:51 authorMacBook-Pro corecaptured[33544]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,05,51.177343]-io80211Family-003.pcapng, Current File [2017-07-03_16,05,51.177343]-io80211Family-003.pcapng +Jul 3 16:05:51 authorMacBook-Pro corecaptured[33544]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 3 16:05:51 authorMacBook-Pro corecaptured[33544]: CCFile::captureLog +Jul 3 16:06:19 calvisitor-10-105-160-237 corecaptured[33544]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,06,19.893324]-AirPortBrcm4360_Logs-008.txt, Current File [2017-07-03_16,06,19.893324]-AirPortBrcm4360_Logs-008.txt +Jul 3 16:07:32 authorMacBook-Pro kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 3 16:07:33 authorMacBook-Pro configd[53]: network changed: v6(en0-:2607:f140:6000:8:d8d1:d506:6046:43e4) DNS- Proxy- +Jul 3 16:07:33 authorMacBook-Pro kernel[0]: ARPT: 682827.873728: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0 +Jul 3 16:07:33 authorMacBook-Pro corecaptured[33544]: CCFile::copyFile fileName is [2017-07-03_16,06,19.861073]-CCIOReporter-008.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-03_16,06,19.861073]-CCIOReporter-008.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_16,07,33.914349]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-03_16,06,19.861073]-CCIOReporter-008.xml +Jul 3 16:07:33 authorMacBook-Pro corecaptured[33544]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,07,33.934533]-AirPortBrcm4360_Logs-009.txt, Current File [2017-07-03_16,07,33.934533]-AirPortBrcm4360_Logs-009.txt +Jul 3 16:07:39 authorMacBook-Pro kernel[0]: ARPT: 682833.053879: framerdy 0x0 bmccmd 3 framecnt 1024 +Jul 3 16:07:39 authorMacBook-Pro corecaptured[33544]: CCFile::copyFile fileName is [2017-07-03_16,07,38.954579]-io80211Family-016.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-03_16,07,38.954579]-io80211Family-016.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_16,07,39.094895]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-03_16,07,38.954579]-io80211Family-016.pcapng +Jul 3 16:07:39 authorMacBook-Pro corecaptured[33544]: CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7 +Jul 3 16:07:39 authorMacBook-Pro corecaptured[33544]: CCFile::copyFile fileName is [2017-07-03_16,07,39.096792]-CCIOReporter-017.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-03_16,07,39.096792]-CCIOReporter-017.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_16,07,39.171995]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-03_16,07,39.096792]-CCIOReporter-017.xml +Jul 3 16:07:39 authorMacBook-Pro corecaptured[33544]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 3 16:07:40 authorMacBook-Pro corecaptured[33544]: CCFile::captureLog +Jul 3 16:07:40 authorMacBook-Pro kernel[0]: ARPT: 682834.192587: wlc_dump_aggfifo: +Jul 3 16:07:40 authorMacBook-Pro corecaptured[33544]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,07,40.650186]-CCIOReporter-027.xml, Current File [2017-07-03_16,07,40.650186]-CCIOReporter-027.xml +Jul 3 16:07:46 authorMacBook-Pro corecaptured[33544]: CCFile::captureLog +Jul 3 16:07:46 authorMacBook-Pro kernel[0]: ARPT: 682840.256116: AQM agg results 0x8001 len hi/lo: 0x0 0x30 BAbitmap(0-3) 0 0 0 0 +Jul 3 16:07:46 authorMacBook-Pro corecaptured[33544]: CCFile::copyFile fileName is [2017-07-03_16,07,46.105103]-CCIOReporter-032.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-03_16,07,46.105103]-CCIOReporter-032.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_16,07,46.298508]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-03_16,07,46.105103]-CCIOReporter-032.xml +Jul 3 16:07:48 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000 +Jul 3 16:08:13 calvisitor-10-105-160-237 kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 3 16:25:21 calvisitor-10-105-160-237 kernel[0]: Wake reason: ? +Jul 3 16:25:21 calvisitor-10-105-160-237 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 3 16:25:21 calvisitor-10-105-160-237 kernel[0]: AirPort: Link Up on awdl0 +Jul 3 16:25:21 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4 +Jul 3 16:25:27 authorMacBook-Pro corecaptured[33544]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,25,27.859687]-CCIOReporter-038.xml, Current File [2017-07-03_16,25,27.859687]-CCIOReporter-038.xml +Jul 3 16:25:45 authorMacBook-Pro com.apple.WebKit.WebContent[25654]: [16:25:45.631] <<<< CRABS >>>> crabsFlumeHostUnavailable: [0x7f961cf08cf0] Byte flume reports host unavailable. +Jul 3 16:25:54 authorMacBook-Pro sandboxd[129] ([33562]): com.apple.Addres(33562) deny network-outbound /private/var/run/mDNSResponder +Jul 3 16:27:03 authorMacBook-Pro kernel[0]: ARPT: 682969.397322: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 3 16:27:03 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4 +Jul 3 16:27:05 authorMacBook-Pro corecaptured[33544]: CCFile::copyFile fileName is [2017-07-03_16,27,04.995982]-io80211Family-040.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-03_16,27,04.995982]-io80211Family-040.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_16,27,05.123034]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-03_16,27,04.995982]-io80211Family-040.pcapng +Jul 3 16:27:05 authorMacBook-Pro corecaptured[33544]: CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +Jul 3 16:27:08 authorMacBook-Pro kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 3 16:27:09 authorMacBook-Pro kernel[0]: ARPT: 682977.654133: wlc_dump_aggfifo: +Jul 3 16:27:10 authorMacBook-Pro corecaptured[33544]: CCFile::copyFile fileName is [2017-07-03_16,27,09.910337]-AirPortBrcm4360_Logs-047.txt, source path:/var/log/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/DriverLogs//[2017-07-03_16,27,09.910337]-AirPortBrcm4360_Logs-047.txt, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/[2017-07-03_16,27,10.162319]=AuthFail:sts:5_rsn:0/DriverLogs//[2017-07-03_16,27,09.910337]-AirPortBrcm4360_Logs-047.txt +Jul 3 16:27:10 authorMacBook-Pro corecaptured[33544]: doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-03_16,27,09.307937] - AuthFail:sts:5_rsn:0.xml +Jul 3 16:27:11 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Authenticated +Jul 3 16:27:47 calvisitor-10-105-160-184 locationd[82]: Location icon should now be in state 'Inactive' +Jul 3 16:28:34 calvisitor-10-105-160-184 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 16:28:34 authorMacBook-Pro QQ[10018]: tcp_connection_destination_perform_socket_connect 21152 connectx to 203.205.147.206:8080@0 failed: [51] Network is unreachable +Jul 3 16:28:34 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 21158 failed: 3 - No network route +Jul 3 16:28:35 authorMacBook-Pro corecaptured[33544]: Received Capture Event +Jul 3 16:28:40 authorMacBook-Pro corecaptured[33544]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,28,40.259618]-AirPortBrcm4360_Logs-055.txt, Current File [2017-07-03_16,28,40.259618]-AirPortBrcm4360_Logs-055.txt +Jul 3 16:28:40 authorMacBook-Pro corecaptured[33544]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 3 16:28:40 authorMacBook-Pro corecaptured[33544]: CCFile::captureLog +Jul 3 16:28:40 authorMacBook-Pro kernel[0]: ARPT: 683047.197539: framerdy 0x0 bmccmd 3 framecnt 1024 +Jul 3 16:28:55 calvisitor-10-105-160-184 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 3 16:28:56 calvisitor-10-105-160-184 QQ[10018]: button report: 0x8002bdf +Jul 3 16:29:09 calvisitor-10-105-160-184 corecaptured[33544]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,29,09.137954]-CCIOReporter-062.xml, Current File [2017-07-03_16,29,09.137954]-CCIOReporter-062.xml +Jul 3 16:29:09 calvisitor-10-105-160-184 corecaptured[33544]: CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +Jul 3 16:29:30 calvisitor-10-105-160-184 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 3 16:35:52 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Evaluating +Jul 3 16:35:54 calvisitor-10-105-160-184 networkd[195]: __42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! NeteaseMusic.17988 tc9008 103.251.128.144:80 +Jul 3 16:36:40 calvisitor-10-105-160-184 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 3 16:36:40 calvisitor-10-105-160-184 AddressBookSourceSync[33594]: [CardDAVPlugin-ERROR] -getPrincipalInfo:[_controller supportsRequestCompressionAtURL:https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/] Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x7f9af3646900 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, NSErrorFailingURLKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, NSErrorFailingURLKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.} +Jul 3 16:36:49 calvisitor-10-105-160-184 corecaptured[33544]: CCFile::captureLog +Jul 3 16:36:55 calvisitor-10-105-160-184 symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 3 16:42:37 calvisitor-10-105-160-184 kernel[0]: ARPT: 683172.046921: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 3 16:42:37 calvisitor-10-105-160-184 kernel[0]: ARPT: 683173.929950: ARPT: Wake Reason: Wake on Scan offload +Jul 3 16:56:42 calvisitor-10-105-160-184 kernel[0]: ARPT: 683239.026135: wl0: MDNS: 0 SRV Recs, 0 TXT Recs +Jul 3 17:10:11 calvisitor-10-105-160-184 kernel[0]: hibernate image path: /var/vm/sleepimage +Jul 3 17:10:11 calvisitor-10-105-160-184 kernel[0]: hibernate_flush_memory: buffer_cache_gc freed up 13202 wired pages +Jul 3 17:10:11 calvisitor-10-105-160-184 kernel[0]: hibernate_machine_init pagesDone 455920 sum2 81cafc41, time: 185 ms, disk(0x20000) 847 Mb/s, comp bytes: 47288320 time: 32 ms 1369 Mb/s, crypt bytes: 158441472 time: 38 ms 3973 Mb/s +Jul 3 17:10:11 calvisitor-10-105-160-184 com.apple.CDScheduler[43]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 3 17:10:11 calvisitor-10-105-160-184 BezelServices 255.10[94]: ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2789 +Jul 3 17:23:55 calvisitor-10-105-160-184 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 4 +Jul 3 17:23:55 calvisitor-10-105-160-184 kernel[0]: hibernate_machine_init reading +Jul 3 17:23:55 calvisitor-10-105-160-184 UserEventAgent[43]: assertion failed: 15G1510: com.apple.telemetry + 38574 [10D2E324-788C-30CC-A749-55AE67AEC7BC]: 0x7fc235807b90 +Jul 3 17:25:12 calvisitor-10-105-160-184 kernel[0]: hibernate_flush_memory: buffer_cache_gc freed up 3349 wired pages +Jul 3 17:25:12 calvisitor-10-105-160-184 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 3 17:25:12 calvisitor-10-105-160-184 UserEventAgent[43]: assertion failed: 15G1510: com.apple.telemetry + 38574 [10D2E324-788C-30CC-A749-55AE67AEC7BC]: 0x7fc235807b90 +Jul 3 17:25:13 calvisitor-10-105-160-184 kernel[0]: AirPort: Link Up on awdl0 +Jul 3 17:25:15 calvisitor-10-105-160-184 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-04 00:25:15 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 3 17:25:31 calvisitor-10-105-160-184 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 3 17:26:04 calvisitor-10-105-160-184 WeChat[24144]: jemmytest +Jul 3 17:37:47 calvisitor-10-105-160-184 kernel[0]: hibernate_setup(0) took 4429 ms +Jul 3 17:37:47 calvisitor-10-105-160-184 kernel[0]: **** [IOBluetoothFamily][ProcessBluetoothTransportShowsUpActionWL] -- calling IOBluetoothFamily's registerService() -- 0x5fd0 -- 0x9a00 -- 0x6800 **** +Jul 3 17:37:47 calvisitor-10-105-160-184 kernel[0]: **** [IOBluetoothFamily][ProcessBluetoothTransportShowsUpActionWL] -- Connected to the transport successfully -- 0x5fd0 -- 0x9a00 -- 0x6800 **** +Jul 3 17:37:48 calvisitor-10-105-160-184 blued[85]: hciControllerOnline; HID devices? 0 +Jul 3 17:37:48 calvisitor-10-105-160-184 blued[85]: INIT -- Host controller is published +Jul 3 17:51:25 calvisitor-10-105-160-184 kernel[0]: polled file major 1, minor 0, blocksize 4096, pollers 5 +Jul 3 17:51:53 calvisitor-10-105-160-184 AddressBookSourceSync[33632]: Unrecognized attribute value: t:AbchPersonItemType +Jul 3 17:52:07 calvisitor-10-105-160-184 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 3 18:06:58 calvisitor-10-105-160-184 kernel[0]: BuildActDeviceEntry exit +Jul 3 18:07:09 authorMacBook-Pro networkd[195]: __42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc21242 119.81.102.227:80 +Jul 3 18:34:20 calvisitor-10-105-162-32 kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 3 18:35:05 calvisitor-10-105-162-32 mDNSResponder[91]: mDNS_DeregisterInterface: Frequent transitions for interface en0 (10.105.162.32) +Jul 3 18:35:06 calvisitor-10-105-162-32 kernel[0]: ARPT: 683604.474196: IOPMPowerSource Information: onSleep, SleepType: Standby, 'ExternalConnected': No, 'TimeRemaining': 578, +Jul 3 18:47:54 calvisitor-10-105-162-32 kernel[0]: ARPT: 683617.825411: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 3 18:47:59 calvisitor-10-105-162-32 kernel[0]: ARPT: 683623.036953: wl0: setup_keepalive: Remote IP: 17.249.12.155 +Jul 3 18:56:23 calvisitor-10-105-162-32 kernel[0]: Wake reason: ARPT (Network) +Jul 3 18:56:23 calvisitor-10-105-162-32 kernel[0]: AppleActuatorHIDEventDriver: message service is terminated +Jul 3 18:56:23 calvisitor-10-105-162-32 BezelServices 255.10[94]: ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2789 +Jul 3 18:56:23 authorMacBook-Pro com.apple.WebKit.WebContent[25654]: [18:56:23.837] <<<< CRABS >>>> crabsFlumeHostUnavailable: [0x7f961cf08cf0] Byte flume reports host unavailable. +Jul 3 18:56:27 authorMacBook-Pro kernel[0]: en0: BSSID changed to 64:d9:89:6b:b5:33 +Jul 3 18:56:33 calvisitor-10-105-162-32 QQ[10018]: button report: 0x80039B7 +Jul 3 18:57:01 calvisitor-10-105-162-32 corecaptured[33660]: CCFile::captureLog Received Capture notice id: 1499133420.914478, reason = DeauthInd:sts:0_rsn:7 +Jul 3 18:57:12 calvisitor-10-105-162-32 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 3 18:57:12 calvisitor-10-105-162-32 corecaptured[33660]: CCFile::captureLogRun Skipping current file Dir file [2017-07-03_18,57,12.221233]-AirPortBrcm4360_Logs-005.txt, Current File [2017-07-03_18,57,12.221233]-AirPortBrcm4360_Logs-005.txt +Jul 3 18:57:57 calvisitor-10-105-162-32 kernel[0]: payload Data 07 00 +Jul 3 18:57:57 calvisitor-10-105-162-32 kernel[0]: [HID] [ATC] [Error] AppleDeviceManagementHIDEventService::start Could not make a string from out connection notification key +Jul 3 18:57:57 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 3 18:57:59 authorMacBook-Pro kernel[0]: en0: 802.11d country code set to 'US'. +Jul 3 18:58:10 authorMacBook-Pro corecaptured[33660]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 3 18:58:18 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4 +Jul 3 18:58:54 calvisitor-10-105-162-32 kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 3 19:04:48 calvisitor-10-105-162-32 kernel[0]: WARNING: hibernate_page_list_setall skipped 11799 xpmapped pages +Jul 3 19:04:48 calvisitor-10-105-162-32 kernel[0]: hibernate_teardown: wired_pages 544767, free_pages 3578340, active_pages 40000, inactive_pages 0, speculative_pages 0, cleaned_pages 0, compressor_pages 112 +Jul 3 19:04:48 calvisitor-10-105-162-32 kernel[0]: pages 554018, wire 418692, act 40000, inact 0, cleaned 0 spec 0, zf 0, throt 0, compr 112, xpmapped 40000 +Jul 3 19:04:48 calvisitor-10-105-162-32 blued[85]: [BluetoothHIDDeviceController] EventServiceConnectedCallback +Jul 3 19:04:48 calvisitor-10-105-162-32 kernel[0]: **** [IOBluetoothFamily][ProcessBluetoothTransportShowsUpActionWL] -- calling IOBluetoothFamily's registerService() -- 0x5fd0 -- 0x9a00 -- 0xc800 **** +Jul 3 19:04:52 calvisitor-10-105-162-32 kernel[0]: ARPT: 683779.928118: framerdy 0x0 bmccmd 3 framecnt 1024 +Jul 3 19:04:52 calvisitor-10-105-162-32 kernel[0]: ARPT: 683780.224800: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0 +Jul 3 19:04:52 calvisitor-10-105-162-32 corecaptured[33660]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 3 19:04:53 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [19:04:53.965] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 3 19:04:54 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 21353 failed: 3 - No network route +Jul 3 19:04:58 authorMacBook-Pro corecaptured[33660]: Received Capture Event +Jul 3 19:05:32 calvisitor-10-105-162-32 kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 3 19:05:37 calvisitor-10-105-162-32 corecaptured[33660]: CCFile::copyFile fileName is [2017-07-03_19,04,57.722196]-io80211Family-018.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-03_19,04,57.722196]-io80211Family-018.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_19,05,37.535347]=AuthFail:sts:2_rsn:0/IO80211AWDLPeerManager//[2017-07-03_19,04,57.722196]-io80211Family-018.pcapng +Jul 3 19:11:46 calvisitor-10-105-162-32 kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 3 19:11:48 authorMacBook-Pro corecaptured[33660]: Received Capture Event +Jul 3 19:11:55 calvisitor-10-105-162-32 QQ[10018]: button report: 0x8002be0 +Jul 3 19:46:35 authorMacBook-Pro kernel[0]: hibernate_rebuild_pmap_structs done: last_valid_compact_indx 285862 +Jul 3 19:46:35 authorMacBook-Pro kernel[0]: BuildActDeviceEntry enter +Jul 3 19:46:41 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Authenticated +Jul 3 19:55:29 calvisitor-10-105-161-225 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 3 19:55:30 calvisitor-10-105-161-225 kernel[0]: en0: channel changed to 132,+1 +Jul 3 20:07:56 calvisitor-10-105-161-225 mdworker[33804]: (ImportBailout.Error:1331) Asked to exit for Diskarb +Jul 3 20:16:59 calvisitor-10-105-161-225 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.33827): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 3 20:20:37 calvisitor-10-105-161-225 com.apple.WebKit.WebContent[32778]: [20:20:37.119] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 3 20:25:13 calvisitor-10-105-161-225 GoogleSoftwareUpdateAgent[33847]: 2017-07-03 20:25:13.378 GoogleSoftwareUpdateAgent[33847/0x7000002a0000] [lvl=2] -[KSUpdateCheckAction performAction] KSUpdateCheckAction starting update check for ticket(s): {( url=https://tools.google.com/service/update2 creationDate=2017-02-18 15:41:17 ticketVersion=1 > )} Using server: > +Jul 3 20:55:46 calvisitor-10-105-161-225 com.apple.WebKit.WebContent[32778]: [20:55:46.310] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 3 20:56:39 calvisitor-10-105-161-225 WeChat[24144]: jemmytest +Jul 3 20:56:57 calvisitor-10-105-161-225 QQ[10018]: FA||Url||taskID[2019353376] dealloc +Jul 3 21:03:03 calvisitor-10-105-161-225 com.apple.WebKit.WebContent[32778]: [21:03:03.265] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 3 21:07:43 calvisitor-10-105-161-225 com.apple.WebKit.WebContent[32778]: [21:07:43.005] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 3 21:17:04 calvisitor-10-105-161-225 Safari[9852]: KeychainGetICDPStatus: status: off +Jul 3 21:20:07 calvisitor-10-105-161-225 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 3 21:23:13 calvisitor-10-105-161-225 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.33936): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 3 21:27:07 calvisitor-10-105-161-225 com.apple.WebKit.WebContent[32778]: [21:27:07.761] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 3 21:30:39 calvisitor-10-105-161-225 ntpd[207]: sigio_handler: sigio_handler_active != 1 +Jul 3 21:30:39 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 21502 failed: 3 - No network route +Jul 3 21:30:39 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 21503 failed: 3 - No network route +Jul 3 21:30:41 authorMacBook-Pro corecaptured[33951]: CCFile::captureLog +Jul 3 21:30:41 authorMacBook-Pro corecaptured[33951]: CCFile::copyFile fileName is [2017-07-03_21,30,41.859869]-CCIOReporter-002.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-03_21,30,41.859869]-CCIOReporter-002.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_21,30,40.703152]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-03_21,30,41.859869]-CCIOReporter-002.xml +Jul 3 21:30:44 authorMacBook-Pro kernel[0]: en0: channel changed to 1 +Jul 3 21:30:50 authorMacBook-Pro kernel[0]: Sandbox: QQ(10018) deny(1) mach-lookup com.apple.networking.captivenetworksupport +Jul 3 21:30:54 authorMacBook-Pro networkd[195]: __42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc21519 184.105.67.74:443 +Jul 3 21:30:55 airbears2-10-142-110-255 kernel[0]: Sandbox: com.apple.Addres(33959) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 3 21:35:36 airbears2-10-142-110-255 locationd[82]: Location icon should now be in state 'Inactive' +Jul 3 21:41:47 airbears2-10-142-110-255 com.apple.WebKit.WebContent[32778]: [21:41:47.568] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 3 22:16:48 airbears2-10-142-110-255 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 3 22:32:26 airbears2-10-142-110-255 WeChat[24144]: jemmytest +Jul 3 23:07:12 airbears2-10-142-110-255 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 320, items, fQueryRetries, 1, fLastRetryTimestamp, 520841203.7 +Jul 3 23:07:40 airbears2-10-142-110-255 locationd[82]: Location icon should now be in state 'Active' +Jul 3 23:16:10 airbears2-10-142-110-255 QQ[10018]: FA||Url||taskID[2019353410] dealloc +Jul 3 23:23:34 airbears2-10-142-110-255 com.apple.AddressBook.InternetAccountsBridge[34080]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 3 23:24:32 airbears2-10-142-110-255 com.apple.WebKit.WebContent[32778]: [23:24:32.378] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 3 23:29:01 airbears2-10-142-110-255 locationd[82]: Location icon should now be in state 'Inactive' +Jul 3 23:31:42 airbears2-10-142-110-255 Safari[9852]: KeychainGetICDPStatus: status: off +Jul 3 23:44:36 airbears2-10-142-110-255 kernel[0]: ARPT: 697702.656868: AirPort_Brcm43xx::powerChange: System Sleep +Jul 3 23:55:44 airbears2-10-142-110-255 Safari[9852]: tcp_connection_tls_session_error_callback_imp 2210 tcp_connection_tls_session_handle_read_error.790 error 60 +Jul 4 00:22:21 airbears2-10-142-110-255 com.apple.cts[43]: com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 6349 seconds. Ignoring. +Jul 4 00:23:04 airbears2-10-142-110-255 com.apple.cts[43]: com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 6306 seconds. Ignoring. +Jul 4 00:35:57 airbears2-10-142-110-255 kernel[0]: ARPT: 697853.842104: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 4 00:35:57 airbears2-10-142-110-255 com.apple.cts[43]: com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5533 seconds. Ignoring. +Jul 4 00:36:02 airbears2-10-142-110-255 kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 4 00:36:07 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 44944 seconds. Ignoring. +Jul 4 00:48:29 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 9749 seconds. Ignoring. +Jul 4 01:00:22 airbears2-10-142-110-255 com.apple.AddressBook.InternetAccountsBridge[646]: Checking iCDP status for DSID 874161398 (checkWithServer=0) +Jul 4 01:00:25 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1883 seconds. Ignoring. +Jul 4 01:00:35 airbears2-10-142-110-255 com.apple.CDScheduler[43]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 4 01:13:14 airbears2-10-142-110-255 kernel[0]: ARPT: 698052.637142: AirPort_Brcm43xx::powerChange: System Sleep +Jul 4 01:24:39 airbears2-10-142-110-255 kernel[0]: ARPT: 698055.177765: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 4 01:37:11 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 207556 seconds. Ignoring. +Jul 4 01:37:37 airbears2-10-142-110-255 kernel[0]: ARPT: 698150.103985: wl0: setup_keepalive: Remote IP: 17.249.12.144 +Jul 4 01:37:39 airbears2-10-142-110-255 kernel[0]: ARPT: 698152.085457: AirPort_Brcm43xx::powerChange: System Sleep +Jul 4 01:48:57 airbears2-10-142-110-255 kernel[0]: ARPT: 698152.618948: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +Jul 4 01:48:57 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 206850 seconds. Ignoring. +Jul 4 01:49:07 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 206840 seconds. Ignoring. +Jul 4 02:01:03 airbears2-10-142-110-255 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us +Jul 4 02:01:14 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 39837 seconds. Ignoring. +Jul 4 02:01:30 airbears2-10-142-110-255 com.apple.AddressBook.InternetAccountsBridge[34203]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 4 02:13:35 airbears2-10-142-110-255 com.apple.CDScheduler[43]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 4 02:25:27 airbears2-10-142-110-255 kernel[0]: Previous sleep cause: 5 +Jul 4 02:25:27 airbears2-10-142-110-255 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 4 02:25:38 airbears2-10-142-110-255 QQ[10018]: ############################## _getSysMsgList +Jul 4 02:25:47 airbears2-10-142-110-255 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 38276 seconds. Ignoring. +Jul 4 02:26:13 airbears2-10-142-110-255 kernel[0]: ARPT: 698348.781411: wl0: MDNS: IPV6 Addr: 2607:f140:400:a01b:1c57:7ef3:8f8e:5a10 +Jul 4 02:37:39 airbears2-10-142-110-255 kernel[0]: Previous sleep cause: 5 +Jul 4 02:37:39 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 3199 seconds. Ignoring. +Jul 4 02:38:25 airbears2-10-142-110-255 kernel[0]: ARPT: 698398.428268: wl0: setup_keepalive: Remote IP: 17.249.12.88 +Jul 4 02:49:55 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1728 seconds. Ignoring. +Jul 4 02:49:55 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1728 seconds. Ignoring. +Jul 4 02:50:09 airbears2-10-142-110-255 com.apple.AddressBook.InternetAccountsBridge[34235]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 4 03:01:56 airbears2-10-142-110-255 kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 4 03:02:06 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1732 seconds. Ignoring. +Jul 4 03:14:08 airbears2-10-142-110-255 kernel[0]: ARPT: 698501.213099: ARPT: Wake Reason: Wake on TCP Timeout +Jul 4 03:26:40 airbears2-10-142-110-255 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 34623 seconds. Ignoring. +Jul 4 03:27:06 airbears2-10-142-110-255 kernel[0]: ARPT: 698596.169927: wl0: setup_keepalive: Local IP: 10.142.110.255 +Jul 4 03:38:32 airbears2-10-142-110-255 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 4 03:38:55 airbears2-10-142-110-255 kernel[0]: Sandbox: com.apple.Addres(34268) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 03:50:54 airbears2-10-142-110-255 com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 4 03:50:58 airbears2-10-142-110-255 cloudd[326]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name} +Jul 4 03:51:31 airbears2-10-142-110-255 kernel[0]: PM response took 1999 ms (54, powerd) +Jul 4 04:15:26 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 31785 seconds. Ignoring. +Jul 4 04:27:18 airbears2-10-142-110-255 kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 4 04:27:18 airbears2-10-142-110-255 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 4 04:27:18 airbears2-10-142-110-255 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 5 us +Jul 4 04:27:18 airbears2-10-142-110-255 kernel[0]: en0: channel changed to 6 +Jul 4 04:27:39 airbears2-10-142-110-255 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 4 04:39:52 airbears2-10-142-110-255 kernel[0]: Sandbox: com.apple.Addres(34309) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 04:40:15 airbears2-10-142-110-255 kernel[0]: ARPT: 698894.284410: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f +Jul 4 04:40:17 airbears2-10-142-110-255 kernel[0]: ARPT: 698896.274509: AirPort_Brcm43xx::powerChange: System Sleep +Jul 4 04:51:41 airbears2-10-142-110-255 kernel[0]: ARPT: 698896.831598: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 4 04:51:41 airbears2-10-142-110-255 kernel[0]: ARPT: 698898.741521: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 4 04:52:01 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 29590 seconds. Ignoring. +Jul 4 04:52:25 airbears2-10-142-110-255 QQ[10018]: ############################## _getSysMsgList +Jul 4 05:04:19 airbears2-10-142-110-255 kernel[0]: Sandbox: com.apple.Addres(34326) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 05:16:07 airbears2-10-142-110-255 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 4 05:16:28 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 28123 seconds. Ignoring. +Jul 4 05:28:19 airbears2-10-142-110-255 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 2 us +Jul 4 05:28:19 airbears2-10-142-110-255 kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 4 05:28:30 airbears2-10-142-110-255 com.apple.CDScheduler[43]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 4 05:28:30 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1077 seconds. Ignoring. +Jul 4 05:40:41 airbears2-10-142-110-255 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 192946 seconds. Ignoring. +Jul 4 06:03:25 airbears2-10-142-110-255 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 4 06:03:27 authorMacBook-Pro corecaptured[34369]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 4 06:12:51 calvisitor-10-105-162-105 kernel[0]: ARPT: 699244.827573: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 2935131210, Ack 3049709979, Win size 278 +Jul 4 06:12:51 calvisitor-10-105-162-105 kernel[0]: ARPT: 699246.920246: ARPT: Wake Reason: Wake on Scan offload +Jul 4 06:12:52 calvisitor-10-105-162-105 kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 4 06:13:45 calvisitor-10-105-162-105 kernel[0]: ARPT: 699300.508954: wl0: setup_keepalive: Local IP: 10.105.162.105 +Jul 4 06:25:39 authorMacBook-Pro com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 23884 seconds. Ignoring. +Jul 4 06:25:49 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 190238 seconds. Ignoring. +Jul 4 06:26:04 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[34408]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 4 06:26:11 calvisitor-10-105-162-105 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 23852 seconds. Ignoring. +Jul 4 06:39:19 calvisitor-10-105-162-105 kernel[0]: ARPT: 699352.804212: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 2794574676, Ack 1746081928, Win size 278 +Jul 4 06:39:19 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 4 06:26:28 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0 +Jul 4 06:39:19 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 4 06:39:19 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 189428 seconds. Ignoring. +Jul 4 06:39:25 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1852 seconds. Ignoring. +Jul 4 06:39:30 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1847 seconds. Ignoring. +Jul 4 06:40:13 calvisitor-10-105-162-105 kernel[0]: ARPT: 699408.252331: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0, +Jul 4 06:52:56 calvisitor-10-105-162-105 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 4 06:52:58 authorMacBook-Pro configd[53]: network changed: v4(en0-:10.105.162.105) v6(en0-:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS- Proxy- +Jul 4 06:53:02 authorMacBook-Pro kernel[0]: AirPort: Link Up on en0 +Jul 4 06:53:12 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[34429]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 4 06:53:18 calvisitor-10-105-162-105 kernel[0]: Sandbox: com.apple.Addres(34429) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 06:53:41 calvisitor-10-105-162-105 kernel[0]: ARPT: 699456.025397: wl0: setup_keepalive: Local port: 63572, Remote port: 443 +Jul 4 06:53:43 calvisitor-10-105-162-105 kernel[0]: PM response took 1999 ms (54, powerd) +Jul 4 07:06:34 authorMacBook-Pro configd[53]: setting hostname to "authorMacBook-Pro.local" +Jul 4 07:06:34 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 21875 failed: 3 - No network route +Jul 4 07:06:38 calvisitor-10-105-162-105 kernel[0]: en0: channel changed to 1 +Jul 4 07:06:38 calvisitor-10-105-162-105 kernel[0]: en0::IO80211Interface::postMessage bssid changed +Jul 4 07:06:42 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 215 seconds. Ignoring. +Jul 4 07:10:01 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 4 07:10:01 calvisitor-10-105-162-105 symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 4 07:10:06 authorMacBook-Pro kernel[0]: en0::IO80211Interface::postMessage bssid changed +Jul 4 07:10:11 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 6 seconds. Ignoring. +Jul 4 07:10:28 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[34457]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 4 07:10:40 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 187547 seconds. Ignoring. +Jul 4 07:23:41 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 4 07:23:41 calvisitor-10-105-162-105 kernel[0]: en0: BSSID changed to 5c:50:15:36:bc:03 +Jul 4 07:23:47 authorMacBook-Pro configd[53]: network changed: DNS* +Jul 4 07:23:47 calvisitor-10-105-162-105 kernel[0]: en0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 12 13 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161 165 +Jul 4 07:26:18 authorMacBook-Pro kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 4 07:26:28 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 186599 seconds. Ignoring. +Jul 4 07:26:30 calvisitor-10-105-162-105 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 320, items, fQueryRetries, 1, fLastRetryTimestamp, 520871064.1 +Jul 4 07:26:52 calvisitor-10-105-162-105 kernel[0]: en0: BSSID changed to 5c:50:15:4c:18:13 +Jul 4 07:39:57 calvisitor-10-105-162-105 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 4 07:39:59 calvisitor-10-105-162-105 symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 4 07:40:17 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 185770 seconds. Ignoring. +Jul 4 07:40:52 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 9995 seconds. Ignoring. +Jul 4 07:54:21 calvisitor-10-105-162-105 kernel[0]: ARPT: 699815.080622: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f +Jul 4 08:20:49 calvisitor-10-105-162-105 kernel[0]: ARPT: 699878.306468: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 4 08:20:51 calvisitor-10-105-162-105 kernel[0]: en0: 802.11d country code set to 'US'. +Jul 4 08:20:51 calvisitor-10-105-162-105 kernel[0]: en0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 12 13 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161 +Jul 4 08:21:00 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 183327 seconds. Ignoring. +Jul 4 08:21:00 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 183327 seconds. Ignoring. +Jul 4 08:21:25 calvisitor-10-105-162-105 corecaptured[34531]: Received Capture Event +Jul 4 08:21:34 calvisitor-10-105-162-105 kernel[0]: ARPT: 699925.384446: wl0: setup_keepalive: Seq: 4253304142, Ack: 3255241453, Win size: 4096 +Jul 4 08:34:26 calvisitor-10-105-162-105 kernel[0]: AirPort: Link Down on awdl0. Reason 1 (Unspecified). +Jul 4 08:34:31 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 4 08:34:36 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 182511 seconds. Ignoring. +Jul 4 08:48:07 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 21983 failed: 3 - No network route +Jul 4 08:48:12 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Authenticated +Jul 4 08:48:35 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[34554]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 4 08:48:50 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 181657 seconds. Ignoring. +Jul 4 09:01:41 calvisitor-10-105-162-105 kernel[0]: AirPort: Link Down on awdl0. Reason 1 (Unspecified). +Jul 4 09:01:42 calvisitor-10-105-162-105 kernel[0]: en0: channel changed to 1 +Jul 4 09:01:43 authorMacBook-Pro com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5144 seconds. Ignoring. +Jul 4 09:01:43 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 21993 failed: 3 - No network route +Jul 4 09:01:43 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 4 09:01:47 authorMacBook-Pro kernel[0]: en0: BSSID changed to 5c:50:15:4c:18:13 +Jul 4 09:01:47 authorMacBook-Pro kernel[0]: Sandbox: QQ(10018) deny(1) mach-lookup com.apple.networking.captivenetworksupport +Jul 4 09:01:48 calvisitor-10-105-162-105 configd[53]: network changed: v4(en0:10.105.162.105) v6(en0+:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB +Jul 4 09:02:25 calvisitor-10-105-162-105 QQ[10018]: FA||Url||taskID[2019353444] dealloc +Jul 4 09:15:18 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 4 09:28:56 calvisitor-10-105-162-105 symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 4 09:29:21 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[34589]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 4 09:42:32 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 138 seconds. Ignoring. +Jul 4 09:42:52 calvisitor-10-105-162-105 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 12051 seconds. Ignoring. +Jul 4 09:42:57 calvisitor-10-105-162-105 GoogleSoftwareUpdateAgent[34603]: 2017-07-04 09:42:57.924 GoogleSoftwareUpdateAgent[34603/0x700000323000] [lvl=2] +[KSCodeSigningVerification verifyBundle:applicationId:error:] KSCodeSigningVerification verifying code signing for '/Users/xpc/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/GoogleSoftwareUpdateDaemon' with the requirement 'anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists and certificate leaf[subject.OU]="EQHXZ8M8AV" and (identifier="com.google.Keystone")' +Jul 4 09:42:58 calvisitor-10-105-162-105 ksfetch[34604]: 2017-07-04 09:42:58.121 ksfetch[34604/0x7fff79824000] [lvl=2] main() ksfetch done fetching. +Jul 4 09:43:18 calvisitor-10-105-162-105 kernel[0]: ARPT: 700254.389213: wl0: setup_keepalive: Seq: 2502126767, Ack: 2906384231, Win size: 4096 +Jul 4 09:56:08 calvisitor-10-105-162-105 kernel[0]: ARPT: 700256.949512: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 4 09:56:10 calvisitor-10-105-162-105 symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 4 09:56:38 calvisitor-10-105-162-105 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 4 09:57:01 calvisitor-10-105-162-105 kernel[0]: ARPT: 700311.376442: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f +Jul 4 09:57:01 calvisitor-10-105-162-105 kernel[0]: ARPT: 700311.376459: wl0: MDNS: 0 SRV Recs, 0 TXT Recs +Jul 4 09:57:30 calvisitor-10-105-162-105 kernel[0]: en0: 802.11d country code set to 'X3'. +Jul 4 09:57:30 authorMacBook-Pro kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 4 09:57:30 authorMacBook-Pro com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 11173 seconds. Ignoring. +Jul 4 09:57:30 authorMacBook-Pro symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 4 09:57:31 authorMacBook-Pro configd[53]: network changed: v4(en0!:10.105.162.105) DNS+ Proxy+ SMB +Jul 4 09:57:36 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1737 seconds. Ignoring. +Jul 4 10:09:39 calvisitor-10-105-162-105 AddressBookSourceSync[34636]: -[SOAPParser:0x7f82b1f24e50 parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid) +Jul 4 10:13:04 calvisitor-10-105-162-105 mDNSResponder[91]: mDNS_RegisterInterface: Frequent transitions for interface en0 (FE80:0000:0000:0000:C6B3:01FF:FECD:467F) +Jul 4 10:13:05 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[25654]: [10:13:05.044] <<<< CRABS >>>> crabsFlumeHostAvailable: [0x7f961cf08cf0] Byte flume reports host available again. +Jul 4 10:13:12 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 10319 seconds. Ignoring. +Jul 4 10:26:52 calvisitor-10-105-162-105 QQ[10018]: ############################## _getSysMsgList +Jul 4 10:29:35 calvisitor-10-105-162-105 kernel[0]: Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0 +Jul 4 10:29:44 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 43063 seconds. Ignoring. +Jul 4 10:30:16 calvisitor-10-105-162-105 AddressBookSourceSync[34670]: Unrecognized attribute value: t:AbchPersonItemType +Jul 4 10:43:11 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 4 10:43:27 calvisitor-10-105-162-105 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 8416 seconds. Ignoring. +Jul 4 10:43:31 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 8500 seconds. Ignoring. +Jul 4 10:43:42 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[34685]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 4 10:43:46 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[34685]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 4 10:43:48 calvisitor-10-105-162-105 kernel[0]: Sandbox: com.apple.Addres(34685) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 10:43:56 calvisitor-10-105-162-105 kernel[0]: ARPT: 700626.024536: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f +Jul 4 10:43:57 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 4 10:56:48 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds +Jul 4 10:56:48 calvisitor-10-105-162-105 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 7615 seconds. Ignoring. +Jul 4 10:56:57 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1609 seconds. Ignoring. +Jul 4 10:57:46 calvisitor-10-105-162-105 kernel[0]: ARPT: 700687.112611: AirPort_Brcm43xx::powerChange: System Sleep +Jul 4 11:10:27 calvisitor-10-105-162-105 kernel[0]: en0: channel changed to 1 +Jul 4 11:10:51 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[34706]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 4 11:10:58 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [11:10:58.940] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 4 11:24:04 calvisitor-10-105-162-105 kernel[0]: AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving). +Jul 4 11:24:13 calvisitor-10-105-162-105 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5970 seconds. Ignoring. +Jul 4 11:25:03 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 172284 seconds. Ignoring. +Jul 4 11:28:35 authorMacBook-Pro kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 4 11:28:35 authorMacBook-Pro symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 4 11:28:41 authorMacBook-Pro corecaptured[34722]: CCFile::captureLog Received Capture notice id: 1499192921.020010, reason = AssocFail:sts:5_rsn:0 +Jul 4 11:28:42 authorMacBook-Pro corecaptured[34722]: CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7 +Jul 4 11:28:55 calvisitor-10-105-162-105 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5688 seconds. Ignoring. +Jul 4 11:29:09 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[34727]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 4 11:29:09 calvisitor-10-105-162-105 corecaptured[34722]: CCFile::captureLogRun Skipping current file Dir file [2017-07-04_11,29,09.994819]-CCIOReporter-005.xml, Current File [2017-07-04_11,29,09.994819]-CCIOReporter-005.xml +Jul 4 11:29:10 calvisitor-10-105-162-105 corecaptured[34722]: CCFile::captureLogRun Skipping current file Dir file [2017-07-04_11,29,10.144779]-AirPortBrcm4360_Logs-008.txt, Current File [2017-07-04_11,29,10.144779]-AirPortBrcm4360_Logs-008.txt +Jul 4 11:29:20 calvisitor-10-105-162-105 kernel[0]: ARPT: 700863.801551: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f +Jul 4 11:42:12 calvisitor-10-105-162-105 kernel[0]: [HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01) +Jul 4 11:42:36 calvisitor-10-105-162-105 kernel[0]: Sandbox: com.apple.Addres(34738) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 11:43:04 calvisitor-10-105-162-105 kernel[0]: ARPT: 700919.494551: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f +Jul 4 11:55:51 calvisitor-10-105-162-105 kernel[0]: en0::IO80211Interface::postMessage bssid changed +Jul 4 11:55:52 calvisitor-10-105-162-105 corecaptured[34743]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 4 11:55:56 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1878 seconds. Ignoring. +Jul 4 11:56:36 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 170391 seconds. Ignoring. +Jul 4 11:56:46 calvisitor-10-105-162-105 kernel[0]: ARPT: 700980.255260: wl0: setup_keepalive: Seq: 2955519239, Ack: 2597833420, Win size: 4096 +Jul 4 12:06:20 calvisitor-10-105-162-105 corecaptured[34743]: CCLogTap::profileRemoved, Owner: com.apple.iokit.IO80211Family, Name: IO80211AWDLPeerManager +Jul 4 12:06:21 calvisitor-10-105-162-105 cloudd[326]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name} +Jul 4 12:06:24 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 4 12:06:36 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[34830]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 4 12:06:39 calvisitor-10-105-162-105 kernel[0]: Sandbox: com.apple.Addres(34830) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 12:06:43 calvisitor-10-105-162-105 sandboxd[129] ([34830]): com.apple.Addres(34830) deny network-outbound /private/var/run/mDNSResponder +Jul 4 12:07:03 calvisitor-10-105-162-105 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.34835): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 4 12:08:23 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [12:08:23.866] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 4 12:13:40 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [12:13:40.079] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 4 12:14:54 calvisitor-10-105-162-105 locationd[82]: Location icon should now be in state 'Inactive' +Jul 4 12:19:03 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [12:19:03.575] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 4 12:22:18 calvisitor-10-105-162-105 UserEventAgent[43]: extension com.apple.ncplugin.WorldClock -> (null) +Jul 4 12:25:26 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [12:25:26.551] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 4 12:27:11 calvisitor-10-105-162-105 kernel[0]: ARPT: 702237.246510: wl0: setup_keepalive: Local port: 49218, Remote port: 443 +Jul 4 12:34:55 calvisitor-10-105-162-105 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 4 12:34:56 authorMacBook-Pro corecaptured[34861]: CCFile::captureLog Received Capture notice id: 1499196895.670989, reason = AuthFail:sts:5_rsn:0 +Jul 4 12:34:56 authorMacBook-Pro corecaptured[34861]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 4 12:35:05 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 168082 seconds. Ignoring. +Jul 4 12:35:15 calvisitor-10-105-162-105 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 4 12:35:33 calvisitor-10-105-162-105 AddressBookSourceSync[34888]: -[SOAPParser:0x7fc7025b2810 parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid) +Jul 4 12:48:36 calvisitor-10-105-162-105 kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 4 12:49:34 calvisitor-10-105-162-105 kernel[0]: ARPT: 702351.279867: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10 +Jul 4 13:02:13 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 4 13:02:13 calvisitor-10-105-162-105 kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 4 13:02:14 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 177 seconds. Ignoring. +Jul 4 13:02:23 calvisitor-10-105-162-105 com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 4 13:02:23 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1769 seconds. Ignoring. +Jul 4 13:02:39 calvisitor-10-105-162-105 AddressBookSourceSync[34904]: Unrecognized attribute value: t:AbchPersonItemType +Jul 4 13:15:51 calvisitor-10-105-162-105 kernel[0]: ARPT: 702415.308381: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 4 13:29:28 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us +Jul 4 13:41:20 calvisitor-10-105-162-105 QQ[10018]: button report: 0x8002be0 +Jul 4 13:43:06 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [13:43:06.901] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 4 13:55:13 calvisitor-10-105-162-105 locationd[82]: Location icon should now be in state 'Inactive' +Jul 4 13:56:31 calvisitor-10-105-162-105 com.apple.AddressBook.ContactsAccountsService[289]: [Accounts] Current connection, connection from pid 487, doesn't have account access. +Jul 4 13:56:31 calvisitor-10-105-162-105 SCIM[487]: [Accounts] Failed to update account with identifier 76FE6715-3D27-4F21-AA35-C88C1EA820E8, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)" +Jul 4 14:05:06 calvisitor-10-105-162-105 locationd[82]: Location icon should now be in state 'Active' +Jul 4 14:19:40 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [14:19:40.459] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 4 14:33:25 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [14:33:25.556] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 4 14:34:52 calvisitor-10-105-162-105 com.apple.SecurityServer[80]: Session 101921 created +Jul 4 14:36:08 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [14:36:08.077] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 4 14:39:45 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [14:39:45.538] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 4 14:43:39 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [14:43:39.854] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 4 15:03:53 calvisitor-10-105-162-105 GoogleSoftwareUpdateAgent[35018]: 2017-07-04 15:03:53.270 GoogleSoftwareUpdateAgent[35018/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher(PrivateMethods) helperDidTerminate:] KSOutOfProcessFetcher fetch ended for URL: "https://tools.google.com/service/update2?cup2hreq=a70d6372a4e45a6cbba61cd7f057c79bf73c79db1b1951dc17c605e870f0419b&cup2key=7:934679018" +Jul 4 15:11:20 calvisitor-10-105-162-105 syslogd[44]: ASL Sender Statistics +Jul 4 15:20:08 calvisitor-10-105-162-105 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 300, items, fQueryRetries, 0, fLastRetryTimestamp, 520899307.1 +Jul 4 15:30:20 calvisitor-10-105-162-105 locationd[82]: Location icon should now be in state 'Inactive' +Jul 4 15:35:04 calvisitor-10-105-162-105 quicklookd[35049]: Error returned from iconservicesagent: (null) +Jul 4 15:35:04 calvisitor-10-105-162-105 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 4 15:35:04 calvisitor-10-105-162-105 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 4 15:47:25 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[32778]: [15:47:25.614] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 4 16:31:38 calvisitor-10-105-162-105 com.apple.CDScheduler[43]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 4 16:31:50 calvisitor-10-105-162-105 kernel[0]: Sandbox: com.apple.Addres(35110) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 16:31:54 calvisitor-10-105-162-105 kernel[0]: Sandbox: com.apple.Addres(35110) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 16:32:07 calvisitor-10-105-162-105 QQ[10018]: button report: 0x8002be0 +Jul 4 16:32:32 calvisitor-10-105-162-105 QQ[10018]: ############################## _getSysMsgList +Jul 4 16:58:45 calvisitor-10-105-162-105 kernel[0]: ARPT: 711599.232230: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 4 16:58:55 calvisitor-10-105-162-105 com.apple.cts[43]: com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4045 seconds. Ignoring. +Jul 4 17:00:00 calvisitor-10-105-162-105 kernel[0]: kern_open_file_for_direct_io took 6 ms +Jul 4 17:12:34 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 151433 seconds. Ignoring. +Jul 4 17:12:34 calvisitor-10-105-162-105 com.apple.cts[43]: com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 3226 seconds. Ignoring. +Jul 4 17:13:03 calvisitor-10-105-162-105 sharingd[30299]: 17:13:03.545 : Starting AirDrop server for user 501 on wake +Jul 4 17:13:38 calvisitor-10-105-162-105 kernel[0]: ARPT: 711749.913729: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0, +Jul 4 17:26:03 calvisitor-10-105-162-105 kernel[0]: ARPT: 711752.511718: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 4 17:26:44 calvisitor-10-105-162-105 sharingd[30299]: 17:26:44.228 : Scanning mode Contacts Only +Jul 4 17:40:02 calvisitor-10-105-162-105 kernel[0]: Sandbox: com.apple.Addres(35150) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 17:53:21 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 4 17:54:33 calvisitor-10-105-162-105 kernel[0]: ARPT: 711979.641310: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10 +Jul 4 18:07:00 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 4 18:07:01 calvisitor-10-105-162-105 QQ[10018]: button report: 0x80039B7 +Jul 4 18:07:25 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[35165]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 4 18:20:56 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 40 seconds. Ignoring. +Jul 4 18:21:08 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[35174]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 4 18:34:25 calvisitor-10-105-162-105 kernel[0]: ARPT: 712221.085635: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 70582765, Ack 3488103719, Win size 358 +Jul 4 18:34:25 calvisitor-10-105-162-105 kernel[0]: en0: BSSID changed to 5c:50:15:4c:18:13 +Jul 4 18:34:26 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 42431 seconds. Ignoring. +Jul 4 18:34:51 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[35181]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 4 18:35:05 calvisitor-10-105-162-105 sharingd[30299]: 18:35:05.187 : Scanning mode Contacts Only +Jul 4 18:48:22 calvisitor-10-105-162-105 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 4 18:48:27 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[35188]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 4 19:02:24 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000320 +Jul 4 19:15:22 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 4 19:15:22 calvisitor-10-105-162-105 kernel[0]: Previous sleep cause: 5 +Jul 4 19:15:41 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[35207]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 4 19:16:35 calvisitor-10-105-162-105 kernel[0]: ARPT: 712526.783763: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10 +Jul 4 19:29:01 calvisitor-10-105-162-105 kernel[0]: ARPT: 712530.297675: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +Jul 4 19:29:41 calvisitor-10-105-162-105 WindowServer[184]: CGXDisplayDidWakeNotification [712572581805245]: posting kCGSDisplayDidWake +Jul 4 19:30:13 calvisitor-10-105-162-105 kernel[0]: ARPT: 712604.204993: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f +Jul 4 19:42:58 calvisitor-10-105-162-105 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 4 19:43:32 calvisitor-10-105-162-105 wirelessproxd[75]: Peripheral manager is not powered on +Jul 4 19:43:56 calvisitor-10-105-162-105 kernel[0]: Opened file /var/log/SleepWakeStacks.bin, size 172032, extents 1, maxio 2000000 ssd 1 +Jul 4 19:56:19 calvisitor-10-105-162-105 kernel[0]: [HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01) +Jul 4 19:56:41 calvisitor-10-105-162-105 kernel[0]: Sandbox: com.apple.Addres(35229) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 19:57:00 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1867 seconds. Ignoring. +Jul 4 20:09:58 calvisitor-10-105-162-105 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 4 20:10:18 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 36678 seconds. Ignoring. +Jul 4 20:24:32 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 215 seconds. Ignoring. +Jul 4 20:24:55 calvisitor-10-105-162-105 kernel[0]: Sandbox: com.apple.Addres(35250) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 20:25:22 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 139865 seconds. Ignoring. +Jul 4 20:25:23 calvisitor-10-105-162-105 kernel[0]: IOPMrootDomain: idle cancel, state 1 +Jul 4 20:25:44 calvisitor-10-105-162-105 kernel[0]: ARPT: 712915.870808: wl0: MDNS: IPV4 Addr: 10.105.162.105 +Jul 4 20:25:46 calvisitor-10-105-162-105 kernel[0]: ARPT: 712918.575461: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0, +Jul 4 20:38:11 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 2 us +Jul 4 20:38:12 calvisitor-10-105-162-105 kernel[0]: ARPT: 712921.782306: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 4 20:38:12 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 139095 seconds. Ignoring. +Jul 4 20:38:13 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 35003 seconds. Ignoring. +Jul 4 20:38:50 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 139057 seconds. Ignoring. +Jul 4 20:51:50 calvisitor-10-105-162-105 kernel[0]: Wake reason: RTC (Alarm) +Jul 4 20:51:50 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 4 20:51:50 calvisitor-10-105-162-105 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-05 03:51:50 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 4 20:51:50 calvisitor-10-105-162-105 kernel[0]: ARPT: 712997.981881: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0, +Jul 4 20:52:10 calvisitor-10-105-162-105 com.apple.CDScheduler[43]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 4 20:54:03 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds +Jul 4 20:54:03 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 4 20:54:03 calvisitor-10-105-162-105 sharingd[30299]: 20:54:03.455 : BTLE scanner Powered On +Jul 4 20:54:03 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 138144 seconds. Ignoring. +Jul 4 20:54:04 authorMacBook-Pro networkd[195]: __42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc22491 203.205.142.158:8080 +Jul 4 20:54:25 calvisitor-10-105-162-105 kernel[0]: Sandbox: com.apple.Addres(35286) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 4 21:06:47 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 132 seconds. Ignoring. +Jul 4 21:07:16 calvisitor-10-105-162-105 sharingd[30299]: 21:07:16.729 : Scanning mode Contacts Only +Jul 4 21:23:17 calvisitor-10-105-162-105 wirelessproxd[75]: Peripheral manager is not powered on +Jul 4 21:35:17 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 135670 seconds. Ignoring. +Jul 4 21:35:54 calvisitor-10-105-162-105 kernel[0]: ARPT: 713439.104232: AirPort_Brcm43xx::powerChange: System Sleep +Jul 4 21:35:54 calvisitor-10-105-162-105 kernel[0]: ARPT: 713439.104255: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0, +Jul 4 21:49:26 calvisitor-10-105-162-105 kernel[0]: ARPT: 713493.575563: wl0: setup_keepalive: Remote IP: 17.249.28.75 +Jul 4 22:02:21 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1843 seconds. Ignoring. +Jul 4 22:02:21 calvisitor-10-105-162-105 com.apple.CDScheduler[43]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 4 22:15:48 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 4 22:29:25 calvisitor-10-105-162-105 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 4 22:29:26 calvisitor-10-105-162-105 sharingd[30299]: 22:29:26.099 : BTLE scanner Powered On +Jul 4 22:43:02 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 4 22:56:50 calvisitor-10-105-162-105 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 978 seconds. Ignoring. +Jul 4 22:57:00 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[35374]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 4 22:57:01 calvisitor-10-105-162-105 locationd[82]: NETWORK: no response from server, reachability, 2, queryRetries, 1 +Jul 4 23:10:17 calvisitor-10-105-162-105 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 7 +Jul 4 23:10:17 calvisitor-10-105-162-105 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 4 23:10:28 calvisitor-10-105-162-105 CalendarAgent[279]: [com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-8].] +Jul 4 23:10:29 calvisitor-10-105-162-105 kernel[0]: PM response took 113 ms (24144, WeChat) +Jul 4 23:10:31 calvisitor-10-105-162-105 WindowServer[184]: device_generate_lock_screen_screenshot: authw 0x7fa824145a00(2000)[0, 0, 1440, 900] shield 0x7fa825dafc00(2001), dev [1440,900] +Jul 4 23:10:40 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[35382]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 4 23:13:35 calvisitor-10-105-162-105 com.apple.AddressBook.InternetAccountsBridge[35394]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 4 23:14:37 calvisitor-10-105-162-105 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.35400): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 4 23:16:14 calvisitor-10-105-162-105 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.35412): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SocialHelper.xpc/Contents/MacOS/com.apple.Safari.SocialHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 4 23:17:17 calvisitor-10-105-162-105 Safari[9852]: KeychainGetICDPStatus: status: off +Jul 4 23:20:18 calvisitor-10-105-162-105 QQ[10018]: FA||Url||taskID[2019353517] dealloc +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00660011': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x0067000f': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00670033': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x03600009': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x0360001f': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x03f20026': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x009a0005': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00990013': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00690003': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x006a0061': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x006a00a6': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x006a00a7': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x006a00b2': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x006d0002': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00b20001': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x03ef000d': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00b8fffe': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00bb0001': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00bc0007': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00c1000a': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00c40027': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00c5000c': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00e80002': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x03eb0001': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x006f0001': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x00730020': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x007c000c': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x007c0018': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x007d000e': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x008b036a': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x008b6fb5': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x008b0360': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x008bdeaa': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x008bdeb0': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x01f60001': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x01f90004': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02080000': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02100004': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02120000': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02120002': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x023b0003': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x023d0001': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02410003': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02420002': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02420006': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02470032': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02470045': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x0247ffe9': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x0249002a': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x024a00b2': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x025c0009': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x0261fffd': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02640011': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x0268000a': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02720002': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02740004': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02cc0000': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02d10001': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02770011': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02780026': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x027b0006': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x027e0001': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02801000': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02950006': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x0295001d': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x029f0014': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x029f003a': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02a60001': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02b60001': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02b70006': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: Cocoa scripting error for '0x02cb000d': four character codes must be four characters long. +Jul 4 23:22:09 calvisitor-10-105-162-105 Microsoft Word[14463]: .sdef warning for argument '' of command 'can continue previous list' in suite 'Microsoft Word Suite': '4023' is not a valid type name. +Jul 4 23:25:29 calvisitor-10-105-162-105 WeChat[24144]: jemmytest +Jul 4 23:30:23 calvisitor-10-105-162-105 QQ[10018]: FA||Url||taskID[2019353519] dealloc +Jul 4 23:31:49 calvisitor-10-105-162-105 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 4 23:49:42 calvisitor-10-105-162-105 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 4 23:50:59 calvisitor-10-105-162-105 quicklookd[35391]: objc[35391]: Class TSUAtomicLRUCache is implemented in both /Library/QuickLook/iWork.qlgenerator/Contents/MacOS/iWork and /System/Library/PrivateFrameworks/OfficeImport.framework/Versions/A/OfficeImport. One of the two will be used. Which one is undefined. +Jul 4 23:50:59 calvisitor-10-105-162-105 garcon[35461]: Invalidating watch set. +Jul 4 23:50:59 calvisitor-10-105-162-105 QuickLookSatellite[35448]: objc[35448]: Class TSUCustomFormatData is implemented in both /Library/QuickLook/iWork.qlgenerator/Contents/MacOS/iWork and /System/Library/PrivateFrameworks/OfficeImport.framework/Versions/A/OfficeImport. One of the two will be used. Which one is undefined. +Jul 4 23:51:29 calvisitor-10-105-162-105 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 4 23:53:29 calvisitor-10-105-162-105 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 4 23:55:28 calvisitor-10-105-162-105 CalendarAgent[279]: [com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-8].] +Jul 5 00:02:22 calvisitor-10-105-162-105 WeChat[24144]: jemmytest +Jul 5 00:03:06 calvisitor-10-105-162-105 sharingd[30299]: 00:03:06.178 : Started generating hashes +Jul 5 00:03:36 calvisitor-10-105-162-105 sharingd[30299]: 00:03:36.715 : BTLE scanning started +Jul 5 00:09:34 calvisitor-10-105-162-105 WeChat[24144]: jemmytest +Jul 5 00:17:32 calvisitor-10-105-162-105 com.apple.WebKit.WebContent[35435]: <<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of 21335 bytes @ 5481561 took 0.501237 sec. to complete, 16 reads >= 0.5 sec. +Jul 5 00:17:35 calvisitor-10-105-162-105 locationd[82]: Location icon should now be in state 'Inactive' +Jul 5 00:17:50 authorMacBook-Pro corecaptured[35613]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 5 00:17:52 authorMacBook-Pro kernel[0]: AirPort: Link Up on en0 +Jul 5 00:18:04 authorMacBook-Pro QQ[10018]: button report: 0x80039B7 +Jul 5 00:18:07 authorMacBook-Pro QQ[10018]: button report: 0X80076ED +Jul 5 00:18:09 authorMacBook-Pro com.apple.AddressBook.InternetAccountsBridge[35618]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 5 00:18:12 authorMacBook-Pro AddressBookSourceSync[35614]: Unrecognized attribute value: t:AbchPersonItemType +Jul 5 00:21:07 authorMacBook-Pro Google Chrome[35628]: -_continuousScroll is deprecated for NSScrollWheel. Please use -hasPreciseScrollingDeltas. +Jul 5 00:21:07 authorMacBook-Pro Google Chrome[35628]: -deviceDeltaY is deprecated for NSScrollWheel. Please use -scrollingDeltaY. +Jul 5 00:28:42 authorMacBook-Pro com.apple.WebKit.WebContent[35671]: [00:28:42.167] (Fig) signalled err=-12871 +Jul 5 00:29:04 authorMacBook-Pro com.apple.WebKit.WebContent[35671]: [00:29:04.085] <<<< CRABS >>>> crabsWaitForLoad: [0x7fbc7ac683a0] Wait time out - -1001 (msRequestTimeout -1) +Jul 5 00:29:25 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 22710 failed: 3 - No network route +Jul 5 00:30:00 calvisitor-10-105-163-10 syslogd[44]: Configuration Notice: ASL Module "com.apple.corecdp.osx.asl" claims selected messages. Those messages may not appear in standard system log files or in the ASL database. +Jul 5 00:33:56 calvisitor-10-105-163-10 locationd[82]: PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x7fb7ed616c80 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://gs-loc.apple.com/clls/wloc, NSErrorFailingURLKey=https://gs-loc.apple.com/clls/wloc, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://gs-loc.apple.com/clls/wloc, NSErrorFailingURLKey=https://gs-loc.apple.com/clls/wloc, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.} +Jul 5 00:47:16 calvisitor-10-105-163-10 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 5 00:53:57 calvisitor-10-105-163-10 locationd[82]: NETWORK: no response from server, reachability, 2, queryRetries, 2 +Jul 5 00:55:33 calvisitor-10-105-163-10 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 284, items, fQueryRetries, 0, fLastRetryTimestamp, 520934130.6 +Jul 5 00:58:26 calvisitor-10-105-163-10 wirelessproxd[75]: Failed to stop a scan - central is not powered on: 4 +Jul 5 00:58:27 calvisitor-10-105-163-10 WindowServer[184]: device_generate_desktop_screenshot: authw 0x7fa82407ea00(2000), shield 0x7fa82435f400(2001) +Jul 5 01:19:55 calvisitor-10-105-163-10 kernel[0]: [HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01) +Jul 5 01:33:27 calvisitor-10-105-163-10 kernel[0]: en0: channel changed to 1 +Jul 5 01:47:03 calvisitor-10-105-163-10 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 7 +Jul 5 02:27:53 calvisitor-10-105-163-10 com.apple.AddressBook.InternetAccountsBridge[35749]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 5 02:27:53 calvisitor-10-105-163-10 com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 5 02:27:57 calvisitor-10-105-163-10 com.apple.AddressBook.InternetAccountsBridge[35749]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 5 02:28:22 calvisitor-10-105-163-10 kernel[0]: ARPT: 720406.265686: AirPort_Brcm43xx::powerChange: System Sleep +Jul 5 02:41:24 calvisitor-10-105-163-10 kernel[0]: ARPT: 720413.304306: wl0: setup_keepalive: Remote IP: 17.249.12.81 +Jul 5 02:54:51 calvisitor-10-105-163-10 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 5 03:08:26 calvisitor-10-105-163-10 kernel[0]: en0: BSSID changed to 5c:50:15:4c:18:13 +Jul 5 03:08:26 calvisitor-10-105-163-10 kernel[0]: en0: BSSID changed to 5c:50:15:4c:18:13 +Jul 5 03:08:49 calvisitor-10-105-163-10 sandboxd[129] ([35762]): com.apple.Addres(35762) deny network-outbound /private/var/run/mDNSResponder +Jul 5 03:35:40 calvisitor-10-105-163-10 kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 5 03:35:45 calvisitor-10-105-163-10 kernel[0]: ARPT: 720580.338311: AirPort_Brcm43xx::powerChange: System Sleep +Jul 5 03:49:12 calvisitor-10-105-163-10 kernel[0]: Wake reason: RTC (Alarm) +Jul 5 03:49:24 calvisitor-10-105-163-10 kernel[0]: Sandbox: com.apple.Addres(35773) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 5 03:49:51 calvisitor-10-105-163-10 kernel[0]: PM response took 1988 ms (54, powerd) +Jul 5 03:58:47 calvisitor-10-105-163-10 kernel[0]: Wake reason: EC.SleepTimer (SleepTimer) +Jul 5 03:58:47 calvisitor-10-105-163-10 kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 5 04:12:21 calvisitor-10-105-163-10 syslogd[44]: ASL Sender Statistics +Jul 5 04:12:22 calvisitor-10-105-163-10 kernel[0]: **** [BroadcomBluetoothHostControllerUSBTransport][start] -- Completed (matched on Device) -- 0x6000 **** +Jul 5 10:31:18 calvisitor-10-105-163-10 kernel[0]: hibernate_newruntime_map time: 0 ms, IOPolledFilePollersOpen(), ml_get_interrupts_enabled 0 +Jul 5 10:31:18 calvisitor-10-105-163-10 kernel[0]: hibernate_machine_init pagesDone 451550 sum2 4886d9d9, time: 197 ms, disk(0x20000) 799 Mb/s, comp bytes: 40017920 time: 27 ms 1412 Mb/s, crypt bytes: 160550912 time: 39 ms 3904 Mb/s +Jul 5 10:31:18 calvisitor-10-105-163-10 kernel[0]: vm_compressor_fastwake_warmup (581519 - 591525) - starting +Jul 5 10:31:18 calvisitor-10-105-163-10 kernel[0]: BuildActDeviceEntry exit +Jul 5 10:31:19 calvisitor-10-105-163-10 identityservicesd[272]: : Updating enabled: YES (Topics: ( "com.apple.private.alloy.icloudpairing", "com.apple.private.alloy.continuity.encryption", "com.apple.private.alloy.continuity.activity", "com.apple.ess", "com.apple.private.ids", "com.apple.private.alloy.phonecontinuity", "com.apple.madrid", "com.apple.private.ac", "com.apple.private.alloy.phone.auth", "com.apple.private.alloy.keychainsync", "com.apple.private.alloy.fmf", "com.apple.private.alloy.sms", "com.apple.private.alloy.screensharing", "com.apple.private.alloy.maps", "com.apple.private.alloy.thumper.keys", "com.apple.private.alloy.continuity.tethering" )) +Jul 5 10:31:23 calvisitor-10-105-163-10 kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 5 10:31:24 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 5 10:31:56 calvisitor-10-105-160-179 locationd[82]: Location icon should now be in state 'Active' +Jul 5 10:32:08 calvisitor-10-105-160-179 locationd[82]: Location icon should now be in state 'Inactive' +Jul 5 10:41:38 calvisitor-10-105-160-179 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 5 10:43:32 calvisitor-10-105-160-179 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 5 10:44:16 calvisitor-10-105-160-179 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 5 10:45:00 calvisitor-10-105-160-179 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.35830): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 5 10:48:06 calvisitor-10-105-160-179 quicklookd[35840]: Error returned from iconservicesagent: (null) +Jul 5 10:52:15 calvisitor-10-105-160-179 GoogleSoftwareUpdateAgent[35861]: 2017-07-05 10:52:15.982 GoogleSoftwareUpdateAgent[35861/0x700000323000] [lvl=2] -[KSOutOfProcessFetcher(PrivateMethods) helperDidTerminate:] KSOutOfProcessFetcher fetch ended for URL: "https://tools.google.com/service/update2?cup2hreq=d297a7e5b56d6bd4faa75860fff6e485c301bf4e943a561afff6c8b3707ce948&cup2key=7:2988503627" +Jul 5 10:52:16 calvisitor-10-105-160-179 ksfetch[35863]: 2017-07-05 10:52:16.779 ksfetch[35863/0x7fff79824000] [lvl=2] main() Fetcher received a request: { URL: https://tools.google.com/service/update2?cup2hreq=a7873a51b1cb55518e420d20dff47d463781ed3f7aa83c3153129eefb148070b&cup2key=7:2501762722 } +Jul 5 10:52:16 calvisitor-10-105-160-179 GoogleSoftwareUpdateAgent[35861]: 2017-07-05 10:52:16.977 GoogleSoftwareUpdateAgent[35861/0x700000323000] [lvl=2] -[KSPrefetchAction performAction] KSPrefetchAction no updates to prefetch. +Jul 5 10:56:49 calvisitor-10-105-160-179 Safari[9852]: KeychainGetICDPStatus: status: off +Jul 5 10:57:01 calvisitor-10-105-160-179 QQ[10018]: 2017/07/05 10:57:01.130 | I | VoipWrapper | DAVEngineImpl.cpp:1400:Close | close video chat. llFriendUIN = 1742124257. +Jul 5 10:57:41 calvisitor-10-105-160-179 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 5 10:58:22 calvisitor-10-105-160-179 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.35873): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SocialHelper.xpc/Contents/MacOS/com.apple.Safari.SocialHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 5 10:58:44 calvisitor-10-105-160-179 imagent[355]: : notification observer: com.apple.FaceTime notification: __CFNotification 0x7fdcc9d19110 {name = _NSDoNotDisturbEnabledNotification} +Jul 5 10:58:44 calvisitor-10-105-160-179 kernel[0]: Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0 +Jul 5 11:01:10 authorMacBook-Pro corecaptured[35877]: CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7 +Jul 5 11:01:55 calvisitor-10-105-160-179 corecaptured[35877]: Received Capture Event +Jul 5 11:01:55 calvisitor-10-105-160-179 corecaptured[35877]: CCFile::captureLogRun Skipping current file Dir file [2017-07-05_11,01,55.983179]-AirPortBrcm4360_Logs-006.txt, Current File [2017-07-05_11,01,55.983179]-AirPortBrcm4360_Logs-006.txt +Jul 5 11:39:37 calvisitor-10-105-160-179 symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 5 11:39:38 authorMacBook-Pro corecaptured[35877]: CCProfileMonitor::freeResources done +Jul 5 11:39:39 authorMacBook-Pro corecaptured[35889]: CCFile::copyFile fileName is [2017-07-05_11,39,39.743225]-CCIOReporter-001.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-05_11,39,39.743225]-CCIOReporter-001.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-05_11,39,38.739976]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-05_11,39,39.743225]-CCIOReporter-001.xml +Jul 5 11:40:26 calvisitor-10-105-160-226 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 5 11:42:05 calvisitor-10-105-160-226 Mail[11203]: tcp_connection_destination_perform_socket_connect 44073 connectx to 123.125.50.30:143@0 failed: [50] Network is down +Jul 5 11:42:53 calvisitor-10-105-160-226 identityservicesd[272]: : NC Disabled: NO +Jul 5 11:42:53 calvisitor-10-105-160-226 identityservicesd[272]: : DND Enabled: NO +Jul 5 11:47:49 calvisitor-10-105-160-226 quicklookd[35915]: Error returned from iconservicesagent: (null) +Jul 5 12:00:35 calvisitor-10-105-160-226 WindowServer[184]: CGXDisplayDidWakeNotification [723587602857832]: posting kCGSDisplayDidWake +Jul 5 12:00:39 calvisitor-10-105-160-226 identityservicesd[272]: : DND Enabled: NO +Jul 5 12:00:50 authorMacBook-Pro networkd[195]: __42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc22930 125.39.240.34:14000 +Jul 5 12:00:58 calvisitor-10-105-160-226 com.apple.AddressBook.InternetAccountsBridge[35944]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 5 12:01:10 calvisitor-10-105-160-226 QQ[10018]: button report: 0x8002bdf +Jul 5 12:02:02 calvisitor-10-105-160-226 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 5 12:05:11 calvisitor-10-105-160-226 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 5 12:35:58 calvisitor-10-105-160-226 kernel[0]: en0: BSSID changed to 88:75:56:a0:95:ed +Jul 5 12:50:34 calvisitor-10-105-160-226 kernel[0]: ARPT: 724509.898718: wl0: MDNS: IPV4 Addr: 10.105.160.226 +Jul 5 13:16:51 calvisitor-10-105-160-226 kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 5 13:43:58 calvisitor-10-105-160-226 kernel[0]: en0: BSSID changed to 88:75:56:a0:95:ed +Jul 5 13:44:18 calvisitor-10-105-160-226 com.apple.AddressBook.InternetAccountsBridge[646]: Daemon connection invalidated! +Jul 5 14:03:40 calvisitor-10-105-160-226 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 5 14:03:45 authorMacBook-Pro corecaptured[36034]: CCFile::captureLog Received Capture notice id: 1499288625.645942, reason = AuthFail:sts:5_rsn:0 +Jul 5 14:04:12 authorMacBook-Pro corecaptured[36034]: CCFile::captureLog Received Capture notice id: 1499288652.126295, reason = AuthFail:sts:5_rsn:0 +Jul 5 14:04:16 authorMacBook-Pro corecaptured[36034]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 5 14:04:19 authorMacBook-Pro corecaptured[36034]: CCFile::copyFile fileName is [2017-07-05_14,04,19.163834]-AirPortBrcm4360_Logs-025.txt, source path:/var/log/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/DriverLogs//[2017-07-05_14,04,19.163834]-AirPortBrcm4360_Logs-025.txt, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/[2017-07-05_14,04,19.222771]=AuthFail:sts:5_rsn:0/DriverLogs//[2017-07-05_14,04,19.163834]-AirPortBrcm4360_Logs-025.txt +Jul 5 14:04:19 authorMacBook-Pro corecaptured[36034]: CCFile::captureLog +Jul 5 14:04:19 authorMacBook-Pro kernel[0]: ARPT: 724786.252727: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0 +Jul 5 14:04:19 authorMacBook-Pro corecaptured[36034]: CCFile::captureLog Received Capture notice id: 1499288659.752738, reason = AuthFail:sts:5_rsn:0 +Jul 5 14:04:25 authorMacBook-Pro corecaptured[36034]: CCFile::captureLogRun Skipping current file Dir file [2017-07-05_14,04,25.118445]-AirPortBrcm4360_Logs-040.txt, Current File [2017-07-05_14,04,25.118445]-AirPortBrcm4360_Logs-040.txt +Jul 5 14:04:25 authorMacBook-Pro corecaptured[36034]: CCFile::copyFile fileName is [2017-07-05_14,04,25.705173]-CCIOReporter-044.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-05_14,04,25.705173]-CCIOReporter-044.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-05_14,04,25.777317]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-05_14,04,25.705173]-CCIOReporter-044.xml +Jul 5 14:04:26 authorMacBook-Pro corecaptured[36034]: doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-05_14,04,24.831957] - AssocFail:sts:5_rsn:0.xml +Jul 5 14:04:27 authorMacBook-Pro corecaptured[36034]: CCFile::captureLog Received Capture notice id: 1499288667.823332, reason = AuthFail:sts:5_rsn:0 +Jul 5 14:04:27 authorMacBook-Pro corecaptured[36034]: CCFile::captureLog Received Capture notice id: 1499288667.956536, reason = AuthFail:sts:5_rsn:0 +Jul 5 14:04:32 authorMacBook-Pro corecaptured[36034]: CCFile::copyFile fileName is [2017-07-05_14,04,32.840703]-io80211Family-056.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-05_14,04,32.840703]-io80211Family-056.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-05_14,04,32.969558]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-05_14,04,32.840703]-io80211Family-056.pcapng +Jul 5 14:04:32 authorMacBook-Pro corecaptured[36034]: CCFile::captureLog Received Capture notice id: 1499288672.969558, reason = AuthFail:sts:5_rsn:0 +Jul 5 14:04:33 authorMacBook-Pro corecaptured[36034]: Received Capture Event +Jul 5 14:04:33 authorMacBook-Pro corecaptured[36034]: CCFile::copyFile fileName is [2017-07-05_14,04,33.660387]-io80211Family-063.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-05_14,04,33.660387]-io80211Family-063.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-05_14,04,33.736169]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-05_14,04,33.660387]-io80211Family-063.pcapng +Jul 5 14:04:35 authorMacBook-Pro corecaptured[36034]: CCFile::captureLog +Jul 5 14:04:35 authorMacBook-Pro corecaptured[36034]: CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +Jul 5 14:15:40 authorMacBook-Pro configd[53]: network changed: v4(en0+:10.105.160.226) v6(en0:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB +Jul 5 14:56:09 authorMacBook-Pro kernel[0]: ARPT: 724869.297011: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 4551, +Jul 5 14:56:13 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4 +Jul 5 14:56:14 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 5 15:26:36 calvisitor-10-105-162-98 kernel[0]: IOHibernatePollerOpen(0) +Jul 5 15:26:36 calvisitor-10-105-162-98 kernel[0]: hibernate_machine_init: state 2, image pages 446175, sum was d4e6c0b2, imageSize 0x2aea6000, image1Size 0x215a4000, conflictCount 5848, nextFree 5887 +Jul 5 15:26:36 calvisitor-10-105-162-98 kernel[0]: [HID] [MT] AppleMultitouchDevice::willTerminate entered +Jul 5 15:40:14 calvisitor-10-105-162-98 kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 5 15:40:14 calvisitor-10-105-162-98 BezelServices 255.10[94]: ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2789 +Jul 5 15:55:35 calvisitor-10-105-162-98 kernel[0]: hibernate_rebuild completed - took 10042450943433 msecs +Jul 5 15:55:35 calvisitor-10-105-162-98 kernel[0]: AppleActuatorDevice::stop Entered +Jul 5 15:55:35 calvisitor-10-105-162-98 kernel[0]: AppleActuatorDevice::start Entered +Jul 5 15:56:38 calvisitor-10-105-162-107 kernel[0]: ARPT: 725147.528572: AirPort_Brcm43xx::powerChange: System Sleep +Jul 5 16:04:10 calvisitor-10-105-162-107 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 5 16:04:10 calvisitor-10-105-162-107 kernel[0]: hibernate_page_list_setall found pageCount 488653 +Jul 5 16:04:10 calvisitor-10-105-162-107 kernel[0]: bitmap_size 0x7f0fc, previewSize 0x4028, writing 488299 pages @ 0x97144 +Jul 5 16:04:15 authorMacBook-Pro kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 5 16:04:43 calvisitor-10-105-162-107 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 5 16:05:05 calvisitor-10-105-162-107 kernel[0]: ARPT: 725209.960568: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0 +Jul 5 16:05:05 calvisitor-10-105-162-107 corecaptured[36091]: CCFile::captureLogRun Skipping current file Dir file [2017-07-05_16,05,05.078442]-io80211Family-008.pcapng, Current File [2017-07-05_16,05,05.078442]-io80211Family-008.pcapng +Jul 5 16:05:13 calvisitor-10-105-162-107 kernel[0]: ARPT: 725218.810934: AirPort_Brcm43xx::powerChange: System Sleep +Jul 5 16:05:44 calvisitor-10-105-162-107 kernel[0]: [HID] [MT] AppleMultitouchDevice::willTerminate entered +Jul 5 16:06:03 authorMacBook-Pro corecaptured[36091]: CCFile::captureLog Received Capture notice id: 1499295963.492254, reason = RoamFail:sts:1_rsn:1 +Jul 5 16:12:50 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 5 16:12:52 authorMacBook-Pro cdpd[11807]: Saw change in network reachability (isReachable=0) +Jul 5 16:12:56 authorMacBook-Pro kernel[0]: en0: manual intervention required! +Jul 5 16:13:15 calvisitor-10-105-162-107 identityservicesd[272]: : NC Disabled: NO +Jul 5 16:13:17 calvisitor-10-105-162-107 QQ[10018]: DB Error: 1 "no such table: tb_c2cMsg_2658655094" +Jul 5 16:18:06 calvisitor-10-105-162-107 GoogleSoftwareUpdateAgent[36128]: 2017-07-05 16:18:06.450 GoogleSoftwareUpdateAgent[36128/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher beginFetchWithDelegate:] KSOutOfProcessFetcher fetching from URL: "https://tools.google.com/service/update2?cup2hreq=ac844e04cbb398fcef4cf81b4ffc44a3ebc863e89d19c0b5d39d02d78d26675b&cup2key=7:677488741" +Jul 5 16:19:21 calvisitor-10-105-162-107 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 252, items, fQueryRetries, 0, fLastRetryTimestamp, 520989480.3 +Jul 5 16:24:29 authorMacBook-Pro corecaptured[36150]: CCFile::captureLog Received Capture notice id: 1499297069.333005, reason = AuthFail:sts:5_rsn:0 +Jul 5 16:24:29 authorMacBook-Pro kernel[0]: ARPT: 725996.598754: framerdy 0x0 bmccmd 3 framecnt 1024 +Jul 5 16:24:29 authorMacBook-Pro kernel[0]: ARPT: 725996.811165: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0 +Jul 5 16:24:30 authorMacBook-Pro corecaptured[36150]: doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-05_16,24,29.663045] - AuthFail:sts:5_rsn:0.xml +Jul 5 16:24:44 airbears2-10-142-108-38 QQ[10018]: button report: 0x8002bdf +Jul 5 16:26:28 airbears2-10-142-108-38 corecaptured[36150]: CCLogTap::profileRemoved, Owner: com.apple.iokit.IO80211Family, Name: IO80211AWDLPeerManager +Jul 5 16:33:10 airbears2-10-142-108-38 locationd[82]: Location icon should now be in state 'Inactive' +Jul 5 16:37:58 airbears2-10-142-108-38 syslogd[44]: ASL Sender Statistics +Jul 5 16:47:16 airbears2-10-142-108-38 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 5 16:47:16 airbears2-10-142-108-38 Safari[9852]: KeychainGetICDPStatus: status: off +Jul 5 16:47:58 airbears2-10-142-108-38 locationd[82]: Location icon should now be in state 'Active' +Jul 5 16:58:24 airbears2-10-142-108-38 imagent[355]: : Updating enabled: NO (Topics: ( )) +Jul 5 16:58:25 airbears2-10-142-108-38 WindowServer[184]: device_generate_lock_screen_screenshot: authw 0x7fa82502bc00(2000)[0, 0, 0, 0] shield 0x7fa823930c00(2001), dev [1440,900] +Jul 5 16:58:39 airbears2-10-142-108-38 kernel[0]: ARPT: 728046.456828: wl0: setup_keepalive: Local IP: 10.142.108.38 +Jul 5 17:01:33 airbears2-10-142-108-38 com.apple.AddressBook.InternetAccountsBridge[36221]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 5 17:02:52 airbears2-10-142-108-38 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 5 17:03:07 airbears2-10-142-108-38 corecaptured[36224]: CCFile::captureLog +Jul 5 17:03:12 airbears2-10-142-108-38 kernel[0]: ARPT: 728173.580097: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10 +Jul 5 17:03:12 airbears2-10-142-108-38 kernel[0]: ARPT: 728173.580149: wl0: MDNS: IPV4 Addr: 10.142.108.38 +Jul 5 17:16:05 authorMacBook-Pro sandboxd[129] ([36227]): com.apple.Addres(36227) deny network-outbound /private/var/run/mDNSResponder +Jul 5 17:22:36 authorMacBook-Pro com.apple.WebKit.WebContent[25654]: [17:22:36.133] <<<< CRABS >>>> crabsFlumeHostAvailable: [0x7f961cf08cf0] Byte flume reports host available again. +Jul 5 17:22:56 calvisitor-10-105-163-9 configd[53]: setting hostname to "calvisitor-10-105-163-9.calvisitor.1918.berkeley.edu" +Jul 5 17:23:22 calvisitor-10-105-163-9 com.apple.AddressBook.InternetAccountsBridge[36248]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 5 17:25:05 calvisitor-10-105-163-9 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 5 17:25:06 authorMacBook-Pro com.apple.geod[30311]: PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline." UserInfo={NSUnderlyingError=0x7fe13530fc60 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 "The Internet connection appears to be offline." UserInfo={NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.} +Jul 5 17:25:08 authorMacBook-Pro kernel[0]: en0: BSSID changed to 00:a2:ee:1a:71:8c +Jul 5 17:25:08 authorMacBook-Pro kernel[0]: Unexpected payload found for message 9, dataLen 0 +Jul 5 17:27:05 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 5 17:27:05 authorMacBook-Pro locationd[82]: Location icon should now be in state 'Inactive' +Jul 5 17:27:08 authorMacBook-Pro configd[53]: network changed: DNS* Proxy +Jul 5 17:27:48 calvisitor-10-105-163-9 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 5 17:39:14 authorMacBook-Pro sandboxd[129] ([10018]): QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport +Jul 5 18:19:59 authorMacBook-Pro configd[53]: arp_client_transmit(en0) failed, Network is down (50) +Jul 5 18:19:59 authorMacBook-Pro kernel[0]: en0::IO80211Interface::postMessage bssid changed +Jul 5 18:19:59 authorMacBook-Pro kernel[0]: en0: 802.11d country code set to 'X3'. +Jul 5 18:19:59 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Inactive +Jul 5 18:20:06 authorMacBook-Pro networkd[195]: -[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! QQ.10018 tc23407 119.81.102.227:80 +Jul 5 18:20:07 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 23411 failed: 3 - No network route +Jul 5 19:00:16 authorMacBook-Pro Dropbox[24019]: [0705/190016:WARNING:dns_config_service_posix.cc(306)] Failed to read DnsConfig. +Jul 5 19:00:34 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +Jul 5 19:00:37 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID +Jul 5 19:00:42 authorMacBook-Pro corecaptured[36291]: CCFile::captureLog +Jul 5 19:00:43 authorMacBook-Pro corecaptured[36291]: CCFile::captureLogRun Skipping current file Dir file [2017-07-05_19,00,43.154864]-CCIOReporter-007.xml, Current File [2017-07-05_19,00,43.154864]-CCIOReporter-007.xml +Jul 5 19:00:43 authorMacBook-Pro corecaptured[36291]: CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +Jul 5 19:00:46 authorMacBook-Pro kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 5 19:12:41 calvisitor-10-105-160-210 kernel[0]: ARPT: 728563.210777: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 3174, +Jul 5 19:26:27 calvisitor-10-105-160-210 kernel[0]: ARPT: 728620.515604: wl0: MDNS: 0 SRV Recs, 0 TXT Recs +Jul 5 20:03:37 calvisitor-10-105-160-210 kernel[0]: Sandbox: com.apple.Addres(36325) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 5 20:16:55 calvisitor-10-105-160-210 kernel[0]: could discard act 242131 inact 107014 purgeable 254830 spec 128285 cleaned 0 +Jul 5 20:16:55 calvisitor-10-105-160-210 kernel[0]: booter start at 1251 ms smc 0 ms, [18, 0, 0] total 367 ms, dsply 0, 0 ms, tramp 1080 ms +Jul 5 20:16:56 calvisitor-10-105-160-210 blued[85]: hostControllerOnline - Number of Paired devices = 1, List of Paired devices = ( "84-41-67-32-db-e1" ) +Jul 5 20:17:19 calvisitor-10-105-160-210 sandboxd[129] ([36332]): com.apple.Addres(36332) deny network-outbound /private/var/run/mDNSResponder +Jul 5 20:44:17 calvisitor-10-105-160-210 kernel[0]: hibernate_newruntime_map time: 0 ms, IOPolledFilePollersOpen(), ml_get_interrupts_enabled 0 +Jul 5 20:44:24 calvisitor-10-105-160-210 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-06 03:44:24 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 5 21:08:40 calvisitor-10-105-162-81 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 5 21:48:33 calvisitor-10-105-162-81 kernel[0]: Wake reason: ARPT (Network) +Jul 5 21:48:33 calvisitor-10-105-162-81 blued[85]: [BluetoothHIDDeviceController] EventServiceConnectedCallback +Jul 5 21:48:33 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +Jul 5 21:48:45 authorMacBook-Pro sandboxd[129] ([10018]): QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport +Jul 5 22:29:03 calvisitor-10-105-161-231 kernel[0]: pages 1401204, wire 544128, act 416065, inact 0, cleaned 0 spec 3, zf 25, throt 0, compr 266324, xpmapped 40000 +Jul 5 22:29:03 calvisitor-10-105-161-231 kernel[0]: could discard act 74490 inact 9782 purgeable 34145 spec 56242 cleaned 0 +Jul 5 22:29:06 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +Jul 5 22:29:35 calvisitor-10-105-160-22 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 5 22:29:37 calvisitor-10-105-160-22 com.apple.AddressBook.InternetAccountsBridge[36395]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 5 23:09:36 calvisitor-10-105-160-22 kernel[0]: bitmap_size 0x7f0fc, previewSize 0x4028, writing 485676 pages @ 0x97144 +Jul 5 23:09:36 calvisitor-10-105-160-22 kernel[0]: **** [BroadcomBluetoothHostController][SetupController] -- Delay HCI Reset by 300ms **** +Jul 5 23:09:53 calvisitor-10-105-160-22 QQ[10018]: FA||Url||taskID[2019353593] dealloc +Jul 5 23:50:09 calvisitor-10-105-160-22 kernel[0]: AppleActuatorHIDEventDriver: stop +Jul 5 23:50:09 calvisitor-10-105-160-22 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][start] -- completed -- result = TRUE -- 0xb000 **** +Jul 5 23:50:09 authorMacBook-Pro kernel[0]: AppleActuatorDeviceUserClient::start Entered +Jul 5 23:50:11 authorMacBook-Pro kernel[0]: ARPT: 729188.852474: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0 +Jul 5 23:50:51 calvisitor-10-105-162-211 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 299, items, fQueryRetries, 0, fLastRetryTimestamp, 521006902.2 +Jul 6 00:30:35 calvisitor-10-105-162-211 kernel[0]: polled file major 1, minor 0, blocksize 4096, pollers 5 +Jul 6 00:30:35 calvisitor-10-105-162-211 kernel[0]: IOHibernatePollerOpen(0) +Jul 6 00:30:35 authorMacBook-Pro UserEventAgent[43]: assertion failed: 15G1510: com.apple.telemetry + 38574 [10D2E324-788C-30CC-A749-55AE67AEC7BC]: 0x7fc235807b90 +Jul 6 00:30:37 authorMacBook-Pro ksfetch[36439]: 2017-07-06 00:30:37.064 ksfetch[36439/0x7fff79824000] [lvl=2] main() Fetcher is exiting. +Jul 6 00:30:37 authorMacBook-Pro GoogleSoftwareUpdateAgent[36436]: 2017-07-06 00:30:37.071 GoogleSoftwareUpdateAgent[36436/0x7000002a0000] [lvl=2] -[KSUpdateEngine updateAllExceptProduct:] KSUpdateEngine updating all installed products, except:'com.google.Keystone'. +Jul 6 00:30:43 authorMacBook-Pro com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 6 01:11:06 authorMacBook-Pro Dropbox[24019]: [0706/011106:WARNING:dns_config_service_posix.cc(306)] Failed to read DnsConfig. +Jul 6 01:11:06 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [01:11:06.715] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 6 01:11:09 authorMacBook-Pro kernel[0]: Google Chrome He[36456] triggered unnest of range 0x7fff93c00000->0x7fff93e00000 of DYLD shared region in VM map 0x77c9114550458e7b. While not abnormal for debuggers, this increases system memory footprint until the target exits. +Jul 6 01:11:18 authorMacBook-Pro configd[53]: network changed: v4(en0+:10.105.162.138) v6(en0:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB +Jul 6 01:11:38 calvisitor-10-105-162-138 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 6 01:11:39 calvisitor-10-105-162-138 sandboxd[129] ([36461]): com.apple.Addres(36461) deny network-outbound /private/var/run/mDNSResponder +Jul 6 01:11:42 calvisitor-10-105-162-138 sandboxd[129] ([36461]): com.apple.Addres(36461) deny network-outbound /private/var/run/mDNSResponder +Jul 6 01:51:35 authorMacBook-Pro wirelessproxd[75]: Peripheral manager is not powered on +Jul 6 01:51:46 authorMacBook-Pro sandboxd[129] ([10018]): QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport +Jul 6 02:32:06 calvisitor-10-105-163-28 kernel[0]: WARNING: hibernate_page_list_setall skipped 19622 xpmapped pages +Jul 6 02:32:06 calvisitor-10-105-163-28 kernel[0]: BuildActDeviceEntry enter +Jul 6 02:32:06 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 23645 failed: 3 - No network route +Jul 6 02:32:10 authorMacBook-Pro Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-06 09:32:10 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 6 02:32:43 calvisitor-10-105-160-37 com.apple.AddressBook.InternetAccountsBridge[36491]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 6 02:32:44 calvisitor-10-105-160-37 sandboxd[129] ([36491]): com.apple.Addres(36491) deny network-outbound /private/var/run/mDNSResponder +Jul 6 03:12:38 calvisitor-10-105-160-37 kernel[0]: hibernate_alloc_pages act 107794, inact 10088, anon 460, throt 0, spec 58021, wire 572831, wireinit 39927 +Jul 6 03:12:43 authorMacBook-Pro BezelServices 255.10[94]: ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2789 +Jul 6 03:12:49 authorMacBook-Pro networkd[195]: -[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! QQ.10018 tc23677 123.151.137.101:80 +Jul 6 03:13:09 calvisitor-10-105-160-37 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +Jul 6 03:13:15 calvisitor-10-105-160-37 com.apple.AddressBook.InternetAccountsBridge[36502]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 6 03:53:08 calvisitor-10-105-160-37 kernel[0]: hibernate_page_list_setall(preflight 1) start +Jul 6 03:53:08 calvisitor-10-105-160-37 kernel[0]: hibernate_page_list_setall time: 603 ms +Jul 6 03:53:08 calvisitor-10-105-160-37 kernel[0]: IOPolledFilePollersOpen(0) 6 ms +Jul 6 03:53:08 calvisitor-10-105-160-37 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 6 03:53:18 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 23701 failed: 3 - No network route +Jul 6 04:33:35 calvisitor-10-105-160-37 kernel[0]: polled file major 1, minor 0, blocksize 4096, pollers 5 +Jul 6 04:33:35 calvisitor-10-105-160-37 kernel[0]: hibernate_teardown completed - discarded 93932 +Jul 6 04:33:35 calvisitor-10-105-160-37 kernel[0]: AppleActuatorDeviceUserClient::stop Entered +Jul 6 05:04:00 calvisitor-10-105-163-168 kernel[0]: pages 1418325, wire 548641, act 438090, inact 2, cleaned 0 spec 12, zf 30, throt 0, compr 254881, xpmapped 40000 +Jul 6 05:04:00 calvisitor-10-105-163-168 kernel[0]: Opened file /var/vm/sleepimage, size 1073741824, extents 3, maxio 2000000 ssd 1 +Jul 6 05:04:00 calvisitor-10-105-163-168 kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 6 05:04:00 calvisitor-10-105-163-168 kernel[0]: [IOBluetoothHostController::setConfigState] calling registerService +Jul 6 08:32:37 authorMacBook-Pro kernel[0]: AppleActuatorHIDEventDriver: stop +Jul 6 08:32:37 authorMacBook-Pro kernel[0]: [HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01) +Jul 6 08:32:37 authorMacBook-Pro kernel[0]: [HID] [MT] AppleMultitouchDevice::start entered +Jul 6 08:32:39 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID +Jul 6 08:32:40 authorMacBook-Pro AddressBookSourceSync[36544]: [CardDAVPlugin-ERROR] -getPrincipalInfo:[_controller supportsRequestCompressionAtURL:https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/] Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline." UserInfo={NSUnderlyingError=0x7f8de0c0dc70 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 "The Internet connection appears to be offline." UserInfo={NSErrorFailingURLStringKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, NSErrorFailingURLKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, _kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, NSErrorFailingURLKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.} +Jul 6 08:32:45 authorMacBook-Pro netbiosd[36551]: Unable to start NetBIOS name service: +Jul 6 08:32:47 authorMacBook-Pro WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 6 08:33:10 calvisitor-10-105-163-253 corecaptured[36565]: doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-06_08,33,08.335034] - AuthFail:sts:5_rsn:0.xml +Jul 6 08:33:25 calvisitor-10-105-163-253 TCIM[30318]: [Accounts] Failed to update account with identifier 76FE6715-3D27-4F21-AA35-C88C1EA820E8, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)" +Jul 6 08:33:53 calvisitor-10-105-163-253 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 6 08:35:08 calvisitor-10-105-163-253 corecaptured[36565]: Got an XPC error: Connection invalid +Jul 6 08:43:14 calvisitor-10-105-163-253 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 302, items, fQueryRetries, 0, fLastRetryTimestamp, 521048292.6 +Jul 6 08:53:11 calvisitor-10-105-163-253 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 291, items, fQueryRetries, 0, fLastRetryTimestamp, 521048893.3 +Jul 6 09:08:22 calvisitor-10-105-163-253 loginwindow[94]: -[SFLListManager(ServiceReplyProtocol) notifyChanges:toListWithIdentifier:] Notified of item changes to list with identifier com.apple.LSSharedFileList.RecentApplications +Jul 6 09:14:27 calvisitor-10-105-163-253 QQ[10018]: FA||Url||taskID[2019353614] dealloc +Jul 6 09:24:14 calvisitor-10-105-163-253 ksfetch[36728]: 2017-07-06 09:24:14.417 ksfetch[36728/0x7fff79824000] [lvl=2] main() ksfetch fetching URL ( { URL: https://tools.google.com/service/update2?cup2hreq=f5e83ec64ff3fc5533a3c206134a6517e274f9e1cb53df857e15049b6e4c9f8e&cup2key=7:1721929288 }) to folder:/tmp/KSOutOfProcessFetcher.aPWod5QMh1/download +Jul 6 09:24:14 calvisitor-10-105-163-253 GoogleSoftwareUpdateAgent[36726]: 2017-07-06 09:24:14.733 GoogleSoftwareUpdateAgent[36726/0x7000002a0000] [lvl=2] -[KSMultiUpdateAction performAction] KSPromptAction had no updates to apply. +Jul 6 09:31:18 calvisitor-10-105-163-253 WindowServer[184]: no sleep images for WillPowerOffWithImages +Jul 6 09:32:24 calvisitor-10-105-163-253 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 6 09:32:24 calvisitor-10-105-163-253 QQ[10018]: button report: 0x8002be0 +Jul 6 09:32:37 calvisitor-10-105-163-253 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 12754 seconds. Ignoring. +Jul 6 10:12:58 calvisitor-10-105-163-253 ChromeExistion[36773]: ChromeExistion main isUndetectWithCommand = 1 +Jul 6 10:13:12 calvisitor-10-105-163-253 ChromeExistion[36775]: after trim url = https://www.google.com/_/chrome/newtab?rlz=1C5CHFA_enHK732HK732&espv=2&ie=UTF-8 +Jul 6 10:13:16 calvisitor-10-105-163-253 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 6 10:17:44 calvisitor-10-105-163-253 ChromeExistion[36801]: ChromeExistion main strSendMsg = {"websitekey":false,"commandkey":true,"browserkey":true} +Jul 6 10:52:03 calvisitor-10-105-163-253 locationd[82]: Location icon should now be in state 'Active' +Jul 6 10:52:20 calvisitor-10-105-163-253 ChromeExistion[36846]: ChromeExistion main isUndetectWithCommand = 1 +Jul 6 10:52:50 calvisitor-10-105-163-253 ChromeExistion[36852]: url host = www.baidu.com +Jul 6 10:53:30 calvisitor-10-105-163-253 ChromeExistion[36855]: the url = http://baike.baidu.com/item/%E8%93%9D%E9%87%87%E5%92%8C/462624?fr=aladdin +Jul 6 11:07:29 calvisitor-10-105-163-253 sharingd[30299]: 11:07:29.673 : Purged contact hashes +Jul 6 11:08:42 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 6 11:14:33 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +Jul 6 11:21:02 calvisitor-10-105-163-253 kernel[0]: ARPT: 739017.747240: ARPT: Wake Reason: Wake on Scan offload +Jul 6 11:21:02 calvisitor-10-105-163-253 kernel[0]: en0: channel changed to 1 +Jul 6 11:21:02 calvisitor-10-105-163-253 kernel[0]: AirPort: Link Up on awdl0 +Jul 6 11:21:06 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +Jul 6 11:21:06 authorMacBook-Pro configd[53]: network changed: DNS* Proxy +Jul 6 11:59:42 calvisitor-10-105-162-178 kernel[0]: en0: channel changed to 36,+1 +Jul 6 12:00:10 calvisitor-10-105-162-178 sandboxd[129] ([36919]): com.apple.Addres(36919) deny network-outbound /private/var/run/mDNSResponder +Jul 6 12:00:53 authorMacBook-Pro CalendarAgent[279]: [com.apple.calendar.store.log.caldav.queue] [Adding [] to failed operations.] +Jul 6 12:00:53 authorMacBook-Pro corecaptured[36918]: Received Capture Event +Jul 6 12:00:58 authorMacBook-Pro corecaptured[36918]: CCFile::captureLogRun Skipping current file Dir file [2017-07-06_12,00,58.629029]-AirPortBrcm4360_Logs-007.txt, Current File [2017-07-06_12,00,58.629029]-AirPortBrcm4360_Logs-007.txt +Jul 6 12:01:10 authorMacBook-Pro kernel[0]: ARPT: 739157.867474: wlc_dump_aggfifo: +Jul 6 12:01:16 authorMacBook-Pro corecaptured[36918]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 6 12:01:16 authorMacBook-Pro kernel[0]: ARPT: 739163.832381: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0 +Jul 6 12:01:17 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 6 12:02:25 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000 +Jul 6 12:02:26 authorMacBook-Pro configd[53]: network changed: v6(en0-:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS- Proxy- +Jul 6 12:02:58 authorMacBook-Pro corecaptured[36918]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 6 12:03:00 authorMacBook-Pro corecaptured[36918]: CCFile::captureLogRun Skipping current file Dir file [2017-07-06_12,03,00.133649]-CCIOReporter-028.xml, Current File [2017-07-06_12,03,00.133649]-CCIOReporter-028.xml +Jul 6 12:03:00 authorMacBook-Pro kernel[0]: ARPT: 739241.687186: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0 +Jul 6 12:03:00 authorMacBook-Pro corecaptured[36918]: CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7 +Jul 6 12:03:02 authorMacBook-Pro corecaptured[36918]: CCFile::captureLogRun Skipping current file Dir file [2017-07-06_12,03,02.449748]-AirPortBrcm4360_Logs-037.txt, Current File [2017-07-06_12,03,02.449748]-AirPortBrcm4360_Logs-037.txt +Jul 6 12:03:05 authorMacBook-Pro corecaptured[36918]: CCFile::captureLog Received Capture notice id: 1499367785.097211, reason = AuthFail:sts:5_rsn:0 +Jul 6 12:03:07 authorMacBook-Pro com.apple.AddressBook.InternetAccountsBridge[36937]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 6 12:03:12 authorMacBook-Pro networkd[195]: __42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc24039 112.90.78.169:8080 +Jul 6 12:03:12 authorMacBook-Pro Dropbox[24019]: [0706/120312:WARNING:dns_config_service_posix.cc(306)] Failed to read DnsConfig. +Jul 6 12:03:12 authorMacBook-Pro kernel[0]: ARPT: 739253.582611: wlc_dump_aggfifo: +Jul 6 12:03:12 authorMacBook-Pro corecaptured[36918]: CCFile::captureLog Received Capture notice id: 1499367792.155080, reason = AuthFail:sts:5_rsn:0 +Jul 6 12:03:12 authorMacBook-Pro corecaptured[36918]: CCFile::captureLogRun Skipping current file Dir file [2017-07-06_12,03,12.289973]-CCIOReporter-041.xml, Current File [2017-07-06_12,03,12.289973]-CCIOReporter-041.xml +Jul 6 12:03:37 authorMacBook-Pro kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 5 +Jul 6 12:04:03 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 6 12:04:16 authorMacBook-Pro kernel[0]: ARPT: 739295.354731: wl0: Roamed or switched channel, reason #4, bssid f8:4f:57:3b:ea:b2, last RSSI -77 +Jul 6 12:04:16 authorMacBook-Pro kernel[0]: en0: BSSID changed to f8:4f:57:3b:ea:b2 +Jul 6 12:05:06 authorMacBook-Pro kernel[0]: in6_unlink_ifa: IPv6 address 0x77c911454f1523ab has no prefix +Jul 6 12:05:41 calvisitor-10-105-162-178 Safari[9852]: tcp_connection_tls_session_error_callback_imp 2375 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22 +Jul 6 12:05:46 calvisitor-10-105-162-178 kernel[0]: ARPT: 739357.156234: wl0: setup_keepalive: Seq: 1852166454, Ack: 1229910694, Win size: 4096 +Jul 6 12:17:22 calvisitor-10-105-162-178 kernel[0]: ARPT: 739359.663674: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +Jul 6 12:17:22 calvisitor-10-105-162-178 kernel[0]: en0: BSSID changed to 88:75:56:a0:95:ed +Jul 6 12:30:59 calvisitor-10-105-162-178 kernel[0]: ARPT: 739420.595498: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 6 12:31:58 calvisitor-10-105-162-178 kernel[0]: ARPT: 739481.576701: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f +Jul 6 12:58:15 calvisitor-10-105-162-178 kernel[0]: ARPT: 739549.504820: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 6 12:59:11 calvisitor-10-105-162-178 kernel[0]: ARPT: 739605.015490: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:cc53:3e31:ccd8:11d4 +Jul 6 13:11:53 calvisitor-10-105-162-178 kernel[0]: Previous sleep cause: 5 +Jul 6 13:12:52 calvisitor-10-105-162-178 kernel[0]: ARPT: 739668.778627: AirPort_Brcm43xx::powerChange: System Sleep +Jul 6 13:39:08 calvisitor-10-105-162-178 Mail[11203]: tcp_connection_destination_perform_socket_connect 45238 connectx to 123.125.50.30:993@0 failed: [50] Network is down +Jul 6 14:07:50 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 24150 failed: 3 - No network route +Jul 6 14:08:48 authorMacBook-Pro kernel[0]: hibernate_rebuild started +Jul 6 14:08:49 authorMacBook-Pro blued[85]: INIT -- Host controller is published +Jul 6 14:09:31 authorMacBook-Pro corecaptured[37027]: Received Capture Event +Jul 6 14:09:32 authorMacBook-Pro corecaptured[37027]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 6 14:15:54 authorMacBook-Pro CalendarAgent[279]: [com.apple.calendar.store.log.caldav.queue] [Adding [] to failed operations.] +Jul 6 14:15:59 authorMacBook-Pro corecaptured[37027]: Received Capture Event +Jul 6 14:15:59 authorMacBook-Pro corecaptured[37027]: CCFile::captureLogRun Skipping current file Dir file [2017-07-06_14,15,59.644892]-CCIOReporter-007.xml, Current File [2017-07-06_14,15,59.644892]-CCIOReporter-007.xml +Jul 6 14:15:59 authorMacBook-Pro corecaptured[37027]: CCFile::captureLogRun Skipping current file Dir file [2017-07-06_14,15,59.726497]-io80211Family-008.pcapng, Current File [2017-07-06_14,15,59.726497]-io80211Family-008.pcapng +Jul 6 14:16:06 calvisitor-10-105-162-178 sharingd[30299]: 14:16:06.179 : Scanning mode Contacts Only +Jul 6 14:16:10 calvisitor-10-105-162-178 kernel[0]: Sandbox: com.apple.Addres(37034) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 6 14:17:00 calvisitor-10-105-162-178 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.user.501): Service "com.apple.xpc.launchd.unmanaged.loginwindow.94" tried to hijack endpoint "com.apple.tsm.uiserver" from owner: com.apple.SystemUIServer.agent +Jul 6 14:17:14 calvisitor-10-105-162-178 kernel[0]: ARPT: 740034.911245: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10 +Jul 6 14:29:38 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 6 14:43:10 calvisitor-10-105-162-178 kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 6 14:43:22 calvisitor-10-105-162-178 com.apple.AddressBook.InternetAccountsBridge[37051]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted +Jul 6 14:44:08 calvisitor-10-105-162-178 kernel[0]: PM response took 1999 ms (54, powerd) +Jul 6 14:56:48 calvisitor-10-105-162-178 kernel[0]: en0: channel changed to 36,+1 +Jul 6 14:56:48 calvisitor-10-105-162-178 kernel[0]: RTC: Maintenance 2017/7/6 21:56:47, sleep 2017/7/6 21:44:10 +Jul 6 14:56:48 calvisitor-10-105-162-178 kernel[0]: Previous sleep cause: 5 +Jul 6 14:57:16 calvisitor-10-105-162-178 ksfetch[37061]: 2017-07-06 14:57:16.261 ksfetch[37061/0x7fff79824000] [lvl=2] KSHelperReceiveAllData() KSHelperTool read 1999 bytes from stdin. +Jul 6 14:57:16 calvisitor-10-105-162-178 GoogleSoftwareUpdateAgent[37059]: 2017-07-06 14:57:16.661 GoogleSoftwareUpdateAgent[37059/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher(PrivateMethods) helperDidTerminate:] KSOutOfProcessFetcher fetch ended for URL: "https://tools.google.com/service/update2?cup2hreq=37fbcb7ab6829be04567976e3212d7a67627aef11546f8b7013d4cffaf51f739&cup2key=7:4200177539" +Jul 6 14:57:16 calvisitor-10-105-162-178 GoogleSoftwareUpdateAgent[37059]: 2017-07-06 14:57:16.667 GoogleSoftwareUpdateAgent[37059/0x7000002a0000] [lvl=2] -[KSAgentApp(KeystoneDelegate) updateEngineFinishedWithErrors:] Keystone finished: errors=0 +Jul 6 15:10:30 calvisitor-10-105-162-178 kernel[0]: ARPT: 740174.102665: wl0: MDNS: 0 SRV Recs, 0 TXT Recs +Jul 6 15:24:08 calvisitor-10-105-162-178 com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 6 15:30:53 calvisitor-10-105-162-178 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us +Jul 6 15:30:54 calvisitor-10-105-162-178 kernel[0]: ARPT: 740226.968934: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 6 15:45:08 calvisitor-10-105-162-178 kernel[0]: ARPT: 740345.497593: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 6 15:45:08 calvisitor-10-105-162-178 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 6 15:45:08 calvisitor-10-105-162-178 kernel[0]: in6_unlink_ifa: IPv6 address 0x77c911454f152b8b has no prefix +Jul 6 15:58:40 calvisitor-10-105-162-178 kernel[0]: ARPT: 740352.115529: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 6 16:12:15 calvisitor-10-105-162-178 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us +Jul 6 16:12:15 calvisitor-10-105-162-178 kernel[0]: Previous sleep cause: 5 +Jul 6 16:12:15 authorMacBook-Pro Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-06 23:12:15 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 6 16:12:20 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 6 16:15:50 calvisitor-10-105-162-178 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 6 16:16:11 calvisitor-10-105-162-178 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 6 16:17:36 authorMacBook-Pro kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 6 16:17:39 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 6 16:18:17 calvisitor-10-105-162-178 kernel[0]: ARPT: 740501.982555: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f +Jul 6 16:29:37 calvisitor-10-105-162-178 kernel[0]: ARPT: 740504.547655: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 6 16:29:37 calvisitor-10-105-162-178 kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 6 16:29:37 authorMacBook-Pro networkd[195]: __42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc24283 119.81.102.227:80 +Jul 6 16:29:42 authorMacBook-Pro symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 6 16:29:42 authorMacBook-Pro corecaptured[37102]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 6 16:29:43 authorMacBook-Pro corecaptured[37102]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 6 16:29:48 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4 +Jul 6 16:29:58 calvisitor-10-105-162-178 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 6 16:43:27 calvisitor-10-105-162-178 kernel[0]: in6_unlink_ifa: IPv6 address 0x77c911453a6db3ab has no prefix +Jul 6 16:43:37 calvisitor-10-105-162-178 com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 6 17:23:42 calvisitor-10-105-162-178 kernel[0]: ARPT: 740631.402908: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 5802, +Jul 6 17:23:43 calvisitor-10-105-162-178 sharingd[30299]: 17:23:43.193 : Scanning mode Contacts Only +Jul 6 17:23:46 calvisitor-10-105-162-178 QQ[10018]: DB Error: 1 "no such table: tb_c2cMsg_2658655094" +Jul 6 17:28:48 calvisitor-10-105-162-178 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.37146): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 6 17:34:52 calvisitor-10-105-162-178 QQ[10018]: FA||Url||taskID[2019353659] dealloc +Jul 6 17:48:02 calvisitor-10-105-162-178 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 302, items, fQueryRetries, 0, fLastRetryTimestamp, 521080983.6 +Jul 6 17:57:59 calvisitor-10-105-162-178 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 300, items, fQueryRetries, 0, fLastRetryTimestamp, 521081581.2 +Jul 6 18:05:46 calvisitor-10-105-162-178 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 6 18:07:04 calvisitor-10-105-162-178 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 6 18:09:02 calvisitor-10-105-162-178 kernel[0]: Sandbox: com.apple.WebKit(9854) deny(1) file-read-data /private/etc/hosts +Jul 6 18:09:43 calvisitor-10-105-162-178 QQ[10018]: FA||Url||taskID[2019353666] dealloc +Jul 6 18:22:57 calvisitor-10-105-162-178 AirPlayUIAgent[415]: 2017-07-06 06:22:57.163367 PM [AirPlayUIAgent] BecomingInactive: NSWorkspaceWillSleepNotification +Jul 6 18:22:57 calvisitor-10-105-162-178 QQ[10018]: 2017/07/06 18:22:57.953 | I | VoipWrapper | DAVEngineImpl.cpp:1400:Close | close video chat. llFriendUIN = 1742124257. +Jul 6 18:23:11 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 7518 seconds. Ignoring. +Jul 6 18:23:43 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 258 seconds. Ignoring. +Jul 6 18:36:51 calvisitor-10-105-162-178 kernel[0]: [HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01) +Jul 6 18:37:07 calvisitor-10-105-162-178 kernel[0]: Sandbox: com.apple.Addres(37204) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 6 18:37:20 calvisitor-10-105-162-178 kernel[0]: full wake request (reason 2) 30914 ms +Jul 6 18:37:30 calvisitor-10-105-162-178 sharingd[30299]: 18:37:30.916 : BTLE scanner Powered Off +Jul 6 18:37:37 calvisitor-10-105-162-178 QQ[10018]: ############################## _getSysMsgList +Jul 6 18:50:29 calvisitor-10-105-162-178 kernel[0]: ARPT: 744319.484045: wl0: wl_update_tcpkeep_seq: Original Seq: 1092633597, Ack: 2572586285, Win size: 4096 +Jul 6 18:50:29 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 65594 seconds. Ignoring. +Jul 6 18:50:29 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5880 seconds. Ignoring. +Jul 6 18:50:29 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 16680 seconds. Ignoring. +Jul 6 18:51:42 calvisitor-10-105-162-178 kernel[0]: kern_open_file_for_direct_io(0) +Jul 6 19:04:07 calvisitor-10-105-162-178 QQ[10018]: ############################## _getSysMsgList +Jul 6 19:04:07 calvisitor-10-105-162-178 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 6 19:04:46 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 15823 seconds. Ignoring. +Jul 6 19:17:46 calvisitor-10-105-162-178 kernel[0]: Wake reason: RTC (Alarm) +Jul 6 19:17:46 calvisitor-10-105-162-178 sharingd[30299]: 19:17:46.405 : BTLE scanner Powered Off +Jul 6 19:17:46 calvisitor-10-105-162-178 kernel[0]: ARPT: 744472.877165: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 6 19:18:27 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 15002 seconds. Ignoring. +Jul 6 19:19:43 calvisitor-10-105-162-178 kernel[0]: ARPT: 744589.508896: wl0: setup_keepalive: Remote IP: 17.249.28.35 +Jul 6 19:31:29 calvisitor-10-105-162-178 kernel[0]: ARPT: 744593.160590: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 1529267953, Ack 4054195714, Win size 380 +Jul 6 19:31:29 calvisitor-10-105-162-178 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 6 19:31:29 calvisitor-10-105-162-178 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 6 19:31:29 calvisitor-10-105-162-178 kernel[0]: ARPT: 744595.284508: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 6 19:31:39 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 524667 seconds. Ignoring. +Jul 6 19:31:41 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 63122 seconds. Ignoring. +Jul 6 19:31:49 calvisitor-10-105-162-178 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 6 19:31:49 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 524657 seconds. Ignoring. +Jul 6 19:32:24 calvisitor-10-105-162-178 kernel[0]: ARPT: 744650.016431: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:f882:21d2:d1af:f093 +Jul 6 19:45:06 calvisitor-10-105-162-178 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 6 19:45:16 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2593 seconds. Ignoring. +Jul 6 19:45:26 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 523840 seconds. Ignoring. +Jul 6 19:45:43 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 62280 seconds. Ignoring. +Jul 6 19:58:57 calvisitor-10-105-162-178 kernel[0]: PM response took 129 ms (10018, QQ) +Jul 6 20:03:04 calvisitor-10-105-162-178 kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 6 20:03:05 calvisitor-10-105-162-178 sharingd[30299]: 20:03:05.179 : BTLE scanner Powered Off +Jul 6 20:03:05 calvisitor-10-105-162-178 QQ[10018]: button report: 0x80039B7 +Jul 6 20:03:23 calvisitor-10-105-162-178 com.apple.AddressBook.InternetAccountsBridge[37261]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 6 20:04:04 calvisitor-10-105-162-178 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 6 20:05:04 calvisitor-10-105-162-178 WeChat[24144]: jemmytest +Jul 6 20:05:07 calvisitor-10-105-162-178 Safari[9852]: KeychainGetICDPStatus: status: off +Jul 6 20:05:36 calvisitor-10-105-162-178 CalendarAgent[279]: [com.apple.calendar.store.log.caldav.queue] [Adding [] to failed operations.] +Jul 6 20:14:33 calvisitor-10-105-162-178 QQ[10018]: FA||Url||taskID[2019353677] dealloc +Jul 6 20:30:35 calvisitor-10-105-162-178 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 6 20:35:33 calvisitor-10-105-162-178 WeChat[24144]: jemmytest +Jul 6 20:38:15 calvisitor-10-105-162-178 locationd[82]: Location icon should now be in state 'Active' +Jul 6 20:46:03 calvisitor-10-105-162-178 GoogleSoftwareUpdateAgent[37316]: 2017-07-06 20:46:03.869 GoogleSoftwareUpdateAgent[37316/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher beginFetchWithDelegate:] KSOutOfProcessFetcher start fetch from URL: "https://tools.google.com/service/update2?cup2hreq=5e15fbe422c816bef7c133cfffdb516e16923579b9be2dfae4d7d8d211b25017&cup2key=7:780377214" +Jul 6 20:53:41 calvisitor-10-105-162-178 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 291, items, fQueryRetries, 0, fLastRetryTimestamp, 521092126.3 +Jul 6 21:00:02 calvisitor-10-105-162-178 locationd[82]: NETWORK: no response from server, reachability, 2, queryRetries, 2 +Jul 6 21:03:09 calvisitor-10-105-162-178 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 6 21:08:02 calvisitor-10-105-162-178 Preview[11512]: Page bounds {{0, 0}, {400, 400}} +Jul 6 21:22:31 calvisitor-10-105-162-178 WeChat[24144]: Failed to connect (titleField) outlet from (MMSessionPickerChoosenRowView) to (NSTextField): missing setter or instance variable +Jul 6 22:05:30 calvisitor-10-105-162-178 CalendarAgent[279]: [com.apple.calendar.store.log.caldav.queue] [Account xpc_ben@163.com@https://caldav.163.com/caldav/principals/users/xpc_ben%40163.com/ timed out when executing operation: ] +Jul 6 22:26:19 calvisitor-10-105-162-178 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 6 22:33:18 calvisitor-10-105-162-178 CalendarAgent[279]: [com.apple.calendar.store.log.caldav.queue] [Account refresh failed with error: Error Domain=CoreDAVHTTPStatusErrorDomain Code=502 "(null)" UserInfo={AccountName=163, CalDAVErrFromRefresh=YES, CoreDAVHTTPHeaders={type = immutable dict, count = 5, entries => 0 : Connection = {contents = "keep-alive"} 3 : Content-Type = text/html 4 : Content-Length = 166 5 : Server = nginx 6 : Date = {contents = "Fri, 07 Jul 2017 05:32:43 GMT"} } }] +Jul 6 22:37:40 calvisitor-10-105-162-178 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 6 23:00:45 calvisitor-10-105-162-178 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 6 23:28:39 calvisitor-10-105-162-178 locationd[82]: Location icon should now be in state 'Inactive' +Jul 6 23:33:20 calvisitor-10-105-162-178 Preview[11512]: Page bounds {{0, 0}, {400, 400}} +Jul 6 23:33:55 calvisitor-10-105-162-178 SpotlightNetHelper[352]: CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data +Jul 7 00:01:59 calvisitor-10-105-162-178 kernel[0]: Sandbox: SpotlightNetHelp(352) deny(1) ipc-posix-shm-read-data CFPBS:186A7: +Jul 7 00:02:27 calvisitor-10-105-162-178 Safari[9852]: tcp_connection_tls_session_error_callback_imp 2438 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22 +Jul 7 00:09:34 calvisitor-10-105-162-178 QQ[10018]: FA||Url||taskID[2019353724] dealloc +Jul 7 00:10:01 calvisitor-10-105-162-178 taskgated[273]: no application identifier provided, can't use provisioning profiles [pid=37563] +Jul 7 00:12:09 calvisitor-10-105-162-178 SpotlightNetHelper[352]: tcp_connection_destination_handle_tls_close_notify 111 closing socket due to TLS CLOSE_NOTIFY alert +Jul 7 00:24:41 calvisitor-10-105-162-178 com.apple.WebKit.Networking[9854]: CFNetwork SSLHandshake failed (-9802) +Jul 7 00:26:36 calvisitor-10-105-162-178 Preview[11512]: Unable to simultaneously satisfy constraints: ( "", "", "", "", "", "=NSSpace(8))-[NSTextField:0x7f8f02f1da90]>" ) Will attempt to recover by breaking constraint Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger. +Jul 7 00:26:41 calvisitor-10-105-162-178 Preview[11512]: Unable to simultaneously satisfy constraints: ( "", "", "", "", "", "=NSSpace(8))-[NSTextField:0x7f8efb89e7a0]>" ) Will attempt to recover by breaking constraint Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger. +Jul 7 00:30:06 calvisitor-10-105-162-178 syslogd[44]: Configuration Notice: ASL Module "com.apple.authkit.osx.asl" sharing output destination "/var/log/Accounts" with ASL Module "com.apple.Accounts". Output parameters from ASL Module "com.apple.Accounts" override any specified in ASL Module "com.apple.authkit.osx.asl". +Jul 7 00:43:06 calvisitor-10-105-162-178 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 7 00:43:09 calvisitor-10-105-162-178 imagent[355]: : NC Disabled: NO +Jul 7 00:43:09 calvisitor-10-105-162-178 identityservicesd[272]: : NC Disabled: NO +Jul 7 00:52:55 authorMacBook-Pro corecaptured[37602]: CCFile::copyFile fileName is [2017-07-07_00,52,55.450817]-CCIOReporter-001.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-07_00,52,55.450817]-CCIOReporter-001.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-07_00,52,54.449889]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-07_00,52,55.450817]-CCIOReporter-001.xml +Jul 7 00:52:58 authorMacBook-Pro symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 7 00:52:58 authorMacBook-Pro UserEventAgent[43]: Captive: [CNInfoNetworkActive:1748] en0: SSID 'CalVisitor' making interface primary (cache indicates network not captive) +Jul 7 00:53:03 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 43840 seconds. Ignoring. +Jul 7 00:53:09 calvisitor-10-105-162-178 mds[63]: (DiskStore.Normal:2382) 20cb04f 1.000086 +Jul 7 00:53:19 calvisitor-10-105-162-178 sandboxd[129] ([37617]): com.apple.Addres(37617) deny network-outbound /private/var/run/mDNSResponder +Jul 7 00:53:26 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5703 seconds. Ignoring. +Jul 7 01:06:34 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 7 01:33:49 calvisitor-10-105-162-178 kernel[0]: [HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01) +Jul 7 01:34:46 calvisitor-10-105-162-178 kernel[0]: ARPT: 761864.513194: AirPort_Brcm43xx::powerChange: System Sleep +Jul 7 01:47:40 calvisitor-10-105-162-178 GoogleSoftwareUpdateAgent[37644]: 2017-07-07 01:47:40.090 GoogleSoftwareUpdateAgent[37644/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher beginFetchWithDelegate:] KSOutOfProcessFetcher start fetch from URL: "https://tools.google.com/service/update2?cup2hreq=c30943ccd5e0a03e93b6be3e2b7e2127989f08f1bde99263ffee091de8b8bc39&cup2key=7:1039900771" +Jul 7 02:01:04 calvisitor-10-105-162-178 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 7 02:14:41 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 7 02:15:01 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 38922 seconds. Ignoring. +Jul 7 02:15:01 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 893 seconds. Ignoring. +Jul 7 02:28:19 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 7 02:42:24 calvisitor-10-105-162-178 sandboxd[129] ([37682]): com.apple.Addres(37682) deny network-outbound /private/var/run/mDNSResponder +Jul 7 02:42:27 calvisitor-10-105-162-178 com.apple.AddressBook.InternetAccountsBridge[37682]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 7 02:55:51 calvisitor-10-105-162-178 com.apple.CDScheduler[258]: Thermal pressure state: 1 Memory pressure state: 0 +Jul 7 02:56:01 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 498005 seconds. Ignoring. +Jul 7 03:09:18 calvisitor-10-105-162-178 kernel[0]: ARPT: 762302.122693: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +Jul 7 03:09:38 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 35733 seconds. Ignoring. +Jul 7 03:10:18 calvisitor-10-105-162-178 kernel[0]: ARPT: 762363.637095: AirPort_Brcm43xx::powerChange: System Sleep +Jul 7 03:22:55 calvisitor-10-105-162-178 kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 7 03:22:55 calvisitor-10-105-162-178 kernel[0]: ARPT: 762366.143164: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 7 03:23:15 calvisitor-10-105-162-178 com.apple.AddressBook.InternetAccountsBridge[37700]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2 +Jul 7 03:36:32 calvisitor-10-105-162-178 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 7 03:36:32 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 7 03:50:09 calvisitor-10-105-162-178 kernel[0]: ARPT: 762484.281874: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 7 03:50:19 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 33204 seconds. Ignoring. +Jul 7 03:50:29 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 33282 seconds. Ignoring. +Jul 7 03:51:08 calvisitor-10-105-162-178 kernel[0]: ARPT: 762543.171617: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0, +Jul 7 04:04:43 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 106 seconds. Ignoring. +Jul 7 04:04:43 calvisitor-10-105-162-178 kernel[0]: ARPT: 762603.017378: wl0: setup_keepalive: Local port: 62991, Remote port: 443 +Jul 7 04:17:24 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 7 04:17:33 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 31570 seconds. Ignoring. +Jul 7 04:17:37 calvisitor-10-105-162-178 locationd[82]: Location icon should now be in state 'Active' +Jul 7 04:17:52 calvisitor-10-105-162-178 sandboxd[129] ([37725]): com.apple.Addres(37725) deny network-outbound /private/var/run/mDNSResponder +Jul 7 04:31:01 calvisitor-10-105-162-178 kernel[0]: AirPort: Link Down on awdl0. Reason 1 (Unspecified). +Jul 7 04:44:38 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 491488 seconds. Ignoring. +Jul 7 04:44:48 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1002 seconds. Ignoring. +Jul 7 04:44:48 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1002 seconds. Ignoring. +Jul 7 04:58:15 calvisitor-10-105-162-178 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds +Jul 7 04:58:15 calvisitor-10-105-162-178 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 7 04:58:16 calvisitor-10-105-162-178 kernel[0]: AirPort: Link Up on awdl0 +Jul 7 04:58:35 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 29108 seconds. Ignoring. +Jul 7 04:58:36 calvisitor-10-105-162-178 com.apple.AddressBook.InternetAccountsBridge[37745]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 7 04:58:40 calvisitor-10-105-162-178 sandboxd[129] ([37745]): com.apple.Addres(37745) deny network-outbound /private/var/run/mDNSResponder +Jul 7 05:11:52 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 7 05:12:46 calvisitor-10-105-162-178 kernel[0]: ARPT: 762900.518967: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:3065:65eb:758e:972a +Jul 7 05:25:49 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1065 seconds. Ignoring. +Jul 7 05:26:27 calvisitor-10-105-162-178 kernel[0]: ARPT: 762962.511796: AirPort_Brcm43xx::powerChange: System Sleep +Jul 7 05:39:27 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 26744 seconds. Ignoring. +Jul 7 05:39:27 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 26656 seconds. Ignoring. +Jul 7 05:40:03 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 488163 seconds. Ignoring. +Jul 7 05:52:44 calvisitor-10-105-162-178 kernel[0]: ARPT: 763023.568413: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 7 05:52:44 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 25947 seconds. Ignoring. +Jul 7 06:06:21 calvisitor-10-105-162-178 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us +Jul 7 06:06:21 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 25042 seconds. Ignoring. +Jul 7 06:07:14 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 25077 seconds. Ignoring. +Jul 7 06:48:46 authorMacBook-Pro corecaptured[37783]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 7 07:01:09 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 21754 seconds. Ignoring. +Jul 7 07:01:14 calvisitor-10-105-162-178 corecaptured[37799]: CCFile::captureLogRun Skipping current file Dir file [2017-07-07_07,01,14.472939]-CCIOReporter-002.xml, Current File [2017-07-07_07,01,14.472939]-CCIOReporter-002.xml +Jul 7 07:15:32 calvisitor-10-105-162-178 kernel[0]: ARPT: 763490.115579: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f +Jul 7 07:16:35 authorMacBook-Pro configd[53]: setting hostname to "authorMacBook-Pro.local" +Jul 7 07:16:48 calvisitor-10-105-162-178 corecaptured[37799]: CCDataTap::profileRemoved, Owner: com.apple.driver.AirPort.Brcm4360.0, Name: StateSnapshots +Jul 7 07:17:17 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 20786 seconds. Ignoring. +Jul 7 07:30:15 calvisitor-10-105-162-178 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 7 07:30:15 calvisitor-10-105-162-178 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 7 07:30:25 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 481541 seconds. Ignoring. +Jul 7 07:30:35 calvisitor-10-105-162-178 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 7 07:59:26 calvisitor-10-105-162-178 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us +Jul 7 07:59:26 calvisitor-10-105-162-178 configd[53]: setting hostname to "authorMacBook-Pro.local" +Jul 7 07:59:26 authorMacBook-Pro kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 7 07:59:31 calvisitor-10-105-162-178 sandboxd[129] ([10018]): QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport +Jul 7 07:59:46 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 479780 seconds. Ignoring. +Jul 7 08:28:42 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 7 08:28:48 calvisitor-10-105-162-178 networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000 +Jul 7 08:42:41 calvisitor-10-105-162-178 com.apple.CDScheduler[43]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 7 09:09:36 calvisitor-10-105-162-178 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-07 16:09:36 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 7 09:09:55 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 14028 seconds. Ignoring. +Jul 7 09:10:35 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 7 09:23:13 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 474773 seconds. Ignoring. +Jul 7 09:37:11 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 473935 seconds. Ignoring. +Jul 7 09:50:48 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 11575 seconds. Ignoring. +Jul 7 09:51:24 calvisitor-10-105-162-178 kernel[0]: ARPT: 764299.017125: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:9cb8:f7f2:7c03:f956 +Jul 7 10:04:25 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 472301 seconds. Ignoring. +Jul 7 10:04:25 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 845 seconds. Ignoring. +Jul 7 10:05:03 calvisitor-10-105-162-178 kernel[0]: ARPT: 764361.057441: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:9cb8:f7f2:7c03:f956 +Jul 7 10:17:44 calvisitor-10-105-162-178 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 9959 seconds. Ignoring. +Jul 7 10:17:44 calvisitor-10-105-162-178 kernel[0]: AirPort: Link Up on awdl0 +Jul 7 10:18:03 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 10028 seconds. Ignoring. +Jul 7 10:18:45 calvisitor-10-105-162-178 kernel[0]: ARPT: 764427.640542: wl0: setup_keepalive: Seq: 204730741, Ack: 2772623181, Win size: 4096 +Jul 7 10:31:22 calvisitor-10-105-162-178 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds +Jul 7 10:31:22 calvisitor-10-105-162-178 kernel[0]: RTC: Maintenance 2017/7/7 17:31:21, sleep 2017/7/7 17:18:49 +Jul 7 10:31:32 calvisitor-10-105-162-178 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 9219 seconds. Ignoring. +Jul 7 10:37:43 calvisitor-10-105-162-178 kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 7 10:37:43 calvisitor-10-105-162-178 QQ[10018]: ############################## _getSysMsgList +Jul 7 10:37:43 calvisitor-10-105-162-178 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 7 10:37:43 calvisitor-10-105-162-178 kernel[0]: en0: channel changed to 1 +Jul 7 10:38:06 calvisitor-10-105-162-178 Mail[11203]: Unrecognized XSSimpleTypeDefinition: OneOff +Jul 7 10:38:10 calvisitor-10-105-162-178 QQ[10018]: DB Path: /Users/xpc/Library/Containers/com.tencent.qq/Data/Documents/contents/916639562/QQ.db +Jul 7 10:38:23 calvisitor-10-105-162-178 UserEventAgent[258]: Could not get event name for stream/token: com.apple.xpc.activity/4505: 132: Request for stale data +Jul 7 10:54:41 calvisitor-10-105-162-178 ksfetch[37925]: 2017-07-07 10:54:41.296 ksfetch[37925/0x7fff79824000] [lvl=2] KSHelperReceiveAllData() KSHelperTool read 1926 bytes from stdin. +Jul 7 10:54:41 calvisitor-10-105-162-178 GoogleSoftwareUpdateAgent[37924]: 2017-07-07 10:54:41.875 GoogleSoftwareUpdateAgent[37924/0x7000002a0000] [lvl=2] -[KSUpdateCheckAction performAction] KSUpdateCheckAction starting update check for ticket(s): {( serverType=Omaha url=https://tools.google.com/service/update2 creationDate=2017-02-18 15:41:18 tagPath=/Applications/Google Chrome.app/Contents/Info.plist tagKey=KSChannelID brandPath=/Users/xpc/Library/Google/Google Chrome Brand.plist brandKey=KSBrandID versionPath=/Applications/Google Chrome.app/Contents/Info.plist versionKey=KSVersion cohort=1:1y5: cohortName=Stable ticketVersion=1 > )} Using server: > +Jul 7 10:57:19 calvisitor-10-105-162-178 locationd[82]: Location icon should now be in state 'Inactive' +Jul 7 11:01:11 calvisitor-10-105-162-178 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 7 11:22:27 calvisitor-10-105-162-178 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 294, items, fQueryRetries, 0, fLastRetryTimestamp, 521144227.4 +Jul 7 11:28:11 calvisitor-10-105-162-178 com.apple.ncplugin.weather[37956]: Error in CoreDragRemoveTrackingHandler: -1856 +Jul 7 11:28:44 calvisitor-10-105-162-178 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.37963): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 7 11:48:06 calvisitor-10-105-162-178 com.apple.WebKit.WebContent[32778]: [11:48:06.869] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92 +Jul 7 11:57:06 calvisitor-10-105-162-178 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.37999): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 7 11:57:23 calvisitor-10-105-162-178 locationd[82]: Location icon should now be in state 'Active' +Jul 7 12:12:06 calvisitor-10-105-162-178 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.user.501): Service "com.apple.xpc.launchd.unmanaged.loginwindow.94" tried to hijack endpoint "com.apple.tsm.uiserver" from owner: com.apple.SystemUIServer.agent +Jul 7 12:12:27 calvisitor-10-105-162-178 locationd[82]: Location icon should now be in state 'Active' +Jul 7 12:14:35 calvisitor-10-105-162-178 kernel[0]: ARPT: 770226.223664: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0, +Jul 7 12:14:38 calvisitor-10-105-162-178 com.apple.SecurityServer[80]: Session 101800 destroyed +Jul 7 12:15:44 calvisitor-10-105-162-178 quicklookd[38023]: Error returned from iconservicesagent: (null) +Jul 7 12:15:44 calvisitor-10-105-162-178 quicklookd[38023]: Error returned from iconservicesagent: (null) +Jul 7 12:15:59 calvisitor-10-105-162-178 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 7 12:16:28 calvisitor-10-105-162-178 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 7 12:16:28 calvisitor-10-105-162-178 quicklookd[38023]: Error returned from iconservicesagent: (null) +Jul 7 12:16:28 calvisitor-10-105-162-178 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 7 12:17:49 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 7 12:20:19 calvisitor-10-105-162-178 kernel[0]: TBT W (2): 0x0040 [x] +Jul 7 12:20:25 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 7 12:20:41 calvisitor-10-105-162-178 AddressBookSourceSync[38055]: -[SOAPParser:0x7f84bad89660 parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid) +Jul 7 12:21:15 calvisitor-10-105-162-178 imagent[355]: : NC Disabled: NO +Jul 7 12:23:11 calvisitor-10-105-162-178 kernel[0]: in6_unlink_ifa: IPv6 address 0x77c911453a6dbcdb has no prefix +Jul 7 12:23:12 authorMacBook-Pro kernel[0]: ARPT: 770518.944345: framerdy 0x0 bmccmd 3 framecnt 1024 +Jul 7 12:24:25 authorMacBook-Pro corecaptured[38064]: Received Capture Event +Jul 7 12:24:29 authorMacBook-Pro corecaptured[38064]: CCFile::copyFile fileName is [2017-07-07_12,24,25.108710]-io80211Family-007.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-07_12,24,25.108710]-io80211Family-007.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-07_12,24,29.298901]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-07_12,24,25.108710]-io80211Family-007.pcapng +Jul 7 12:24:31 authorMacBook-Pro kernel[0]: ARPT: 770597.394609: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0 +Jul 7 12:24:31 authorMacBook-Pro corecaptured[38064]: CCFile::captureLog +Jul 7 12:24:31 authorMacBook-Pro corecaptured[38064]: CCFile::captureLogRun Skipping current file Dir file [2017-07-07_12,24,31.376032]-AirPortBrcm4360_Logs-011.txt, Current File [2017-07-07_12,24,31.376032]-AirPortBrcm4360_Logs-011.txt +Jul 7 12:24:31 authorMacBook-Pro corecaptured[38064]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 7 12:24:31 authorMacBook-Pro corecaptured[38064]: CCFile::captureLog +Jul 7 12:30:08 authorMacBook-Pro kernel[0]: ARPT: 770602.528852: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 7 12:30:08 authorMacBook-Pro kernel[0]: TBT W (2): 0x0040 [x] +Jul 7 12:30:09 authorMacBook-Pro kernel[0]: ARPT: 770605.092581: ARPT: Wake Reason: Wake on Scan offload +Jul 7 12:30:14 calvisitor-10-105-162-178 kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 7 12:30:26 calvisitor-10-105-162-178 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 7 12:30:29 calvisitor-10-105-162-178 kernel[0]: IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL +Jul 7 13:38:22 authorMacBook-Pro corecaptured[38124]: CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7 +Jul 7 13:38:22 authorMacBook-Pro corecaptured[38124]: doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-07_13,38,22.072050] - AssocFail:sts:2_rsn:0.xml +Jul 7 13:38:23 authorMacBook-Pro corecaptured[38124]: CCFile::captureLogRun Skipping current file Dir file [2017-07-07_13,38,23.338868]-AirPortBrcm4360_Logs-013.txt, Current File [2017-07-07_13,38,23.338868]-AirPortBrcm4360_Logs-013.txt +Jul 7 13:38:23 authorMacBook-Pro corecaptured[38124]: CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7 +Jul 7 13:38:24 authorMacBook-Pro corecaptured[38124]: CCFile::captureLog Received Capture notice id: 1499459904.126805, reason = AuthFail:sts:5_rsn:0 +Jul 7 13:38:24 authorMacBook-Pro corecaptured[38124]: CCFile::captureLogRun Skipping current file Dir file [2017-07-07_13,38,24.371339]-CCIOReporter-019.xml, Current File [2017-07-07_13,38,24.371339]-CCIOReporter-019.xml +Jul 7 13:38:29 authorMacBook-Pro networkd[195]: -[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! NeteaseMusic.17988 tc12042 103.251.128.144:80 +Jul 7 13:38:50 calvisitor-10-105-160-205 sandboxd[129] ([38132]): com.apple.Addres(38132) deny network-outbound /private/var/run/mDNSResponder +Jul 7 13:40:30 calvisitor-10-105-160-205 kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 7 13:40:31 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID +Jul 7 13:40:35 authorMacBook-Pro corecaptured[38124]: CCFile::captureLog +Jul 7 13:40:35 authorMacBook-Pro corecaptured[38124]: Received Capture Event +Jul 7 13:40:35 authorMacBook-Pro corecaptured[38124]: CCFile::captureLog +Jul 7 13:40:35 authorMacBook-Pro corecaptured[38124]: CCFile::captureLogRun Skipping current file Dir file [2017-07-07_13,40,35.857095]-AirPortBrcm4360_Logs-022.txt, Current File [2017-07-07_13,40,35.857095]-AirPortBrcm4360_Logs-022.txt +Jul 7 13:40:35 authorMacBook-Pro corecaptured[38124]: CCFile::captureLogRun Skipping current file Dir file [2017-07-07_13,40,35.961495]-io80211Family-023.pcapng, Current File [2017-07-07_13,40,35.961495]-io80211Family-023.pcapng +Jul 7 13:40:36 authorMacBook-Pro kernel[0]: ARPT: 770712.519828: framerdy 0x0 bmccmd 3 framecnt 1024 +Jul 7 13:40:36 authorMacBook-Pro corecaptured[38124]: CCFile::captureLog Received Capture notice id: 1499460036.519390, reason = AuthFail:sts:5_rsn:0 +Jul 7 13:40:37 authorMacBook-Pro corecaptured[38124]: CCFile::copyFile fileName is [2017-07-07_13,40,37.052249]-io80211Family-031.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-07_13,40,37.052249]-io80211Family-031.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-07_13,40,37.192896]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-07_13,40,37.052249]-io80211Family-031.pcapng +Jul 7 13:40:37 authorMacBook-Pro corecaptured[38124]: CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +Jul 7 13:40:37 authorMacBook-Pro corecaptured[38124]: doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-07_13,40,35.959475] - AuthFail:sts:5_rsn:0.xml +Jul 7 13:40:39 calvisitor-10-105-160-205 networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000 +Jul 7 13:40:52 calvisitor-10-105-160-205 QQ[10018]: ############################## _getSysMsgList +Jul 7 13:42:10 calvisitor-10-105-160-205 kernel[0]: TBT W (2): 0x0040 [x] +Jul 7 13:42:10 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4 +Jul 7 13:42:15 authorMacBook-Pro kernel[0]: ARPT: 770772.533370: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0 +Jul 7 13:42:17 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +Jul 7 13:42:17 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Authenticated +Jul 7 13:42:17 authorMacBook-Pro configd[53]: network changed: v4(en0+:10.105.160.205) v6(en0:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB +Jul 7 13:42:30 authorMacBook-Pro kernel[0]: ARPT: 770786.961436: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0 +Jul 7 13:42:34 authorMacBook-Pro corecaptured[38124]: CCFile::captureLog +Jul 7 13:42:34 authorMacBook-Pro corecaptured[38124]: CCFile::captureLogRun Skipping current file Dir file [2017-07-07_13,42,34.831310]-AirPortBrcm4360_Logs-041.txt, Current File [2017-07-07_13,42,34.831310]-AirPortBrcm4360_Logs-041.txt +Jul 7 13:42:41 authorMacBook-Pro kernel[0]: ARPT: 770798.478026: framerdy 0x0 bmccmd 3 framecnt 1024 +Jul 7 13:42:46 authorMacBook-Pro kernel[0]: ARPT: 770802.879782: wlc_dump_aggfifo: +Jul 7 13:42:46 authorMacBook-Pro corecaptured[38124]: Received Capture Event +Jul 7 13:42:48 authorMacBook-Pro corecaptured[38124]: CCFile::captureLog +Jul 7 13:48:27 authorMacBook-Pro kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds +Jul 7 13:48:27 authorMacBook-Pro kernel[0]: ARPT: 770812.035971: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 7 13:48:29 authorMacBook-Pro cdpd[11807]: Saw change in network reachability (isReachable=2) +Jul 7 13:48:52 calvisitor-10-105-160-205 com.apple.AddressBook.InternetAccountsBridge[38158]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 7 13:58:13 authorMacBook-Pro symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 7 13:58:22 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID +Jul 7 14:03:25 calvisitor-10-105-160-205 kernel[0]: AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us +Jul 7 14:03:30 calvisitor-10-105-160-205 kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 7 14:03:45 calvisitor-10-105-160-205 sandboxd[129] ([38179]): com.apple.Addres(38179) deny network-outbound /private/var/run/mDNSResponder +Jul 7 14:07:21 calvisitor-10-105-160-205 com.apple.WebKit.WebContent[32778]: [14:07:21.190] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 7 14:09:44 calvisitor-10-105-160-205 cloudd[326]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name} +Jul 7 14:09:45 calvisitor-10-105-160-205 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.user.501): Service "com.apple.xpc.launchd.unmanaged.loginwindow.94" tried to hijack endpoint "com.apple.tsm.uiserver" from owner: com.apple.SystemUIServer.agent +Jul 7 14:19:56 calvisitor-10-105-160-205 syslogd[44]: ASL Sender Statistics +Jul 7 14:19:57 calvisitor-10-105-160-205 kernel[0]: in6_unlink_ifa: IPv6 address 0x77c911454f15210b has no prefix +Jul 7 14:20:52 calvisitor-10-105-160-205 kernel[0]: ARPT: 771388.849884: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10 +Jul 7 14:33:34 calvisitor-10-105-160-205 syslogd[44]: ASL Sender Statistics +Jul 7 14:33:34 calvisitor-10-105-160-205 kernel[0]: Previous sleep cause: 5 +Jul 7 14:33:34 calvisitor-10-105-160-205 kernel[0]: ARPT: 771393.363637: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 7 14:47:12 calvisitor-10-105-160-205 kernel[0]: ARPT: 771456.438849: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 7 15:00:50 calvisitor-10-105-160-205 kernel[0]: ARPT: 771516.615152: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable] +Jul 7 15:01:07 calvisitor-10-105-160-205 sandboxd[129] ([38210]): com.apple.Addres(38210) deny network-outbound /private/var/run/mDNSResponder +Jul 7 15:01:12 calvisitor-10-105-160-205 sandboxd[129] ([38210]): com.apple.Addres(38210) deny network-outbound /private/var/run/mDNSResponder +Jul 7 15:14:27 calvisitor-10-105-160-205 kernel[0]: AirPort: Link Down on awdl0. Reason 1 (Unspecified). +Jul 7 15:14:27 calvisitor-10-105-160-205 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 7 15:28:00 calvisitor-10-105-160-205 syslogd[44]: ASL Sender Statistics +Jul 7 15:28:49 calvisitor-10-105-160-205 kernel[0]: ARPT: 771631.938256: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 9235, +Jul 7 16:04:15 calvisitor-10-105-160-205 kernel[0]: AppleCamIn::wakeEventHandlerThread +Jul 7 16:04:15 calvisitor-10-105-160-205 kernel[0]: en0: channel changed to 1 +Jul 7 16:04:15 calvisitor-10-105-160-205 symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 7 16:04:15 calvisitor-10-105-160-205 kernel[0]: Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0 +Jul 7 16:04:16 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 25340 failed: 3 - No network route +Jul 7 16:04:22 authorMacBook-Pro netbiosd[38222]: Unable to start NetBIOS name service: +Jul 7 16:04:28 authorMacBook-Pro networkd[195]: -[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! QQ.10018 tc25354 123.151.10.190:80 +Jul 7 16:04:44 calvisitor-10-105-161-77 kernel[0]: ARPT: 771663.085756: wl0: Roamed or switched channel, reason #8, bssid 00:a6:ca:db:93:cc, last RSSI -60 +Jul 7 16:05:37 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Inactive +Jul 7 16:05:38 authorMacBook-Pro kernel[0]: en0: BSSID changed to 0c:68:03:d6:c5:1c +Jul 7 16:05:42 calvisitor-10-105-161-77 kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 7 16:24:10 authorMacBook-Pro locationd[82]: PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline." UserInfo={NSUnderlyingError=0x7fb7f0035dc0 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 "The Internet connection appears to be offline." UserInfo={NSErrorFailingURLStringKey=https://gs-loc.apple.com/clls/wloc, NSErrorFailingURLKey=https://gs-loc.apple.com/clls/wloc, _kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=https://gs-loc.apple.com/clls/wloc, NSErrorFailingURLKey=https://gs-loc.apple.com/clls/wloc, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.} +Jul 7 16:24:11 authorMacBook-Pro corecaptured[38241]: CCFile::copyFile fileName is [2017-07-07_16,24,11.442212]-AirPortBrcm4360_Logs-001.txt, source path:/var/log/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/DriverLogs//[2017-07-07_16,24,11.442212]-AirPortBrcm4360_Logs-001.txt, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/[2017-07-07_16,24,11.124183]=AssocFail:sts:2_rsn:0/DriverLogs//[2017-07-07_16,24,11.442212]-AirPortBrcm4360_Logs-001.txt +Jul 7 16:24:11 authorMacBook-Pro corecaptured[38241]: CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +Jul 7 16:24:16 authorMacBook-Pro corecaptured[38241]: CCFile::captureLog Received Capture notice id: 1499469856.145137, reason = AssocFail:sts:2_rsn:0 +Jul 7 16:24:16 authorMacBook-Pro corecaptured[38241]: CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +Jul 7 16:24:18 authorMacBook-Pro corecaptured[38241]: Received Capture Event +Jul 7 16:24:23 authorMacBook-Pro networkd[195]: -[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +Jul 7 16:24:43 authorMacBook-Pro QQ[10018]: ############################## _getSysMsgList +Jul 7 16:24:49 authorMacBook-Pro com.apple.AddressBook.InternetAccountsBridge[38247]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 7 16:45:57 authorMacBook-Pro WindowServer[184]: CGXDisplayDidWakeNotification [771797848593539]: posting kCGSDisplayDidWake +Jul 7 16:46:23 calvisitor-10-105-160-85 com.apple.AddressBook.InternetAccountsBridge[38259]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3 +Jul 7 16:49:57 calvisitor-10-105-160-85 locationd[82]: Location icon should now be in state 'Inactive' +Jul 7 16:53:53 calvisitor-10-105-160-85 com.apple.SecurityServer[80]: Session 102106 destroyed +Jul 7 16:57:09 calvisitor-10-105-160-85 com.apple.WebKit.WebContent[32778]: [16:57:09.235] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +Jul 7 16:59:44 calvisitor-10-105-160-85 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 7 17:15:46 calvisitor-10-105-160-85 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.38405): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 7 17:20:30 calvisitor-10-105-160-85 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 7 17:30:00 calvisitor-10-105-160-85 kernel[0]: Sandbox: QuickLookSatelli(38418) deny(1) mach-lookup com.apple.networkd +Jul 7 17:30:00 calvisitor-10-105-160-85 QuickLookSatellite[38418]: nw_path_evaluator_start_helper_connection net_helper_path_evaluation_start failed, dumping backtrace: [x86_64] libnetcore-583.50.1 0 libsystem_network.dylib 0x00007fff92fabde9 __nw_create_backtrace_string + 123 1 libsystem_network.dylib 0x00007fff92fc289f nw_path_evaluator_start_helper_connection + 196 2 libdispatch.dylib 0x00007fff980fa93d _dispatch_call_block_and_release + 12 3 libdispatch.dylib 0x00007fff980ef40b _dispatch_client_callout + 8 4 libdispatch.dylib 0x00007fff980f403b _dispatch_queue_drain + 754 5 libdispatch.dylib 0x00007fff980fa707 _dispatch_queue_invoke + 549 6 libdispatch.dylib 0x00007fff980f2d53 _dispatch_root_queue_drain + 538 7 libdispatch.dylib 0x00007fff980f2b00 _dispatch_worker_thread3 + 91 8 libsystem_pthread.dylib 0x00007fff8ebc44de _pthread_wqthread + 1129 9 libsystem_pthread.dylib 0x00007fff8ebc2341 start_wqthread + 13 +Jul 7 17:34:51 calvisitor-10-105-160-85 Safari[9852]: KeychainGetICDPStatus: status: off +Jul 7 17:45:26 calvisitor-10-105-160-85 loginwindow[94]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces. +Jul 7 18:02:24 calvisitor-10-105-160-85 kernel[0]: RTC: PowerByCalendarDate setting ignored +Jul 7 18:02:24 calvisitor-10-105-160-85 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0 +Jul 7 18:02:49 calvisitor-10-105-160-85 kernel[0]: Sandbox: com.apple.Addres(38449) deny(1) network-outbound /private/var/run/mDNSResponder +Jul 7 18:09:40 calvisitor-10-105-160-85 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 7 18:09:40 calvisitor-10-105-160-85 kernel[0]: en0: channel changed to 1 +Jul 7 18:09:40 authorMacBook-Pro kernel[0]: [HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01) +Jul 7 18:09:41 authorMacBook-Pro cdpd[11807]: Saw change in network reachability (isReachable=0) +Jul 7 18:09:46 authorMacBook-Pro corecaptured[38453]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 7 18:10:00 calvisitor-10-105-160-85 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 40 seconds. Ignoring. +Jul 7 18:10:10 calvisitor-10-105-160-85 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 7 18:10:14 calvisitor-10-105-160-85 kernel[0]: en0::IO80211Interface::postMessage bssid changed +Jul 7 18:11:11 calvisitor-10-105-160-85 kernel[0]: Previous sleep cause: 5 +Jul 7 18:11:20 calvisitor-10-105-160-85 com.apple.cts[258]: com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 68031 seconds. Ignoring. +Jul 7 18:11:21 calvisitor-10-105-160-85 com.apple.cts[258]: com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2889 seconds. Ignoring. +Jul 7 18:11:40 calvisitor-10-105-160-85 kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 7 18:23:30 calvisitor-10-105-160-85 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds +Jul 7 18:23:32 calvisitor-10-105-160-85 kernel[0]: IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true) +Jul 7 18:23:40 calvisitor-10-105-160-85 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 67203 seconds. Ignoring. +Jul 7 18:24:25 calvisitor-10-105-160-85 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 442301 seconds. Ignoring. +Jul 7 18:37:36 calvisitor-10-105-160-85 AddressBookSourceSync[38490]: -[SOAPParser:0x7fca6040cb50 parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid) +Jul 7 18:38:03 calvisitor-10-105-160-85 com.apple.cts[258]: com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 441483 seconds. Ignoring. +Jul 7 18:50:45 calvisitor-10-105-160-85 kernel[0]: ARPT: 775899.188954: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 2863091569, Ack 159598625, Win size 278 +Jul 7 18:50:46 calvisitor-10-105-160-85 sharingd[30299]: 18:50:46.109 : BTLE scanner Powered On +Jul 7 18:50:46 calvisitor-10-105-160-85 com.apple.cts[43]: com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4223 seconds. Ignoring. +Jul 7 18:51:05 calvisitor-10-105-160-85 com.apple.cts[43]: com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 65558 seconds. Ignoring. +Jul 7 19:04:23 calvisitor-10-105-160-85 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 7 19:04:45 calvisitor-10-105-160-85 com.apple.AddressBook.InternetAccountsBridge[38507]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1 +Jul 7 19:07:53 authorMacBook-Pro kernel[0]: AppleCamIn::handleWakeEvent_gated +Jul 7 19:21:28 calvisitor-10-105-160-85 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-08 02:21:28 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 7 19:43:07 calvisitor-10-105-160-85 kernel[0]: full wake promotion (reason 1) 374 ms +Jul 7 19:43:09 calvisitor-10-105-160-85 CalendarAgent[279]: [com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-8].] +Jul 7 20:08:13 calvisitor-10-105-160-85 secd[276]: securityd_xpc_dictionary_handler cloudd[326] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name} +Jul 7 20:32:00 calvisitor-10-105-160-85 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 7 20:32:00 calvisitor-10-105-160-85 quicklookd[38603]: Error returned from iconservicesagent: (null) +Jul 7 20:32:02 calvisitor-10-105-160-85 secd[276]: securityd_xpc_dictionary_handler cloudd[326] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name} +Jul 7 20:32:12 calvisitor-10-105-160-85 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 7 20:32:28 calvisitor-10-105-160-85 iconservicesagent[328]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +Jul 7 20:34:14 calvisitor-10-105-160-85 locationd[82]: NETWORK: requery, 0, 0, 0, 0, 328, items, fQueryRetries, 0, fLastRetryTimestamp, 521177334.4 +Jul 7 20:39:28 calvisitor-10-105-160-85 com.apple.WebKit.Networking[9854]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9806) +Jul 7 20:43:37 calvisitor-10-105-160-85 QuickLookSatellite[38624]: [QL] No sandbox token for request , it will probably fail +Jul 7 20:44:13 calvisitor-10-105-160-85 GPUToolsAgent[38749]: schedule invalidation +Jul 7 20:50:32 calvisitor-10-105-160-85 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 7 20:51:27 calvisitor-10-105-160-85 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 7 20:52:49 calvisitor-10-105-160-85 com.apple.CDScheduler[258]: Thermal pressure state: 0 Memory pressure state: 0 +Jul 7 20:57:37 calvisitor-10-105-160-85 Safari[9852]: KeychainGetICDPStatus: status: off +Jul 7 21:01:22 calvisitor-10-105-160-85 quicklookd[38603]: Error returned from iconservicesagent: (null) +Jul 7 21:08:26 calvisitor-10-105-160-85 WeChat[24144]: jemmytest +Jul 7 21:12:46 calvisitor-10-105-160-85 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 7 21:18:04 calvisitor-10-105-160-85 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.38838): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SocialHelper.xpc/Contents/MacOS/com.apple.Safari.SocialHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 7 21:22:43 calvisitor-10-105-160-85 com.apple.WebKit.WebContent[38826]: [21:22:43.147] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921 +Jul 7 21:23:10 calvisitor-10-105-160-85 com.apple.WebKit.WebContent[38826]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1 +Jul 7 21:23:11 calvisitor-10-105-160-85 com.apple.WebKit.WebContent[38826]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check. +Jul 7 21:24:19 calvisitor-10-105-160-85 WindowServer[184]: CoreAnimation: timed out fence 5fe83 +Jul 7 21:26:38 calvisitor-10-105-160-85 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 7 21:29:30 calvisitor-10-105-160-85 Safari[9852]: tcp_connection_tls_session_error_callback_imp 2515 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22 +Jul 7 21:30:12 calvisitor-10-105-160-85 Safari[9852]: KeychainGetICDPStatus: keychain: -25300 +Jul 7 21:31:11 calvisitor-10-105-160-85 garcon[38866]: Failed to connect (view) outlet from (NSApplication) to (NSColorPickerGridView): missing setter or instance variable +Jul 7 21:37:56 calvisitor-10-105-160-85 locationd[82]: Location icon should now be in state 'Inactive' +Jul 7 21:47:20 calvisitor-10-105-160-85 QQ[10018]: 2017/07/07 21:47:20.392 | I | VoipWrapper | DAVEngineImpl.cpp:1400:Close | close video chat. llFriendUIN = 515629905. +Jul 7 21:47:38 calvisitor-10-105-160-85 kernel[0]: ARPT: 783667.697957: AirPort_Brcm43xx::powerChange: System Sleep +Jul 7 21:57:08 calvisitor-10-105-160-85 kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 7 21:58:03 calvisitor-10-105-160-85 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 7 21:58:14 calvisitor-10-105-160-85 kernel[0]: IOPMrootDomain: idle cancel, state 1 +Jul 7 21:58:33 calvisitor-10-105-160-85 NeteaseMusic[17988]: 21:58:33.765 ERROR: 177: timed out after 15.000s (0 0); mMajorChangePending=0 +Jul 7 21:59:08 calvisitor-10-105-160-85 kernel[0]: ARPT: 783790.553857: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f +Jul 7 22:10:52 calvisitor-10-105-160-85 kernel[0]: ARPT: 783795.288172: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +Jul 7 22:11:54 calvisitor-10-105-160-85 QQ[10018]: button report: 0x8002be0 +Jul 7 22:24:31 calvisitor-10-105-160-85 sharingd[30299]: 22:24:31.135 : BTLE scanner Powered On +Jul 7 22:32:31 calvisitor-10-105-160-85 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-08 05:32:31 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 7 22:46:29 calvisitor-10-105-160-85 QQ[10018]: button report: 0x8002be0 +Jul 7 22:47:06 calvisitor-10-105-160-85 kernel[0]: ARPT: 783991.995027: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10 +Jul 7 23:00:44 calvisitor-10-105-160-85 kernel[0]: ARPT: 784053.579480: wl0: setup_keepalive: Local port: 59927, Remote port: 443 +Jul 7 23:00:46 calvisitor-10-105-160-85 kernel[0]: ARPT: 784055.560270: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 5600, +Jul 7 23:14:23 calvisitor-10-105-160-85 kernel[0]: ARPT: 784117.089800: AirPort_Brcm43xx::powerChange: System Sleep +Jul 7 23:27:02 calvisitor-10-105-160-85 kernel[0]: ARPT: 784117.625615: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +Jul 7 23:38:27 calvisitor-10-105-160-85 kernel[0]: ARPT: 784178.158614: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 7 23:38:32 authorMacBook-Pro kernel[0]: en0::IO80211Interface::postMessage bssid changed +Jul 8 00:30:39 authorMacBook-Pro kernel[0]: in6_unlink_ifa: IPv6 address 0x77c911454f1523ab has no prefix +Jul 8 00:30:47 authorMacBook-Pro networkd[195]: -[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! QQ.10018 tc25805 123.151.137.106:80 +Jul 8 00:30:48 calvisitor-10-105-160-47 symptomsd[215]: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2 +Jul 8 00:44:20 calvisitor-10-105-160-47 kernel[0]: ARPT: 784287.966851: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable] +Jul 8 00:45:21 calvisitor-10-105-160-47 kernel[0]: AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0 +Jul 8 00:47:42 calvisitor-10-105-160-47 kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 8 00:58:14 calvisitor-10-105-160-47 kernel[0]: efi pagecount 72 +Jul 8 01:51:46 calvisitor-10-105-160-47 kernel[0]: AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving). +Jul 8 01:51:50 authorMacBook-Pro mDNSResponder[91]: mDNS_RegisterInterface: Frequent transitions for interface en0 (FE80:0000:0000:0000:C6B3:01FF:FECD:467F) +Jul 8 01:52:19 calvisitor-10-105-163-147 kernel[0]: ARPT: 784486.498066: wlc_dump_aggfifo: +Jul 8 01:52:19 calvisitor-10-105-163-147 corecaptured[38984]: CCFile::captureLogRun() Exiting CCFile::captureLogRun +Jul 8 01:52:20 calvisitor-10-105-163-147 corecaptured[38984]: CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +Jul 8 02:32:14 calvisitor-10-105-163-147 kernel[0]: Previous sleep cause: 5 +Jul 8 02:32:14 calvisitor-10-105-163-147 kernel[0]: **** [BroadcomBluetoothHostControllerUSBTransport][start] -- Completed (matched on Device) -- 0x3800 **** +Jul 8 02:32:14 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000 +Jul 8 02:32:17 authorMacBook-Pro kernel[0]: en0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 12 13 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161 165 +Jul 8 02:32:23 authorMacBook-Pro networkd[195]: nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4 +Jul 8 02:32:46 calvisitor-10-105-162-175 corecaptured[38992]: CCFile::captureLog Received Capture notice id: 1499506366.010075, reason = AuthFail:sts:5_rsn:0 +Jul 8 02:32:46 calvisitor-10-105-162-175 corecaptured[38992]: CCFile::captureLogRun Skipping current file Dir file [2017-07-08_02,32,46.787931]-AirPortBrcm4360_Logs-004.txt, Current File [2017-07-08_02,32,46.787931]-AirPortBrcm4360_Logs-004.txt +Jul 8 02:32:47 calvisitor-10-105-162-175 corecaptured[38992]: CCFile::copyFile fileName is [2017-07-08_02,32,47.528554]-CCIOReporter-003.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-08_02,32,47.528554]-CCIOReporter-003.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-08_02,32,46.517498]=AssocFail:sts:2_rsn:0/OneStats//[2017-07-08_02,32,47.528554]-CCIOReporter-003.xml +Jul 8 03:12:46 calvisitor-10-105-162-175 kernel[0]: did discard act 12083 inact 17640 purgeable 20264 spec 28635 cleaned 0 +Jul 8 03:12:46 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 25902 failed: 3 - No network route +Jul 8 03:12:50 authorMacBook-Pro kernel[0]: en0::IO80211Interface::postMessage bssid changed +Jul 8 03:13:06 calvisitor-10-105-162-108 corecaptured[38992]: CCDataTap::profileRemoved, Owner: com.apple.iokit.IO80211Family, Name: AssociationEventHistory +Jul 8 03:13:21 calvisitor-10-105-162-108 kernel[0]: ARPT: 784632.788065: wl0: Roamed or switched channel, reason #8, bssid 5c:50:15:36:bc:03, last RSSI -69 +Jul 8 03:13:24 calvisitor-10-105-162-108 QQ[10018]: DB Error: 1 "no such table: tb_c2cMsg_2909288299" +Jul 8 03:29:10 calvisitor-10-105-162-108 kernel[0]: AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving). +Jul 8 03:32:43 calvisitor-10-105-162-228 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0 +Jul 8 03:32:43 calvisitor-10-105-162-228 kernel[0]: **** [BroadcomBluetoothHostControllerUSBTransport][start] -- Completed (matched on Device) -- 0x8800 **** +Jul 8 03:32:43 authorMacBook-Pro symptomsd[215]: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +Jul 8 03:32:46 authorMacBook-Pro ntpd[207]: sigio_handler: sigio_handler_active != 1 +Jul 8 04:13:32 calvisitor-10-105-162-228 kernel[0]: Wake reason: ARPT (Network) +Jul 8 04:13:32 calvisitor-10-105-162-228 blued[85]: Host controller terminated +Jul 8 04:13:32 calvisitor-10-105-162-228 kernel[0]: [HID] [MT] AppleActuatorHIDEventDriver::start entered +Jul 8 04:13:32 authorMacBook-Pro kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 8 04:13:39 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Evaluating +Jul 8 04:13:39 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Authenticated +Jul 8 04:16:14 calvisitor-10-105-161-176 kernel[0]: hibernate_setup(0) took 8471 ms +Jul 8 04:16:14 authorMacBook-Pro kernel[0]: in6_unlink_ifa: IPv6 address 0x77c911454f1528eb has no prefix +Jul 8 04:16:14 authorMacBook-Pro networkd[195]: __42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc25995 121.51.36.148:443 +Jul 8 04:16:15 authorMacBook-Pro kernel[0]: Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0 +Jul 8 04:16:21 calvisitor-10-105-161-176 QQ[10018]: button report: 0x8002bdf +Jul 8 04:16:21 calvisitor-10-105-161-176 QQ[10018]: FA||Url||taskID[2019353853] dealloc +Jul 8 04:18:45 calvisitor-10-105-161-176 blued[85]: [BluetoothHIDDeviceController]ERROR: Could not find the disconnected object +Jul 8 04:18:45 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Inactive +Jul 8 04:19:18 calvisitor-10-105-161-176 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +Jul 8 04:54:03 calvisitor-10-105-161-176 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][start] -- completed -- result = TRUE -- 0x2800 **** +Jul 8 04:54:12 authorMacBook-Pro QQ[10018]: tcp_connection_handle_connect_conditions_bad 26042 failed: 3 - No network route +Jul 8 05:34:31 calvisitor-10-105-160-181 kernel[0]: ARPT: 785104.988856: AirPort_Brcm43xx::syncPowerState: WWEN[enabled] +Jul 8 05:34:31 calvisitor-10-105-160-181 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 8 05:34:31 calvisitor-10-105-160-181 kernel[0]: hibernate_machine_init reading +Jul 8 05:34:31 calvisitor-10-105-160-181 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 8 05:34:31 calvisitor-10-105-160-181 kernel[0]: AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds +Jul 8 05:34:31 calvisitor-10-105-160-181 blued[85]: [BluetoothHIDDeviceController]ERROR: Could not find the disconnected object +Jul 8 05:34:44 calvisitor-10-105-162-124 configd[53]: setting hostname to "calvisitor-10-105-162-124.calvisitor.1918.berkeley.edu" +Jul 8 05:51:55 calvisitor-10-105-162-124 kernel[0]: hibernate image path: /var/vm/sleepimage +Jul 8 05:51:55 calvisitor-10-105-162-124 kernel[0]: efi pagecount 72 +Jul 8 05:51:55 calvisitor-10-105-162-124 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 8 05:51:55 calvisitor-10-105-162-124 kernel[0]: hibernate_teardown_pmap_structs done: last_valid_compact_indx 315096 +Jul 8 05:52:04 authorMacBook-Pro Mail[11203]: Unrecognized XSSimpleTypeDefinition: OneOff +Jul 8 05:52:07 calvisitor-10-105-162-124 kernel[0]: vm_compressor_fastwake_warmup completed - took 12461 msecs +Jul 8 05:55:23 authorMacBook-Pro corecaptured[39090]: CCFile::captureLog Received Capture notice id: 1499518522.558304, reason = AssocFail:sts:2_rsn:0 +Jul 8 05:56:40 authorMacBook-Pro corecaptured[39090]: CCFile::copyFile fileName is [2017-07-08_05,55,23.694116]-io80211Family-002.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-08_05,55,23.694116]-io80211Family-002.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-08_05,56,40.163377]=AssocFail:sts:2_rsn:0/IO80211AWDLPeerManager//[2017-07-08_05,55,23.694116]-io80211Family-002.pcapng +Jul 8 05:56:47 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Authenticated +Jul 8 05:56:53 calvisitor-10-105-162-124 WeChat[24144]: jemmytest +Jul 8 06:02:25 calvisitor-10-105-162-124 com.apple.AddressBook.ContactsAccountsService[289]: [Accounts] Current connection, connection from pid 30318, doesn't have account access. +Jul 8 06:11:14 calvisitor-10-105-162-124 secd[276]: securityd_xpc_dictionary_handler cloudd[326] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name} +Jul 8 06:11:46 calvisitor-10-105-162-124 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out. +Jul 8 06:22:47 calvisitor-10-105-162-124 WeChat[24144]: Unable to simultaneously satisfy constraints: ( "", "", "", "", "" ) Will attempt to recover by breaking constraint Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger. +Jul 8 06:22:52 calvisitor-10-105-162-124 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.WebContent.39146): Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc +Jul 8 06:26:32 calvisitor-10-105-162-124 GoogleSoftwareUpdateAgent[39159]: 2017-07-08 06:26:32.364 GoogleSoftwareUpdateAgent[39159/0x7000002a0000] [lvl=2] -[KSAgentApp(KeystoneDelegate) updateEngineFinishedWithErrors:] Keystone finished: errors=0 +Jul 8 06:26:32 calvisitor-10-105-162-124 GoogleSoftwareUpdateAgent[39159]: 2017-07-08 06:26:32.365 GoogleSoftwareUpdateAgent[39159/0x7000002a0000] [lvl=2] -[KSAgentApp(KeystoneThread) runKeystonesInThreadWithArg:] About to run checks for any other apps. +Jul 8 06:45:24 calvisitor-10-105-162-124 kernel[0]: ARPT: 787923.793193: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +Jul 8 06:46:42 calvisitor-10-105-162-124 WeChat[24144]: Arranged view frame: {{0, 0}, {260, 877}} +Jul 8 07:01:03 calvisitor-10-105-162-124 CalendarAgent[279]: [com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-8].] +Jul 8 07:12:41 calvisitor-10-105-162-124 kernel[0]: IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +Jul 8 07:12:45 calvisitor-10-105-162-124 corecaptured[39203]: CCProfileMonitor::setStreamEventHandler +Jul 8 07:25:32 calvisitor-10-105-162-124 locationd[82]: Location icon should now be in state 'Inactive' +Jul 8 07:27:17 calvisitor-10-105-162-124 CommCenter[263]: Telling CSI to go low power. +Jul 8 07:27:36 calvisitor-10-105-162-124 kernel[0]: ARPT: 790457.609414: AirPort_Brcm43xx::powerChange: System Sleep +Jul 8 07:29:50 authorMacBook-Pro Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-08 14:29:50 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319) +Jul 8 07:30:15 calvisitor-10-105-162-124 secd[276]: SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 "Account identity not set" UserInfo={NSDescription=Account identity not set} +Jul 8 07:31:20 calvisitor-10-105-162-124 kernel[0]: Bluetooth -- LE is supported - Disable LE meta event +Jul 8 07:32:03 calvisitor-10-105-162-124 kernel[0]: ARPT: 790564.863081: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f +Jul 8 07:43:38 calvisitor-10-105-162-124 kernel[0]: USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3 +Jul 8 07:57:11 calvisitor-10-105-162-124 kernel[0]: AppleCamIn::systemWakeCall - messageType = 0xE0000340 +Jul 8 08:10:46 calvisitor-10-105-162-124 kernel[0]: Wake reason: RTC (Alarm) +Jul 8 08:10:46 calvisitor-10-105-162-124 kernel[0]: AppleCamIn::wakeEventHandlerThread \ No newline at end of file diff --git a/tests/test_folder/Mac_2k.log_structured_corrected.csv b/tests/test_folder/Mac_2k.log_structured_corrected.csv new file mode 100644 index 0000000..ecaf5fc --- /dev/null +++ b/tests/test_folder/Mac_2k.log_structured_corrected.csv @@ -0,0 +1,2001 @@ +LineId,Month,Date,Time,User,Component,PID,Address,Content,EventId,EventTemplate +1,Jul,1,09:00:55,calvisitor-10-105-160-95,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +2,Jul,1,09:01:05,calvisitor-10-105-160-95,com.apple.CDScheduler,43,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +3,Jul,1,09:01:06,calvisitor-10-105-160-95,QQ,10018,,FA||Url||taskID[2019352994] dealloc,E216,FA||Url||taskID[<*>] dealloc +4,Jul,1,09:02:26,calvisitor-10-105-160-95,kernel,0,,ARPT: 620701.011328: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +5,Jul,1,09:02:26,authorMacBook-Pro,kernel,0,,ARPT: 620702.879952: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +6,Jul,1,09:03:11,calvisitor-10-105-160-95,mDNSResponder,91,,mDNS_DeregisterInterface: Frequent transitions for interface awdl0 (FE80:0000:0000:0000:D8A5:90FF:FEF5:7FFF),E260,mDNS_DeregisterInterface: Frequent transitions for interface awdl0 (<*>) +7,Jul,1,09:03:13,calvisitor-10-105-160-95,kernel,0,,"ARPT: 620749.901374: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0,",E135,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': <*>," +8,Jul,1,09:04:33,calvisitor-10-105-160-95,kernel,0,,"ARPT: 620750.434035: wl0: wl_update_tcpkeep_seq: Original Seq: 3226706533, Ack: 3871687177, Win size: 4096",E149,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Original Seq: <*>, Ack: <*>, Win size: <*>" +9,Jul,1,09:04:33,authorMacBook-Pro,kernel,0,,ARPT: 620752.337198: ARPT: Wake Reason: Wake on Scan offload,E131,ARPT: <*>: ARPT: Wake Reason: Wake on Scan offload +10,Jul,1,09:04:37,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +11,Jul,1,09:12:20,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +12,Jul,1,09:12:21,calvisitor-10-105-160-95,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +13,Jul,1,09:18:16,calvisitor-10-105-160-95,kernel,0,,"ARPT: 620896.311264: wl0: MDNS: 0 SRV Recs, 0 TXT Recs",E140,"ARPT: <*>: wl0: MDNS: <*> SRV Recs, <*> TXT Recs" +14,Jul,1,09:19:03,calvisitor-10-105-160-95,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +15,Jul,1,09:19:03,authorMacBook-Pro,configd,53,,"setting hostname to ""authorMacBook-Pro.local""",E311,"setting hostname to ""<*>""" +16,Jul,1,09:19:13,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 439034 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +17,Jul,1,09:21:57,authorMacBook-Pro,corecaptured,31174,,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7,E175,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams <*> +18,Jul,1,09:21:58,calvisitor-10-105-160-95,com.apple.WebKit.WebContent,25654,,[09:21:58.929] <<<< CRABS >>>> crabsFlumeHostAvailable: [0x7f961cf08cf0] Byte flume reports host available again.,E13,[<*>:<*>:<*>] <<<< CRABS >>>> crabsFlumeHostAvailable: [<*>] Byte flume reports host available again. +19,Jul,1,09:22:02,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2450 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +20,Jul,1,09:22:25,calvisitor-10-105-160-95,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +21,Jul,1,09:23:26,calvisitor-10-105-160-95,kernel,0,,AirPort: Link Down on awdl0. Reason 1 (Unspecified).,E109,AirPort: Link Down on awdl0. Reason <*> (Unspecified). +22,Jul,1,09:23:26,calvisitor-10-105-160-95,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +23,Jul,1,09:24:13,calvisitor-10-105-160-95,kernel,0,,"PM response took 2010 ms (54, powerd)",E288,"PM response took <*> ms (<*>, powerd)" +24,Jul,1,09:25:21,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 438666 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +25,Jul,1,09:25:45,calvisitor-10-105-160-95,kernel,0,,"ARPT: 621131.293163: wl0: Roamed or switched channel, reason #8, bssid 5c:50:15:4c:18:13, last RSSI -64",E143,"ARPT: <*>: wl0: Roamed or switched channel, reason #<*>, bssid <*>:<*>:<*>:<*>, last RSSI <*>" +26,Jul,1,09:25:59,calvisitor-10-105-160-95,kernel,0,,"ARPT: 621145.554555: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0,",E135,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': <*>," +27,Jul,1,09:26:41,calvisitor-10-105-160-95,kernel,0,,"ARPT: 621146.080894: wl0: wl_update_tcpkeep_seq: Original Seq: 3014995849, Ack: 2590995288, Win size: 4096",E149,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Original Seq: <*>, Ack: <*>, Win size: <*>" +28,Jul,1,09:26:43,calvisitor-10-105-160-95,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +29,Jul,1,09:26:47,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2165 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +30,Jul,1,09:27:01,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 13090 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +31,Jul,1,09:27:06,calvisitor-10-105-160-95,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +32,Jul,1,09:28:41,authorMacBook-Pro,netbiosd,31198,,"network_reachability_changed : network is not reachable, netbiosd is shutting down",E272,"network_reachability_changed : network is not reachable, netbiosd is shutting down" +33,Jul,1,09:28:41,authorMacBook-Pro,corecaptured,31206,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +34,Jul,1,09:28:50,calvisitor-10-105-160-95,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +35,Jul,1,09:28:53,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2039 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +36,Jul,1,09:29:02,calvisitor-10-105-160-95,sandboxd,129,[31211],com.apple.Addres(31211) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +37,Jul,1,09:29:14,calvisitor-10-105-160-95,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +38,Jul,1,09:29:25,calvisitor-10-105-160-95,kernel,0,,ARPT: 621241.634070: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +39,Jul,1,09:31:48,authorMacBook-Pro,kernel,0,,AirPort: Link Up on en0,E112,AirPort: Link Up on en0 +40,Jul,1,09:31:53,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 438274 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +41,Jul,1,09:32:03,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1849 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +42,Jul,1,09:32:13,calvisitor-10-105-160-95,kernel,0,,Sandbox: com.apple.Addres(31229) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +43,Jul,1,09:32:28,calvisitor-10-105-160-95,mDNSResponder,91,,mDNS_DeregisterInterface: Frequent transitions for interface awdl0 (FE80:0000:0000:0000:D8A5:90FF:FEF5:7FFF),E260,mDNS_DeregisterInterface: Frequent transitions for interface awdl0 (<*>) +44,Jul,1,09:33:13,calvisitor-10-105-160-95,kernel,0,,ARPT: 621342.242614: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +45,Jul,1,09:33:13,calvisitor-10-105-160-95,kernel,0,,AirPort: Link Up on awdl0,E111,AirPort: Link Up on awdl0 +46,Jul,1,09:33:13,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +47,Jul,1,09:33:58,calvisitor-10-105-160-95,kernel,0,,ARPT: 621389.379319: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +48,Jul,1,09:34:42,calvisitor-10-105-160-95,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +49,Jul,1,09:34:52,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 438095 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +50,Jul,1,09:35:27,calvisitor-10-105-160-95,mDNSResponder,91,,mDNS_DeregisterInterface: Frequent transitions for interface en0 (2607:F140:6000:0008:C6B3:01FF:FECD:467F),E261,mDNS_DeregisterInterface: Frequent transitions for interface en0 (<*>) +51,Jul,1,09:36:19,calvisitor-10-105-160-95,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 7,E55,<*>::<*> - retries = <*> +52,Jul,1,09:39:57,calvisitor-10-105-160-95,kernel,0,,"ARPT: 621490.858770: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 2119064372, Ack 3325040593, Win size 278",E150,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq <*>, Ack <*>, Win size <*>" +53,Jul,1,09:39:57,calvisitor-10-105-160-95,kernel,0,,ARPT: 621490.890645: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +54,Jul,1,09:39:57,calvisitor-10-105-160-95,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +55,Jul,1,09:39:57,authorMacBook-Pro,kernel,0,,ARPT: 621492.770239: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +56,Jul,1,09:41:34,calvisitor-10-105-160-95,kernel,0,,en0::IO80211Interface::postMessage bssid changed,E56,<*>::<*>::postMessage bssid changed +57,Jul,1,09:41:34,authorMacBook-Pro,kernel,0,,ARPT: 621542.378462: ARPT: Wake Reason: Wake on Scan offload,E131,ARPT: <*>: ARPT: Wake Reason: Wake on Scan offload +58,Jul,1,09:41:34,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +59,Jul,1,09:41:44,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1268 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +60,Jul,1,09:41:44,calvisitor-10-105-160-95,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 12119 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +61,Jul,1,09:41:54,calvisitor-10-105-160-95,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +62,Jul,1,09:41:54,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 437673 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +63,Jul,1,09:42:16,calvisitor-10-105-160-95,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 12087 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +64,Jul,1,09:42:23,calvisitor-10-105-160-95,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0,E54,<*>::<*> - intel_rp = <*> dlla_reporting_supported = <*> +65,Jul,1,09:42:54,calvisitor-10-105-160-95,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +66,Jul,1,09:43:22,calvisitor-10-105-160-95,mDNSResponder,91,,mDNS_RegisterInterface: Frequent transitions for interface en0 (FE80:0000:0000:0000:C6B3:01FF:FECD:467F),E263,mDNS_RegisterInterface: Frequent transitions for interface en0 (<*>) +67,Jul,1,09:44:23,authorMacBook-Pro,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +68,Jul,1,09:44:26,authorMacBook-Pro,kernel,0,,AirPort: Link Up on en0,E112,AirPort: Link Up on en0 +69,Jul,1,09:44:32,calvisitor-10-105-160-95,com.apple.CDScheduler,43,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +70,Jul,1,09:45:08,calvisitor-10-105-160-95,kernel,0,,"ARPT: 621686.164365: wl0: setup_keepalive: Local port: 62614, Remote port: 443",E146,"ARPT: <*>: wl0: setup_keepalive: Local port: <*>, Remote port: <*>" +71,Jul,1,09:45:46,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +72,Jul,1,09:45:52,calvisitor-10-105-160-95,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +73,Jul,1,09:59:26,calvisitor-10-105-160-95,kernel,0,,ARPT: 621738.114066: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +74,Jul,1,10:08:20,calvisitor-10-105-160-95,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-01 17:08:20 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +75,Jul,1,10:08:20,calvisitor-10-105-160-95,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +76,Jul,1,10:08:20,authorMacBook-Pro,kernel,0,,ARPT: 621799.252673: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0,E130,ARPT: <*>: AQM agg results <*> len hi/lo: <*> <*> BAbitmap(<*>-<*>) <*> +77,Jul,1,10:08:21,authorMacBook-Pro,corecaptured,31313,,"CCFile::captureLog Received Capture notice id: 1498928900.759059, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +78,Jul,1,10:08:29,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 10602 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +79,Jul,1,10:08:49,calvisitor-10-105-160-95,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +80,Jul,1,10:08:55,calvisitor-10-105-160-95,AddressBookSourceSync,31318,,Unrecognized attribute value: t:AbchPersonItemType,E328,Unrecognized attribute value: t:AbchPersonItemType +81,Jul,1,10:09:58,calvisitor-10-105-160-95,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +82,Jul,1,10:10:24,calvisitor-10-105-160-95,kernel,0,,Sandbox: com.apple.Addres(31328) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +83,Jul,1,10:10:27,calvisitor-10-105-160-95,kernel,0,,Sandbox: com.apple.Addres(31328) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +84,Jul,1,10:13:39,calvisitor-10-105-160-95,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +85,Jul,1,10:13:43,calvisitor-10-105-160-95,SpotlightNetHelper,352,,"CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data",E183,"CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data" +86,Jul,1,10:13:57,calvisitor-10-105-160-95,kernel,0,,Sandbox: com.apple.Addres(31346) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +87,Jul,1,10:38:53,calvisitor-10-105-160-95,sandboxd,129,[31376],com.apple.Addres(31376) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +88,Jul,1,10:46:47,calvisitor-10-105-160-95,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +89,Jul,1,10:46:47,calvisitor-10-105-160-95,sharingd,30299,,10:46:47.425 : BTLE scanner Powered On,E64,<*>:<*>:<*> : BTLE scanner Powered On +90,Jul,1,10:46:48,calvisitor-10-105-160-95,QQ,10018,,button report: 0x8002be0,E161,button report: <*> +91,Jul,1,10:47:08,calvisitor-10-105-160-95,sandboxd,129,[31382],com.apple.Addres(31382) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +92,Jul,1,11:20:51,calvisitor-10-105-160-95,sharingd,30299,,11:20:51.293 : BTLE discovered device with hash <01faa200 00000000 0000>,E62,<*>:<*>:<*> : BTLE discovered device with hash <*> <*> <*> +93,Jul,1,11:24:45,calvisitor-10-105-160-95,secd,276,,"securityd_xpc_dictionary_handler cloudd[326] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}",E304,"securityd_xpc_dictionary_handler cloudd[<*>] copy_matching Error Domain=NSOSStatusErrorDomain Code=<*> ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}" +94,Jul,1,11:29:32,calvisitor-10-105-160-95,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +95,Jul,1,11:38:18,calvisitor-10-105-160-95,kernel,0,,"ARPT: 626126.086205: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +96,Jul,1,11:38:18,calvisitor-10-105-160-95,kernel,0,,ARPT: 626126.086246: wl0: MDNS: IPV4 Addr: 10.105.160.95,E141,ARPT: <*>: wl0: MDNS: IPV4 Addr: <*> +97,Jul,1,11:39:47,calvisitor-10-105-160-95,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +98,Jul,1,11:39:47,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +99,Jul,1,11:39:48,authorMacBook-Pro,kernel,0,,en0::IO80211Interface::postMessage bssid changed,E56,<*>::<*>::postMessage bssid changed +100,Jul,1,11:39:48,calvisitor-10-105-160-95,networkd,195,,__42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc19060 125.39.133.143:14000,E49,<*>-[NETClientConnection <*>]_block_invoke CI46 - Hit by torpedo! <*> <*> <*>:<*> +101,Jul,1,11:39:48,calvisitor-10-105-160-95,kernel,0,,ARPT: 626132.740936: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +102,Jul,1,11:41:26,authorMacBook-Pro,kernel,0,,"Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0",E310,"Setting BTCoex Config: <*>:<*>, <*>:<*>, <*>:<*>, <*>:<*>" +103,Jul,1,11:41:54,calvisitor-10-105-160-95,kernel,0,,Sandbox: com.apple.Addres(31432) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +104,Jul,1,11:41:55,calvisitor-10-105-160-95,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +105,Jul,1,11:43:08,authorMacBook-Pro,UserEventAgent,43,,Captive: [CNInfoNetworkActive:1748] en0: SSID 'CalVisitor' making interface primary (cache indicates network not captive),E162,Captive: [CNInfoNetworkActive:<*>] en0: SSID 'CalVisitor' making interface primary (cache indicates network not captive) +106,Jul,1,11:43:23,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 16227 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +107,Jul,1,11:44:20,calvisitor-10-105-160-95,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +108,Jul,1,11:44:25,authorMacBook-Pro,kernel,0,,en0::IO80211Interface::postMessage bssid changed,E56,<*>::<*>::postMessage bssid changed +109,Jul,1,11:44:26,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO,E60,<*>::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +110,Jul,1,11:46:16,calvisitor-10-105-160-95,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +111,Jul,1,11:46:16,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +112,Jul,1,11:46:19,authorMacBook-Pro,sharingd,30299,,11:46:19.229 : Finished generating hashes,E68,<*>:<*>:<*> : Finished generating hashes +113,Jul,1,11:46:21,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Evaluating,E164,Captive: CNPluginHandler en0: Evaluating +114,Jul,1,11:46:36,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 16034 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +115,Jul,1,11:46:48,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1277 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +116,Jul,1,11:47:56,authorMacBook-Pro,kernel,0,,ARPT: 626380.467130: ARPT: Wake Reason: Wake on Scan offload,E131,ARPT: <*>: ARPT: Wake Reason: Wake on Scan offload +117,Jul,1,11:48:28,calvisitor-10-105-160-95,AddressBookSourceSync,31471,,Unrecognized attribute value: t:AbchPersonItemType,E328,Unrecognized attribute value: t:AbchPersonItemType +118,Jul,1,11:48:43,calvisitor-10-105-160-95,kernel,0,,"PM response took 1938 ms (54, powerd)",E288,"PM response took <*> ms (<*>, powerd)" +119,Jul,1,11:49:29,calvisitor-10-105-160-95,QQ,10018,,tcp_connection_destination_perform_socket_connect 19110 connectx to 183.57.48.75:80@0 failed: [50] Network is down,E316,tcp_connection_destination_perform_socket_connect <*> connectx to <*>:<*>@<*> failed: [<*>] Network is down +120,Jul,1,11:49:29,calvisitor-10-105-160-95,kernel,0,,AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving).,E110,AirPort: Link Down on en0. Reason <*> (Disassociated because station leaving). +121,Jul,1,11:49:29,authorMacBook-Pro,sharingd,30299,,11:49:29.473 : BTLE scanner Powered On,E64,<*>:<*>:<*> : BTLE scanner Powered On +122,Jul,1,11:49:29,authorMacBook-Pro,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +123,Jul,1,11:49:29,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +124,Jul,1,11:49:30,authorMacBook-Pro,corecaptured,31480,,CCXPCService::setStreamEventHandler Registered for notification callback.,E180,CCXPCService::setStreamEventHandler Registered for notification callback. +125,Jul,1,11:49:30,authorMacBook-Pro,Dropbox,24019,,[0701/114930:WARNING:dns_config_service_posix.cc(306)] Failed to read DnsConfig.,E10,[<*>/<*>:WARNING:dns_config_service_posix.cc(<*>)] Failed to read DnsConfig. +126,Jul,1,11:49:35,calvisitor-10-105-160-95,cdpd,11807,,Saw change in network reachability (isReachable=2),E301,Saw change in network reachability (isReachable=<*>) +127,Jul,1,11:51:02,authorMacBook-Pro,kernel,0,,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01),E33,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (<*>) +128,Jul,1,11:51:07,authorMacBook-Pro,kernel,0,,en0: BSSID changed to 5c:50:15:36:bc:03,E207,en0: BSSID changed to <*> +129,Jul,1,11:51:11,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 15759 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +130,Jul,1,11:51:12,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4439 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +131,Jul,1,11:51:22,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4429 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +132,Jul,1,11:51:25,calvisitor-10-105-160-95,com.apple.AddressBook.InternetAccountsBridge,31496,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +133,Jul,1,11:53:45,calvisitor-10-105-160-95,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +134,Jul,1,11:53:45,authorMacBook-Pro,kernel,0,,"Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0",E310,"Setting BTCoex Config: <*>:<*>, <*>:<*>, <*>:<*>, <*>:<*>" +135,Jul,1,11:53:49,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID,E41,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +136,Jul,1,11:55:14,calvisitor-10-105-160-95,kernel,0,,AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving).,E110,AirPort: Link Down on en0. Reason <*> (Disassociated because station leaving). +137,Jul,1,11:55:24,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4187 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +138,Jul,1,11:55:24,calvisitor-10-105-160-95,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4099 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +139,Jul,1,11:58:27,calvisitor-10-105-160-95,kernel,0,,"ARPT: 626625.204595: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 3034132215, Ack 528237229, Win size 278",E150,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq <*>, Ack <*>, Win size <*>" +140,Jul,1,11:58:27,authorMacBook-Pro,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 15323 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +141,Jul,1,12:12:04,calvisitor-10-105-160-95,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +142,Jul,1,12:12:21,calvisitor-10-105-160-95,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +143,Jul,1,12:26:01,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 427826 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +144,Jul,1,12:26:01,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2350 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +145,Jul,1,12:39:29,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1542 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +146,Jul,1,12:39:55,calvisitor-10-105-160-95,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1428 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +147,Jul,1,12:52:57,calvisitor-10-105-160-95,kernel,0,,"RTC: Maintenance 2017/7/1 19:52:56, sleep 2017/7/1 19:40:18",E295,"RTC: Maintenance <*>/<*>/<*> <*>:<*>:<*>, sleep <*>/<*>/<*> <*>:<*>:<*>" +148,Jul,1,12:52:57,calvisitor-10-105-160-95,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +149,Jul,1,12:52:57,calvisitor-10-105-160-95,kernel,0,,"en0: channel changed to 132,+1",E208,en0: channel changed to <*> +150,Jul,1,12:53:53,calvisitor-10-105-160-95,kernel,0,,"ARPT: 626908.045241: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +151,Jul,1,13:06:35,calvisitor-10-105-160-95,kernel,0,,AirPort: Link Up on awdl0,E111,AirPort: Link Up on awdl0 +152,Jul,1,13:20:12,calvisitor-10-105-160-95,sharingd,30299,,13:20:12.402 : BTLE scanner Powered On,E64,<*>:<*>:<*> : BTLE scanner Powered On +153,Jul,1,13:20:12,calvisitor-10-105-160-95,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 424575 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +154,Jul,1,13:20:31,calvisitor-10-105-160-95,com.apple.AddressBook.InternetAccountsBridge,31588,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +155,Jul,1,13:20:33,calvisitor-10-105-160-95,sandboxd,129,[31588],com.apple.Addres(31588) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +156,Jul,1,13:34:07,calvisitor-10-105-160-95,com.apple.AddressBook.InternetAccountsBridge,31595,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +157,Jul,1,13:41:48,calvisitor-10-105-160-95,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +158,Jul,1,13:41:58,calvisitor-10-105-160-95,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +159,Jul,1,13:42:01,calvisitor-10-105-160-95,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +160,Jul,1,13:42:41,calvisitor-10-105-160-95,kernel,0,,ARPT: 627141.702095: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +161,Jul,1,13:44:07,calvisitor-10-105-160-95,com.apple.AddressBook.InternetAccountsBridge,31608,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +162,Jul,1,13:47:33,calvisitor-10-105-160-95,kernel,0,,en0: 802.11d country code set to 'X3'.,E206,en0: <*> country code set to '<*>'. +163,Jul,1,13:47:33,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +164,Jul,1,13:47:53,calvisitor-10-105-160-95,kernel,0,,en0: channel changed to 6,E208,en0: channel changed to <*> +165,Jul,1,13:49:09,authorMacBook-Pro,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +166,Jul,1,14:01:24,calvisitor-10-105-160-95,kernel,0,,"ARPT: 627305.613279: wl0: setup_keepalive: Seq: 1664112163, Ack: 818851215, Win size: 4096",E148,"ARPT: <*>: wl0: setup_keepalive: Seq: <*>, Ack: <*>, Win size: <*>" +167,Jul,1,14:14:51,calvisitor-10-105-160-95,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +168,Jul,1,14:28:27,calvisitor-10-105-160-95,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +169,Jul,1,14:28:55,calvisitor-10-105-160-95,kernel,0,,ARPT: 627355.597577: ARPT: Wake Reason: Wake on Scan offload,E131,ARPT: <*>: ARPT: Wake Reason: Wake on Scan offload +170,Jul,1,14:29:01,calvisitor-10-105-160-95,sandboxd,129,[10018],QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport,E51,<*>(<*>) deny mach-lookup com.apple.networking.captivenetworksupport +171,Jul,1,14:38:45,calvisitor-10-105-160-95,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +172,Jul,1,14:52:03,calvisitor-10-105-160-95,kernel,0,,"RTC: Maintenance 2017/7/1 21:52:00, sleep 2017/7/1 21:39:51",E295,"RTC: Maintenance <*>/<*>/<*> <*>:<*>:<*>, sleep <*>/<*>/<*> <*>:<*>:<*>" +173,Jul,1,14:52:03,calvisitor-10-105-160-95,kernel,0,,[HID] [MT] AppleMultitouchDevice::willTerminate entered,E36,[HID] [MT] AppleMultitouchDevice::willTerminate entered +174,Jul,1,14:52:03,calvisitor-10-105-160-95,blued,85,,[BluetoothHIDDeviceController] EventServiceDisconnectedCallback,E24,[BluetoothHIDDeviceController] EventServiceDisconnectedCallback +175,Jul,1,15:05:42,calvisitor-10-105-160-95,kernel,0,,PMStats: Hibernate read took 197 ms,E291,PMStats: Hibernate read took <*> ms +176,Jul,1,15:05:47,calvisitor-10-105-160-95,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +177,Jul,1,15:05:51,calvisitor-10-105-160-95,com.apple.AddressBook.InternetAccountsBridge,31654,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +178,Jul,1,19:43:22,calvisitor-10-105-160-95,kernel,0,,"pages 1471315, wire 491253, act 449877, inact 3, cleaned 0 spec 5, zf 23, throt 0, compr 345876, xpmapped 40000",E282,"pages <*>, wire <*>, act <*>, inact <*>, cleaned <*> spec <*>, zf <*>, throt <*>, compr <*>, xpmapped <*>" +179,Jul,1,19:43:22,calvisitor-10-105-160-95,VDCAssistant,213,,"VDCAssistant: Found a camera (0x1430000005ac8290) , but was not able to start it up (0x0 -- (os/kern) successful)",E332,"VDCAssistant: Found a camera (<*>) , but was not able to start it up (<*> -- (os/kern) successful)" +180,Jul,1,19:43:22,calvisitor-10-105-160-95,WindowServer,184,,handle_will_sleep_auth_and_shield_windows: Reordering authw 0x7fa823a04400(2004) (lock state: 3),E224,handle_will_sleep_auth_and_shield_windows: Reordering authw <*>(<*>) (lock state: <*>) +181,Jul,1,19:43:32,calvisitor-10-105-163-202,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +182,Jul,1,19:43:36,calvisitor-10-105-163-202,QQ,10018,,button report: 0x8002bdf,E161,button report: <*> +183,Jul,1,19:46:26,calvisitor-10-105-163-202,GoogleSoftwareUpdateAgent,31702,,"2017-07-01 19:46:26.133 GoogleSoftwareUpdateAgent[31702/0x7000002a0000] [lvl=2] -[KSAgentApp(KeystoneThread) runKeystonesInThreadWithArg:] Checking with local engine: >> processor= isProcessing=NO actionsCompleted=0 progress=0.00 errors=0 currentActionErrors=0 events=0 currentActionEvents=0 actionQueue=( ) > delegate=(null) serverInfoStore= errors=0 >",E80,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSAgentApp(KeystoneThread) runKeystonesInThreadWithArg:] Checking with local engine: ticketStore= store= path=""<*>"" lockFile= path=""<*>"" locked=NO > >> processor= delegate= isProcessing=NO actionsCompleted=<*> progress=<*> errors=<*> currentActionErrors=<*> events=<*> currentActionEvents=<*> actionQueue=( ) > delegate=(<*>) serverInfoStore= path=<*> errors=<*> >" +184,Jul,1,19:46:42,calvisitor-10-105-163-202,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +185,Jul,1,19:46:42,calvisitor-10-105-163-202,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +186,Jul,1,19:50:12,calvisitor-10-105-163-202,quicklookd,31687,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +187,Jul,1,20:13:23,calvisitor-10-105-163-202,Safari,9852,,tcp_connection_tls_session_error_callback_imp 1977 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22,E319,tcp_connection_tls_session_error_callback_imp <*> __tcp_connection_tls_session_callback_write_block_invoke.<*> error <*> +188,Jul,1,20:17:07,calvisitor-10-105-163-202,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +189,Jul,1,20:17:08,calvisitor-10-105-163-202,quicklookd,31687,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +190,Jul,1,20:23:09,calvisitor-10-105-163-202,cloudd,326,,"SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}",E303,"SecOSStatusWith error:[<*>] Error Domain=NSOSStatusErrorDomain Code=<*> ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}" +191,Jul,1,21:03:00,calvisitor-10-105-163-202,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +192,Jul,1,21:10:19,calvisitor-10-105-163-202,Preview,11512,,WARNING: Type1 font data isn't in the correct format required by the Adobe Type 1 Font Format specification.,E341,WARNING: Type1 font data isn't in the correct format required by the Adobe Type <*> Font Format specification. +193,Jul,1,21:17:32,calvisitor-10-105-163-202,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +194,Jul,1,21:18:10,calvisitor-10-105-163-202,quicklookd,31687,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +195,Jul,1,21:18:10,calvisitor-10-105-163-202,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +196,Jul,1,21:19:06,calvisitor-10-105-163-202,quicklookd,31687,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +197,Jul,1,21:21:33,calvisitor-10-105-163-202,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +198,Jul,1,21:24:38,calvisitor-10-105-163-202,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +199,Jul,1,21:33:23,calvisitor-10-105-163-202,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +200,Jul,1,22:03:31,calvisitor-10-105-163-202,com.apple.cts,258,,"com.apple.ical.sync.x-coredata://DB05755C-483D-44B7-B93B-ED06E57FF420/CalDAVPrincipal/p11: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 59 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +201,Jul,1,22:08:16,calvisitor-10-105-163-202,WindowServer,184,,"device_generate_desktop_screenshot: authw 0x7fa823c89600(2000), shield 0x7fa8258cac00(2001)",E199,"device_generate_desktop_screenshot: authw <*>(<*>), shield <*>(<*>)" +202,Jul,1,22:12:41,calvisitor-10-105-163-202,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +203,Jul,1,22:13:49,calvisitor-10-105-163-202,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +204,Jul,1,22:19:34,calvisitor-10-105-163-202,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +205,Jul,1,22:20:14,calvisitor-10-105-163-202,WindowServer,184,,"device_generate_desktop_screenshot: authw 0x7fa823c89600(2000), shield 0x7fa8258cac00(2001)",E199,"device_generate_desktop_screenshot: authw <*>(<*>), shield <*>(<*>)" +206,Jul,1,22:20:57,calvisitor-10-105-163-202,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +207,Jul,1,22:20:58,calvisitor-10-105-163-202,quicklookd,31687,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +208,Jul,1,22:22:59,calvisitor-10-105-163-202,CalendarAgent,279,,[com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-8].],E28,[com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-<*>].] +209,Jul,1,22:25:38,calvisitor-10-105-163-202,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 250, items, fQueryRetries, 0, fLastRetryTimestamp, 520665636.6",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +210,Jul,1,22:30:15,calvisitor-10-105-163-202,QQ,10018,,button report: 0x8002bdf,E161,button report: <*> +211,Jul,1,23:32:34,calvisitor-10-105-163-202,kernel,0,,"ARPT: 640362.070027: wl0: wl_update_tcpkeep_seq: Original Seq: 2000710617, Ack: 2120985509, Win size: 4096",E149,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Original Seq: <*>, Ack: <*>, Win size: <*>" +212,Jul,1,23:32:34,calvisitor-10-105-163-202,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +213,Jul,1,23:32:34,calvisitor-10-105-163-202,kernel,0,,AirPort: Link Up on awdl0,E111,AirPort: Link Up on awdl0 +214,Jul,1,23:46:06,calvisitor-10-105-163-202,kernel,0,,Wake reason: RTC (Alarm),E338,Wake reason: RTC (Alarm) +215,Jul,1,23:46:06,calvisitor-10-105-163-202,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 2 us,E57,<*>::prePCIWake - power up complete - took <*> us +216,Jul,1,23:46:06,calvisitor-10-105-163-202,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +217,Jul,2,02:18:39,calvisitor-10-105-163-202,sharingd,30299,,02:18:39.156 : BTLE scanner Powered On,E64,<*>:<*>:<*> : BTLE scanner Powered On +218,Jul,2,02:18:39,calvisitor-10-105-163-202,configd,53,,network changed: v4(en0-:10.105.163.202) v6(en0:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB,E267,network changed: <*>(<*>:<*>) <*>(<*>) DNS! Proxy SMB +219,Jul,2,02:19:03,calvisitor-10-105-163-202,com.apple.AddressBook.InternetAccountsBridge,31953,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +220,Jul,2,02:32:17,calvisitor-10-105-163-202,kernel,0,,hibernate_page_list_setall found pageCount 448015,E233,hibernate_page_list_setall found pageCount <*> +221,Jul,2,02:32:17,calvisitor-10-105-163-202,kernel,0,,[HID] [ATC] [Error] AppleDeviceManagementHIDEventService::start Could not make a string from out connection notification key,E32,[HID] [ATC] [Error] AppleDeviceManagementHIDEventService::start Could not make a string from out connection notification key +222,Jul,2,02:32:17,calvisitor-10-105-163-202,kernel,0,,en0: BSSID changed to 5c:50:15:4c:18:1c,E207,en0: BSSID changed to <*> +223,Jul,2,02:32:17,calvisitor-10-105-163-202,kernel,0,,[IOBluetoothFamily][staticBluetoothTransportShowsUp] -- Received Bluetooth Controller register service notification -- 0x7000,E38,[IOBluetoothFamily][staticBluetoothTransportShowsUp] -- Received Bluetooth Controller register service notification -- <*> +224,Jul,2,10:11:17,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +225,Jul,2,10:20:52,calvisitor-10-105-163-202,QQ,10018,,FA||Url||taskID[2019353117] dealloc,E216,FA||Url||taskID[<*>] dealloc +226,Jul,2,10:27:44,calvisitor-10-105-163-202,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 250, items, fQueryRetries, 0, fLastRetryTimestamp, 520708962.7",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +227,Jul,2,10:40:07,calvisitor-10-105-163-202,GoogleSoftwareUpdateAgent,32012,,"2017-07-02 10:40:07.676 GoogleSoftwareUpdateAgent[32012/0x7000002a0000] [lvl=2] -[KSAgentApp updateProductWithProductID:usingEngine:] Checking for updates for ""com.google.Keystone"" using engine >> processor= isProcessing=NO actionsCompleted=0 progress=0.00 errors=0 currentActionErrors=0 events=0 currentActionEvents=0 actionQueue=( ) > delegate=(null) serverInfoStore= errors=0 >",E77,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSAgentApp updateProductWithProductID:usingEngine:] Checking for updates for ""com.google.Keystone"" using engine ticketStore= store= path=""<*>"" lockFile= path=""<*>"" locked=NO > >> processor= delegate= isProcessing=NO actionsCompleted=<*> progress=<*> errors=<*> currentActionErrors=<*> events=<*> currentActionEvents=<*> actionQueue=( ) > delegate=(<*>) serverInfoStore= path=""<*>""> errors=<*> >" +228,Jul,2,11:38:49,calvisitor-10-105-163-202,QQ,10018,,2017/07/02 11:38:49.414 | I | VoipWrapper | DAVEngineImpl.cpp:1400:Close | close video chat. llFriendUIN = ******2341.,E53,<*>/<*>/<*> <*>:<*>:<*> | I | VoipWrapper | DAVEngineImpl.cpp:<*>:Close | close video chat. llFriendUIN = <*>. +229,Jul,2,11:39:07,calvisitor-10-105-163-202,kernel,0,,"ARPT: 645791.413780: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 156,",E134,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': <*>," +230,Jul,2,11:42:54,calvisitor-10-105-163-202,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +231,Jul,2,11:42:54,calvisitor-10-105-163-202,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +232,Jul,2,11:42:55,authorMacBook-Pro,kernel,0,,ARPT: 645795.024045: ARPT: Wake Reason: Wake on Scan offload,E131,ARPT: <*>: ARPT: Wake Reason: Wake on Scan offload +233,Jul,2,11:43:53,calvisitor-10-105-163-202,kernel,0,,"PM response took 28003 ms (54, powerd)",E288,"PM response took <*> ms (<*>, powerd)" +234,Jul,2,12:15:23,calvisitor-10-105-163-202,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +235,Jul,2,12:15:23,calvisitor-10-105-163-202,sharingd,30299,,12:15:23.005 : Discoverable mode changed to Off,E67,<*>:<*>:<*> : Discoverable mode changed to Off +236,Jul,2,12:15:24,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 19617 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +237,Jul,2,12:15:30,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Authenticated,E163,Captive: CNPluginHandler en0: Authenticated +238,Jul,2,12:29:56,calvisitor-10-105-163-202,kernel,0,,ARPT: 645957.322055: wl0: setup_keepalive: Local IP: 10.105.163.202,E145,ARPT: <*>: wl0: setup_keepalive: Local IP: <*> +239,Jul,2,12:43:24,calvisitor-10-105-163-202,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +240,Jul,2,12:56:19,calvisitor-10-105-163-202,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 4,E55,<*>::<*> - retries = <*> +241,Jul,2,13:00:07,calvisitor-10-105-163-202,kernel,0,,AirPort: Link Down on awdl0. Reason 1 (Unspecified).,E109,AirPort: Link Down on awdl0. Reason <*> (Unspecified). +242,Jul,2,13:01:36,calvisitor-10-105-163-202,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +243,Jul,2,13:01:37,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +244,Jul,2,13:02:03,calvisitor-10-105-163-202,com.apple.AddressBook.InternetAccountsBridge,32155,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +245,Jul,2,13:03:10,calvisitor-10-105-163-202,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +246,Jul,2,13:03:10,authorMacBook-Pro,kernel,0,,ARPT: 646193.687729: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +247,Jul,2,13:03:41,calvisitor-10-105-163-202,AddressBookSourceSync,32160,,Unrecognized attribute value: t:AbchPersonItemType,E328,Unrecognized attribute value: t:AbchPersonItemType +248,Jul,2,13:05:38,calvisitor-10-105-163-202,kernel,0,,TBT W (2): 0x0040 [x],E314,TBT W (<*>): <*> [x] +249,Jul,2,13:05:40,authorMacBook-Pro,configd,53,,network changed: DNS* Proxy,E269,network changed: DNS* Proxy +250,Jul,2,13:06:17,calvisitor-10-105-163-202,kernel,0,,"ARPT: 646292.668059: wl0: MDNS: 0 SRV Recs, 0 TXT Recs",E140,"ARPT: <*>: wl0: MDNS: <*> SRV Recs, <*> TXT Recs" +251,Jul,2,13:10:47,calvisitor-10-105-163-202,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +252,Jul,2,13:12:08,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID,E41,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +253,Jul,2,13:12:08,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +254,Jul,2,13:12:41,calvisitor-10-105-163-202,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +255,Jul,2,13:13:22,authorMacBook-Pro,mDNSResponder,91,,mDNS_RegisterInterface: Frequent transitions for interface awdl0 (FE80:0000:0000:0000:D8A5:90FF:FEF5:7FFF),E262,mDNS_RegisterInterface: Frequent transitions for interface awdl0 (<*>) +256,Jul,2,13:44:22,calvisitor-10-105-163-202,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us,E57,<*>::prePCIWake - power up complete - took <*> us +257,Jul,2,13:44:30,authorMacBook-Pro,sandboxd,129,[10018],QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport,E51,<*>(<*>) deny mach-lookup com.apple.networking.captivenetworksupport +258,Jul,2,13:44:55,calvisitor-10-105-163-202,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +259,Jul,2,13:45:01,calvisitor-10-105-163-202,com.apple.AddressBook.InternetAccountsBridge,32208,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +260,Jul,2,13:56:23,calvisitor-10-105-163-202,kernel,0,,ARPT: 646509.760609: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +261,Jul,2,14:07:52,calvisitor-10-105-163-202,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +262,Jul,2,14:33:03,calvisitor-10-105-163-202,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +263,Jul,2,14:41:07,calvisitor-10-105-163-202,Safari,9852,,tcp_connection_tls_session_error_callback_imp 2044 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22,E319,tcp_connection_tls_session_error_callback_imp <*> __tcp_connection_tls_session_callback_write_block_invoke.<*> error <*> +264,Jul,2,14:44:01,calvisitor-10-105-163-202,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +265,Jul,2,14:52:57,calvisitor-10-105-163-202,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +266,Jul,2,15:06:24,calvisitor-10-105-163-202,syslogd,44,,ASL Sender Statistics,E153,ASL Sender Statistics +267,Jul,2,15:33:55,calvisitor-10-105-163-202,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000300,E120,AppleCamIn::systemWakeCall - messageType = <*> +268,Jul,2,15:34:11,calvisitor-10-105-163-202,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +269,Jul,2,15:46:40,calvisitor-10-105-163-202,GoogleSoftwareUpdateAgent,32432,,2017-07-02 15:46:40.516 GoogleSoftwareUpdateAgent[32432/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher(PrivateMethods) launchedHelperTaskForToolPath:error:] KSOutOfProcessFetcher launched '/Users/xpc/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksfetch' with process id: 32433,E86,<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSOutOfProcessFetcher(PrivateMethods) launchedHelperTaskForToolPath:error:] KSOutOfProcessFetcher launched '<*>' with process id: <*> +270,Jul,2,15:46:40,calvisitor-10-105-163-202,GoogleSoftwareUpdateAgent,32432,,"2017-07-02 15:46:40.697 GoogleSoftwareUpdateAgent[32432/0x7000002a0000] [lvl=2] -[KSUpdateEngine updateAllExceptProduct:] KSUpdateEngine updating all installed products, except:'com.google.Keystone'.",E90,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSUpdateEngine updateAllExceptProduct:] KSUpdateEngine updating all installed products, except:'com.google.Keystone'." +271,Jul,2,15:46:41,calvisitor-10-105-163-202,ksfetch,32435,,2017-07-02 15:46:41.445 ksfetch[32435/0x7fff79824000] [lvl=2] main() ksfetch fetching URL ( { URL: https://tools.google.com/service/update2?cup2hreq=53f725cf03f511fab16f19e789ce64aa1eed72395fc246e9f1100748325002f4&cup2key=7:1132320327 }) to folder:/tmp/KSOutOfProcessFetcher.YH2CjY1tnx/download,E96,<*>-<*>-<*> <*>:<*>:<*> ksfetch[<*>/<*>] [lvl=<*>] main() ksfetch fetching URL ( { URL: <*> }) to folder:<*> +272,Jul,2,16:38:07,calvisitor-10-105-163-202,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +273,Jul,2,16:51:10,calvisitor-10-105-163-202,QQ,10018,,FA||Url||taskID[2019353182] dealloc,E216,FA||Url||taskID[<*>] dealloc +274,Jul,2,16:55:53,calvisitor-10-105-163-202,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.32502,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +275,Jul,2,17:01:19,calvisitor-10-105-163-202,cloudd,326,,"SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}",E303,"SecOSStatusWith error:[<*>] Error Domain=NSOSStatusErrorDomain Code=<*> ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}" +276,Jul,2,17:07:56,calvisitor-10-105-163-202,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +277,Jul,2,17:11:18,calvisitor-10-105-163-202,Safari,9852,,tcp_connection_tls_session_error_callback_imp 2068 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22,E319,tcp_connection_tls_session_error_callback_imp <*> __tcp_connection_tls_session_callback_write_block_invoke.<*> error <*> +278,Jul,2,17:13:46,calvisitor-10-105-163-202,com.apple.WebKit.WebContent,32514,,[17:13:46.390] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7f92413e3000) rejecting report of layer being serviced - IQ has not yet begun to update,E16,[<*>:<*>:<*>] <<<< IQ-CA >>>> piqca_setUsePreQueue: (<*>) rejecting report of layer being serviced - IQ has not yet begun to update +279,Jul,2,17:19:15,calvisitor-10-105-163-202,com.apple.WebKit.WebContent,32514,,[17:19:15.148] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2306,E19,[<*>:<*>:<*>] itemasync_SetProperty signalled err=<*> (kFigBaseObjectError_Invalidated) (invalidated) at <*> line <*> +280,Jul,2,17:34:21,calvisitor-10-105-163-202,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +281,Jul,2,17:36:15,calvisitor-10-105-163-202,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +282,Jul,2,17:39:27,calvisitor-10-105-163-202,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.32564,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.WebFeedParser.xpc/Contents/MacOS/com.apple.Safari.WebFeedParser error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +283,Jul,2,17:44:05,calvisitor-10-105-163-202,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +284,Jul,2,17:56:40,calvisitor-10-105-163-202,com.apple.ncplugin.WorldClock,32583,,host connection connection from pid 30298 invalidated,E243,host connection connection from pid <*> invalidated +285,Jul,2,17:56:40,calvisitor-10-105-163-202,com.apple.ncplugin.weather,32585,,Error in CoreDragRemoveReceiveHandler: -1856,E212,Error in CoreDragRemoveReceiveHandler: <*> +286,Jul,2,18:08:55,calvisitor-10-105-163-202,kernel,0,,ARPT: 661549.802297: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.,E139,ARPT: <*>: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +287,Jul,2,18:08:55,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +288,Jul,2,18:08:56,authorMacBook-Pro,kernel,0,,"ARPT: 661552.832561: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0,",E138,"ARPT: <*>: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': <*>," +289,Jul,2,18:09:15,calvisitor-10-105-163-202,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +290,Jul,2,18:23:33,calvisitor-10-105-163-202,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +291,Jul,2,18:35:12,calvisitor-10-105-163-202,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +292,Jul,2,18:35:12,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +293,Jul,2,18:35:13,authorMacBook-Pro,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +294,Jul,2,18:35:23,calvisitor-10-105-163-202,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 49 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +295,Jul,2,18:35:44,calvisitor-10-105-163-202,sandboxd,129,[32626],com.apple.Addres(32626) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +296,Jul,2,18:35:57,calvisitor-10-105-163-202,kernel,0,,ARPT: 661708.530713: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +297,Jul,2,18:36:01,calvisitor-10-105-163-202,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0,E54,<*>::<*> - intel_rp = <*> dlla_reporting_supported = <*> +298,Jul,2,18:37:25,authorMacBook-Pro,configd,53,,network changed: v4(en0-:10.105.163.202) v6(en0:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB,E267,network changed: <*>(<*>:<*>) <*>(<*>) DNS! Proxy SMB +299,Jul,2,18:38:31,authorMacBook-Pro,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2262 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +300,Jul,2,18:38:31,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Inactive,E165,Captive: CNPluginHandler en0: Inactive +301,Jul,2,18:38:32,authorMacBook-Pro,corecaptured,32639,,CCXPCService::setStreamEventHandler Registered for notification callback.,E180,CCXPCService::setStreamEventHandler Registered for notification callback. +302,Jul,2,18:38:36,calvisitor-10-105-163-202,kernel,0,,"Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0",E310,"Setting BTCoex Config: <*>:<*>, <*>:<*>, <*>:<*>, <*>:<*>" +303,Jul,2,18:39:18,calvisitor-10-105-163-202,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +304,Jul,2,18:40:01,authorMacBook-Pro,kernel,0,,in6_unlink_ifa: IPv6 address 0x77c9114551ab23ab has no prefix,E75,<*>: IPv6 address <*> has no prefix +305,Jul,2,18:40:08,calvisitor-10-105-163-202,configd,53,,network changed: v4(en0:10.105.163.202) v6(en0+:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB,E267,network changed: <*>(<*>:<*>) <*>(<*>) DNS! Proxy SMB +306,Jul,2,18:40:21,calvisitor-10-105-163-202,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 318966 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +307,Jul,2,18:40:40,calvisitor-10-105-163-202,com.apple.AddressBook.InternetAccountsBridge,32655,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +308,Jul,2,18:40:46,calvisitor-10-105-163-202,kernel,0,,"ARPT: 661856.313502: wl0: MDNS: 0 SRV Recs, 0 TXT Recs",E140,"ARPT: <*>: wl0: MDNS: <*> SRV Recs, <*> TXT Recs" +309,Jul,2,18:53:41,calvisitor-10-105-163-202,kernel,0,,en0: BSSID changed to 5c:50:15:36:bc:03,E207,en0: BSSID changed to <*> +310,Jul,2,18:53:41,calvisitor-10-105-163-202,kernel,0,,en0: channel changed to 6,E208,en0: channel changed to <*> +311,Jul,2,18:53:51,calvisitor-10-105-163-202,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 318156 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +312,Jul,2,18:54:02,calvisitor-10-105-163-202,com.apple.AddressBook.InternetAccountsBridge,32662,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +313,Jul,2,18:54:36,calvisitor-10-105-163-202,kernel,0,,ARPT: 661915.168735: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:4de9:a101:c96c:f28b,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +314,Jul,2,19:21:05,calvisitor-10-105-163-202,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +315,Jul,2,19:21:15,calvisitor-10-105-163-202,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 3498 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +316,Jul,2,19:34:33,calvisitor-10-105-163-202,com.apple.geod,30311,,"PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1001 ""The request timed out."" UserInfo={NSUnderlyingError=0x7fe133460660 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 ""The request timed out."" UserInfo={NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}",E286,"PBRequester failed with Error Error Domain=NSURLErrorDomain Code=<*> ""The request timed out."" UserInfo={NSUnderlyingError=<*> {Error Domain=kCFErrorDomainCFNetwork Code=<*> ""The request timed out."" UserInfo={NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorCodeKey=<*>, _kCFStreamErrorDomainKey=<*>, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorDomainKey=<*>, _kCFStreamErrorCodeKey=<*>, NSLocalizedDescription=The request timed out.}" +317,Jul,2,19:35:29,calvisitor-10-105-163-202,kernel,0,,ARPT: 662096.028575: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:4de9:a101:c96c:f28b,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +318,Jul,2,19:35:32,calvisitor-10-105-163-202,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0,E54,<*>::<*> - intel_rp = <*> dlla_reporting_supported = <*> +319,Jul,2,19:48:11,calvisitor-10-105-163-202,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 314896 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +320,Jul,2,19:48:20,calvisitor-10-105-163-202,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 106 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +321,Jul,2,19:48:30,calvisitor-10-105-163-202,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +322,Jul,2,20:01:48,calvisitor-10-105-163-202,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +323,Jul,2,20:01:48,calvisitor-10-105-163-202,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 5,E55,<*>::<*> - retries = <*> +324,Jul,2,20:01:48,calvisitor-10-105-163-202,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-03 03:01:48 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +325,Jul,2,20:01:59,calvisitor-10-105-163-202,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 61304 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +326,Jul,2,20:15:26,calvisitor-10-105-163-202,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +327,Jul,2,20:15:26,calvisitor-10-105-163-202,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +328,Jul,2,20:22:06,calvisitor-10-105-163-202,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-03 03:22:06 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +329,Jul,2,20:22:38,calvisitor-10-105-163-202,WindowServer,184,,"device_generate_lock_screen_screenshot: authw 0x7fa823962400(2000)[0, 0, 1440, 900] shield 0x7fa82d372000(2001), dev [1440,900]",E200,"device_generate_lock_screen_screenshot: authw <*>(<*>)[<*>, <*>, <*>, <*>] shield <*>(<*>), dev [<*>,<*>]" +330,Jul,2,20:43:36,calvisitor-10-105-163-202,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +331,Jul,2,20:50:47,calvisitor-10-105-163-202,ksfetch,32776,,2017-07-02 20:50:47.457 ksfetch[32776/0x7fff79824000] [lvl=2] KSHelperReceiveAllData() KSHelperTool read 1926 bytes from stdin.,E92,<*>-<*>-<*> <*>:<*>:<*> ksfetch[<*>/<*>] [lvl=<*>] KSHelperReceiveAllData() KSHelperTool read <*> bytes from stdin. +332,Jul,2,21:17:07,calvisitor-10-105-163-202,com.apple.WebKit.WebContent,32778,,[21:17:07.529] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +333,Jul,2,21:43:56,calvisitor-10-105-163-202,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +334,Jul,2,21:44:16,calvisitor-10-105-163-202,Safari,9852,,tcp_connection_tls_session_error_callback_imp 2103 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22,E319,tcp_connection_tls_session_error_callback_imp <*> __tcp_connection_tls_session_callback_write_block_invoke.<*> error <*> +335,Jul,2,21:46:49,calvisitor-10-105-163-202,syslogd,44,,ASL Sender Statistics,E153,ASL Sender Statistics +336,Jul,2,21:48:53,calvisitor-10-105-163-202,sharingd,30299,,21:48:53.041 : BTLE scanner Powered Off,E63,<*>:<*>:<*> : BTLE scanner Powered Off +337,Jul,2,22:09:17,calvisitor-10-105-163-202,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +338,Jul,2,22:24:03,authorMacBook-Pro,com.apple.geod,30311,,"PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1009 ""The Internet connection appears to be offline."" UserInfo={NSUnderlyingError=0x7fe13512cf70 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 ""The Internet connection appears to be offline."" UserInfo={NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.}",E285,"PBRequester failed with Error Error Domain=NSURLErrorDomain Code=<*> ""The Internet connection appears to be offline."" UserInfo={NSUnderlyingError=<*> {Error Domain=kCFErrorDomainCFNetwork Code=<*> ""The Internet connection appears to be offline."" UserInfo={NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorCodeKey=<*>, _kCFStreamErrorDomainKey=<*>, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorDomainKey=<*>, _kCFStreamErrorCodeKey=<*>, NSLocalizedDescription=The Internet connection appears to be offline.}" +339,Jul,2,22:24:03,authorMacBook-Pro,kernel,0,,ARPT: 669592.164786: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0,E129,ARPT: <*>: AQM agg params <*> maxlen hi/lo <*> <*> minlen <*> adjlen <*> +340,Jul,2,22:24:04,authorMacBook-Pro,corecaptured,32877,,Received Capture Event,E294,Received Capture Event +341,Jul,2,22:24:14,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Evaluating,E164,Captive: CNPluginHandler en0: Evaluating +342,Jul,2,22:24:15,authorMacBook-Pro,kernel,0,,Sandbox: QQ(10018) deny(1) mach-lookup com.apple.networking.captivenetworksupport,E299,Sandbox: <*>(<*>) deny(<*>) mach-lookup <*> +343,Jul,2,22:24:18,authorMacBook-Pro,com.apple.AddressBook.InternetAccountsBridge,32885,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +344,Jul,2,22:24:25,authorMacBook-Pro,kernel,0,,Sandbox: com.apple.Addres(32885) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +345,Jul,2,22:24:43,authorMacBook-Pro,corecaptured,32877,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +346,Jul,2,22:32:34,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[22:32:34.846] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +347,Jul,2,22:44:55,authorMacBook-Pro,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +348,Jul,2,23:21:43,authorMacBook-Pro,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +349,Jul,2,23:22:08,authorMacBook-Pro,kernel,0,,ARPT: 671682.028482: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +350,Jul,2,23:22:10,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +351,Jul,2,23:35:17,authorMacBook-Pro,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 2 us,E57,<*>::prePCIWake - power up complete - took <*> us +352,Jul,2,23:35:17,authorMacBook-Pro,kernel,0,,AirPort: Link Down on awdl0. Reason 1 (Unspecified).,E109,AirPort: Link Down on awdl0. Reason <*> (Unspecified). +353,Jul,2,23:35:17,authorMacBook-Pro,syslogd,44,,ASL Sender Statistics,E153,ASL Sender Statistics +354,Jul,2,23:35:17,authorMacBook-Pro,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +355,Jul,2,23:35:21,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +356,Jul,2,23:48:54,authorMacBook-Pro,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +357,Jul,3,00:02:22,authorMacBook-Pro,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +358,Jul,3,00:02:22,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +359,Jul,3,00:02:27,authorMacBook-Pro,Safari,9852,,tcp_connection_tls_session_error_callback_imp 2115 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22,E319,tcp_connection_tls_session_error_callback_imp <*> __tcp_connection_tls_session_callback_write_block_invoke.<*> error <*> +360,Jul,3,00:27:35,authorMacBook-Pro,ntpd,207,,sigio_handler: sigio_handler_active != 0,E312,sigio_handler: sigio_handler_active != <*> +361,Jul,3,00:27:54,authorMacBook-Pro,QQ,10018,,############################## _getSysMsgList,E1,############################## _getSysMsgList +362,Jul,3,00:41:11,authorMacBook-Pro,syslogd,44,,"Configuration Notice: ASL Module ""com.apple.performance"" claims selected messages. Those messages may not appear in standard system log files or in the ASL database.",E190,"Configuration Notice: ASL Module ""<*>"" claims selected messages. Those messages may not appear in standard system log files or in the ASL database." +363,Jul,3,00:55:12,authorMacBook-Pro,kernel,0,,"ARPT: 671856.784669: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 18011,",E134,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': <*>," +364,Jul,3,01:06:37,authorMacBook-Pro,kernel,0,,Wake reason: ?,E335,Wake reason: ? +365,Jul,3,01:06:37,authorMacBook-Pro,kernel,0,,"en0: channel changed to 132,+1",E208,en0: channel changed to <*> +366,Jul,3,01:06:37,authorMacBook-Pro,sharingd,30299,,01:06:37.436 : Scanning mode Contacts Only,E70,<*>:<*>:<*> : Scanning mode Contacts Only +367,Jul,3,01:06:37,authorMacBook-Pro,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +368,Jul,3,01:06:48,authorMacBook-Pro,com.apple.CDScheduler,43,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +369,Jul,3,01:07:08,authorMacBook-Pro,kernel,0,,"ARPT: 671889.268467: wl0: setup_keepalive: Seq: 2040703749, Ack: 3006590414, Win size: 4096",E148,"ARPT: <*>: wl0: setup_keepalive: Seq: <*>, Ack: <*>, Win size: <*>" +370,Jul,3,01:31:00,authorMacBook-Pro,kernel,0,,"ARPT: 671958.142550: wl0: setup_keepalive: Local port: 49791, Remote port: 5223",E146,"ARPT: <*>: wl0: setup_keepalive: Local port: <*>, Remote port: <*>" +371,Jul,3,01:42:26,authorMacBook-Pro,sharingd,30299,,01:42:26.004 : BTLE scanning stopped,E66,<*>:<*>:<*> : BTLE scanning stopped +372,Jul,3,01:54:51,authorMacBook-Pro,sandboxd,129,[32992],com.apple.Addres(32992) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +373,Jul,3,01:58:00,authorMacBook-Pro,ntpd,207,,wake time set +0.270003 s,E339,wake time set <*> s +374,Jul,3,01:58:04,authorMacBook-Pro,kernel,0,,"ARPT: 672041.595629: wl0: setup_keepalive: interval 258, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +375,Jul,3,02:07:59,authorMacBook-Pro,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +376,Jul,3,02:07:59,authorMacBook-Pro,hidd,98,,[HID] [MT] MTActuatorManagement::getActuatorRef Calling MTActuatorOpen() outside of MTTrackpadHIDManager.,E37,[HID] [MT] MTActuatorManagement::getActuatorRef Calling MTActuatorOpen() outside of MTTrackpadHIDManager. +377,Jul,3,02:08:34,authorMacBook-Pro,kernel,0,,"ARPT: 672113.005012: wl0: setup_keepalive: interval 258, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +378,Jul,3,02:08:34,authorMacBook-Pro,kernel,0,,"ARPT: 672113.005034: wl0: setup_keepalive: Seq: 1128495564, Ack: 3106452487, Win size: 4096",E148,"ARPT: <*>: wl0: setup_keepalive: Seq: <*>, Ack: <*>, Win size: <*>" +379,Jul,3,02:19:59,authorMacBook-Pro,kernel,0,,ARPT: 672115.511090: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +380,Jul,3,02:20:05,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000300,E120,AppleCamIn::systemWakeCall - messageType = <*> +381,Jul,3,02:32:01,authorMacBook-Pro,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-03 09:32:01 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +382,Jul,3,03:07:51,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +383,Jul,3,03:07:55,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +384,Jul,3,03:31:43,authorMacBook-Pro,sharingd,30299,,03:31:43.005 : BTLE scanning stopped,E66,<*>:<*>:<*> : BTLE scanning stopped +385,Jul,3,03:31:43,authorMacBook-Pro,kernel,0,,in6_unlink_ifa: IPv6 address 0x77c9114551ab225b has no prefix,E75,<*>: IPv6 address <*> has no prefix +386,Jul,3,03:31:43,authorMacBook-Pro,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +387,Jul,3,03:43:40,authorMacBook-Pro,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +388,Jul,3,03:43:40,authorMacBook-Pro,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us,E57,<*>::prePCIWake - power up complete - took <*> us +389,Jul,3,03:44:10,authorMacBook-Pro,kernel,0,,ARPT: 672405.912863: wl0: MDNS: IPV6 Addr: 2607:f140:400:a01b:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +390,Jul,3,03:55:39,authorMacBook-Pro,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 252, items, fQueryRetries, 0, fLastRetryTimestamp, 520765684.9",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +391,Jul,3,03:55:49,authorMacBook-Pro,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +392,Jul,3,03:56:18,authorMacBook-Pro,mDNSResponder,91,,mDNS_DeregisterInterface: Frequent transitions for interface en0 (10.142.110.44),E261,mDNS_DeregisterInterface: Frequent transitions for interface en0 (<*>) +393,Jul,3,04:08:14,authorMacBook-Pro,kernel,0,,ARPT: 672487.663921: wl0: MDNS: IPV6 Addr: 2607:f140:400:a01b:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +394,Jul,3,04:19:59,authorMacBook-Pro,sandboxd,129,[33047],com.apple.Addres(33047) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +395,Jul,3,04:31:30,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +396,Jul,3,04:31:31,authorMacBook-Pro,ntpd,207,,wake time set -0.331349 s,E339,wake time set <*> s +397,Jul,3,04:43:26,authorMacBook-Pro,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +398,Jul,3,04:43:49,authorMacBook-Pro,sandboxd,129,[33056],com.apple.Addres(33056) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +399,Jul,3,04:55:22,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +400,Jul,3,04:55:22,authorMacBook-Pro,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +401,Jul,3,05:07:13,authorMacBook-Pro,kernel,0,,"en0: channel changed to 132,+1",E208,en0: channel changed to <*> +402,Jul,3,05:19:07,authorMacBook-Pro,kernel,0,,"ARPT: 672663.206073: wl0: wl_update_tcpkeep_seq: Original Seq: 2185760336, Ack: 2085655440, Win size: 4096",E149,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Original Seq: <*>, Ack: <*>, Win size: <*>" +403,Jul,3,05:30:59,authorMacBook-Pro,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 5,E55,<*>::<*> - retries = <*> +404,Jul,3,05:31:00,authorMacBook-Pro,QQ,10018,,button report: 0x80039B7,E161,button report: <*> +405,Jul,3,05:31:03,authorMacBook-Pro,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +406,Jul,3,05:33:53,authorMacBook-Pro,kernel,0,,ARPT: 672735.825491: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.,E139,ARPT: <*>: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +407,Jul,3,05:33:53,authorMacBook-Pro,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 6,E55,<*>::<*> - retries = <*> +408,Jul,3,05:57:59,authorMacBook-Pro,com.apple.CDScheduler,43,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +409,Jul,3,05:58:10,authorMacBook-Pro,com.apple.AddressBook.InternetAccountsBridge,33109,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +410,Jul,3,06:09:46,authorMacBook-Pro,ntpd,207,,sigio_handler: sigio_handler_active != 0,E312,sigio_handler: sigio_handler_active != <*> +411,Jul,3,06:09:56,authorMacBook-Pro,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +412,Jul,3,06:22:02,authorMacBook-Pro,kernel,0,,Sandbox: com.apple.Addres(33119) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +413,Jul,3,06:22:20,authorMacBook-Pro,kernel,0,,"ARPT: 672922.026642: wl0: MDNS: 0 SRV Recs, 0 TXT Recs",E140,"ARPT: <*>: wl0: MDNS: <*> SRV Recs, <*> TXT Recs" +414,Jul,3,06:33:47,authorMacBook-Pro,kernel,0,,ARPT: 672925.537944: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +415,Jul,3,06:33:47,authorMacBook-Pro,kernel,0,,ARPT: 672925.539048: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +416,Jul,3,06:33:47,authorMacBook-Pro,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +417,Jul,3,06:45:42,authorMacBook-Pro,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +418,Jul,3,06:45:43,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +419,Jul,3,06:46:03,authorMacBook-Pro,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +420,Jul,3,06:46:24,authorMacBook-Pro,kernel,0,,ARPT: 673002.849007: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +421,Jul,3,06:57:52,authorMacBook-Pro,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +422,Jul,3,06:57:52,authorMacBook-Pro,sharingd,30299,,06:57:52.002 : Purged contact hashes,E69,<*>:<*>:<*> : Purged contact hashes +423,Jul,3,07:09:47,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +424,Jul,3,07:10:10,authorMacBook-Pro,sandboxd,129,[33139],com.apple.Addres(33139) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +425,Jul,3,07:10:13,authorMacBook-Pro,sandboxd,129,[33139],com.apple.Addres(33139) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +426,Jul,3,07:21:45,authorMacBook-Pro,kernel,0,,ARPT: 673078.174655: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +427,Jul,3,07:33:34,authorMacBook-Pro,kernel,0,,"ARPT: 673110.784021: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 4039579370, Ack 2406464715, Win size 278",E150,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq <*>, Ack <*>, Win size <*>" +428,Jul,3,07:33:34,authorMacBook-Pro,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +429,Jul,3,07:33:34,authorMacBook-Pro,sharingd,30299,,07:33:34.878 : BTLE scanning started,E65,<*>:<*>:<*> : BTLE scanning started +430,Jul,3,07:33:34,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +431,Jul,3,07:33:35,authorMacBook-Pro,kernel,0,,"IOPMrootDomain: idle cancel, state 1",E250,"IOPMrootDomain: idle cancel, state <*>" +432,Jul,3,07:45:34,authorMacBook-Pro,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us,E57,<*>::prePCIWake - power up complete - took <*> us +433,Jul,3,07:45:55,authorMacBook-Pro,com.apple.CDScheduler,43,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +434,Jul,3,08:21:18,authorMacBook-Pro,kernel,0,,ARPT: 673255.225425: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +435,Jul,3,08:21:18,authorMacBook-Pro,sharingd,30299,,08:21:18.004 : Discoverable mode changed to Off,E67,<*>:<*>:<*> : Discoverable mode changed to Off +436,Jul,3,08:33:15,authorMacBook-Pro,kernel,0,,"ARPT: 673289.745639: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 1578355965, Ack 2401645769, Win size 278",E150,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq <*>, Ack <*>, Win size <*>" +437,Jul,3,08:33:41,authorMacBook-Pro,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 252, items, fQueryRetries, 0, fLastRetryTimestamp, 520783088.4",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +438,Jul,3,08:33:45,authorMacBook-Pro,kernel,0,,"ARPT: 673321.718258: wl0: setup_keepalive: Local port: 50542, Remote port: 5223",E146,"ARPT: <*>: wl0: setup_keepalive: Local port: <*>, Remote port: <*>" +439,Jul,3,08:33:47,authorMacBook-Pro,kernel,0,,"PM response took 1857 ms (54, powerd)",E288,"PM response took <*> ms (<*>, powerd)" +440,Jul,3,08:45:12,authorMacBook-Pro,kernel,0,,"ARPT: 673324.060219: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 815278018, Ack 1982345407, Win size 278",E150,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq <*>, Ack <*>, Win size <*>" +441,Jul,3,08:45:12,authorMacBook-Pro,kernel,0,,ARPT: 673325.798753: ARPT: Wake Reason: Wake on TCP Timeout,E132,ARPT: <*>: ARPT: Wake Reason: Wake on TCP Timeout +442,Jul,3,08:59:58,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +443,Jul,3,09:00:02,authorMacBook-Pro,kernel,0,,"ARPT: 673399.580233: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 13027,",E134,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': <*>," +444,Jul,3,09:09:20,authorMacBook-Pro,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 8,E55,<*>::<*> - retries = <*> +445,Jul,3,09:09:50,authorMacBook-Pro,kernel,0,,"ARPT: 673431.714836: wl0: setup_keepalive: Local port: 50601, Remote port: 5223",E146,"ARPT: <*>: wl0: setup_keepalive: Local port: <*>, Remote port: <*>" +446,Jul,3,09:09:58,authorMacBook-Pro,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +447,Jul,3,09:21:24,authorMacBook-Pro,kernel,0,,"hibernate_alloc_pages act 173850, inact 24957, anon 891, throt 0, spec 73492, wire 527143, wireinit 39927",E227,"hibernate_alloc_pages act <*>, inact <*>, anon <*>, throt <*>, spec <*>, wire <*>, wireinit <*>" +448,Jul,3,09:21:24,authorMacBook-Pro,kernel,0,,hibernate_teardown_pmap_structs done: last_valid_compact_indx 282563,E242,hibernate_teardown_pmap_structs done: last_valid_compact_indx <*> +449,Jul,3,09:21:59,authorMacBook-Pro,kernel,0,,"ARPT: 673493.721766: wl0: MDNS: 0 SRV Recs, 0 TXT Recs",E140,"ARPT: <*>: wl0: MDNS: <*> SRV Recs, <*> TXT Recs" +450,Jul,3,09:22:01,authorMacBook-Pro,kernel,0,,"PM response took 1936 ms (54, powerd)",E288,"PM response took <*> ms (<*>, powerd)" +451,Jul,3,09:57:10,authorMacBook-Pro,sharingd,30299,,09:57:10.384 : Scanning mode Contacts Only,E70,<*>:<*>:<*> : Scanning mode Contacts Only +452,Jul,3,09:57:11,authorMacBook-Pro,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +453,Jul,3,09:57:29,authorMacBook-Pro,com.apple.AddressBook.InternetAccountsBridge,33216,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +454,Jul,3,09:57:35,authorMacBook-Pro,com.apple.AddressBook.InternetAccountsBridge,33216,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +455,Jul,3,10:09:01,authorMacBook-Pro,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +456,Jul,3,10:09:01,authorMacBook-Pro,kernel,0,,AirPort: Link Up on awdl0,E111,AirPort: Link Up on awdl0 +457,Jul,3,10:09:01,authorMacBook-Pro,ntpd,207,,sigio_handler: sigio_handler_active != 1,E312,sigio_handler: sigio_handler_active != <*> +458,Jul,3,10:20:32,authorMacBook-Pro,QQ,10018,,button report: 0x80039B7,E161,button report: <*> +459,Jul,3,10:28:07,authorMacBook-Pro,pkd,324,,enabling pid=30298 for plug-in com.apple.ncplugin.weather(1.0) 131FE7ED-87F7-471D-8797-C11107688DF7 /System/Library/CoreServices/Weather.app/Contents/PlugIns/com.apple.ncplugin.weather.appex,E211,enabling pid=<*> for plug-in com.apple.ncplugin.weather(<*>) <*>-<*>-<*>-<*>-<*> <*> +460,Jul,3,10:32:45,authorMacBook-Pro,QQ,10018,,FA||Url||taskID[2019353296] dealloc,E216,FA||Url||taskID[<*>] dealloc +461,Jul,3,10:40:41,authorMacBook-Pro,GoogleSoftwareUpdateAgent,33263,,"2017-07-03 10:40:41.730 GoogleSoftwareUpdateAgent[33263/0x700000323000] [lvl=2] -[KSAgentApp performSelfUpdateWithEngine:] Checking for self update with Engine: >> processor= isProcessing=NO actionsCompleted=0 progress=0.00 errors=0 currentActionErrors=0 events=0 currentActionEvents=0 actionQueue=( ) > delegate=(null) serverInfoStore= errors=0 >",E76,<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSAgentApp performSelfUpdateWithEngine:] Checking for self update with Engine: ticketStore= store= path=<*> lockFile= path=<*> locked=NO > >> processor= delegate= isProcessing=NO actionsCompleted=<*> progress=<*> errors=<*> currentActionErrors=<*> events=<*> currentActionEvents=<*> actionQueue=( ) > delegate=(<*>) serverInfoStore= path=<*> errors=<*> > +462,Jul,3,10:40:42,authorMacBook-Pro,GoogleSoftwareUpdateAgent,33263,,2017-07-03 10:40:42.940 GoogleSoftwareUpdateAgent[33263/0x700000323000] [lvl=2] -[KSOmahaServer updateInfosForUpdateResponse:updateRequest:infoStore:upToDateTickets:updatedTickets:events:errors:] Response passed CUP validation.,E82,<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSOmahaServer updateInfosForUpdateResponse:updateRequest:infoStore:upToDateTickets:updatedTickets:events:errors:] Response passed CUP validation. +463,Jul,3,11:22:49,authorMacBook-Pro,QQ,10018,,FA||Url||taskID[2019353306] dealloc,E216,FA||Url||taskID[<*>] dealloc +464,Jul,3,11:27:14,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:27:14.923] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +465,Jul,3,11:31:49,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:31:49.472] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +466,Jul,3,11:31:49,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:31:49.593] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2092,E18,[<*>:<*>:<*>] itemasync_CopyProperty signalled err=<*> (kFigBaseObjectError_Invalidated) (invalidated) at <*> line <*> +467,Jul,3,11:34:44,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:34:44.290] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2092,E18,[<*>:<*>:<*>] itemasync_CopyProperty signalled err=<*> (kFigBaseObjectError_Invalidated) (invalidated) at <*> line <*> +468,Jul,3,11:38:27,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:38:27.892] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7fce1406d600) rejecting report of layer being serviced - IQ has not yet begun to update,E16,[<*>:<*>:<*>] <<<< IQ-CA >>>> piqca_setUsePreQueue: (<*>) rejecting report of layer being serviced - IQ has not yet begun to update +469,Jul,3,11:39:18,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:39:18.356] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7fce15069400) rejecting report of layer being serviced - IQ has not yet begun to update,E16,[<*>:<*>:<*>] <<<< IQ-CA >>>> piqca_setUsePreQueue: (<*>) rejecting report of layer being serviced - IQ has not yet begun to update +470,Jul,3,11:41:18,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:41:18.041] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7fce16267800) rejecting report of layer being serviced - IQ has not yet begun to update,E16,[<*>:<*>:<*>] <<<< IQ-CA >>>> piqca_setUsePreQueue: (<*>) rejecting report of layer being serviced - IQ has not yet begun to update +471,Jul,3,11:48:35,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:48:35.539] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +472,Jul,3,11:50:02,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:50:02.531] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2306,E19,[<*>:<*>:<*>] itemasync_SetProperty signalled err=<*> (kFigBaseObjectError_Invalidated) (invalidated) at <*> line <*> +473,Jul,3,11:50:13,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:50:13.362] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2306,E19,[<*>:<*>:<*>] itemasync_SetProperty signalled err=<*> (kFigBaseObjectError_Invalidated) (invalidated) at <*> line <*> +474,Jul,3,11:51:29,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:51:29.334] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2306,E19,[<*>:<*>:<*>] itemasync_SetProperty signalled err=<*> (kFigBaseObjectError_Invalidated) (invalidated) at <*> line <*> +475,Jul,3,11:56:05,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:56:05.232] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +476,Jul,3,11:58:00,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:58:00.829] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +477,Jul,3,11:58:36,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[11:58:36.563] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2092,E18,[<*>:<*>:<*>] itemasync_CopyProperty signalled err=<*> (kFigBaseObjectError_Invalidated) (invalidated) at <*> line <*> +478,Jul,3,12:02:22,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[12:02:22.126] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +479,Jul,3,12:03:48,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[12:03:48.669] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +480,Jul,3,12:04:32,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[12:04:32.065] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +481,Jul,3,12:11:47,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[12:11:47.043] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2092,E18,[<*>:<*>:<*>] itemasync_CopyProperty signalled err=<*> (kFigBaseObjectError_Invalidated) (invalidated) at <*> line <*> +482,Jul,3,12:22:42,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[12:22:42.202] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/Player/FigPlayer_Async.c line 2306,E19,[<*>:<*>:<*>] itemasync_SetProperty signalled err=<*> (kFigBaseObjectError_Invalidated) (invalidated) at <*> line <*> +483,Jul,3,12:31:16,authorMacBook-Pro,ntpd,207,,wake time set -0.855670 s,E339,wake time set <*> s +484,Jul,3,12:31:55,authorMacBook-Pro,kernel,0,,"Opened file /var/log/SleepWakeStacks.bin, size 172032, extents 1, maxio 2000000 ssd 1",E280,"Opened file <*>, size <*>, extents <*>, maxio <*> ssd <*>" +485,Jul,3,12:35:55,authorMacBook-Pro,locationd,82,,"NETWORK: no response from server, reachability, 2, queryRetries, 0",E270,"NETWORK: no response from server, reachability, <*>, queryRetries, <*>" +486,Jul,3,12:35:56,authorMacBook-Pro,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +487,Jul,3,12:36:01,authorMacBook-Pro,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +488,Jul,3,12:36:01,authorMacBook-Pro,kernel,0,,"Unexpected payload found for message 9, dataLen 0",E327,"Unexpected payload found for message <*>, dataLen <*>" +489,Jul,3,12:36:38,calvisitor-10-105-160-237,corecaptured,33373,,CCFile::captureLog,E167,CCFile::captureLog +490,Jul,3,12:36:44,calvisitor-10-105-160-237,kernel,0,,en0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 12 13 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161,E210,en0: Supported channels <*> +491,Jul,3,12:54:59,calvisitor-10-105-160-237,AddressBookSourceSync,33405,,Unrecognized attribute value: t:AbchPersonItemType,E328,Unrecognized attribute value: t:AbchPersonItemType +492,Jul,3,12:55:31,calvisitor-10-105-160-237,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +493,Jul,3,13:21:50,calvisitor-10-105-160-237,kernel,0,,ARPT: 681387.132167: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +494,Jul,3,13:31:32,calvisitor-10-105-160-237,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +495,Jul,3,13:31:32,calvisitor-10-105-160-237,kernel,0,,ARPT: 681446.072377: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +496,Jul,3,13:31:35,calvisitor-10-105-160-237,CrashReporterSupportHelper,252,,Internal name did not resolve to internal address!,E247,Internal name did not resolve to internal address! +497,Jul,3,13:31:51,calvisitor-10-105-160-237,com.apple.AddressBook.InternetAccountsBridge,33427,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +498,Jul,3,13:39:50,calvisitor-10-105-160-237,com.apple.xpc.launchd,1,com.apple.WebKit.Networking.A546008E-07AF-4FFC-8FF8-D8FD260359D9[33438],Service exited with abnormal code: 1,E307,Service exited with abnormal code: <*> +499,Jul,3,13:40:27,calvisitor-10-105-160-237,wirelessproxd,75,,Central manager is not powered on,E181,Central manager is not powered on +500,Jul,3,13:48:22,calvisitor-10-105-160-237,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 6,E55,<*>::<*> - retries = <*> +501,Jul,3,13:48:22,authorMacBook-Pro,configd,53,,"setting hostname to ""authorMacBook-Pro.local""",E311,"setting hostname to ""<*>""" +502,Jul,3,13:48:39,calvisitor-10-105-160-237,corecaptured,33452,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_13,48,39.362458]-CCIOReporter-002.xml, Current File [2017-07-03_13,48,39.362458]-CCIOReporter-002.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +503,Jul,3,13:50:09,authorMacBook-Pro,networkd,195,,__42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc20795 14.17.42.14:14000,E49,<*>-[NETClientConnection <*>]_block_invoke CI46 - Hit by torpedo! <*> <*> <*>:<*> +504,Jul,3,13:50:14,authorMacBook-Pro,corecaptured,33452,,"CCFile::copyFile fileName is [2017-07-03_13,48,39.308188]-io80211Family-002.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-03_13,48,39.308188]-io80211Family-002.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_13,50,14.954481]=AssocFail:sts:2_rsn:0/IO80211AWDLPeerManager//[2017-07-03_13,48,39.308188]-io80211Family-002.pcapng",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +505,Jul,3,13:50:15,authorMacBook-Pro,kernel,0,,ARPT: 682068.402171: framerdy 0x0 bmccmd 7 framecnt 1024,E133,ARPT: <*>: framerdy <*> bmccmd <*> framecnt <*> +506,Jul,3,13:51:03,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 20835 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +507,Jul,3,13:51:03,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 20851 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +508,Jul,3,13:51:32,calvisitor-10-105-160-237,com.apple.AddressBook.InternetAccountsBridge,33469,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +509,Jul,3,13:53:27,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO,E60,<*>::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +510,Jul,3,13:53:39,calvisitor-10-105-160-237,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +511,Jul,3,13:53:53,calvisitor-10-105-160-237,sandboxd,129,[33476],com.apple.Addres(33476) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +512,Jul,3,13:54:18,calvisitor-10-105-160-237,identityservicesd,272,,: DND Enabled: YES,E104,: DND Enabled: YES +513,Jul,3,13:54:35,calvisitor-10-105-160-237,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +514,Jul,3,13:54:36,calvisitor-10-105-160-237,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +515,Jul,3,13:54:53,calvisitor-10-105-160-237,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO,E60,<*>::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +516,Jul,3,13:55:56,calvisitor-10-105-160-237,sharingd,30299,,13:55:56.094 : Starting AirDrop server for user 501 on wake,E72,<*>:<*>:<*> : Starting AirDrop server for user <*> on wake +517,Jul,3,14:20:59,calvisitor-10-105-160-237,kernel,0,,Sandbox: com.apple.Addres(33493) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +518,Jul,3,14:34:22,calvisitor-10-105-160-237,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +519,Jul,3,14:35:17,calvisitor-10-105-160-237,kernel,0,,ARPT: 682406.173418: wl0: setup_keepalive: Remote IP: 17.249.28.77,E147,ARPT: <*>: wl0: setup_keepalive: Remote IP: <*> +520,Jul,3,14:47:59,calvisitor-10-105-160-237,kernel,0,,"ARPT: 682407.704265: wl0: wl_update_tcpkeep_seq: Original Seq: 1181052579, Ack: 1862377178, Win size: 4096",E149,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Original Seq: <*>, Ack: <*>, Win size: <*>" +521,Jul,3,14:47:59,calvisitor-10-105-160-237,kernel,0,,"RTC: Maintenance 2017/7/3 21:47:58, sleep 2017/7/3 21:35:20",E295,"RTC: Maintenance <*>/<*>/<*> <*>:<*>:<*>, sleep <*>/<*>/<*> <*>:<*>:<*>" +522,Jul,3,14:48:22,calvisitor-10-105-160-237,kernel,0,,Sandbox: com.apple.Addres(33508) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +523,Jul,3,15:01:36,calvisitor-10-105-160-237,kernel,0,,ARPT: 682466.260119: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.,E139,ARPT: <*>: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +524,Jul,3,15:01:36,calvisitor-10-105-160-237,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-03 22:01:36 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +525,Jul,3,15:01:36,calvisitor-10-105-160-237,kernel,0,,ARPT: 682468.243050: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +526,Jul,3,15:01:36,calvisitor-10-105-160-237,kernel,0,,ARPT: 682468.243133: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +527,Jul,3,15:15:13,calvisitor-10-105-160-237,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +528,Jul,3,15:15:31,calvisitor-10-105-160-237,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +529,Jul,3,15:15:34,calvisitor-10-105-160-237,com.apple.AddressBook.InternetAccountsBridge,33518,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +530,Jul,3,15:28:51,calvisitor-10-105-160-237,com.apple.WebKit.WebContent,32778,,"<<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of 4812 bytes @ 358800 took 1.053312 secs. to complete, 5 reads >= 1 sec.",E99,"<<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of <*> bytes @ <*> took <*> <*> to complete, <*> reads >= <*> sec." +531,Jul,3,15:28:56,calvisitor-10-105-160-237,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0,E54,<*>::<*> - intel_rp = <*> dlla_reporting_supported = <*> +532,Jul,3,15:42:36,calvisitor-10-105-160-237,sandboxd,129,[33523],com.apple.Addres(33523) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +533,Jul,3,15:42:59,calvisitor-10-105-160-237,kernel,0,,ARPT: 682634.998705: wl0: setup_keepalive: Remote IP: 17.249.28.93,E147,ARPT: <*>: wl0: setup_keepalive: Remote IP: <*> +534,Jul,3,15:46:27,calvisitor-10-105-160-237,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +535,Jul,3,15:46:27,authorMacBook-Pro,kernel,0,,ARPT: 682638.445688: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +536,Jul,3,15:46:28,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID,E41,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +537,Jul,3,15:46:29,authorMacBook-Pro,UserEventAgent,43,,Captive: [CNInfoNetworkActive:1748] en0: SSID 'CalVisitor' making interface primary (cache indicates network not captive),E162,Captive: [CNInfoNetworkActive:<*>] en0: SSID 'CalVisitor' making interface primary (cache indicates network not captive) +538,Jul,3,15:46:31,calvisitor-10-105-160-237,configd,53,,network changed: v4(en0:10.105.160.237) v6(en0!:2607:f140:6000:8:f1dc:a608:863:19ad) DNS Proxy SMB,E266,network changed: <*>(<*>:<*>) <*>(<*>) DNS Proxy SMB +539,Jul,3,15:47:12,calvisitor-10-105-160-237,corecaptured,33533,,Received Capture Event,E294,Received Capture Event +540,Jul,3,15:47:13,calvisitor-10-105-160-237,corecaptured,33533,,"CCFile::captureLog Received Capture notice id: 1499122032.492037, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +541,Jul,3,15:47:15,calvisitor-10-105-160-237,corecaptured,33533,,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions,E176,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +542,Jul,3,15:47:15,calvisitor-10-105-160-237,corecaptured,33533,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +543,Jul,3,15:47:15,calvisitor-10-105-160-237,corecaptured,33533,,"CCFile::copyFile fileName is [2017-07-03_15,47,15.246620]-AirPortBrcm4360_Logs-007.txt, source path:/var/log/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/DriverLogs//[2017-07-03_15,47,15.246620]-AirPortBrcm4360_Logs-007.txt, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/[2017-07-03_15,47,15.349129]=AuthFail:sts:5_rsn:0/DriverLogs//[2017-07-03_15,47,15.246620]-AirPortBrcm4360_Logs-007.txt",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +544,Jul,3,15:53:05,calvisitor-10-105-160-237,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +545,Jul,3,15:53:38,calvisitor-10-105-160-237,kernel,0,,Sandbox: com.apple.Addres(33540) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +546,Jul,3,15:53:49,calvisitor-10-105-160-237,corecaptured,33533,,"CCLogTap::profileRemoved, Owner: com.apple.iokit.IO80211Family, Name: OneStats",E177,"CCLogTap::profileRemoved, Owner: com.apple.iokit.<*>, Name: <*>" +547,Jul,3,16:05:45,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,"<<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of 4321 bytes @ 48 took 0.607292 sec. to complete, 7 reads >= 0.5 sec.",E99,"<<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of <*> bytes @ <*> took <*> <*> to complete, <*> reads >= <*> sec." +548,Jul,3,16:05:45,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +549,Jul,3,16:05:49,authorMacBook-Pro,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +550,Jul,3,16:05:51,authorMacBook-Pro,corecaptured,33544,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,05,51.031703]-AirPortBrcm4360_Logs-003.txt, Current File [2017-07-03_16,05,51.031703]-AirPortBrcm4360_Logs-003.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +551,Jul,3,16:05:51,authorMacBook-Pro,corecaptured,33544,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,05,51.075268]-AirPortBrcm4360_Logs-005.txt, Current File [2017-07-03_16,05,51.075268]-AirPortBrcm4360_Logs-005.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +552,Jul,3,16:05:51,authorMacBook-Pro,corecaptured,33544,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,05,51.177343]-io80211Family-003.pcapng, Current File [2017-07-03_16,05,51.177343]-io80211Family-003.pcapng",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +553,Jul,3,16:05:51,authorMacBook-Pro,corecaptured,33544,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +554,Jul,3,16:05:51,authorMacBook-Pro,corecaptured,33544,,CCFile::captureLog,E167,CCFile::captureLog +555,Jul,3,16:06:19,calvisitor-10-105-160-237,corecaptured,33544,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,06,19.893324]-AirPortBrcm4360_Logs-008.txt, Current File [2017-07-03_16,06,19.893324]-AirPortBrcm4360_Logs-008.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +556,Jul,3,16:07:32,authorMacBook-Pro,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +557,Jul,3,16:07:33,authorMacBook-Pro,configd,53,,network changed: v6(en0-:2607:f140:6000:8:d8d1:d506:6046:43e4) DNS- Proxy-,E265,network changed: <*>(<*>) DNS- Proxy- +558,Jul,3,16:07:33,authorMacBook-Pro,kernel,0,,ARPT: 682827.873728: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0,E130,ARPT: <*>: AQM agg results <*> len hi/lo: <*> <*> BAbitmap(<*>-<*>) <*> +559,Jul,3,16:07:33,authorMacBook-Pro,corecaptured,33544,,"CCFile::copyFile fileName is [2017-07-03_16,06,19.861073]-CCIOReporter-008.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-03_16,06,19.861073]-CCIOReporter-008.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_16,07,33.914349]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-03_16,06,19.861073]-CCIOReporter-008.xml",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +560,Jul,3,16:07:33,authorMacBook-Pro,corecaptured,33544,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,07,33.934533]-AirPortBrcm4360_Logs-009.txt, Current File [2017-07-03_16,07,33.934533]-AirPortBrcm4360_Logs-009.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +561,Jul,3,16:07:39,authorMacBook-Pro,kernel,0,,ARPT: 682833.053879: framerdy 0x0 bmccmd 3 framecnt 1024,E133,ARPT: <*>: framerdy <*> bmccmd <*> framecnt <*> +562,Jul,3,16:07:39,authorMacBook-Pro,corecaptured,33544,,"CCFile::copyFile fileName is [2017-07-03_16,07,38.954579]-io80211Family-016.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-03_16,07,38.954579]-io80211Family-016.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_16,07,39.094895]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-03_16,07,38.954579]-io80211Family-016.pcapng",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +563,Jul,3,16:07:39,authorMacBook-Pro,corecaptured,33544,,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7,E175,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams <*> +564,Jul,3,16:07:39,authorMacBook-Pro,corecaptured,33544,,"CCFile::copyFile fileName is [2017-07-03_16,07,39.096792]-CCIOReporter-017.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-03_16,07,39.096792]-CCIOReporter-017.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_16,07,39.171995]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-03_16,07,39.096792]-CCIOReporter-017.xml",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +565,Jul,3,16:07:39,authorMacBook-Pro,corecaptured,33544,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +566,Jul,3,16:07:40,authorMacBook-Pro,corecaptured,33544,,CCFile::captureLog,E167,CCFile::captureLog +567,Jul,3,16:07:40,authorMacBook-Pro,kernel,0,,ARPT: 682834.192587: wlc_dump_aggfifo:,E151,ARPT: <*>: wlc_dump_aggfifo: +568,Jul,3,16:07:40,authorMacBook-Pro,corecaptured,33544,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,07,40.650186]-CCIOReporter-027.xml, Current File [2017-07-03_16,07,40.650186]-CCIOReporter-027.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +569,Jul,3,16:07:46,authorMacBook-Pro,corecaptured,33544,,CCFile::captureLog,E167,CCFile::captureLog +570,Jul,3,16:07:46,authorMacBook-Pro,kernel,0,,ARPT: 682840.256116: AQM agg results 0x8001 len hi/lo: 0x0 0x30 BAbitmap(0-3) 0 0 0 0,E130,ARPT: <*>: AQM agg results <*> len hi/lo: <*> <*> BAbitmap(<*>-<*>) <*> +571,Jul,3,16:07:46,authorMacBook-Pro,corecaptured,33544,,"CCFile::copyFile fileName is [2017-07-03_16,07,46.105103]-CCIOReporter-032.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-03_16,07,46.105103]-CCIOReporter-032.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_16,07,46.298508]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-03_16,07,46.105103]-CCIOReporter-032.xml",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +572,Jul,3,16:07:48,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +573,Jul,3,16:08:13,calvisitor-10-105-160-237,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +574,Jul,3,16:25:21,calvisitor-10-105-160-237,kernel,0,,Wake reason: ?,E335,Wake reason: ? +575,Jul,3,16:25:21,calvisitor-10-105-160-237,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +576,Jul,3,16:25:21,calvisitor-10-105-160-237,kernel,0,,AirPort: Link Up on awdl0,E111,AirPort: Link Up on awdl0 +577,Jul,3,16:25:21,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +578,Jul,3,16:25:27,authorMacBook-Pro,corecaptured,33544,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,25,27.859687]-CCIOReporter-038.xml, Current File [2017-07-03_16,25,27.859687]-CCIOReporter-038.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +579,Jul,3,16:25:45,authorMacBook-Pro,com.apple.WebKit.WebContent,25654,,[16:25:45.631] <<<< CRABS >>>> crabsFlumeHostUnavailable: [0x7f961cf08cf0] Byte flume reports host unavailable.,E14,[<*>:<*>:<*>] <<<< CRABS >>>> crabsFlumeHostUnavailable: [<*>] Byte flume reports host unavailable. +580,Jul,3,16:25:54,authorMacBook-Pro,sandboxd,129,[33562],com.apple.Addres(33562) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +581,Jul,3,16:27:03,authorMacBook-Pro,kernel,0,,ARPT: 682969.397322: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +582,Jul,3,16:27:03,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +583,Jul,3,16:27:05,authorMacBook-Pro,corecaptured,33544,,"CCFile::copyFile fileName is [2017-07-03_16,27,04.995982]-io80211Family-040.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-03_16,27,04.995982]-io80211Family-040.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_16,27,05.123034]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-03_16,27,04.995982]-io80211Family-040.pcapng",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +584,Jul,3,16:27:05,authorMacBook-Pro,corecaptured,33544,,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions,E176,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +585,Jul,3,16:27:08,authorMacBook-Pro,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +586,Jul,3,16:27:09,authorMacBook-Pro,kernel,0,,ARPT: 682977.654133: wlc_dump_aggfifo:,E151,ARPT: <*>: wlc_dump_aggfifo: +587,Jul,3,16:27:10,authorMacBook-Pro,corecaptured,33544,,"CCFile::copyFile fileName is [2017-07-03_16,27,09.910337]-AirPortBrcm4360_Logs-047.txt, source path:/var/log/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/DriverLogs//[2017-07-03_16,27,09.910337]-AirPortBrcm4360_Logs-047.txt, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/[2017-07-03_16,27,10.162319]=AuthFail:sts:5_rsn:0/DriverLogs//[2017-07-03_16,27,09.910337]-AirPortBrcm4360_Logs-047.txt",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +588,Jul,3,16:27:10,authorMacBook-Pro,corecaptured,33544,,"doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-03_16,27,09.307937] - AuthFail:sts:5_rsn:0.xml",E204,doSaveChannels@<*>: Will write to: <*> +589,Jul,3,16:27:11,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Authenticated,E163,Captive: CNPluginHandler en0: Authenticated +590,Jul,3,16:27:47,calvisitor-10-105-160-184,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +591,Jul,3,16:28:34,calvisitor-10-105-160-184,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +592,Jul,3,16:28:34,authorMacBook-Pro,QQ,10018,,tcp_connection_destination_perform_socket_connect 21152 connectx to 203.205.147.206:8080@0 failed: [51] Network is unreachable,E317,tcp_connection_destination_perform_socket_connect <*> connectx to <*>:<*>@<*> failed: [<*>] Network is unreachable +593,Jul,3,16:28:34,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 21158 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +594,Jul,3,16:28:35,authorMacBook-Pro,corecaptured,33544,,Received Capture Event,E294,Received Capture Event +595,Jul,3,16:28:40,authorMacBook-Pro,corecaptured,33544,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,28,40.259618]-AirPortBrcm4360_Logs-055.txt, Current File [2017-07-03_16,28,40.259618]-AirPortBrcm4360_Logs-055.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +596,Jul,3,16:28:40,authorMacBook-Pro,corecaptured,33544,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +597,Jul,3,16:28:40,authorMacBook-Pro,corecaptured,33544,,CCFile::captureLog,E167,CCFile::captureLog +598,Jul,3,16:28:40,authorMacBook-Pro,kernel,0,,ARPT: 683047.197539: framerdy 0x0 bmccmd 3 framecnt 1024,E133,ARPT: <*>: framerdy <*> bmccmd <*> framecnt <*> +599,Jul,3,16:28:55,calvisitor-10-105-160-184,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +600,Jul,3,16:28:56,calvisitor-10-105-160-184,QQ,10018,,button report: 0x8002bdf,E161,button report: <*> +601,Jul,3,16:29:09,calvisitor-10-105-160-184,corecaptured,33544,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_16,29,09.137954]-CCIOReporter-062.xml, Current File [2017-07-03_16,29,09.137954]-CCIOReporter-062.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +602,Jul,3,16:29:09,calvisitor-10-105-160-184,corecaptured,33544,,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions,E176,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +603,Jul,3,16:29:30,calvisitor-10-105-160-184,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +604,Jul,3,16:35:52,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Evaluating,E164,Captive: CNPluginHandler en0: Evaluating +605,Jul,3,16:35:54,calvisitor-10-105-160-184,networkd,195,,__42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! NeteaseMusic.17988 tc9008 103.251.128.144:80,E49,<*>-[NETClientConnection <*>]_block_invoke CI46 - Hit by torpedo! <*> <*> <*>:<*> +606,Jul,3,16:36:40,calvisitor-10-105-160-184,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +607,Jul,3,16:36:40,calvisitor-10-105-160-184,AddressBookSourceSync,33594,,"[CardDAVPlugin-ERROR] -getPrincipalInfo:[_controller supportsRequestCompressionAtURL:https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/] Error Domain=NSURLErrorDomain Code=-1001 ""The request timed out."" UserInfo={NSUnderlyingError=0x7f9af3646900 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 ""The request timed out."" UserInfo={NSErrorFailingURLStringKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, NSErrorFailingURLKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, NSErrorFailingURLKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}",E27,"[CardDAVPlugin-ERROR] -getPrincipalInfo:[_controller supportsRequestCompressionAtURL:<*>] Error Domain=NSURLErrorDomain Code=<*> ""The request timed out."" UserInfo={NSUnderlyingError=<*> {Error Domain=kCFErrorDomainCFNetwork Code=<*> ""The request timed out."" UserInfo={NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorCodeKey=<*>, _kCFStreamErrorDomainKey=<*>, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorDomainKey=<*>, _kCFStreamErrorCodeKey=<*>, NSLocalizedDescription=The request timed out.}" +608,Jul,3,16:36:49,calvisitor-10-105-160-184,corecaptured,33544,,CCFile::captureLog,E167,CCFile::captureLog +609,Jul,3,16:36:55,calvisitor-10-105-160-184,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +610,Jul,3,16:42:37,calvisitor-10-105-160-184,kernel,0,,ARPT: 683172.046921: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +611,Jul,3,16:42:37,calvisitor-10-105-160-184,kernel,0,,ARPT: 683173.929950: ARPT: Wake Reason: Wake on Scan offload,E131,ARPT: <*>: ARPT: Wake Reason: Wake on Scan offload +612,Jul,3,16:56:42,calvisitor-10-105-160-184,kernel,0,,"ARPT: 683239.026135: wl0: MDNS: 0 SRV Recs, 0 TXT Recs",E140,"ARPT: <*>: wl0: MDNS: <*> SRV Recs, <*> TXT Recs" +613,Jul,3,17:10:11,calvisitor-10-105-160-184,kernel,0,,hibernate image path: /var/vm/sleepimage,E226,hibernate image path: <*> +614,Jul,3,17:10:11,calvisitor-10-105-160-184,kernel,0,,hibernate_flush_memory: buffer_cache_gc freed up 13202 wired pages,E228,hibernate_flush_memory: buffer_cache_gc freed up <*> wired pages +615,Jul,3,17:10:11,calvisitor-10-105-160-184,kernel,0,,"hibernate_machine_init pagesDone 455920 sum2 81cafc41, time: 185 ms, disk(0x20000) 847 Mb/s, comp bytes: 47288320 time: 32 ms 1369 Mb/s, crypt bytes: 158441472 time: 38 ms 3973 Mb/s",E229,"hibernate_machine_init pagesDone <*> sum2 <*>, time: <*> ms, disk(<*>) <*> Mb/s, comp bytes: <*> time: <*> ms <*> Mb/s, crypt bytes: <*> time: <*> ms <*> Mb/s" +616,Jul,3,17:10:11,calvisitor-10-105-160-184,com.apple.CDScheduler,43,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +617,Jul,3,17:10:11,calvisitor-10-105-160-184,BezelServices 255.10,94,,ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2789,E155,ASSERTION FAILED: dvcAddrRef != ((void *)<*>) -[DriverServices getDeviceAddress:] line: <*> +618,Jul,3,17:23:55,calvisitor-10-105-160-184,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 4,E55,<*>::<*> - retries = <*> +619,Jul,3,17:23:55,calvisitor-10-105-160-184,kernel,0,,hibernate_machine_init reading,E230,hibernate_machine_init reading +620,Jul,3,17:23:55,calvisitor-10-105-160-184,UserEventAgent,43,,assertion failed: 15G1510: com.apple.telemetry + 38574 [10D2E324-788C-30CC-A749-55AE67AEC7BC]: 0x7fc235807b90,E154,assertion failed: <*> [<*>-<*>-<*>-<*>-<*>]: <*> +621,Jul,3,17:25:12,calvisitor-10-105-160-184,kernel,0,,hibernate_flush_memory: buffer_cache_gc freed up 3349 wired pages,E228,hibernate_flush_memory: buffer_cache_gc freed up <*> wired pages +622,Jul,3,17:25:12,calvisitor-10-105-160-184,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +623,Jul,3,17:25:12,calvisitor-10-105-160-184,UserEventAgent,43,,assertion failed: 15G1510: com.apple.telemetry + 38574 [10D2E324-788C-30CC-A749-55AE67AEC7BC]: 0x7fc235807b90,E154,assertion failed: <*> [<*>-<*>-<*>-<*>-<*>]: <*> +624,Jul,3,17:25:13,calvisitor-10-105-160-184,kernel,0,,AirPort: Link Up on awdl0,E111,AirPort: Link Up on awdl0 +625,Jul,3,17:25:15,calvisitor-10-105-160-184,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-04 00:25:15 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +626,Jul,3,17:25:31,calvisitor-10-105-160-184,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +627,Jul,3,17:26:04,calvisitor-10-105-160-184,WeChat,24144,,jemmytest,E253,jemmytest +628,Jul,3,17:37:47,calvisitor-10-105-160-184,kernel,0,,hibernate_setup(0) took 4429 ms,E239,hibernate_setup(<*>) took <*> ms +629,Jul,3,17:37:47,calvisitor-10-105-160-184,kernel,0,,**** [IOBluetoothFamily][ProcessBluetoothTransportShowsUpActionWL] -- calling IOBluetoothFamily's registerService() -- 0x5fd0 -- 0x9a00 -- 0x6800 ****,E6,**** [IOBluetoothFamily][ProcessBluetoothTransportShowsUpActionWL] -- calling IOBluetoothFamily's registerService() -- <*> -- <*> -- <*> **** +630,Jul,3,17:37:47,calvisitor-10-105-160-184,kernel,0,,**** [IOBluetoothFamily][ProcessBluetoothTransportShowsUpActionWL] -- Connected to the transport successfully -- 0x5fd0 -- 0x9a00 -- 0x6800 ****,E7,**** [IOBluetoothFamily][ProcessBluetoothTransportShowsUpActionWL] -- Connected to the transport successfully -- <*> -- <*> -- <*> **** +631,Jul,3,17:37:48,calvisitor-10-105-160-184,blued,85,,hciControllerOnline; HID devices? 0,E225,hciControllerOnline; HID devices? <*> +632,Jul,3,17:37:48,calvisitor-10-105-160-184,blued,85,,INIT -- Host controller is published,E246,INIT -- Host controller is published +633,Jul,3,17:51:25,calvisitor-10-105-160-184,kernel,0,,"polled file major 1, minor 0, blocksize 4096, pollers 5",E292,"polled file major <*>, minor <*>, blocksize <*>, pollers <*>" +634,Jul,3,17:51:53,calvisitor-10-105-160-184,AddressBookSourceSync,33632,,Unrecognized attribute value: t:AbchPersonItemType,E328,Unrecognized attribute value: t:AbchPersonItemType +635,Jul,3,17:52:07,calvisitor-10-105-160-184,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +636,Jul,3,18:06:58,calvisitor-10-105-160-184,kernel,0,,BuildActDeviceEntry exit,E160,BuildActDeviceEntry exit +637,Jul,3,18:07:09,authorMacBook-Pro,networkd,195,,__42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc21242 119.81.102.227:80,E49,<*>-[NETClientConnection <*>]_block_invoke CI46 - Hit by torpedo! <*> <*> <*>:<*> +638,Jul,3,18:34:20,calvisitor-10-105-162-32,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +639,Jul,3,18:35:05,calvisitor-10-105-162-32,mDNSResponder,91,,mDNS_DeregisterInterface: Frequent transitions for interface en0 (10.105.162.32),E261,mDNS_DeregisterInterface: Frequent transitions for interface en0 (<*>) +640,Jul,3,18:35:06,calvisitor-10-105-162-32,kernel,0,,"ARPT: 683604.474196: IOPMPowerSource Information: onSleep, SleepType: Standby, 'ExternalConnected': No, 'TimeRemaining': 578,",E136,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Standby, 'ExternalConnected': No, 'TimeRemaining': <*>," +641,Jul,3,18:47:54,calvisitor-10-105-162-32,kernel,0,,ARPT: 683617.825411: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +642,Jul,3,18:47:59,calvisitor-10-105-162-32,kernel,0,,ARPT: 683623.036953: wl0: setup_keepalive: Remote IP: 17.249.12.155,E147,ARPT: <*>: wl0: setup_keepalive: Remote IP: <*> +643,Jul,3,18:56:23,calvisitor-10-105-162-32,kernel,0,,Wake reason: ARPT (Network),E336,Wake reason: ARPT (Network) +644,Jul,3,18:56:23,calvisitor-10-105-162-32,kernel,0,,AppleActuatorHIDEventDriver: message service is terminated,E117,AppleActuatorHIDEventDriver: message service is terminated +645,Jul,3,18:56:23,calvisitor-10-105-162-32,BezelServices 255.10,94,,ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2789,E155,ASSERTION FAILED: dvcAddrRef != ((void *)<*>) -[DriverServices getDeviceAddress:] line: <*> +646,Jul,3,18:56:23,authorMacBook-Pro,com.apple.WebKit.WebContent,25654,,[18:56:23.837] <<<< CRABS >>>> crabsFlumeHostUnavailable: [0x7f961cf08cf0] Byte flume reports host unavailable.,E14,[<*>:<*>:<*>] <<<< CRABS >>>> crabsFlumeHostUnavailable: [<*>] Byte flume reports host unavailable. +647,Jul,3,18:56:27,authorMacBook-Pro,kernel,0,,en0: BSSID changed to 64:d9:89:6b:b5:33,E207,en0: BSSID changed to <*> +648,Jul,3,18:56:33,calvisitor-10-105-162-32,QQ,10018,,button report: 0x80039B7,E161,button report: <*> +649,Jul,3,18:57:01,calvisitor-10-105-162-32,corecaptured,33660,,"CCFile::captureLog Received Capture notice id: 1499133420.914478, reason = DeauthInd:sts:0_rsn:7",E170,"CCFile::captureLog Received Capture notice id: <*>, reason = DeauthInd:sts:_rsn:" +650,Jul,3,18:57:12,calvisitor-10-105-162-32,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +651,Jul,3,18:57:12,calvisitor-10-105-162-32,corecaptured,33660,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-03_18,57,12.221233]-AirPortBrcm4360_Logs-005.txt, Current File [2017-07-03_18,57,12.221233]-AirPortBrcm4360_Logs-005.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +652,Jul,3,18:57:57,calvisitor-10-105-162-32,kernel,0,,payload Data 07 00,E284,payload Data <*> <*> +653,Jul,3,18:57:57,calvisitor-10-105-162-32,kernel,0,,[HID] [ATC] [Error] AppleDeviceManagementHIDEventService::start Could not make a string from out connection notification key,E32,[HID] [ATC] [Error] AppleDeviceManagementHIDEventService::start Could not make a string from out connection notification key +654,Jul,3,18:57:57,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +655,Jul,3,18:57:59,authorMacBook-Pro,kernel,0,,en0: 802.11d country code set to 'US'.,E206,en0: <*> country code set to '<*>'. +656,Jul,3,18:58:10,authorMacBook-Pro,corecaptured,33660,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +657,Jul,3,18:58:18,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +658,Jul,3,18:58:54,calvisitor-10-105-162-32,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +659,Jul,3,19:04:48,calvisitor-10-105-162-32,kernel,0,,WARNING: hibernate_page_list_setall skipped 11799 xpmapped pages,E340,WARNING: hibernate_page_list_setall skipped <*> xpmapped pages +660,Jul,3,19:04:48,calvisitor-10-105-162-32,kernel,0,,"hibernate_teardown: wired_pages 544767, free_pages 3578340, active_pages 40000, inactive_pages 0, speculative_pages 0, cleaned_pages 0, compressor_pages 112",E241,"hibernate_teardown: wired_pages <*>, free_pages <*>, active_pages <*>, inactive_pages <*>, speculative_pages <*>, cleaned_pages <*>, compressor_pages <*>" +661,Jul,3,19:04:48,calvisitor-10-105-162-32,kernel,0,,"pages 554018, wire 418692, act 40000, inact 0, cleaned 0 spec 0, zf 0, throt 0, compr 112, xpmapped 40000",E282,"pages <*>, wire <*>, act <*>, inact <*>, cleaned <*> spec <*>, zf <*>, throt <*>, compr <*>, xpmapped <*>" +662,Jul,3,19:04:48,calvisitor-10-105-162-32,blued,85,,[BluetoothHIDDeviceController] EventServiceConnectedCallback,E23,[BluetoothHIDDeviceController] EventServiceConnectedCallback +663,Jul,3,19:04:48,calvisitor-10-105-162-32,kernel,0,,**** [IOBluetoothFamily][ProcessBluetoothTransportShowsUpActionWL] -- calling IOBluetoothFamily's registerService() -- 0x5fd0 -- 0x9a00 -- 0xc800 ****,E6,**** [IOBluetoothFamily][ProcessBluetoothTransportShowsUpActionWL] -- calling IOBluetoothFamily's registerService() -- <*> -- <*> -- <*> **** +664,Jul,3,19:04:52,calvisitor-10-105-162-32,kernel,0,,ARPT: 683779.928118: framerdy 0x0 bmccmd 3 framecnt 1024,E133,ARPT: <*>: framerdy <*> bmccmd <*> framecnt <*> +665,Jul,3,19:04:52,calvisitor-10-105-162-32,kernel,0,,ARPT: 683780.224800: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0,E130,ARPT: <*>: AQM agg results <*> len hi/lo: <*> <*> BAbitmap(<*>-<*>) <*> +666,Jul,3,19:04:52,calvisitor-10-105-162-32,corecaptured,33660,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +667,Jul,3,19:04:53,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[19:04:53.965] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +668,Jul,3,19:04:54,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 21353 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +669,Jul,3,19:04:58,authorMacBook-Pro,corecaptured,33660,,Received Capture Event,E294,Received Capture Event +670,Jul,3,19:05:32,calvisitor-10-105-162-32,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +671,Jul,3,19:05:37,calvisitor-10-105-162-32,corecaptured,33660,,"CCFile::copyFile fileName is [2017-07-03_19,04,57.722196]-io80211Family-018.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-03_19,04,57.722196]-io80211Family-018.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_19,05,37.535347]=AuthFail:sts:2_rsn:0/IO80211AWDLPeerManager//[2017-07-03_19,04,57.722196]-io80211Family-018.pcapng",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +672,Jul,3,19:11:46,calvisitor-10-105-162-32,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +673,Jul,3,19:11:48,authorMacBook-Pro,corecaptured,33660,,Received Capture Event,E294,Received Capture Event +674,Jul,3,19:11:55,calvisitor-10-105-162-32,QQ,10018,,button report: 0x8002be0,E161,button report: <*> +675,Jul,3,19:46:35,authorMacBook-Pro,kernel,0,,hibernate_rebuild_pmap_structs done: last_valid_compact_indx 285862,E238,hibernate_rebuild_pmap_structs done: last_valid_compact_indx <*> +676,Jul,3,19:46:35,authorMacBook-Pro,kernel,0,,BuildActDeviceEntry enter,E159,BuildActDeviceEntry enter +677,Jul,3,19:46:41,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Authenticated,E163,Captive: CNPluginHandler en0: Authenticated +678,Jul,3,19:55:29,calvisitor-10-105-161-225,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +679,Jul,3,19:55:30,calvisitor-10-105-161-225,kernel,0,,"en0: channel changed to 132,+1",E208,en0: channel changed to <*> +680,Jul,3,20:07:56,calvisitor-10-105-161-225,mdworker,33804,,(ImportBailout.Error:1331) Asked to exit for Diskarb,E3,(ImportBailout.Error:<*>) Asked to exit for Diskarb +681,Jul,3,20:16:59,calvisitor-10-105-161-225,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.33827,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +682,Jul,3,20:20:37,calvisitor-10-105-161-225,com.apple.WebKit.WebContent,32778,,[20:20:37.119] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +683,Jul,3,20:25:13,calvisitor-10-105-161-225,GoogleSoftwareUpdateAgent,33847,,2017-07-03 20:25:13.378 GoogleSoftwareUpdateAgent[33847/0x7000002a0000] [lvl=2] -[KSUpdateCheckAction performAction] KSUpdateCheckAction starting update check for ticket(s): {( url=https://tools.google.com/service/update2 creationDate=2017-02-18 15:41:17 ticketVersion=1 > )} Using server: >,E89,<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSUpdateCheckAction performAction] KSUpdateCheckAction starting update check for ticket(s): {( productID=<*> version=<*> xc= path=<*> url=<*> creationDate=<*>-<*>-<*> <*>:<*>:<*> ticketVersion=<*> > )} Using server: engine= > +684,Jul,3,20:55:46,calvisitor-10-105-161-225,com.apple.WebKit.WebContent,32778,,[20:55:46.310] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +685,Jul,3,20:56:39,calvisitor-10-105-161-225,WeChat,24144,,jemmytest,E253,jemmytest +686,Jul,3,20:56:57,calvisitor-10-105-161-225,QQ,10018,,FA||Url||taskID[2019353376] dealloc,E216,FA||Url||taskID[<*>] dealloc +687,Jul,3,21:03:03,calvisitor-10-105-161-225,com.apple.WebKit.WebContent,32778,,[21:03:03.265] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +688,Jul,3,21:07:43,calvisitor-10-105-161-225,com.apple.WebKit.WebContent,32778,,[21:07:43.005] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +689,Jul,3,21:17:04,calvisitor-10-105-161-225,Safari,9852,,KeychainGetICDPStatus: status: off,E257,KeychainGetICDPStatus: status: off +690,Jul,3,21:20:07,calvisitor-10-105-161-225,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +691,Jul,3,21:23:13,calvisitor-10-105-161-225,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.33936,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +692,Jul,3,21:27:07,calvisitor-10-105-161-225,com.apple.WebKit.WebContent,32778,,[21:27:07.761] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +693,Jul,3,21:30:39,calvisitor-10-105-161-225,ntpd,207,,sigio_handler: sigio_handler_active != 1,E312,sigio_handler: sigio_handler_active != <*> +694,Jul,3,21:30:39,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 21502 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +695,Jul,3,21:30:39,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 21503 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +696,Jul,3,21:30:41,authorMacBook-Pro,corecaptured,33951,,CCFile::captureLog,E167,CCFile::captureLog +697,Jul,3,21:30:41,authorMacBook-Pro,corecaptured,33951,,"CCFile::copyFile fileName is [2017-07-03_21,30,41.859869]-CCIOReporter-002.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-03_21,30,41.859869]-CCIOReporter-002.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-03_21,30,40.703152]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-03_21,30,41.859869]-CCIOReporter-002.xml",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +698,Jul,3,21:30:44,authorMacBook-Pro,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +699,Jul,3,21:30:50,authorMacBook-Pro,kernel,0,,Sandbox: QQ(10018) deny(1) mach-lookup com.apple.networking.captivenetworksupport,E299,Sandbox: <*>(<*>) deny(<*>) mach-lookup <*> +700,Jul,3,21:30:54,authorMacBook-Pro,networkd,195,,__42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc21519 184.105.67.74:443,E49,<*>-[NETClientConnection <*>]_block_invoke CI46 - Hit by torpedo! <*> <*> <*>:<*> +701,Jul,3,21:30:55,airbears2-10-142-110-255,kernel,0,,Sandbox: com.apple.Addres(33959) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +702,Jul,3,21:35:36,airbears2-10-142-110-255,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +703,Jul,3,21:41:47,airbears2-10-142-110-255,com.apple.WebKit.WebContent,32778,,[21:41:47.568] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +704,Jul,3,22:16:48,airbears2-10-142-110-255,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +705,Jul,3,22:32:26,airbears2-10-142-110-255,WeChat,24144,,jemmytest,E253,jemmytest +706,Jul,3,23:07:12,airbears2-10-142-110-255,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 320, items, fQueryRetries, 1, fLastRetryTimestamp, 520841203.7",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +707,Jul,3,23:07:40,airbears2-10-142-110-255,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +708,Jul,3,23:16:10,airbears2-10-142-110-255,QQ,10018,,FA||Url||taskID[2019353410] dealloc,E216,FA||Url||taskID[<*>] dealloc +709,Jul,3,23:23:34,airbears2-10-142-110-255,com.apple.AddressBook.InternetAccountsBridge,34080,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +710,Jul,3,23:24:32,airbears2-10-142-110-255,com.apple.WebKit.WebContent,32778,,[23:24:32.378] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +711,Jul,3,23:29:01,airbears2-10-142-110-255,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +712,Jul,3,23:31:42,airbears2-10-142-110-255,Safari,9852,,KeychainGetICDPStatus: status: off,E257,KeychainGetICDPStatus: status: off +713,Jul,3,23:44:36,airbears2-10-142-110-255,kernel,0,,ARPT: 697702.656868: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +714,Jul,3,23:55:44,airbears2-10-142-110-255,Safari,9852,,tcp_connection_tls_session_error_callback_imp 2210 tcp_connection_tls_session_handle_read_error.790 error 60,E320,tcp_connection_tls_session_error_callback_imp <*> tcp_connection_tls_session_handle_read_error.<*> error <*> +715,Jul,4,00:22:21,airbears2-10-142-110-255,com.apple.cts,43,,"com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 6349 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +716,Jul,4,00:23:04,airbears2-10-142-110-255,com.apple.cts,43,,"com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 6306 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +717,Jul,4,00:35:57,airbears2-10-142-110-255,kernel,0,,ARPT: 697853.842104: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +718,Jul,4,00:35:57,airbears2-10-142-110-255,com.apple.cts,43,,"com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5533 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +719,Jul,4,00:36:02,airbears2-10-142-110-255,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +720,Jul,4,00:36:07,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 44944 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +721,Jul,4,00:48:29,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 9749 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +722,Jul,4,01:00:22,airbears2-10-142-110-255,com.apple.AddressBook.InternetAccountsBridge,646,,Checking iCDP status for DSID 874161398 (checkWithServer=0),E185,Checking iCDP status for DSID <*> (checkWithServer=<*>) +723,Jul,4,01:00:25,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1883 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +724,Jul,4,01:00:35,airbears2-10-142-110-255,com.apple.CDScheduler,43,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +725,Jul,4,01:13:14,airbears2-10-142-110-255,kernel,0,,ARPT: 698052.637142: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +726,Jul,4,01:24:39,airbears2-10-142-110-255,kernel,0,,ARPT: 698055.177765: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +727,Jul,4,01:37:11,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 207556 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +728,Jul,4,01:37:37,airbears2-10-142-110-255,kernel,0,,ARPT: 698150.103985: wl0: setup_keepalive: Remote IP: 17.249.12.144,E147,ARPT: <*>: wl0: setup_keepalive: Remote IP: <*> +729,Jul,4,01:37:39,airbears2-10-142-110-255,kernel,0,,ARPT: 698152.085457: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +730,Jul,4,01:48:57,airbears2-10-142-110-255,kernel,0,,ARPT: 698152.618948: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.,E139,ARPT: <*>: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +731,Jul,4,01:48:57,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 206850 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +732,Jul,4,01:49:07,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 206840 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +733,Jul,4,02:01:03,airbears2-10-142-110-255,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us,E57,<*>::prePCIWake - power up complete - took <*> us +734,Jul,4,02:01:14,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 39837 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +735,Jul,4,02:01:30,airbears2-10-142-110-255,com.apple.AddressBook.InternetAccountsBridge,34203,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +736,Jul,4,02:13:35,airbears2-10-142-110-255,com.apple.CDScheduler,43,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +737,Jul,4,02:25:27,airbears2-10-142-110-255,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +738,Jul,4,02:25:27,airbears2-10-142-110-255,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +739,Jul,4,02:25:38,airbears2-10-142-110-255,QQ,10018,,############################## _getSysMsgList,E1,############################## _getSysMsgList +740,Jul,4,02:25:47,airbears2-10-142-110-255,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 38276 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +741,Jul,4,02:26:13,airbears2-10-142-110-255,kernel,0,,ARPT: 698348.781411: wl0: MDNS: IPV6 Addr: 2607:f140:400:a01b:1c57:7ef3:8f8e:5a10,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +742,Jul,4,02:37:39,airbears2-10-142-110-255,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +743,Jul,4,02:37:39,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 3199 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +744,Jul,4,02:38:25,airbears2-10-142-110-255,kernel,0,,ARPT: 698398.428268: wl0: setup_keepalive: Remote IP: 17.249.12.88,E147,ARPT: <*>: wl0: setup_keepalive: Remote IP: <*> +745,Jul,4,02:49:55,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1728 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +746,Jul,4,02:49:55,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1728 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +747,Jul,4,02:50:09,airbears2-10-142-110-255,com.apple.AddressBook.InternetAccountsBridge,34235,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +748,Jul,4,03:01:56,airbears2-10-142-110-255,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +749,Jul,4,03:02:06,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1732 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +750,Jul,4,03:14:08,airbears2-10-142-110-255,kernel,0,,ARPT: 698501.213099: ARPT: Wake Reason: Wake on TCP Timeout,E132,ARPT: <*>: ARPT: Wake Reason: Wake on TCP Timeout +751,Jul,4,03:26:40,airbears2-10-142-110-255,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 34623 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +752,Jul,4,03:27:06,airbears2-10-142-110-255,kernel,0,,ARPT: 698596.169927: wl0: setup_keepalive: Local IP: 10.142.110.255,E145,ARPT: <*>: wl0: setup_keepalive: Local IP: <*> +753,Jul,4,03:38:32,airbears2-10-142-110-255,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +754,Jul,4,03:38:55,airbears2-10-142-110-255,kernel,0,,Sandbox: com.apple.Addres(34268) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +755,Jul,4,03:50:54,airbears2-10-142-110-255,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +756,Jul,4,03:50:58,airbears2-10-142-110-255,cloudd,326,,"SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}",E303,"SecOSStatusWith error:[<*>] Error Domain=NSOSStatusErrorDomain Code=<*> ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}" +757,Jul,4,03:51:31,airbears2-10-142-110-255,kernel,0,,"PM response took 1999 ms (54, powerd)",E288,"PM response took <*> ms (<*>, powerd)" +758,Jul,4,04:15:26,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 31785 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +759,Jul,4,04:27:18,airbears2-10-142-110-255,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +760,Jul,4,04:27:18,airbears2-10-142-110-255,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +761,Jul,4,04:27:18,airbears2-10-142-110-255,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 5 us,E57,<*>::prePCIWake - power up complete - took <*> us +762,Jul,4,04:27:18,airbears2-10-142-110-255,kernel,0,,en0: channel changed to 6,E208,en0: channel changed to <*> +763,Jul,4,04:27:39,airbears2-10-142-110-255,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +764,Jul,4,04:39:52,airbears2-10-142-110-255,kernel,0,,Sandbox: com.apple.Addres(34309) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +765,Jul,4,04:40:15,airbears2-10-142-110-255,kernel,0,,ARPT: 698894.284410: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +766,Jul,4,04:40:17,airbears2-10-142-110-255,kernel,0,,ARPT: 698896.274509: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +767,Jul,4,04:51:41,airbears2-10-142-110-255,kernel,0,,ARPT: 698896.831598: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +768,Jul,4,04:51:41,airbears2-10-142-110-255,kernel,0,,ARPT: 698898.741521: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +769,Jul,4,04:52:01,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 29590 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +770,Jul,4,04:52:25,airbears2-10-142-110-255,QQ,10018,,############################## _getSysMsgList,E1,############################## _getSysMsgList +771,Jul,4,05:04:19,airbears2-10-142-110-255,kernel,0,,Sandbox: com.apple.Addres(34326) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +772,Jul,4,05:16:07,airbears2-10-142-110-255,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +773,Jul,4,05:16:28,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 28123 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +774,Jul,4,05:28:19,airbears2-10-142-110-255,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 2 us,E57,<*>::prePCIWake - power up complete - took <*> us +775,Jul,4,05:28:19,airbears2-10-142-110-255,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +776,Jul,4,05:28:30,airbears2-10-142-110-255,com.apple.CDScheduler,43,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +777,Jul,4,05:28:30,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1077 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +778,Jul,4,05:40:41,airbears2-10-142-110-255,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 192946 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +779,Jul,4,06:03:25,airbears2-10-142-110-255,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +780,Jul,4,06:03:27,authorMacBook-Pro,corecaptured,34369,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +781,Jul,4,06:12:51,calvisitor-10-105-162-105,kernel,0,,"ARPT: 699244.827573: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 2935131210, Ack 3049709979, Win size 278",E150,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq <*>, Ack <*>, Win size <*>" +782,Jul,4,06:12:51,calvisitor-10-105-162-105,kernel,0,,ARPT: 699246.920246: ARPT: Wake Reason: Wake on Scan offload,E131,ARPT: <*>: ARPT: Wake Reason: Wake on Scan offload +783,Jul,4,06:12:52,calvisitor-10-105-162-105,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +784,Jul,4,06:13:45,calvisitor-10-105-162-105,kernel,0,,ARPT: 699300.508954: wl0: setup_keepalive: Local IP: 10.105.162.105,E145,ARPT: <*>: wl0: setup_keepalive: Local IP: <*> +785,Jul,4,06:25:39,authorMacBook-Pro,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 23884 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +786,Jul,4,06:25:49,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 190238 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +787,Jul,4,06:26:04,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,34408,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +788,Jul,4,06:26:11,calvisitor-10-105-162-105,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 23852 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +789,Jul,4,06:39:19,calvisitor-10-105-162-105,kernel,0,,"ARPT: 699352.804212: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 2794574676, Ack 1746081928, Win size 278",E150,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq <*>, Ack <*>, Win size <*>" +790,Jul,4,06:39:19,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +791,Jul,4,06:26:28,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0,E54,<*>::<*> - intel_rp = <*> dlla_reporting_supported = <*> +792,Jul,4,06:39:19,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +793,Jul,4,06:39:19,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 189428 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +794,Jul,4,06:39:25,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1852 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +795,Jul,4,06:39:30,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1847 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +796,Jul,4,06:40:13,calvisitor-10-105-162-105,kernel,0,,"ARPT: 699408.252331: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0,",E135,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': <*>," +797,Jul,4,06:52:56,calvisitor-10-105-162-105,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +798,Jul,4,06:52:58,authorMacBook-Pro,configd,53,,network changed: v4(en0-:10.105.162.105) v6(en0-:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS- Proxy-,E265,network changed: <*>(<*>) DNS- Proxy- +799,Jul,4,06:53:02,authorMacBook-Pro,kernel,0,,AirPort: Link Up on en0,E112,AirPort: Link Up on en0 +800,Jul,4,06:53:12,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,34429,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +801,Jul,4,06:53:18,calvisitor-10-105-162-105,kernel,0,,Sandbox: com.apple.Addres(34429) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +802,Jul,4,06:53:41,calvisitor-10-105-162-105,kernel,0,,"ARPT: 699456.025397: wl0: setup_keepalive: Local port: 63572, Remote port: 443",E146,"ARPT: <*>: wl0: setup_keepalive: Local port: <*>, Remote port: <*>" +803,Jul,4,06:53:43,calvisitor-10-105-162-105,kernel,0,,"PM response took 1999 ms (54, powerd)",E288,"PM response took <*> ms (<*>, powerd)" +804,Jul,4,07:06:34,authorMacBook-Pro,configd,53,,"setting hostname to ""authorMacBook-Pro.local""",E311,"setting hostname to ""<*>""" +805,Jul,4,07:06:34,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 21875 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +806,Jul,4,07:06:38,calvisitor-10-105-162-105,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +807,Jul,4,07:06:38,calvisitor-10-105-162-105,kernel,0,,en0::IO80211Interface::postMessage bssid changed,E56,<*>::<*>::postMessage bssid changed +808,Jul,4,07:06:42,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 215 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +809,Jul,4,07:10:01,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +810,Jul,4,07:10:01,calvisitor-10-105-162-105,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +811,Jul,4,07:10:06,authorMacBook-Pro,kernel,0,,en0::IO80211Interface::postMessage bssid changed,E56,<*>::<*>::postMessage bssid changed +812,Jul,4,07:10:11,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 6 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +813,Jul,4,07:10:28,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,34457,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +814,Jul,4,07:10:40,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 187547 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +815,Jul,4,07:23:41,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +816,Jul,4,07:23:41,calvisitor-10-105-162-105,kernel,0,,en0: BSSID changed to 5c:50:15:36:bc:03,E207,en0: BSSID changed to <*> +817,Jul,4,07:23:47,authorMacBook-Pro,configd,53,,network changed: DNS*,E268,network changed: DNS* +818,Jul,4,07:23:47,calvisitor-10-105-162-105,kernel,0,,en0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 12 13 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161 165,E210,en0: Supported channels <*> +819,Jul,4,07:26:18,authorMacBook-Pro,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +820,Jul,4,07:26:28,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 186599 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +821,Jul,4,07:26:30,calvisitor-10-105-162-105,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 320, items, fQueryRetries, 1, fLastRetryTimestamp, 520871064.1",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +822,Jul,4,07:26:52,calvisitor-10-105-162-105,kernel,0,,en0: BSSID changed to 5c:50:15:4c:18:13,E207,en0: BSSID changed to <*> +823,Jul,4,07:39:57,calvisitor-10-105-162-105,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +824,Jul,4,07:39:59,calvisitor-10-105-162-105,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +825,Jul,4,07:40:17,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 185770 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +826,Jul,4,07:40:52,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 9995 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +827,Jul,4,07:54:21,calvisitor-10-105-162-105,kernel,0,,ARPT: 699815.080622: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +828,Jul,4,08:20:49,calvisitor-10-105-162-105,kernel,0,,ARPT: 699878.306468: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +829,Jul,4,08:20:51,calvisitor-10-105-162-105,kernel,0,,en0: 802.11d country code set to 'US'.,E206,en0: <*> country code set to '<*>'. +830,Jul,4,08:20:51,calvisitor-10-105-162-105,kernel,0,,en0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 12 13 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161,E210,en0: Supported channels <*> +831,Jul,4,08:21:00,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 183327 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +832,Jul,4,08:21:00,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 183327 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +833,Jul,4,08:21:25,calvisitor-10-105-162-105,corecaptured,34531,,Received Capture Event,E294,Received Capture Event +834,Jul,4,08:21:34,calvisitor-10-105-162-105,kernel,0,,"ARPT: 699925.384446: wl0: setup_keepalive: Seq: 4253304142, Ack: 3255241453, Win size: 4096",E148,"ARPT: <*>: wl0: setup_keepalive: Seq: <*>, Ack: <*>, Win size: <*>" +835,Jul,4,08:34:26,calvisitor-10-105-162-105,kernel,0,,AirPort: Link Down on awdl0. Reason 1 (Unspecified).,E109,AirPort: Link Down on awdl0. Reason <*> (Unspecified). +836,Jul,4,08:34:31,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +837,Jul,4,08:34:36,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 182511 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +838,Jul,4,08:48:07,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 21983 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +839,Jul,4,08:48:12,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Authenticated,E163,Captive: CNPluginHandler en0: Authenticated +840,Jul,4,08:48:35,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,34554,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +841,Jul,4,08:48:50,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 181657 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +842,Jul,4,09:01:41,calvisitor-10-105-162-105,kernel,0,,AirPort: Link Down on awdl0. Reason 1 (Unspecified).,E109,AirPort: Link Down on awdl0. Reason <*> (Unspecified). +843,Jul,4,09:01:42,calvisitor-10-105-162-105,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +844,Jul,4,09:01:43,authorMacBook-Pro,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5144 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +845,Jul,4,09:01:43,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 21993 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +846,Jul,4,09:01:43,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +847,Jul,4,09:01:47,authorMacBook-Pro,kernel,0,,en0: BSSID changed to 5c:50:15:4c:18:13,E207,en0: BSSID changed to <*> +848,Jul,4,09:01:47,authorMacBook-Pro,kernel,0,,Sandbox: QQ(10018) deny(1) mach-lookup com.apple.networking.captivenetworksupport,E299,Sandbox: <*>(<*>) deny(<*>) mach-lookup <*> +849,Jul,4,09:01:48,calvisitor-10-105-162-105,configd,53,,network changed: v4(en0:10.105.162.105) v6(en0+:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB,E267,network changed: <*>(<*>:<*>) <*>(<*>) DNS! Proxy SMB +850,Jul,4,09:02:25,calvisitor-10-105-162-105,QQ,10018,,FA||Url||taskID[2019353444] dealloc,E216,FA||Url||taskID[<*>] dealloc +851,Jul,4,09:15:18,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +852,Jul,4,09:28:56,calvisitor-10-105-162-105,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +853,Jul,4,09:29:21,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,34589,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +854,Jul,4,09:42:32,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 138 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +855,Jul,4,09:42:52,calvisitor-10-105-162-105,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 12051 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +856,Jul,4,09:42:57,calvisitor-10-105-162-105,GoogleSoftwareUpdateAgent,34603,,"2017-07-04 09:42:57.924 GoogleSoftwareUpdateAgent[34603/0x700000323000] [lvl=2] +[KSCodeSigningVerification verifyBundle:applicationId:error:] KSCodeSigningVerification verifying code signing for '/Users/xpc/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/GoogleSoftwareUpdateDaemon' with the requirement 'anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists and certificate leaf[subject.OU]=""EQHXZ8M8AV"" and (identifier=""com.google.Keystone"")'",E91,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] +[KSCodeSigningVerification verifyBundle:applicationId:error:] KSCodeSigningVerification verifying code signing for '<*>' with the requirement 'anchor apple generic and certificate <*>[field.<*>] exists and certificate leaf[field.<*>] exists and certificate leaf[subject.OU]=""<*>"" and (identifier=""com.google.Keystone"")'" +857,Jul,4,09:42:58,calvisitor-10-105-162-105,ksfetch,34604,,2017-07-04 09:42:58.121 ksfetch[34604/0x7fff79824000] [lvl=2] main() ksfetch done fetching.,E95,<*>-<*>-<*> <*>:<*>:<*> ksfetch[<*>/<*>] [lvl=<*>] main() ksfetch done fetching. +858,Jul,4,09:43:18,calvisitor-10-105-162-105,kernel,0,,"ARPT: 700254.389213: wl0: setup_keepalive: Seq: 2502126767, Ack: 2906384231, Win size: 4096",E148,"ARPT: <*>: wl0: setup_keepalive: Seq: <*>, Ack: <*>, Win size: <*>" +859,Jul,4,09:56:08,calvisitor-10-105-162-105,kernel,0,,ARPT: 700256.949512: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +860,Jul,4,09:56:10,calvisitor-10-105-162-105,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +861,Jul,4,09:56:38,calvisitor-10-105-162-105,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +862,Jul,4,09:57:01,calvisitor-10-105-162-105,kernel,0,,ARPT: 700311.376442: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +863,Jul,4,09:57:01,calvisitor-10-105-162-105,kernel,0,,"ARPT: 700311.376459: wl0: MDNS: 0 SRV Recs, 0 TXT Recs",E140,"ARPT: <*>: wl0: MDNS: <*> SRV Recs, <*> TXT Recs" +864,Jul,4,09:57:30,calvisitor-10-105-162-105,kernel,0,,en0: 802.11d country code set to 'X3'.,E206,en0: <*> country code set to '<*>'. +865,Jul,4,09:57:30,authorMacBook-Pro,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +866,Jul,4,09:57:30,authorMacBook-Pro,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 11173 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +867,Jul,4,09:57:30,authorMacBook-Pro,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +868,Jul,4,09:57:31,authorMacBook-Pro,configd,53,,network changed: v4(en0!:10.105.162.105) DNS+ Proxy+ SMB,E264,network changed: <*>(<*>!:<*>) DNS+ Proxy+ SMB +869,Jul,4,09:57:36,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1737 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +870,Jul,4,10:09:39,calvisitor-10-105-162-105,AddressBookSourceSync,34636,,-[SOAPParser:0x7f82b1f24e50 parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid),E47,-[SOAPParser:<*> parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid) +871,Jul,4,10:13:04,calvisitor-10-105-162-105,mDNSResponder,91,,mDNS_RegisterInterface: Frequent transitions for interface en0 (FE80:0000:0000:0000:C6B3:01FF:FECD:467F),E263,mDNS_RegisterInterface: Frequent transitions for interface en0 (<*>) +872,Jul,4,10:13:05,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,25654,,[10:13:05.044] <<<< CRABS >>>> crabsFlumeHostAvailable: [0x7f961cf08cf0] Byte flume reports host available again.,E13,[<*>:<*>:<*>] <<<< CRABS >>>> crabsFlumeHostAvailable: [<*>] Byte flume reports host available again. +873,Jul,4,10:13:12,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 10319 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +874,Jul,4,10:26:52,calvisitor-10-105-162-105,QQ,10018,,############################## _getSysMsgList,E1,############################## _getSysMsgList +875,Jul,4,10:29:35,calvisitor-10-105-162-105,kernel,0,,"Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0",E310,"Setting BTCoex Config: <*>:<*>, <*>:<*>, <*>:<*>, <*>:<*>" +876,Jul,4,10:29:44,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 43063 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +877,Jul,4,10:30:16,calvisitor-10-105-162-105,AddressBookSourceSync,34670,,Unrecognized attribute value: t:AbchPersonItemType,E328,Unrecognized attribute value: t:AbchPersonItemType +878,Jul,4,10:43:11,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +879,Jul,4,10:43:27,calvisitor-10-105-162-105,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 8416 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +880,Jul,4,10:43:31,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 8500 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +881,Jul,4,10:43:42,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,34685,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +882,Jul,4,10:43:46,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,34685,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +883,Jul,4,10:43:48,calvisitor-10-105-162-105,kernel,0,,Sandbox: com.apple.Addres(34685) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +884,Jul,4,10:43:56,calvisitor-10-105-162-105,kernel,0,,ARPT: 700626.024536: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +885,Jul,4,10:43:57,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +886,Jul,4,10:56:48,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +887,Jul,4,10:56:48,calvisitor-10-105-162-105,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 7615 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +888,Jul,4,10:56:57,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1609 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +889,Jul,4,10:57:46,calvisitor-10-105-162-105,kernel,0,,ARPT: 700687.112611: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +890,Jul,4,11:10:27,calvisitor-10-105-162-105,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +891,Jul,4,11:10:51,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,34706,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +892,Jul,4,11:10:58,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[11:10:58.940] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +893,Jul,4,11:24:04,calvisitor-10-105-162-105,kernel,0,,AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving).,E110,AirPort: Link Down on en0. Reason <*> (Disassociated because station leaving). +894,Jul,4,11:24:13,calvisitor-10-105-162-105,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5970 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +895,Jul,4,11:25:03,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 172284 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +896,Jul,4,11:28:35,authorMacBook-Pro,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +897,Jul,4,11:28:35,authorMacBook-Pro,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +898,Jul,4,11:28:41,authorMacBook-Pro,corecaptured,34722,,"CCFile::captureLog Received Capture notice id: 1499192921.020010, reason = AssocFail:sts:5_rsn:0",E169,"CCFile::captureLog Received Capture notice id: <*>, reason = AssocFail:sts:_rsn:" +899,Jul,4,11:28:42,authorMacBook-Pro,corecaptured,34722,,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7,E175,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams <*> +900,Jul,4,11:28:55,calvisitor-10-105-162-105,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5688 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +901,Jul,4,11:29:09,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,34727,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +902,Jul,4,11:29:09,calvisitor-10-105-162-105,corecaptured,34722,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-04_11,29,09.994819]-CCIOReporter-005.xml, Current File [2017-07-04_11,29,09.994819]-CCIOReporter-005.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +903,Jul,4,11:29:10,calvisitor-10-105-162-105,corecaptured,34722,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-04_11,29,10.144779]-AirPortBrcm4360_Logs-008.txt, Current File [2017-07-04_11,29,10.144779]-AirPortBrcm4360_Logs-008.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +904,Jul,4,11:29:20,calvisitor-10-105-162-105,kernel,0,,ARPT: 700863.801551: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +905,Jul,4,11:42:12,calvisitor-10-105-162-105,kernel,0,,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01),E33,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (<*>) +906,Jul,4,11:42:36,calvisitor-10-105-162-105,kernel,0,,Sandbox: com.apple.Addres(34738) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +907,Jul,4,11:43:04,calvisitor-10-105-162-105,kernel,0,,ARPT: 700919.494551: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +908,Jul,4,11:55:51,calvisitor-10-105-162-105,kernel,0,,en0::IO80211Interface::postMessage bssid changed,E56,<*>::<*>::postMessage bssid changed +909,Jul,4,11:55:52,calvisitor-10-105-162-105,corecaptured,34743,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +910,Jul,4,11:55:56,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1878 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +911,Jul,4,11:56:36,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 170391 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +912,Jul,4,11:56:46,calvisitor-10-105-162-105,kernel,0,,"ARPT: 700980.255260: wl0: setup_keepalive: Seq: 2955519239, Ack: 2597833420, Win size: 4096",E148,"ARPT: <*>: wl0: setup_keepalive: Seq: <*>, Ack: <*>, Win size: <*>" +913,Jul,4,12:06:20,calvisitor-10-105-162-105,corecaptured,34743,,"CCLogTap::profileRemoved, Owner: com.apple.iokit.IO80211Family, Name: IO80211AWDLPeerManager",E177,"CCLogTap::profileRemoved, Owner: com.apple.iokit.<*>, Name: <*>" +914,Jul,4,12:06:21,calvisitor-10-105-162-105,cloudd,326,,"SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}",E303,"SecOSStatusWith error:[<*>] Error Domain=NSOSStatusErrorDomain Code=<*> ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}" +915,Jul,4,12:06:24,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +916,Jul,4,12:06:36,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,34830,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +917,Jul,4,12:06:39,calvisitor-10-105-162-105,kernel,0,,Sandbox: com.apple.Addres(34830) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +918,Jul,4,12:06:43,calvisitor-10-105-162-105,sandboxd,129,[34830],com.apple.Addres(34830) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +919,Jul,4,12:07:03,calvisitor-10-105-162-105,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.34835,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +920,Jul,4,12:08:23,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[12:08:23.866] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +921,Jul,4,12:13:40,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[12:13:40.079] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +922,Jul,4,12:14:54,calvisitor-10-105-162-105,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +923,Jul,4,12:19:03,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[12:19:03.575] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +924,Jul,4,12:22:18,calvisitor-10-105-162-105,UserEventAgent,43,,extension com.apple.ncplugin.WorldClock -> (null),E215,extension com.apple.ncplugin.WorldClock -> (<*>) +925,Jul,4,12:25:26,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[12:25:26.551] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +926,Jul,4,12:27:11,calvisitor-10-105-162-105,kernel,0,,"ARPT: 702237.246510: wl0: setup_keepalive: Local port: 49218, Remote port: 443",E146,"ARPT: <*>: wl0: setup_keepalive: Local port: <*>, Remote port: <*>" +927,Jul,4,12:34:55,calvisitor-10-105-162-105,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +928,Jul,4,12:34:56,authorMacBook-Pro,corecaptured,34861,,"CCFile::captureLog Received Capture notice id: 1499196895.670989, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +929,Jul,4,12:34:56,authorMacBook-Pro,corecaptured,34861,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +930,Jul,4,12:35:05,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 168082 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +931,Jul,4,12:35:15,calvisitor-10-105-162-105,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +932,Jul,4,12:35:33,calvisitor-10-105-162-105,AddressBookSourceSync,34888,,-[SOAPParser:0x7fc7025b2810 parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid),E47,-[SOAPParser:<*> parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid) +933,Jul,4,12:48:36,calvisitor-10-105-162-105,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +934,Jul,4,12:49:34,calvisitor-10-105-162-105,kernel,0,,"ARPT: 702351.279867: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +935,Jul,4,13:02:13,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +936,Jul,4,13:02:13,calvisitor-10-105-162-105,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +937,Jul,4,13:02:14,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 177 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +938,Jul,4,13:02:23,calvisitor-10-105-162-105,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +939,Jul,4,13:02:23,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1769 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +940,Jul,4,13:02:39,calvisitor-10-105-162-105,AddressBookSourceSync,34904,,Unrecognized attribute value: t:AbchPersonItemType,E328,Unrecognized attribute value: t:AbchPersonItemType +941,Jul,4,13:15:51,calvisitor-10-105-162-105,kernel,0,,ARPT: 702415.308381: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +942,Jul,4,13:29:28,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us,E57,<*>::prePCIWake - power up complete - took <*> us +943,Jul,4,13:41:20,calvisitor-10-105-162-105,QQ,10018,,button report: 0x8002be0,E161,button report: <*> +944,Jul,4,13:43:06,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[13:43:06.901] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +945,Jul,4,13:55:13,calvisitor-10-105-162-105,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +946,Jul,4,13:56:31,calvisitor-10-105-162-105,com.apple.AddressBook.ContactsAccountsService,289,,"[Accounts] Current connection, connection from pid 487, doesn't have account access.",E21,"[Accounts] Current connection, connection from pid <*>, doesn't have account access." +947,Jul,4,13:56:31,calvisitor-10-105-162-105,SCIM,487,,"[Accounts] Failed to update account with identifier 76FE6715-3D27-4F21-AA35-C88C1EA820E8, error: Error Domain=ABAddressBookErrorDomain Code=1002 ""(null)""",E22,"[Accounts] Failed to update account with identifier <*>-<*>-<*>-<*>-<*>, error: Error Domain=ABAddressBookErrorDomain Code=<*> ""(<*>)""" +948,Jul,4,14:05:06,calvisitor-10-105-162-105,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +949,Jul,4,14:19:40,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[14:19:40.459] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +950,Jul,4,14:33:25,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[14:33:25.556] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +951,Jul,4,14:34:52,calvisitor-10-105-162-105,com.apple.SecurityServer,80,,Session 101921 created,E308,Session <*> created +952,Jul,4,14:36:08,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[14:36:08.077] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +953,Jul,4,14:39:45,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[14:39:45.538] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +954,Jul,4,14:43:39,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[14:43:39.854] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +955,Jul,4,15:03:53,calvisitor-10-105-162-105,GoogleSoftwareUpdateAgent,35018,,"2017-07-04 15:03:53.270 GoogleSoftwareUpdateAgent[35018/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher(PrivateMethods) helperDidTerminate:] KSOutOfProcessFetcher fetch ended for URL: ""https://tools.google.com/service/update2?cup2hreq=a70d6372a4e45a6cbba61cd7f057c79bf73c79db1b1951dc17c605e870f0419b&cup2key=7:934679018""",E85,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSOutOfProcessFetcher(PrivateMethods) helperDidTerminate:] KSOutOfProcessFetcher fetch ended for URL: ""<*>""" +956,Jul,4,15:11:20,calvisitor-10-105-162-105,syslogd,44,,ASL Sender Statistics,E153,ASL Sender Statistics +957,Jul,4,15:20:08,calvisitor-10-105-162-105,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 300, items, fQueryRetries, 0, fLastRetryTimestamp, 520899307.1",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +958,Jul,4,15:30:20,calvisitor-10-105-162-105,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +959,Jul,4,15:35:04,calvisitor-10-105-162-105,quicklookd,35049,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +960,Jul,4,15:35:04,calvisitor-10-105-162-105,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +961,Jul,4,15:35:04,calvisitor-10-105-162-105,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +962,Jul,4,15:47:25,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,32778,,[15:47:25.614] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +963,Jul,4,16:31:38,calvisitor-10-105-162-105,com.apple.CDScheduler,43,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +964,Jul,4,16:31:50,calvisitor-10-105-162-105,kernel,0,,Sandbox: com.apple.Addres(35110) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +965,Jul,4,16:31:54,calvisitor-10-105-162-105,kernel,0,,Sandbox: com.apple.Addres(35110) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +966,Jul,4,16:32:07,calvisitor-10-105-162-105,QQ,10018,,button report: 0x8002be0,E161,button report: <*> +967,Jul,4,16:32:32,calvisitor-10-105-162-105,QQ,10018,,############################## _getSysMsgList,E1,############################## _getSysMsgList +968,Jul,4,16:58:45,calvisitor-10-105-162-105,kernel,0,,ARPT: 711599.232230: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +969,Jul,4,16:58:55,calvisitor-10-105-162-105,com.apple.cts,43,,"com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4045 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +970,Jul,4,17:00:00,calvisitor-10-105-162-105,kernel,0,,kern_open_file_for_direct_io took 6 ms,E254,kern_open_file_for_direct_io took <*> ms +971,Jul,4,17:12:34,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 151433 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +972,Jul,4,17:12:34,calvisitor-10-105-162-105,com.apple.cts,43,,"com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 3226 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +973,Jul,4,17:13:03,calvisitor-10-105-162-105,sharingd,30299,,17:13:03.545 : Starting AirDrop server for user 501 on wake,E72,<*>:<*>:<*> : Starting AirDrop server for user <*> on wake +974,Jul,4,17:13:38,calvisitor-10-105-162-105,kernel,0,,"ARPT: 711749.913729: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0,",E135,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': <*>," +975,Jul,4,17:26:03,calvisitor-10-105-162-105,kernel,0,,ARPT: 711752.511718: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +976,Jul,4,17:26:44,calvisitor-10-105-162-105,sharingd,30299,,17:26:44.228 : Scanning mode Contacts Only,E70,<*>:<*>:<*> : Scanning mode Contacts Only +977,Jul,4,17:40:02,calvisitor-10-105-162-105,kernel,0,,Sandbox: com.apple.Addres(35150) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +978,Jul,4,17:53:21,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +979,Jul,4,17:54:33,calvisitor-10-105-162-105,kernel,0,,"ARPT: 711979.641310: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +980,Jul,4,18:07:00,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +981,Jul,4,18:07:01,calvisitor-10-105-162-105,QQ,10018,,button report: 0x80039B7,E161,button report: <*> +982,Jul,4,18:07:25,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,35165,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +983,Jul,4,18:20:56,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 40 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +984,Jul,4,18:21:08,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,35174,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +985,Jul,4,18:34:25,calvisitor-10-105-162-105,kernel,0,,"ARPT: 712221.085635: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 70582765, Ack 3488103719, Win size 358",E150,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq <*>, Ack <*>, Win size <*>" +986,Jul,4,18:34:25,calvisitor-10-105-162-105,kernel,0,,en0: BSSID changed to 5c:50:15:4c:18:13,E207,en0: BSSID changed to <*> +987,Jul,4,18:34:26,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 42431 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +988,Jul,4,18:34:51,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,35181,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +989,Jul,4,18:35:05,calvisitor-10-105-162-105,sharingd,30299,,18:35:05.187 : Scanning mode Contacts Only,E70,<*>:<*>:<*> : Scanning mode Contacts Only +990,Jul,4,18:48:22,calvisitor-10-105-162-105,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +991,Jul,4,18:48:27,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,35188,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +992,Jul,4,19:02:24,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000320,E120,AppleCamIn::systemWakeCall - messageType = <*> +993,Jul,4,19:15:22,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +994,Jul,4,19:15:22,calvisitor-10-105-162-105,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +995,Jul,4,19:15:41,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,35207,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +996,Jul,4,19:16:35,calvisitor-10-105-162-105,kernel,0,,"ARPT: 712526.783763: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +997,Jul,4,19:29:01,calvisitor-10-105-162-105,kernel,0,,ARPT: 712530.297675: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.,E139,ARPT: <*>: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +998,Jul,4,19:29:41,calvisitor-10-105-162-105,WindowServer,184,,CGXDisplayDidWakeNotification [712572581805245]: posting kCGSDisplayDidWake,E184,CGXDisplayDidWakeNotification [<*>]: posting kCGSDisplayDidWake +999,Jul,4,19:30:13,calvisitor-10-105-162-105,kernel,0,,ARPT: 712604.204993: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1000,Jul,4,19:42:58,calvisitor-10-105-162-105,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +1001,Jul,4,19:43:32,calvisitor-10-105-162-105,wirelessproxd,75,,Peripheral manager is not powered on,E287,Peripheral manager is not powered on +1002,Jul,4,19:43:56,calvisitor-10-105-162-105,kernel,0,,"Opened file /var/log/SleepWakeStacks.bin, size 172032, extents 1, maxio 2000000 ssd 1",E280,"Opened file <*>, size <*>, extents <*>, maxio <*> ssd <*>" +1003,Jul,4,19:56:19,calvisitor-10-105-162-105,kernel,0,,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01),E33,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (<*>) +1004,Jul,4,19:56:41,calvisitor-10-105-162-105,kernel,0,,Sandbox: com.apple.Addres(35229) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +1005,Jul,4,19:57:00,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1867 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1006,Jul,4,20:09:58,calvisitor-10-105-162-105,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1007,Jul,4,20:10:18,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 36678 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1008,Jul,4,20:24:32,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 215 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1009,Jul,4,20:24:55,calvisitor-10-105-162-105,kernel,0,,Sandbox: com.apple.Addres(35250) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +1010,Jul,4,20:25:22,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 139865 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1011,Jul,4,20:25:23,calvisitor-10-105-162-105,kernel,0,,"IOPMrootDomain: idle cancel, state 1",E250,"IOPMrootDomain: idle cancel, state <*>" +1012,Jul,4,20:25:44,calvisitor-10-105-162-105,kernel,0,,ARPT: 712915.870808: wl0: MDNS: IPV4 Addr: 10.105.162.105,E141,ARPT: <*>: wl0: MDNS: IPV4 Addr: <*> +1013,Jul,4,20:25:46,calvisitor-10-105-162-105,kernel,0,,"ARPT: 712918.575461: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0,",E135,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': <*>," +1014,Jul,4,20:38:11,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 2 us,E57,<*>::prePCIWake - power up complete - took <*> us +1015,Jul,4,20:38:12,calvisitor-10-105-162-105,kernel,0,,ARPT: 712921.782306: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +1016,Jul,4,20:38:12,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 139095 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1017,Jul,4,20:38:13,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 35003 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1018,Jul,4,20:38:50,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 139057 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1019,Jul,4,20:51:50,calvisitor-10-105-162-105,kernel,0,,Wake reason: RTC (Alarm),E338,Wake reason: RTC (Alarm) +1020,Jul,4,20:51:50,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +1021,Jul,4,20:51:50,calvisitor-10-105-162-105,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-05 03:51:50 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +1022,Jul,4,20:51:50,calvisitor-10-105-162-105,kernel,0,,"ARPT: 712997.981881: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0,",E138,"ARPT: <*>: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': <*>," +1023,Jul,4,20:52:10,calvisitor-10-105-162-105,com.apple.CDScheduler,43,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1024,Jul,4,20:54:03,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +1025,Jul,4,20:54:03,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1026,Jul,4,20:54:03,calvisitor-10-105-162-105,sharingd,30299,,20:54:03.455 : BTLE scanner Powered On,E64,<*>:<*>:<*> : BTLE scanner Powered On +1027,Jul,4,20:54:03,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 138144 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1028,Jul,4,20:54:04,authorMacBook-Pro,networkd,195,,__42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc22491 203.205.142.158:8080,E49,<*>-[NETClientConnection <*>]_block_invoke CI46 - Hit by torpedo! <*> <*> <*>:<*> +1029,Jul,4,20:54:25,calvisitor-10-105-162-105,kernel,0,,Sandbox: com.apple.Addres(35286) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +1030,Jul,4,21:06:47,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 132 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1031,Jul,4,21:07:16,calvisitor-10-105-162-105,sharingd,30299,,21:07:16.729 : Scanning mode Contacts Only,E70,<*>:<*>:<*> : Scanning mode Contacts Only +1032,Jul,4,21:23:17,calvisitor-10-105-162-105,wirelessproxd,75,,Peripheral manager is not powered on,E287,Peripheral manager is not powered on +1033,Jul,4,21:35:17,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 135670 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1034,Jul,4,21:35:54,calvisitor-10-105-162-105,kernel,0,,ARPT: 713439.104232: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1035,Jul,4,21:35:54,calvisitor-10-105-162-105,kernel,0,,"ARPT: 713439.104255: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0,",E135,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': <*>," +1036,Jul,4,21:49:26,calvisitor-10-105-162-105,kernel,0,,ARPT: 713493.575563: wl0: setup_keepalive: Remote IP: 17.249.28.75,E147,ARPT: <*>: wl0: setup_keepalive: Remote IP: <*> +1037,Jul,4,22:02:21,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1843 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1038,Jul,4,22:02:21,calvisitor-10-105-162-105,com.apple.CDScheduler,43,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1039,Jul,4,22:15:48,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1040,Jul,4,22:29:25,calvisitor-10-105-162-105,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1041,Jul,4,22:29:26,calvisitor-10-105-162-105,sharingd,30299,,22:29:26.099 : BTLE scanner Powered On,E64,<*>:<*>:<*> : BTLE scanner Powered On +1042,Jul,4,22:43:02,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +1043,Jul,4,22:56:50,calvisitor-10-105-162-105,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 978 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1044,Jul,4,22:57:00,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,35374,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1045,Jul,4,22:57:01,calvisitor-10-105-162-105,locationd,82,,"NETWORK: no response from server, reachability, 2, queryRetries, 1",E270,"NETWORK: no response from server, reachability, <*>, queryRetries, <*>" +1046,Jul,4,23:10:17,calvisitor-10-105-162-105,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 7,E55,<*>::<*> - retries = <*> +1047,Jul,4,23:10:17,calvisitor-10-105-162-105,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1048,Jul,4,23:10:28,calvisitor-10-105-162-105,CalendarAgent,279,,[com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-8].],E28,[com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-<*>].] +1049,Jul,4,23:10:29,calvisitor-10-105-162-105,kernel,0,,"PM response took 113 ms (24144, WeChat)",E290,"PM response took <*> ms (<*>, WeChat)" +1050,Jul,4,23:10:31,calvisitor-10-105-162-105,WindowServer,184,,"device_generate_lock_screen_screenshot: authw 0x7fa824145a00(2000)[0, 0, 1440, 900] shield 0x7fa825dafc00(2001), dev [1440,900]",E200,"device_generate_lock_screen_screenshot: authw <*>(<*>)[<*>, <*>, <*>, <*>] shield <*>(<*>), dev [<*>,<*>]" +1051,Jul,4,23:10:40,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,35382,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +1052,Jul,4,23:13:35,calvisitor-10-105-162-105,com.apple.AddressBook.InternetAccountsBridge,35394,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +1053,Jul,4,23:14:37,calvisitor-10-105-162-105,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.35400,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +1054,Jul,4,23:16:14,calvisitor-10-105-162-105,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.35412,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SocialHelper.xpc/Contents/MacOS/com.apple.Safari.SocialHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +1055,Jul,4,23:17:17,calvisitor-10-105-162-105,Safari,9852,,KeychainGetICDPStatus: status: off,E257,KeychainGetICDPStatus: status: off +1056,Jul,4,23:20:18,calvisitor-10-105-162-105,QQ,10018,,FA||Url||taskID[2019353517] dealloc,E216,FA||Url||taskID[<*>] dealloc +1057,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00660011': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1058,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x0067000f': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1059,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00670033': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1060,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x03600009': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1061,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x0360001f': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1062,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x03f20026': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1063,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x009a0005': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1064,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00990013': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1065,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00690003': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1066,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x006a0061': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1067,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x006a00a6': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1068,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x006a00a7': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1069,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x006a00b2': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1070,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x006d0002': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1071,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00b20001': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1072,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x03ef000d': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1073,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00b8fffe': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1074,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00bb0001': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1075,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00bc0007': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1076,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00c1000a': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1077,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00c40027': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1078,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00c5000c': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1079,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00e80002': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1080,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x03eb0001': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1081,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x006f0001': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1082,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x00730020': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1083,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x007c000c': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1084,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x007c0018': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1085,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x007d000e': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1086,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x008b036a': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1087,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x008b6fb5': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1088,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x008b0360': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1089,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x008bdeaa': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1090,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x008bdeb0': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1091,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x01f60001': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1092,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x01f90004': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1093,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02080000': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1094,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02100004': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1095,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02120000': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1096,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02120002': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1097,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x023b0003': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1098,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x023d0001': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1099,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02410003': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1100,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02420002': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1101,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02420006': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1102,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02470032': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1103,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02470045': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1104,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x0247ffe9': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1105,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x0249002a': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1106,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x024a00b2': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1107,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x025c0009': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1108,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x0261fffd': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1109,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02640011': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1110,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x0268000a': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1111,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02720002': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1112,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02740004': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1113,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02cc0000': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1114,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02d10001': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1115,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02770011': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1116,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02780026': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1117,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x027b0006': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1118,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x027e0001': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1119,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02801000': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1120,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02950006': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1121,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x0295001d': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1122,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x029f0014': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1123,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x029f003a': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1124,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02a60001': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1125,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02b60001': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1126,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02b70006': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1127,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,Cocoa scripting error for '0x02cb000d': four character codes must be four characters long.,E188,Cocoa scripting error for '<*>': four character codes must be four characters long. +1128,Jul,4,23:22:09,calvisitor-10-105-162-105,Microsoft Word,14463,,.sdef warning for argument '' of command 'can continue previous list' in suite 'Microsoft Word Suite': '4023' is not a valid type name.,E9,.sdef warning for argument '' of command 'can continue previous list' in suite 'Microsoft Word Suite': '<*>' is not a valid type name. +1129,Jul,4,23:25:29,calvisitor-10-105-162-105,WeChat,24144,,jemmytest,E253,jemmytest +1130,Jul,4,23:30:23,calvisitor-10-105-162-105,QQ,10018,,FA||Url||taskID[2019353519] dealloc,E216,FA||Url||taskID[<*>] dealloc +1131,Jul,4,23:31:49,calvisitor-10-105-162-105,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1132,Jul,4,23:49:42,calvisitor-10-105-162-105,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +1133,Jul,4,23:50:59,calvisitor-10-105-162-105,quicklookd,35391,,objc[35391]: Class TSUAtomicLRUCache is implemented in both /Library/QuickLook/iWork.qlgenerator/Contents/MacOS/iWork and /System/Library/PrivateFrameworks/OfficeImport.framework/Versions/A/OfficeImport. One of the two will be used. Which one is undefined.,E278,objc[<*>]: Class TSUAtomicLRUCache is implemented in both <*> and <*> One of the two will be used. Which one is undefined. +1134,Jul,4,23:50:59,calvisitor-10-105-162-105,garcon,35461,,Invalidating watch set.,E248,Invalidating watch set. +1135,Jul,4,23:50:59,calvisitor-10-105-162-105,QuickLookSatellite,35448,,objc[35448]: Class TSUCustomFormatData is implemented in both /Library/QuickLook/iWork.qlgenerator/Contents/MacOS/iWork and /System/Library/PrivateFrameworks/OfficeImport.framework/Versions/A/OfficeImport. One of the two will be used. Which one is undefined.,E279,objc[<*>]: Class TSUCustomFormatData is implemented in both <*> and <*> One of the two will be used. Which one is undefined. +1136,Jul,4,23:51:29,calvisitor-10-105-162-105,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +1137,Jul,4,23:53:29,calvisitor-10-105-162-105,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +1138,Jul,4,23:55:28,calvisitor-10-105-162-105,CalendarAgent,279,,[com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-8].],E28,[com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-<*>].] +1139,Jul,5,00:02:22,calvisitor-10-105-162-105,WeChat,24144,,jemmytest,E253,jemmytest +1140,Jul,5,00:03:06,calvisitor-10-105-162-105,sharingd,30299,,00:03:06.178 : Started generating hashes,E71,<*>:<*>:<*> : Started generating hashes +1141,Jul,5,00:03:36,calvisitor-10-105-162-105,sharingd,30299,,00:03:36.715 : BTLE scanning started,E65,<*>:<*>:<*> : BTLE scanning started +1142,Jul,5,00:09:34,calvisitor-10-105-162-105,WeChat,24144,,jemmytest,E253,jemmytest +1143,Jul,5,00:17:32,calvisitor-10-105-162-105,com.apple.WebKit.WebContent,35435,,"<<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of 21335 bytes @ 5481561 took 0.501237 sec. to complete, 16 reads >= 0.5 sec.",E99,"<<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of <*> bytes @ <*> took <*> <*> to complete, <*> reads >= <*> sec." +1144,Jul,5,00:17:35,calvisitor-10-105-162-105,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +1145,Jul,5,00:17:50,authorMacBook-Pro,corecaptured,35613,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1146,Jul,5,00:17:52,authorMacBook-Pro,kernel,0,,AirPort: Link Up on en0,E112,AirPort: Link Up on en0 +1147,Jul,5,00:18:04,authorMacBook-Pro,QQ,10018,,button report: 0x80039B7,E161,button report: <*> +1148,Jul,5,00:18:07,authorMacBook-Pro,QQ,10018,,button report: 0X80076ED,E161,button report: <*> +1149,Jul,5,00:18:09,authorMacBook-Pro,com.apple.AddressBook.InternetAccountsBridge,35618,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +1150,Jul,5,00:18:12,authorMacBook-Pro,AddressBookSourceSync,35614,,Unrecognized attribute value: t:AbchPersonItemType,E328,Unrecognized attribute value: t:AbchPersonItemType +1151,Jul,5,00:21:07,authorMacBook-Pro,Google Chrome,35628,,-_continuousScroll is deprecated for NSScrollWheel. Please use -hasPreciseScrollingDeltas.,E74,<*>-_continuousScroll is deprecated for NSScrollWheel. Please use -hasPreciseScrollingDeltas. +1152,Jul,5,00:21:07,authorMacBook-Pro,Google Chrome,35628,,-deviceDeltaY is deprecated for NSScrollWheel. Please use -scrollingDeltaY.,E98,<*>-deviceDeltaY is deprecated for NSScrollWheel. Please use -scrollingDeltaY. +1153,Jul,5,00:28:42,authorMacBook-Pro,com.apple.WebKit.WebContent,35671,,[00:28:42.167] (Fig) signalled err=-12871,E11,[<*>:<*>:<*>] (Fig) signalled err=<*> +1154,Jul,5,00:29:04,authorMacBook-Pro,com.apple.WebKit.WebContent,35671,,[00:29:04.085] <<<< CRABS >>>> crabsWaitForLoad: [0x7fbc7ac683a0] Wait time out - -1001 (msRequestTimeout -1),E15,[<*>:<*>:<*>] <<<< CRABS >>>> crabsWaitForLoad: [<*>] Wait time out - <*> (msRequestTimeout <*>) +1155,Jul,5,00:29:25,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 22710 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +1156,Jul,5,00:30:00,calvisitor-10-105-163-10,syslogd,44,,"Configuration Notice: ASL Module ""com.apple.corecdp.osx.asl"" claims selected messages. Those messages may not appear in standard system log files or in the ASL database.",E190,"Configuration Notice: ASL Module ""<*>"" claims selected messages. Those messages may not appear in standard system log files or in the ASL database." +1157,Jul,5,00:33:56,calvisitor-10-105-163-10,locationd,82,,"PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1001 ""The request timed out."" UserInfo={NSUnderlyingError=0x7fb7ed616c80 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 ""The request timed out."" UserInfo={NSErrorFailingURLStringKey=https://gs-loc.apple.com/clls/wloc, NSErrorFailingURLKey=https://gs-loc.apple.com/clls/wloc, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://gs-loc.apple.com/clls/wloc, NSErrorFailingURLKey=https://gs-loc.apple.com/clls/wloc, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}",E286,"PBRequester failed with Error Error Domain=NSURLErrorDomain Code=<*> ""The request timed out."" UserInfo={NSUnderlyingError=<*> {Error Domain=kCFErrorDomainCFNetwork Code=<*> ""The request timed out."" UserInfo={NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorCodeKey=<*>, _kCFStreamErrorDomainKey=<*>, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorDomainKey=<*>, _kCFStreamErrorCodeKey=<*>, NSLocalizedDescription=The request timed out.}" +1158,Jul,5,00:47:16,calvisitor-10-105-163-10,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1159,Jul,5,00:53:57,calvisitor-10-105-163-10,locationd,82,,"NETWORK: no response from server, reachability, 2, queryRetries, 2",E270,"NETWORK: no response from server, reachability, <*>, queryRetries, <*>" +1160,Jul,5,00:55:33,calvisitor-10-105-163-10,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 284, items, fQueryRetries, 0, fLastRetryTimestamp, 520934130.6",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +1161,Jul,5,00:58:26,calvisitor-10-105-163-10,wirelessproxd,75,,Failed to stop a scan - central is not powered on: 4,E219,Failed to stop a scan - central is not powered on: <*> +1162,Jul,5,00:58:27,calvisitor-10-105-163-10,WindowServer,184,,"device_generate_desktop_screenshot: authw 0x7fa82407ea00(2000), shield 0x7fa82435f400(2001)",E199,"device_generate_desktop_screenshot: authw <*>(<*>), shield <*>(<*>)" +1163,Jul,5,01:19:55,calvisitor-10-105-163-10,kernel,0,,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01),E33,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (<*>) +1164,Jul,5,01:33:27,calvisitor-10-105-163-10,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +1165,Jul,5,01:47:03,calvisitor-10-105-163-10,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 7,E55,<*>::<*> - retries = <*> +1166,Jul,5,02:27:53,calvisitor-10-105-163-10,com.apple.AddressBook.InternetAccountsBridge,35749,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1167,Jul,5,02:27:53,calvisitor-10-105-163-10,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1168,Jul,5,02:27:57,calvisitor-10-105-163-10,com.apple.AddressBook.InternetAccountsBridge,35749,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1169,Jul,5,02:28:22,calvisitor-10-105-163-10,kernel,0,,ARPT: 720406.265686: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1170,Jul,5,02:41:24,calvisitor-10-105-163-10,kernel,0,,ARPT: 720413.304306: wl0: setup_keepalive: Remote IP: 17.249.12.81,E147,ARPT: <*>: wl0: setup_keepalive: Remote IP: <*> +1171,Jul,5,02:54:51,calvisitor-10-105-163-10,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +1172,Jul,5,03:08:26,calvisitor-10-105-163-10,kernel,0,,en0: BSSID changed to 5c:50:15:4c:18:13,E207,en0: BSSID changed to <*> +1173,Jul,5,03:08:26,calvisitor-10-105-163-10,kernel,0,,en0: BSSID changed to 5c:50:15:4c:18:13,E207,en0: BSSID changed to <*> +1174,Jul,5,03:08:49,calvisitor-10-105-163-10,sandboxd,129,[35762],com.apple.Addres(35762) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1175,Jul,5,03:35:40,calvisitor-10-105-163-10,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +1176,Jul,5,03:35:45,calvisitor-10-105-163-10,kernel,0,,ARPT: 720580.338311: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1177,Jul,5,03:49:12,calvisitor-10-105-163-10,kernel,0,,Wake reason: RTC (Alarm),E338,Wake reason: RTC (Alarm) +1178,Jul,5,03:49:24,calvisitor-10-105-163-10,kernel,0,,Sandbox: com.apple.Addres(35773) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +1179,Jul,5,03:49:51,calvisitor-10-105-163-10,kernel,0,,"PM response took 1988 ms (54, powerd)",E288,"PM response took <*> ms (<*>, powerd)" +1180,Jul,5,03:58:47,calvisitor-10-105-163-10,kernel,0,,Wake reason: EC.SleepTimer (SleepTimer),E337,Wake reason: EC.SleepTimer (SleepTimer) +1181,Jul,5,03:58:47,calvisitor-10-105-163-10,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +1182,Jul,5,04:12:21,calvisitor-10-105-163-10,syslogd,44,,ASL Sender Statistics,E153,ASL Sender Statistics +1183,Jul,5,04:12:22,calvisitor-10-105-163-10,kernel,0,,**** [BroadcomBluetoothHostControllerUSBTransport][start] -- Completed (matched on Device) -- 0x6000 ****,E5,**** [BroadcomBluetoothHostControllerUSBTransport][start] -- Completed (matched on Device) -- <*> **** +1184,Jul,5,10:31:18,calvisitor-10-105-163-10,kernel,0,,"hibernate_newruntime_map time: 0 ms, IOPolledFilePollersOpen(), ml_get_interrupts_enabled 0",E232,"hibernate_newruntime_map time: <*> ms, IOPolledFilePollersOpen(), ml_get_interrupts_enabled <*>" +1185,Jul,5,10:31:18,calvisitor-10-105-163-10,kernel,0,,"hibernate_machine_init pagesDone 451550 sum2 4886d9d9, time: 197 ms, disk(0x20000) 799 Mb/s, comp bytes: 40017920 time: 27 ms 1412 Mb/s, crypt bytes: 160550912 time: 39 ms 3904 Mb/s",E229,"hibernate_machine_init pagesDone <*> sum2 <*>, time: <*> ms, disk(<*>) <*> Mb/s, comp bytes: <*> time: <*> ms <*> Mb/s, crypt bytes: <*> time: <*> ms <*> Mb/s" +1186,Jul,5,10:31:18,calvisitor-10-105-163-10,kernel,0,,vm_compressor_fastwake_warmup (581519 - 591525) - starting,E333,vm_compressor_fastwake_warmup (<*> - <*>) - starting +1187,Jul,5,10:31:18,calvisitor-10-105-163-10,kernel,0,,BuildActDeviceEntry exit,E160,BuildActDeviceEntry exit +1188,Jul,5,10:31:19,calvisitor-10-105-163-10,identityservicesd,272,,": Updating enabled: YES (Topics: ( ""com.apple.private.alloy.icloudpairing"", ""com.apple.private.alloy.continuity.encryption"", ""com.apple.private.alloy.continuity.activity"", ""com.apple.ess"", ""com.apple.private.ids"", ""com.apple.private.alloy.phonecontinuity"", ""com.apple.madrid"", ""com.apple.private.ac"", ""com.apple.private.alloy.phone.auth"", ""com.apple.private.alloy.keychainsync"", ""com.apple.private.alloy.fmf"", ""com.apple.private.alloy.sms"", ""com.apple.private.alloy.screensharing"", ""com.apple.private.alloy.maps"", ""com.apple.private.alloy.thumper.keys"", ""com.apple.private.alloy.continuity.tethering"" ))",E107,: Updating enabled: YES (Topics: (<*>)) +1189,Jul,5,10:31:23,calvisitor-10-105-163-10,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +1190,Jul,5,10:31:24,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +1191,Jul,5,10:31:56,calvisitor-10-105-160-179,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +1192,Jul,5,10:32:08,calvisitor-10-105-160-179,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +1193,Jul,5,10:41:38,calvisitor-10-105-160-179,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1194,Jul,5,10:43:32,calvisitor-10-105-160-179,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1195,Jul,5,10:44:16,calvisitor-10-105-160-179,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1196,Jul,5,10:45:00,calvisitor-10-105-160-179,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.35830,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +1197,Jul,5,10:48:06,calvisitor-10-105-160-179,quicklookd,35840,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +1198,Jul,5,10:52:15,calvisitor-10-105-160-179,GoogleSoftwareUpdateAgent,35861,,"2017-07-05 10:52:15.982 GoogleSoftwareUpdateAgent[35861/0x700000323000] [lvl=2] -[KSOutOfProcessFetcher(PrivateMethods) helperDidTerminate:] KSOutOfProcessFetcher fetch ended for URL: ""https://tools.google.com/service/update2?cup2hreq=d297a7e5b56d6bd4faa75860fff6e485c301bf4e943a561afff6c8b3707ce948&cup2key=7:2988503627""",E85,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSOutOfProcessFetcher(PrivateMethods) helperDidTerminate:] KSOutOfProcessFetcher fetch ended for URL: ""<*>""" +1199,Jul,5,10:52:16,calvisitor-10-105-160-179,ksfetch,35863,,2017-07-05 10:52:16.779 ksfetch[35863/0x7fff79824000] [lvl=2] main() Fetcher received a request: { URL: https://tools.google.com/service/update2?cup2hreq=a7873a51b1cb55518e420d20dff47d463781ed3f7aa83c3153129eefb148070b&cup2key=7:2501762722 },E94,<*>-<*>-<*> <*>:<*>:<*> ksfetch[<*>/<*>] [lvl=<*>] main() Fetcher received a request: { URL: <*> } +1200,Jul,5,10:52:16,calvisitor-10-105-160-179,GoogleSoftwareUpdateAgent,35861,,2017-07-05 10:52:16.977 GoogleSoftwareUpdateAgent[35861/0x700000323000] [lvl=2] -[KSPrefetchAction performAction] KSPrefetchAction no updates to prefetch.,E87,<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSPrefetchAction performAction] KSPrefetchAction no updates to prefetch. +1201,Jul,5,10:56:49,calvisitor-10-105-160-179,Safari,9852,,KeychainGetICDPStatus: status: off,E257,KeychainGetICDPStatus: status: off +1202,Jul,5,10:57:01,calvisitor-10-105-160-179,QQ,10018,,2017/07/05 10:57:01.130 | I | VoipWrapper | DAVEngineImpl.cpp:1400:Close | close video chat. llFriendUIN = 1742124257.,E53,<*>/<*>/<*> <*>:<*>:<*> | I | VoipWrapper | DAVEngineImpl.cpp:<*>:Close | close video chat. llFriendUIN = <*>. +1203,Jul,5,10:57:41,calvisitor-10-105-160-179,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1204,Jul,5,10:58:22,calvisitor-10-105-160-179,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.35873,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SocialHelper.xpc/Contents/MacOS/com.apple.Safari.SocialHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +1205,Jul,5,10:58:44,calvisitor-10-105-160-179,imagent,355,,: notification observer: com.apple.FaceTime notification: __CFNotification 0x7fdcc9d19110 {name = _NSDoNotDisturbEnabledNotification},E105,: notification observer: com.apple.FaceTime notification: __CFNotification <*> {name = _NSDoNotDisturbEnabledNotification} +1206,Jul,5,10:58:44,calvisitor-10-105-160-179,kernel,0,,"Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0",E310,"Setting BTCoex Config: <*>:<*>, <*>:<*>, <*>:<*>, <*>:<*>" +1207,Jul,5,11:01:10,authorMacBook-Pro,corecaptured,35877,,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7,E175,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams <*> +1208,Jul,5,11:01:55,calvisitor-10-105-160-179,corecaptured,35877,,Received Capture Event,E294,Received Capture Event +1209,Jul,5,11:01:55,calvisitor-10-105-160-179,corecaptured,35877,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-05_11,01,55.983179]-AirPortBrcm4360_Logs-006.txt, Current File [2017-07-05_11,01,55.983179]-AirPortBrcm4360_Logs-006.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1210,Jul,5,11:39:37,calvisitor-10-105-160-179,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +1211,Jul,5,11:39:38,authorMacBook-Pro,corecaptured,35877,,CCProfileMonitor::freeResources done,E178,CCProfileMonitor::freeResources done +1212,Jul,5,11:39:39,authorMacBook-Pro,corecaptured,35889,,"CCFile::copyFile fileName is [2017-07-05_11,39,39.743225]-CCIOReporter-001.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-05_11,39,39.743225]-CCIOReporter-001.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-05_11,39,38.739976]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-05_11,39,39.743225]-CCIOReporter-001.xml",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1213,Jul,5,11:40:26,calvisitor-10-105-160-226,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1214,Jul,5,11:42:05,calvisitor-10-105-160-226,Mail,11203,,tcp_connection_destination_perform_socket_connect 44073 connectx to 123.125.50.30:143@0 failed: [50] Network is down,E316,tcp_connection_destination_perform_socket_connect <*> connectx to <*>:<*>@<*> failed: [<*>] Network is down +1215,Jul,5,11:42:53,calvisitor-10-105-160-226,identityservicesd,272,,: NC Disabled: NO,E102,: NC Disabled: NO +1216,Jul,5,11:42:53,calvisitor-10-105-160-226,identityservicesd,272,,: DND Enabled: NO,E103,: DND Enabled: NO +1217,Jul,5,11:47:49,calvisitor-10-105-160-226,quicklookd,35915,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +1218,Jul,5,12:00:35,calvisitor-10-105-160-226,WindowServer,184,,CGXDisplayDidWakeNotification [723587602857832]: posting kCGSDisplayDidWake,E184,CGXDisplayDidWakeNotification [<*>]: posting kCGSDisplayDidWake +1219,Jul,5,12:00:39,calvisitor-10-105-160-226,identityservicesd,272,,: DND Enabled: NO,E103,: DND Enabled: NO +1220,Jul,5,12:00:50,authorMacBook-Pro,networkd,195,,__42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc22930 125.39.240.34:14000,E49,<*>-[NETClientConnection <*>]_block_invoke CI46 - Hit by torpedo! <*> <*> <*>:<*> +1221,Jul,5,12:00:58,calvisitor-10-105-160-226,com.apple.AddressBook.InternetAccountsBridge,35944,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1222,Jul,5,12:01:10,calvisitor-10-105-160-226,QQ,10018,,button report: 0x8002bdf,E161,button report: <*> +1223,Jul,5,12:02:02,calvisitor-10-105-160-226,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1224,Jul,5,12:05:11,calvisitor-10-105-160-226,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1225,Jul,5,12:35:58,calvisitor-10-105-160-226,kernel,0,,en0: BSSID changed to 88:75:56:a0:95:ed,E207,en0: BSSID changed to <*> +1226,Jul,5,12:50:34,calvisitor-10-105-160-226,kernel,0,,ARPT: 724509.898718: wl0: MDNS: IPV4 Addr: 10.105.160.226,E141,ARPT: <*>: wl0: MDNS: IPV4 Addr: <*> +1227,Jul,5,13:16:51,calvisitor-10-105-160-226,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +1228,Jul,5,13:43:58,calvisitor-10-105-160-226,kernel,0,,en0: BSSID changed to 88:75:56:a0:95:ed,E207,en0: BSSID changed to <*> +1229,Jul,5,13:44:18,calvisitor-10-105-160-226,com.apple.AddressBook.InternetAccountsBridge,646,,Daemon connection invalidated!,E196,Daemon connection invalidated! +1230,Jul,5,14:03:40,calvisitor-10-105-160-226,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1231,Jul,5,14:03:45,authorMacBook-Pro,corecaptured,36034,,"CCFile::captureLog Received Capture notice id: 1499288625.645942, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1232,Jul,5,14:04:12,authorMacBook-Pro,corecaptured,36034,,"CCFile::captureLog Received Capture notice id: 1499288652.126295, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1233,Jul,5,14:04:16,authorMacBook-Pro,corecaptured,36034,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1234,Jul,5,14:04:19,authorMacBook-Pro,corecaptured,36034,,"CCFile::copyFile fileName is [2017-07-05_14,04,19.163834]-AirPortBrcm4360_Logs-025.txt, source path:/var/log/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/DriverLogs//[2017-07-05_14,04,19.163834]-AirPortBrcm4360_Logs-025.txt, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/[2017-07-05_14,04,19.222771]=AuthFail:sts:5_rsn:0/DriverLogs//[2017-07-05_14,04,19.163834]-AirPortBrcm4360_Logs-025.txt",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1235,Jul,5,14:04:19,authorMacBook-Pro,corecaptured,36034,,CCFile::captureLog,E167,CCFile::captureLog +1236,Jul,5,14:04:19,authorMacBook-Pro,kernel,0,,ARPT: 724786.252727: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0,E130,ARPT: <*>: AQM agg results <*> len hi/lo: <*> <*> BAbitmap(<*>-<*>) <*> +1237,Jul,5,14:04:19,authorMacBook-Pro,corecaptured,36034,,"CCFile::captureLog Received Capture notice id: 1499288659.752738, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1238,Jul,5,14:04:25,authorMacBook-Pro,corecaptured,36034,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-05_14,04,25.118445]-AirPortBrcm4360_Logs-040.txt, Current File [2017-07-05_14,04,25.118445]-AirPortBrcm4360_Logs-040.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1239,Jul,5,14:04:25,authorMacBook-Pro,corecaptured,36034,,"CCFile::copyFile fileName is [2017-07-05_14,04,25.705173]-CCIOReporter-044.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-05_14,04,25.705173]-CCIOReporter-044.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-05_14,04,25.777317]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-05_14,04,25.705173]-CCIOReporter-044.xml",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1240,Jul,5,14:04:26,authorMacBook-Pro,corecaptured,36034,,"doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-05_14,04,24.831957] - AssocFail:sts:5_rsn:0.xml",E204,doSaveChannels@<*>: Will write to: <*> +1241,Jul,5,14:04:27,authorMacBook-Pro,corecaptured,36034,,"CCFile::captureLog Received Capture notice id: 1499288667.823332, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1242,Jul,5,14:04:27,authorMacBook-Pro,corecaptured,36034,,"CCFile::captureLog Received Capture notice id: 1499288667.956536, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1243,Jul,5,14:04:32,authorMacBook-Pro,corecaptured,36034,,"CCFile::copyFile fileName is [2017-07-05_14,04,32.840703]-io80211Family-056.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-05_14,04,32.840703]-io80211Family-056.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-05_14,04,32.969558]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-05_14,04,32.840703]-io80211Family-056.pcapng",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1244,Jul,5,14:04:32,authorMacBook-Pro,corecaptured,36034,,"CCFile::captureLog Received Capture notice id: 1499288672.969558, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1245,Jul,5,14:04:33,authorMacBook-Pro,corecaptured,36034,,Received Capture Event,E294,Received Capture Event +1246,Jul,5,14:04:33,authorMacBook-Pro,corecaptured,36034,,"CCFile::copyFile fileName is [2017-07-05_14,04,33.660387]-io80211Family-063.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-05_14,04,33.660387]-io80211Family-063.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-05_14,04,33.736169]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-05_14,04,33.660387]-io80211Family-063.pcapng",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1247,Jul,5,14:04:35,authorMacBook-Pro,corecaptured,36034,,CCFile::captureLog,E167,CCFile::captureLog +1248,Jul,5,14:04:35,authorMacBook-Pro,corecaptured,36034,,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions,E176,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +1249,Jul,5,14:15:40,authorMacBook-Pro,configd,53,,network changed: v4(en0+:10.105.160.226) v6(en0:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB,E267,network changed: <*>(<*>:<*>) <*>(<*>) DNS! Proxy SMB +1250,Jul,5,14:56:09,authorMacBook-Pro,kernel,0,,"ARPT: 724869.297011: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 4551,",E137,"ARPT: <*>: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': <*>," +1251,Jul,5,14:56:13,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +1252,Jul,5,14:56:14,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +1253,Jul,5,15:26:36,calvisitor-10-105-162-98,kernel,0,,IOHibernatePollerOpen(0),E249,IOHibernatePollerOpen(<*>) +1254,Jul,5,15:26:36,calvisitor-10-105-162-98,kernel,0,,"hibernate_machine_init: state 2, image pages 446175, sum was d4e6c0b2, imageSize 0x2aea6000, image1Size 0x215a4000, conflictCount 5848, nextFree 5887",E231,"hibernate_machine_init: state <*>, image pages <*>, sum was <*>, imageSize <*>, image1Size <*>, conflictCount <*>, nextFree <*>" +1255,Jul,5,15:26:36,calvisitor-10-105-162-98,kernel,0,,[HID] [MT] AppleMultitouchDevice::willTerminate entered,E36,[HID] [MT] AppleMultitouchDevice::willTerminate entered +1256,Jul,5,15:40:14,calvisitor-10-105-162-98,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +1257,Jul,5,15:40:14,calvisitor-10-105-162-98,BezelServices 255.10,94,,ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2789,E155,ASSERTION FAILED: dvcAddrRef != ((void *)<*>) -[DriverServices getDeviceAddress:] line: <*> +1258,Jul,5,15:55:35,calvisitor-10-105-162-98,kernel,0,,hibernate_rebuild completed - took 10042450943433 msecs,E236,hibernate_rebuild completed - took <*> msecs +1259,Jul,5,15:55:35,calvisitor-10-105-162-98,kernel,0,,AppleActuatorDevice::stop Entered,E114,AppleActuatorDevice::stop Entered +1260,Jul,5,15:55:35,calvisitor-10-105-162-98,kernel,0,,AppleActuatorDevice::start Entered,E113,AppleActuatorDevice::start Entered +1261,Jul,5,15:56:38,calvisitor-10-105-162-107,kernel,0,,ARPT: 725147.528572: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1262,Jul,5,16:04:10,calvisitor-10-105-162-107,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1263,Jul,5,16:04:10,calvisitor-10-105-162-107,kernel,0,,hibernate_page_list_setall found pageCount 488653,E233,hibernate_page_list_setall found pageCount <*> +1264,Jul,5,16:04:10,calvisitor-10-105-162-107,kernel,0,,"bitmap_size 0x7f0fc, previewSize 0x4028, writing 488299 pages @ 0x97144",E156,"bitmap_size <*>, previewSize <*>, writing <*> pages @ <*>" +1265,Jul,5,16:04:15,authorMacBook-Pro,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +1266,Jul,5,16:04:43,calvisitor-10-105-162-107,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +1267,Jul,5,16:05:05,calvisitor-10-105-162-107,kernel,0,,ARPT: 725209.960568: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0,E129,ARPT: <*>: AQM agg params <*> maxlen hi/lo <*> <*> minlen <*> adjlen <*> +1268,Jul,5,16:05:05,calvisitor-10-105-162-107,corecaptured,36091,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-05_16,05,05.078442]-io80211Family-008.pcapng, Current File [2017-07-05_16,05,05.078442]-io80211Family-008.pcapng",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1269,Jul,5,16:05:13,calvisitor-10-105-162-107,kernel,0,,ARPT: 725218.810934: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1270,Jul,5,16:05:44,calvisitor-10-105-162-107,kernel,0,,[HID] [MT] AppleMultitouchDevice::willTerminate entered,E36,[HID] [MT] AppleMultitouchDevice::willTerminate entered +1271,Jul,5,16:06:03,authorMacBook-Pro,corecaptured,36091,,"CCFile::captureLog Received Capture notice id: 1499295963.492254, reason = RoamFail:sts:1_rsn:1",E168,"CCFile::captureLog Received Capture notice id: <*>, reason = RoamFail:sts:_rsn:" +1272,Jul,5,16:12:50,authorMacBook-Pro,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +1273,Jul,5,16:12:52,authorMacBook-Pro,cdpd,11807,,Saw change in network reachability (isReachable=0),E301,Saw change in network reachability (isReachable=<*>) +1274,Jul,5,16:12:56,authorMacBook-Pro,kernel,0,,en0: manual intervention required!,E209,en0: manual intervention required! +1275,Jul,5,16:13:15,calvisitor-10-105-162-107,identityservicesd,272,,: NC Disabled: NO,E102,: NC Disabled: NO +1276,Jul,5,16:13:17,calvisitor-10-105-162-107,QQ,10018,,"DB Error: 1 ""no such table: tb_c2cMsg_2658655094""",E197,"DB Error: <*> ""no such table: <*>""" +1277,Jul,5,16:18:06,calvisitor-10-105-162-107,GoogleSoftwareUpdateAgent,36128,,"2017-07-05 16:18:06.450 GoogleSoftwareUpdateAgent[36128/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher beginFetchWithDelegate:] KSOutOfProcessFetcher fetching from URL: ""https://tools.google.com/service/update2?cup2hreq=ac844e04cbb398fcef4cf81b4ffc44a3ebc863e89d19c0b5d39d02d78d26675b&cup2key=7:677488741""",E83,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSOutOfProcessFetcher beginFetchWithDelegate:] KSOutOfProcessFetcher fetching from URL: ""<*>""" +1278,Jul,5,16:19:21,calvisitor-10-105-162-107,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 252, items, fQueryRetries, 0, fLastRetryTimestamp, 520989480.3",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +1279,Jul,5,16:24:29,authorMacBook-Pro,corecaptured,36150,,"CCFile::captureLog Received Capture notice id: 1499297069.333005, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1280,Jul,5,16:24:29,authorMacBook-Pro,kernel,0,,ARPT: 725996.598754: framerdy 0x0 bmccmd 3 framecnt 1024,E133,ARPT: <*>: framerdy <*> bmccmd <*> framecnt <*> +1281,Jul,5,16:24:29,authorMacBook-Pro,kernel,0,,ARPT: 725996.811165: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0,E129,ARPT: <*>: AQM agg params <*> maxlen hi/lo <*> <*> minlen <*> adjlen <*> +1282,Jul,5,16:24:30,authorMacBook-Pro,corecaptured,36150,,"doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-05_16,24,29.663045] - AuthFail:sts:5_rsn:0.xml",E204,doSaveChannels@<*>: Will write to: <*> +1283,Jul,5,16:24:44,airbears2-10-142-108-38,QQ,10018,,button report: 0x8002bdf,E161,button report: <*> +1284,Jul,5,16:26:28,airbears2-10-142-108-38,corecaptured,36150,,"CCLogTap::profileRemoved, Owner: com.apple.iokit.IO80211Family, Name: IO80211AWDLPeerManager",E177,"CCLogTap::profileRemoved, Owner: com.apple.iokit.<*>, Name: <*>" +1285,Jul,5,16:33:10,airbears2-10-142-108-38,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +1286,Jul,5,16:37:58,airbears2-10-142-108-38,syslogd,44,,ASL Sender Statistics,E153,ASL Sender Statistics +1287,Jul,5,16:47:16,airbears2-10-142-108-38,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1288,Jul,5,16:47:16,airbears2-10-142-108-38,Safari,9852,,KeychainGetICDPStatus: status: off,E257,KeychainGetICDPStatus: status: off +1289,Jul,5,16:47:58,airbears2-10-142-108-38,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +1290,Jul,5,16:58:24,airbears2-10-142-108-38,imagent,355,,: Updating enabled: NO (Topics: ( )),E106,: Updating enabled: NO (Topics: ( )) +1291,Jul,5,16:58:25,airbears2-10-142-108-38,WindowServer,184,,"device_generate_lock_screen_screenshot: authw 0x7fa82502bc00(2000)[0, 0, 0, 0] shield 0x7fa823930c00(2001), dev [1440,900]",E200,"device_generate_lock_screen_screenshot: authw <*>(<*>)[<*>, <*>, <*>, <*>] shield <*>(<*>), dev [<*>,<*>]" +1292,Jul,5,16:58:39,airbears2-10-142-108-38,kernel,0,,ARPT: 728046.456828: wl0: setup_keepalive: Local IP: 10.142.108.38,E145,ARPT: <*>: wl0: setup_keepalive: Local IP: <*> +1293,Jul,5,17:01:33,airbears2-10-142-108-38,com.apple.AddressBook.InternetAccountsBridge,36221,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1294,Jul,5,17:02:52,airbears2-10-142-108-38,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1295,Jul,5,17:03:07,airbears2-10-142-108-38,corecaptured,36224,,CCFile::captureLog,E167,CCFile::captureLog +1296,Jul,5,17:03:12,airbears2-10-142-108-38,kernel,0,,"ARPT: 728173.580097: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +1297,Jul,5,17:03:12,airbears2-10-142-108-38,kernel,0,,ARPT: 728173.580149: wl0: MDNS: IPV4 Addr: 10.142.108.38,E141,ARPT: <*>: wl0: MDNS: IPV4 Addr: <*> +1298,Jul,5,17:16:05,authorMacBook-Pro,sandboxd,129,[36227],com.apple.Addres(36227) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1299,Jul,5,17:22:36,authorMacBook-Pro,com.apple.WebKit.WebContent,25654,,[17:22:36.133] <<<< CRABS >>>> crabsFlumeHostAvailable: [0x7f961cf08cf0] Byte flume reports host available again.,E13,[<*>:<*>:<*>] <<<< CRABS >>>> crabsFlumeHostAvailable: [<*>] Byte flume reports host available again. +1300,Jul,5,17:22:56,calvisitor-10-105-163-9,configd,53,,"setting hostname to ""calvisitor-10-105-163-9.calvisitor.1918.berkeley.edu""",E311,"setting hostname to ""<*>""" +1301,Jul,5,17:23:22,calvisitor-10-105-163-9,com.apple.AddressBook.InternetAccountsBridge,36248,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +1302,Jul,5,17:25:05,calvisitor-10-105-163-9,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +1303,Jul,5,17:25:06,authorMacBook-Pro,com.apple.geod,30311,,"PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1009 ""The Internet connection appears to be offline."" UserInfo={NSUnderlyingError=0x7fe13530fc60 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 ""The Internet connection appears to be offline."" UserInfo={NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.}",E285,"PBRequester failed with Error Error Domain=NSURLErrorDomain Code=<*> ""The Internet connection appears to be offline."" UserInfo={NSUnderlyingError=<*> {Error Domain=kCFErrorDomainCFNetwork Code=<*> ""The Internet connection appears to be offline."" UserInfo={NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorCodeKey=<*>, _kCFStreamErrorDomainKey=<*>, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorDomainKey=<*>, _kCFStreamErrorCodeKey=<*>, NSLocalizedDescription=The Internet connection appears to be offline.}" +1304,Jul,5,17:25:08,authorMacBook-Pro,kernel,0,,en0: BSSID changed to 00:a2:ee:1a:71:8c,E207,en0: BSSID changed to <*> +1305,Jul,5,17:25:08,authorMacBook-Pro,kernel,0,,"Unexpected payload found for message 9, dataLen 0",E327,"Unexpected payload found for message <*>, dataLen <*>" +1306,Jul,5,17:27:05,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1307,Jul,5,17:27:05,authorMacBook-Pro,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +1308,Jul,5,17:27:08,authorMacBook-Pro,configd,53,,network changed: DNS* Proxy,E269,network changed: DNS* Proxy +1309,Jul,5,17:27:48,calvisitor-10-105-163-9,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +1310,Jul,5,17:39:14,authorMacBook-Pro,sandboxd,129,[10018],QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport,E51,<*>(<*>) deny mach-lookup com.apple.networking.captivenetworksupport +1311,Jul,5,18:19:59,authorMacBook-Pro,configd,53,,"arp_client_transmit(en0) failed, Network is down (50)",E123,"arp_client_transmit(<*>) failed, Network is down (<*>)" +1312,Jul,5,18:19:59,authorMacBook-Pro,kernel,0,,en0::IO80211Interface::postMessage bssid changed,E56,<*>::<*>::postMessage bssid changed +1313,Jul,5,18:19:59,authorMacBook-Pro,kernel,0,,en0: 802.11d country code set to 'X3'.,E206,en0: <*> country code set to '<*>'. +1314,Jul,5,18:19:59,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Inactive,E165,Captive: CNPluginHandler en0: Inactive +1315,Jul,5,18:20:06,authorMacBook-Pro,networkd,195,,-[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! QQ.10018 tc23407 119.81.102.227:80,E43,-[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! <*> <*> <*>:<*> +1316,Jul,5,18:20:07,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 23411 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +1317,Jul,5,19:00:16,authorMacBook-Pro,Dropbox,24019,,[0705/190016:WARNING:dns_config_service_posix.cc(306)] Failed to read DnsConfig.,E10,[<*>/<*>:WARNING:dns_config_service_posix.cc(<*>)] Failed to read DnsConfig. +1318,Jul,5,19:00:34,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO,E60,<*>::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +1319,Jul,5,19:00:37,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID,E42,-[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID +1320,Jul,5,19:00:42,authorMacBook-Pro,corecaptured,36291,,CCFile::captureLog,E167,CCFile::captureLog +1321,Jul,5,19:00:43,authorMacBook-Pro,corecaptured,36291,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-05_19,00,43.154864]-CCIOReporter-007.xml, Current File [2017-07-05_19,00,43.154864]-CCIOReporter-007.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1322,Jul,5,19:00:43,authorMacBook-Pro,corecaptured,36291,,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions,E176,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +1323,Jul,5,19:00:46,authorMacBook-Pro,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1324,Jul,5,19:12:41,calvisitor-10-105-160-210,kernel,0,,"ARPT: 728563.210777: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 3174,",E134,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': <*>," +1325,Jul,5,19:26:27,calvisitor-10-105-160-210,kernel,0,,"ARPT: 728620.515604: wl0: MDNS: 0 SRV Recs, 0 TXT Recs",E140,"ARPT: <*>: wl0: MDNS: <*> SRV Recs, <*> TXT Recs" +1326,Jul,5,20:03:37,calvisitor-10-105-160-210,kernel,0,,Sandbox: com.apple.Addres(36325) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +1327,Jul,5,20:16:55,calvisitor-10-105-160-210,kernel,0,,could discard act 242131 inact 107014 purgeable 254830 spec 128285 cleaned 0,E194,could discard act <*> inact <*> purgeable <*> spec <*> cleaned <*> +1328,Jul,5,20:16:55,calvisitor-10-105-160-210,kernel,0,,"booter start at 1251 ms smc 0 ms, [18, 0, 0] total 367 ms, dsply 0, 0 ms, tramp 1080 ms",E158,"booter start at <*> ms smc <*> ms, [<*>, <*>, <*>] total <*> ms, dsply <*>, <*> ms, tramp <*> ms" +1329,Jul,5,20:16:56,calvisitor-10-105-160-210,blued,85,,"hostControllerOnline - Number of Paired devices = 1, List of Paired devices = ( ""84-41-67-32-db-e1"" )",E245,"hostControllerOnline - Number of Paired devices = <*>, List of Paired devices = ( ""<*>-<*>-<*>-<*>-<*>-<*>"" )" +1330,Jul,5,20:17:19,calvisitor-10-105-160-210,sandboxd,129,[36332],com.apple.Addres(36332) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1331,Jul,5,20:44:17,calvisitor-10-105-160-210,kernel,0,,"hibernate_newruntime_map time: 0 ms, IOPolledFilePollersOpen(), ml_get_interrupts_enabled 0",E232,"hibernate_newruntime_map time: <*> ms, IOPolledFilePollersOpen(), ml_get_interrupts_enabled <*>" +1332,Jul,5,20:44:24,calvisitor-10-105-160-210,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-06 03:44:24 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +1333,Jul,5,21:08:40,calvisitor-10-105-162-81,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +1334,Jul,5,21:48:33,calvisitor-10-105-162-81,kernel,0,,Wake reason: ARPT (Network),E336,Wake reason: ARPT (Network) +1335,Jul,5,21:48:33,calvisitor-10-105-162-81,blued,85,,[BluetoothHIDDeviceController] EventServiceConnectedCallback,E23,[BluetoothHIDDeviceController] EventServiceConnectedCallback +1336,Jul,5,21:48:33,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID,E41,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +1337,Jul,5,21:48:45,authorMacBook-Pro,sandboxd,129,[10018],QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport,E51,<*>(<*>) deny mach-lookup com.apple.networking.captivenetworksupport +1338,Jul,5,22:29:03,calvisitor-10-105-161-231,kernel,0,,"pages 1401204, wire 544128, act 416065, inact 0, cleaned 0 spec 3, zf 25, throt 0, compr 266324, xpmapped 40000",E282,"pages <*>, wire <*>, act <*>, inact <*>, cleaned <*> spec <*>, zf <*>, throt <*>, compr <*>, xpmapped <*>" +1339,Jul,5,22:29:03,calvisitor-10-105-161-231,kernel,0,,could discard act 74490 inact 9782 purgeable 34145 spec 56242 cleaned 0,E194,could discard act <*> inact <*> purgeable <*> spec <*> cleaned <*> +1340,Jul,5,22:29:06,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID,E41,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +1341,Jul,5,22:29:35,calvisitor-10-105-160-22,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +1342,Jul,5,22:29:37,calvisitor-10-105-160-22,com.apple.AddressBook.InternetAccountsBridge,36395,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1343,Jul,5,23:09:36,calvisitor-10-105-160-22,kernel,0,,"bitmap_size 0x7f0fc, previewSize 0x4028, writing 485676 pages @ 0x97144",E156,"bitmap_size <*>, previewSize <*>, writing <*> pages @ <*>" +1344,Jul,5,23:09:36,calvisitor-10-105-160-22,kernel,0,,**** [BroadcomBluetoothHostController][SetupController] -- Delay HCI Reset by 300ms ****,E4,**** [BroadcomBluetoothHostController][SetupController] -- Delay HCI Reset by <*> **** +1345,Jul,5,23:09:53,calvisitor-10-105-160-22,QQ,10018,,FA||Url||taskID[2019353593] dealloc,E216,FA||Url||taskID[<*>] dealloc +1346,Jul,5,23:50:09,calvisitor-10-105-160-22,kernel,0,,AppleActuatorHIDEventDriver: stop,E118,AppleActuatorHIDEventDriver: stop +1347,Jul,5,23:50:09,calvisitor-10-105-160-22,kernel,0,,**** [IOBluetoothHostControllerUSBTransport][start] -- completed -- result = TRUE -- 0xb000 ****,E8,**** [IOBluetoothHostControllerUSBTransport][start] -- completed -- result = <*> -- <*> **** +1348,Jul,5,23:50:09,authorMacBook-Pro,kernel,0,,AppleActuatorDeviceUserClient::start Entered,E115,AppleActuatorDeviceUserClient::start Entered +1349,Jul,5,23:50:11,authorMacBook-Pro,kernel,0,,ARPT: 729188.852474: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0,E129,ARPT: <*>: AQM agg params <*> maxlen hi/lo <*> <*> minlen <*> adjlen <*> +1350,Jul,5,23:50:51,calvisitor-10-105-162-211,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 299, items, fQueryRetries, 0, fLastRetryTimestamp, 521006902.2",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +1351,Jul,6,00:30:35,calvisitor-10-105-162-211,kernel,0,,"polled file major 1, minor 0, blocksize 4096, pollers 5",E292,"polled file major <*>, minor <*>, blocksize <*>, pollers <*>" +1352,Jul,6,00:30:35,calvisitor-10-105-162-211,kernel,0,,IOHibernatePollerOpen(0),E249,IOHibernatePollerOpen(<*>) +1353,Jul,6,00:30:35,authorMacBook-Pro,UserEventAgent,43,,assertion failed: 15G1510: com.apple.telemetry + 38574 [10D2E324-788C-30CC-A749-55AE67AEC7BC]: 0x7fc235807b90,E154,assertion failed: <*> [<*>-<*>-<*>-<*>-<*>]: <*> +1354,Jul,6,00:30:37,authorMacBook-Pro,ksfetch,36439,,2017-07-06 00:30:37.064 ksfetch[36439/0x7fff79824000] [lvl=2] main() Fetcher is exiting.,E93,<*>-<*>-<*> <*>:<*>:<*> ksfetch[<*>/<*>] [lvl=<*>] main() Fetcher is exiting. +1355,Jul,6,00:30:37,authorMacBook-Pro,GoogleSoftwareUpdateAgent,36436,,"2017-07-06 00:30:37.071 GoogleSoftwareUpdateAgent[36436/0x7000002a0000] [lvl=2] -[KSUpdateEngine updateAllExceptProduct:] KSUpdateEngine updating all installed products, except:'com.google.Keystone'.",E90,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSUpdateEngine updateAllExceptProduct:] KSUpdateEngine updating all installed products, except:'com.google.Keystone'." +1356,Jul,6,00:30:43,authorMacBook-Pro,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1357,Jul,6,01:11:06,authorMacBook-Pro,Dropbox,24019,,[0706/011106:WARNING:dns_config_service_posix.cc(306)] Failed to read DnsConfig.,E10,[<*>/<*>:WARNING:dns_config_service_posix.cc(<*>)] Failed to read DnsConfig. +1358,Jul,6,01:11:06,authorMacBook-Pro,com.apple.WebKit.WebContent,32778,,[01:11:06.715] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +1359,Jul,6,01:11:09,authorMacBook-Pro,kernel,0,,"Google Chrome He[36456] triggered unnest of range 0x7fff93c00000->0x7fff93e00000 of DYLD shared region in VM map 0x77c9114550458e7b. While not abnormal for debuggers, this increases system memory footprint until the target exits.",E222,"Google Chrome He[<*>] triggered unnest of range <*>-<*> of DYLD shared region in VM map <*>. While not abnormal for debuggers, this increases system memory footprint until the target exits." +1360,Jul,6,01:11:18,authorMacBook-Pro,configd,53,,network changed: v4(en0+:10.105.162.138) v6(en0:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB,E267,network changed: <*>(<*>:<*>) <*>(<*>) DNS! Proxy SMB +1361,Jul,6,01:11:38,calvisitor-10-105-162-138,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +1362,Jul,6,01:11:39,calvisitor-10-105-162-138,sandboxd,129,[36461],com.apple.Addres(36461) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1363,Jul,6,01:11:42,calvisitor-10-105-162-138,sandboxd,129,[36461],com.apple.Addres(36461) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1364,Jul,6,01:51:35,authorMacBook-Pro,wirelessproxd,75,,Peripheral manager is not powered on,E287,Peripheral manager is not powered on +1365,Jul,6,01:51:46,authorMacBook-Pro,sandboxd,129,[10018],QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport,E51,<*>(<*>) deny mach-lookup com.apple.networking.captivenetworksupport +1366,Jul,6,02:32:06,calvisitor-10-105-163-28,kernel,0,,WARNING: hibernate_page_list_setall skipped 19622 xpmapped pages,E340,WARNING: hibernate_page_list_setall skipped <*> xpmapped pages +1367,Jul,6,02:32:06,calvisitor-10-105-163-28,kernel,0,,BuildActDeviceEntry enter,E159,BuildActDeviceEntry enter +1368,Jul,6,02:32:06,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 23645 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +1369,Jul,6,02:32:10,authorMacBook-Pro,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-06 09:32:10 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +1370,Jul,6,02:32:43,calvisitor-10-105-160-37,com.apple.AddressBook.InternetAccountsBridge,36491,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1371,Jul,6,02:32:44,calvisitor-10-105-160-37,sandboxd,129,[36491],com.apple.Addres(36491) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1372,Jul,6,03:12:38,calvisitor-10-105-160-37,kernel,0,,"hibernate_alloc_pages act 107794, inact 10088, anon 460, throt 0, spec 58021, wire 572831, wireinit 39927",E227,"hibernate_alloc_pages act <*>, inact <*>, anon <*>, throt <*>, spec <*>, wire <*>, wireinit <*>" +1373,Jul,6,03:12:43,authorMacBook-Pro,BezelServices 255.10,94,,ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2789,E155,ASSERTION FAILED: dvcAddrRef != ((void *)<*>) -[DriverServices getDeviceAddress:] line: <*> +1374,Jul,6,03:12:49,authorMacBook-Pro,networkd,195,,-[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! QQ.10018 tc23677 123.151.137.101:80,E43,-[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! <*> <*> <*>:<*> +1375,Jul,6,03:13:09,calvisitor-10-105-160-37,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO,E60,<*>::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +1376,Jul,6,03:13:15,calvisitor-10-105-160-37,com.apple.AddressBook.InternetAccountsBridge,36502,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1377,Jul,6,03:53:08,calvisitor-10-105-160-37,kernel,0,,hibernate_page_list_setall(preflight 1) start,E235,hibernate_page_list_setall(preflight <*>) start +1378,Jul,6,03:53:08,calvisitor-10-105-160-37,kernel,0,,hibernate_page_list_setall time: 603 ms,E234,hibernate_page_list_setall time: <*> ms +1379,Jul,6,03:53:08,calvisitor-10-105-160-37,kernel,0,,IOPolledFilePollersOpen(0) 6 ms,E251,IOPolledFilePollersOpen(<*>) <*> ms +1380,Jul,6,03:53:08,calvisitor-10-105-160-37,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1381,Jul,6,03:53:18,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 23701 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +1382,Jul,6,04:33:35,calvisitor-10-105-160-37,kernel,0,,"polled file major 1, minor 0, blocksize 4096, pollers 5",E292,"polled file major <*>, minor <*>, blocksize <*>, pollers <*>" +1383,Jul,6,04:33:35,calvisitor-10-105-160-37,kernel,0,,hibernate_teardown completed - discarded 93932,E240,hibernate_teardown completed - discarded <*> +1384,Jul,6,04:33:35,calvisitor-10-105-160-37,kernel,0,,AppleActuatorDeviceUserClient::stop Entered,E116,AppleActuatorDeviceUserClient::stop Entered +1385,Jul,6,05:04:00,calvisitor-10-105-163-168,kernel,0,,"pages 1418325, wire 548641, act 438090, inact 2, cleaned 0 spec 12, zf 30, throt 0, compr 254881, xpmapped 40000",E282,"pages <*>, wire <*>, act <*>, inact <*>, cleaned <*> spec <*>, zf <*>, throt <*>, compr <*>, xpmapped <*>" +1386,Jul,6,05:04:00,calvisitor-10-105-163-168,kernel,0,,"Opened file /var/vm/sleepimage, size 1073741824, extents 3, maxio 2000000 ssd 1",E280,"Opened file <*>, size <*>, extents <*>, maxio <*> ssd <*>" +1387,Jul,6,05:04:00,calvisitor-10-105-163-168,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +1388,Jul,6,05:04:00,calvisitor-10-105-163-168,kernel,0,,[IOBluetoothHostController::setConfigState] calling registerService,E39,[IOBluetoothHostController::setConfigState] calling registerService +1389,Jul,6,08:32:37,authorMacBook-Pro,kernel,0,,AppleActuatorHIDEventDriver: stop,E118,AppleActuatorHIDEventDriver: stop +1390,Jul,6,08:32:37,authorMacBook-Pro,kernel,0,,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01),E33,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (<*>) +1391,Jul,6,08:32:37,authorMacBook-Pro,kernel,0,,[HID] [MT] AppleMultitouchDevice::start entered,E35,[HID] [MT] AppleMultitouchDevice::start entered +1392,Jul,6,08:32:39,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID,E42,-[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID +1393,Jul,6,08:32:40,authorMacBook-Pro,AddressBookSourceSync,36544,,"[CardDAVPlugin-ERROR] -getPrincipalInfo:[_controller supportsRequestCompressionAtURL:https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/] Error Domain=NSURLErrorDomain Code=-1009 ""The Internet connection appears to be offline."" UserInfo={NSUnderlyingError=0x7f8de0c0dc70 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 ""The Internet connection appears to be offline."" UserInfo={NSErrorFailingURLStringKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, NSErrorFailingURLKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, _kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, NSErrorFailingURLKey=https://13957525385%40163.com@p28-contacts.icloud.com/874161398/principal/, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.}",E26,"[CardDAVPlugin-ERROR] -getPrincipalInfo:[_controller supportsRequestCompressionAtURL:<*>] Error Domain=NSURLErrorDomain Code=<*> ""The Internet connection appears to be offline."" UserInfo={NSUnderlyingError=<*> {Error Domain=kCFErrorDomainCFNetwork Code=<*> ""The Internet connection appears to be offline."" UserInfo={NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorCodeKey=<*>, _kCFStreamErrorDomainKey=<*>, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorDomainKey=<*>, _kCFStreamErrorCodeKey=<*>, NSLocalizedDescription=The Internet connection appears to be offline.}" +1394,Jul,6,08:32:45,authorMacBook-Pro,netbiosd,36551,,Unable to start NetBIOS name service:,E326,Unable to start NetBIOS name service: +1395,Jul,6,08:32:47,authorMacBook-Pro,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1396,Jul,6,08:33:10,calvisitor-10-105-163-253,corecaptured,36565,,"doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-06_08,33,08.335034] - AuthFail:sts:5_rsn:0.xml",E204,doSaveChannels@<*>: Will write to: <*> +1397,Jul,6,08:33:25,calvisitor-10-105-163-253,TCIM,30318,,"[Accounts] Failed to update account with identifier 76FE6715-3D27-4F21-AA35-C88C1EA820E8, error: Error Domain=ABAddressBookErrorDomain Code=1002 ""(null)""",E22,"[Accounts] Failed to update account with identifier <*>-<*>-<*>-<*>-<*>, error: Error Domain=ABAddressBookErrorDomain Code=<*> ""(<*>)""" +1398,Jul,6,08:33:53,calvisitor-10-105-163-253,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1399,Jul,6,08:35:08,calvisitor-10-105-163-253,corecaptured,36565,,Got an XPC error: Connection invalid,E223,Got an XPC error: Connection invalid +1400,Jul,6,08:43:14,calvisitor-10-105-163-253,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 302, items, fQueryRetries, 0, fLastRetryTimestamp, 521048292.6",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +1401,Jul,6,08:53:11,calvisitor-10-105-163-253,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 291, items, fQueryRetries, 0, fLastRetryTimestamp, 521048893.3",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +1402,Jul,6,09:08:22,calvisitor-10-105-163-253,loginwindow,94,,-[SFLListManager(ServiceReplyProtocol) notifyChanges:toListWithIdentifier:] Notified of item changes to list with identifier com.apple.LSSharedFileList.RecentApplications,E46,-[SFLListManager(ServiceReplyProtocol) notifyChanges:toListWithIdentifier:] Notified of item changes to list with identifier com.apple.LSSharedFileList.RecentApplications +1403,Jul,6,09:14:27,calvisitor-10-105-163-253,QQ,10018,,FA||Url||taskID[2019353614] dealloc,E216,FA||Url||taskID[<*>] dealloc +1404,Jul,6,09:24:14,calvisitor-10-105-163-253,ksfetch,36728,,2017-07-06 09:24:14.417 ksfetch[36728/0x7fff79824000] [lvl=2] main() ksfetch fetching URL ( { URL: https://tools.google.com/service/update2?cup2hreq=f5e83ec64ff3fc5533a3c206134a6517e274f9e1cb53df857e15049b6e4c9f8e&cup2key=7:1721929288 }) to folder:/tmp/KSOutOfProcessFetcher.aPWod5QMh1/download,E96,<*>-<*>-<*> <*>:<*>:<*> ksfetch[<*>/<*>] [lvl=<*>] main() ksfetch fetching URL ( { URL: <*> }) to folder:<*> +1405,Jul,6,09:24:14,calvisitor-10-105-163-253,GoogleSoftwareUpdateAgent,36726,,2017-07-06 09:24:14.733 GoogleSoftwareUpdateAgent[36726/0x7000002a0000] [lvl=2] -[KSMultiUpdateAction performAction] KSPromptAction had no updates to apply.,E81,<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSMultiUpdateAction performAction] KSPromptAction had no updates to apply. +1406,Jul,6,09:31:18,calvisitor-10-105-163-253,WindowServer,184,,no sleep images for WillPowerOffWithImages,E274,no sleep images for WillPowerOffWithImages +1407,Jul,6,09:32:24,calvisitor-10-105-163-253,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1408,Jul,6,09:32:24,calvisitor-10-105-163-253,QQ,10018,,button report: 0x8002be0,E161,button report: <*> +1409,Jul,6,09:32:37,calvisitor-10-105-163-253,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 12754 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1410,Jul,6,10:12:58,calvisitor-10-105-163-253,ChromeExistion,36773,,ChromeExistion main isUndetectWithCommand = 1,E186,ChromeExistion main isUndetectWithCommand = <*> +1411,Jul,6,10:13:12,calvisitor-10-105-163-253,ChromeExistion,36775,,after trim url = https://www.google.com/_/chrome/newtab?rlz=1C5CHFA_enHK732HK732&espv=2&ie=UTF-8,E108,after trim url = https://www.google.com/_/chrome/newtab?rlz=<*>&espv=<*>&ie=UTF-<*> +1412,Jul,6,10:13:16,calvisitor-10-105-163-253,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1413,Jul,6,10:17:44,calvisitor-10-105-163-253,ChromeExistion,36801,,"ChromeExistion main strSendMsg = {""websitekey"":false,""commandkey"":true,""browserkey"":true}",E187,"ChromeExistion main strSendMsg = {""websitekey"":<*>,""commandkey"":<*>,""browserkey"":<*>}" +1414,Jul,6,10:52:03,calvisitor-10-105-163-253,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +1415,Jul,6,10:52:20,calvisitor-10-105-163-253,ChromeExistion,36846,,ChromeExistion main isUndetectWithCommand = 1,E186,ChromeExistion main isUndetectWithCommand = <*> +1416,Jul,6,10:52:50,calvisitor-10-105-163-253,ChromeExistion,36852,,url host = www.baidu.com,E330,url host = <*> +1417,Jul,6,10:53:30,calvisitor-10-105-163-253,ChromeExistion,36855,,the url = http://baike.baidu.com/item/%E8%93%9D%E9%87%87%E5%92%8C/462624?fr=aladdin,E322,the url = <*> +1418,Jul,6,11:07:29,calvisitor-10-105-163-253,sharingd,30299,,11:07:29.673 : Purged contact hashes,E69,<*>:<*>:<*> : Purged contact hashes +1419,Jul,6,11:08:42,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +1420,Jul,6,11:14:33,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID,E41,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +1421,Jul,6,11:21:02,calvisitor-10-105-163-253,kernel,0,,ARPT: 739017.747240: ARPT: Wake Reason: Wake on Scan offload,E131,ARPT: <*>: ARPT: Wake Reason: Wake on Scan offload +1422,Jul,6,11:21:02,calvisitor-10-105-163-253,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +1423,Jul,6,11:21:02,calvisitor-10-105-163-253,kernel,0,,AirPort: Link Up on awdl0,E111,AirPort: Link Up on awdl0 +1424,Jul,6,11:21:06,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID,E41,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +1425,Jul,6,11:21:06,authorMacBook-Pro,configd,53,,network changed: DNS* Proxy,E269,network changed: DNS* Proxy +1426,Jul,6,11:59:42,calvisitor-10-105-162-178,kernel,0,,"en0: channel changed to 36,+1",E208,en0: channel changed to <*> +1427,Jul,6,12:00:10,calvisitor-10-105-162-178,sandboxd,129,[36919],com.apple.Addres(36919) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1428,Jul,6,12:00:53,authorMacBook-Pro,CalendarAgent,279,,[com.apple.calendar.store.log.caldav.queue] [Adding [] to failed operations.],E31,[com.apple.calendar.store.log.caldav.queue] [Adding [; Sequence: <*>] to failed operations.] +1429,Jul,6,12:00:53,authorMacBook-Pro,corecaptured,36918,,Received Capture Event,E294,Received Capture Event +1430,Jul,6,12:00:58,authorMacBook-Pro,corecaptured,36918,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-06_12,00,58.629029]-AirPortBrcm4360_Logs-007.txt, Current File [2017-07-06_12,00,58.629029]-AirPortBrcm4360_Logs-007.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1431,Jul,6,12:01:10,authorMacBook-Pro,kernel,0,,ARPT: 739157.867474: wlc_dump_aggfifo:,E151,ARPT: <*>: wlc_dump_aggfifo: +1432,Jul,6,12:01:16,authorMacBook-Pro,corecaptured,36918,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1433,Jul,6,12:01:16,authorMacBook-Pro,kernel,0,,ARPT: 739163.832381: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0,E130,ARPT: <*>: AQM agg results <*> len hi/lo: <*> <*> BAbitmap(<*>-<*>) <*> +1434,Jul,6,12:01:17,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +1435,Jul,6,12:02:25,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +1436,Jul,6,12:02:26,authorMacBook-Pro,configd,53,,network changed: v6(en0-:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS- Proxy-,E265,network changed: <*>(<*>) DNS- Proxy- +1437,Jul,6,12:02:58,authorMacBook-Pro,corecaptured,36918,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1438,Jul,6,12:03:00,authorMacBook-Pro,corecaptured,36918,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-06_12,03,00.133649]-CCIOReporter-028.xml, Current File [2017-07-06_12,03,00.133649]-CCIOReporter-028.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1439,Jul,6,12:03:00,authorMacBook-Pro,kernel,0,,ARPT: 739241.687186: AQM agg results 0x8001 len hi/lo: 0x0 0x26 BAbitmap(0-3) 0 0 0 0,E130,ARPT: <*>: AQM agg results <*> len hi/lo: <*> <*> BAbitmap(<*>-<*>) <*> +1440,Jul,6,12:03:00,authorMacBook-Pro,corecaptured,36918,,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7,E175,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams <*> +1441,Jul,6,12:03:02,authorMacBook-Pro,corecaptured,36918,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-06_12,03,02.449748]-AirPortBrcm4360_Logs-037.txt, Current File [2017-07-06_12,03,02.449748]-AirPortBrcm4360_Logs-037.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1442,Jul,6,12:03:05,authorMacBook-Pro,corecaptured,36918,,"CCFile::captureLog Received Capture notice id: 1499367785.097211, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1443,Jul,6,12:03:07,authorMacBook-Pro,com.apple.AddressBook.InternetAccountsBridge,36937,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1444,Jul,6,12:03:12,authorMacBook-Pro,networkd,195,,__42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc24039 112.90.78.169:8080,E49,<*>-[NETClientConnection <*>]_block_invoke CI46 - Hit by torpedo! <*> <*> <*>:<*> +1445,Jul,6,12:03:12,authorMacBook-Pro,Dropbox,24019,,[0706/120312:WARNING:dns_config_service_posix.cc(306)] Failed to read DnsConfig.,E10,[<*>/<*>:WARNING:dns_config_service_posix.cc(<*>)] Failed to read DnsConfig. +1446,Jul,6,12:03:12,authorMacBook-Pro,kernel,0,,ARPT: 739253.582611: wlc_dump_aggfifo:,E151,ARPT: <*>: wlc_dump_aggfifo: +1447,Jul,6,12:03:12,authorMacBook-Pro,corecaptured,36918,,"CCFile::captureLog Received Capture notice id: 1499367792.155080, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1448,Jul,6,12:03:12,authorMacBook-Pro,corecaptured,36918,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-06_12,03,12.289973]-CCIOReporter-041.xml, Current File [2017-07-06_12,03,12.289973]-CCIOReporter-041.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1449,Jul,6,12:03:37,authorMacBook-Pro,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - retries = 5,E55,<*>::<*> - retries = <*> +1450,Jul,6,12:04:03,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +1451,Jul,6,12:04:16,authorMacBook-Pro,kernel,0,,"ARPT: 739295.354731: wl0: Roamed or switched channel, reason #4, bssid f8:4f:57:3b:ea:b2, last RSSI -77",E143,"ARPT: <*>: wl0: Roamed or switched channel, reason #<*>, bssid <*>:<*>:<*>:<*>, last RSSI <*>" +1452,Jul,6,12:04:16,authorMacBook-Pro,kernel,0,,en0: BSSID changed to f8:4f:57:3b:ea:b2,E207,en0: BSSID changed to <*> +1453,Jul,6,12:05:06,authorMacBook-Pro,kernel,0,,in6_unlink_ifa: IPv6 address 0x77c911454f1523ab has no prefix,E75,<*>: IPv6 address <*> has no prefix +1454,Jul,6,12:05:41,calvisitor-10-105-162-178,Safari,9852,,tcp_connection_tls_session_error_callback_imp 2375 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22,E319,tcp_connection_tls_session_error_callback_imp <*> __tcp_connection_tls_session_callback_write_block_invoke.<*> error <*> +1455,Jul,6,12:05:46,calvisitor-10-105-162-178,kernel,0,,"ARPT: 739357.156234: wl0: setup_keepalive: Seq: 1852166454, Ack: 1229910694, Win size: 4096",E148,"ARPT: <*>: wl0: setup_keepalive: Seq: <*>, Ack: <*>, Win size: <*>" +1456,Jul,6,12:17:22,calvisitor-10-105-162-178,kernel,0,,ARPT: 739359.663674: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.,E139,ARPT: <*>: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +1457,Jul,6,12:17:22,calvisitor-10-105-162-178,kernel,0,,en0: BSSID changed to 88:75:56:a0:95:ed,E207,en0: BSSID changed to <*> +1458,Jul,6,12:30:59,calvisitor-10-105-162-178,kernel,0,,ARPT: 739420.595498: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +1459,Jul,6,12:31:58,calvisitor-10-105-162-178,kernel,0,,ARPT: 739481.576701: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1460,Jul,6,12:58:15,calvisitor-10-105-162-178,kernel,0,,ARPT: 739549.504820: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +1461,Jul,6,12:59:11,calvisitor-10-105-162-178,kernel,0,,ARPT: 739605.015490: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:cc53:3e31:ccd8:11d4,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1462,Jul,6,13:11:53,calvisitor-10-105-162-178,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +1463,Jul,6,13:12:52,calvisitor-10-105-162-178,kernel,0,,ARPT: 739668.778627: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1464,Jul,6,13:39:08,calvisitor-10-105-162-178,Mail,11203,,tcp_connection_destination_perform_socket_connect 45238 connectx to 123.125.50.30:993@0 failed: [50] Network is down,E316,tcp_connection_destination_perform_socket_connect <*> connectx to <*>:<*>@<*> failed: [<*>] Network is down +1465,Jul,6,14:07:50,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 24150 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +1466,Jul,6,14:08:48,authorMacBook-Pro,kernel,0,,hibernate_rebuild started,E237,hibernate_rebuild started +1467,Jul,6,14:08:49,authorMacBook-Pro,blued,85,,INIT -- Host controller is published,E246,INIT -- Host controller is published +1468,Jul,6,14:09:31,authorMacBook-Pro,corecaptured,37027,,Received Capture Event,E294,Received Capture Event +1469,Jul,6,14:09:32,authorMacBook-Pro,corecaptured,37027,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1470,Jul,6,14:15:54,authorMacBook-Pro,CalendarAgent,279,,[com.apple.calendar.store.log.caldav.queue] [Adding [] to failed operations.],E31,[com.apple.calendar.store.log.caldav.queue] [Adding [; Sequence: <*>] to failed operations.] +1471,Jul,6,14:15:59,authorMacBook-Pro,corecaptured,37027,,Received Capture Event,E294,Received Capture Event +1472,Jul,6,14:15:59,authorMacBook-Pro,corecaptured,37027,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-06_14,15,59.644892]-CCIOReporter-007.xml, Current File [2017-07-06_14,15,59.644892]-CCIOReporter-007.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1473,Jul,6,14:15:59,authorMacBook-Pro,corecaptured,37027,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-06_14,15,59.726497]-io80211Family-008.pcapng, Current File [2017-07-06_14,15,59.726497]-io80211Family-008.pcapng",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1474,Jul,6,14:16:06,calvisitor-10-105-162-178,sharingd,30299,,14:16:06.179 : Scanning mode Contacts Only,E70,<*>:<*>:<*> : Scanning mode Contacts Only +1475,Jul,6,14:16:10,calvisitor-10-105-162-178,kernel,0,,Sandbox: com.apple.Addres(37034) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +1476,Jul,6,14:17:00,calvisitor-10-105-162-178,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.user.501,"Service ""com.apple.xpc.launchd.unmanaged.loginwindow.94"" tried to hijack endpoint ""com.apple.tsm.uiserver"" from owner: com.apple.SystemUIServer.agent",E306,"Service ""com.apple.xpc.launchd.unmanaged.loginwindow.<*>"" tried to hijack endpoint ""com.apple.tsm.uiserver"" from owner: com.apple.SystemUIServer.agent" +1477,Jul,6,14:17:14,calvisitor-10-105-162-178,kernel,0,,"ARPT: 740034.911245: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +1478,Jul,6,14:29:38,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1479,Jul,6,14:43:10,calvisitor-10-105-162-178,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +1480,Jul,6,14:43:22,calvisitor-10-105-162-178,com.apple.AddressBook.InternetAccountsBridge,37051,,dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted,E202,dnssd_clientstub ConnectToServer: connect() failed path:<*> Socket:<*> Err:<*> Errno:<*> Operation not permitted +1481,Jul,6,14:44:08,calvisitor-10-105-162-178,kernel,0,,"PM response took 1999 ms (54, powerd)",E288,"PM response took <*> ms (<*>, powerd)" +1482,Jul,6,14:56:48,calvisitor-10-105-162-178,kernel,0,,"en0: channel changed to 36,+1",E208,en0: channel changed to <*> +1483,Jul,6,14:56:48,calvisitor-10-105-162-178,kernel,0,,"RTC: Maintenance 2017/7/6 21:56:47, sleep 2017/7/6 21:44:10",E295,"RTC: Maintenance <*>/<*>/<*> <*>:<*>:<*>, sleep <*>/<*>/<*> <*>:<*>:<*>" +1484,Jul,6,14:56:48,calvisitor-10-105-162-178,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +1485,Jul,6,14:57:16,calvisitor-10-105-162-178,ksfetch,37061,,2017-07-06 14:57:16.261 ksfetch[37061/0x7fff79824000] [lvl=2] KSHelperReceiveAllData() KSHelperTool read 1999 bytes from stdin.,E92,<*>-<*>-<*> <*>:<*>:<*> ksfetch[<*>/<*>] [lvl=<*>] KSHelperReceiveAllData() KSHelperTool read <*> bytes from stdin. +1486,Jul,6,14:57:16,calvisitor-10-105-162-178,GoogleSoftwareUpdateAgent,37059,,"2017-07-06 14:57:16.661 GoogleSoftwareUpdateAgent[37059/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher(PrivateMethods) helperDidTerminate:] KSOutOfProcessFetcher fetch ended for URL: ""https://tools.google.com/service/update2?cup2hreq=37fbcb7ab6829be04567976e3212d7a67627aef11546f8b7013d4cffaf51f739&cup2key=7:4200177539""",E85,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSOutOfProcessFetcher(PrivateMethods) helperDidTerminate:] KSOutOfProcessFetcher fetch ended for URL: ""<*>""" +1487,Jul,6,14:57:16,calvisitor-10-105-162-178,GoogleSoftwareUpdateAgent,37059,,2017-07-06 14:57:16.667 GoogleSoftwareUpdateAgent[37059/0x7000002a0000] [lvl=2] -[KSAgentApp(KeystoneDelegate) updateEngineFinishedWithErrors:] Keystone finished: errors=0,E78,<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSAgentApp(KeystoneDelegate) updateEngineFinishedWithErrors:] Keystone finished: errors=<*> +1488,Jul,6,15:10:30,calvisitor-10-105-162-178,kernel,0,,"ARPT: 740174.102665: wl0: MDNS: 0 SRV Recs, 0 TXT Recs",E140,"ARPT: <*>: wl0: MDNS: <*> SRV Recs, <*> TXT Recs" +1489,Jul,6,15:24:08,calvisitor-10-105-162-178,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1490,Jul,6,15:30:53,calvisitor-10-105-162-178,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us,E57,<*>::prePCIWake - power up complete - took <*> us +1491,Jul,6,15:30:54,calvisitor-10-105-162-178,kernel,0,,ARPT: 740226.968934: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +1492,Jul,6,15:45:08,calvisitor-10-105-162-178,kernel,0,,ARPT: 740345.497593: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +1493,Jul,6,15:45:08,calvisitor-10-105-162-178,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1494,Jul,6,15:45:08,calvisitor-10-105-162-178,kernel,0,,in6_unlink_ifa: IPv6 address 0x77c911454f152b8b has no prefix,E75,<*>: IPv6 address <*> has no prefix +1495,Jul,6,15:58:40,calvisitor-10-105-162-178,kernel,0,,ARPT: 740352.115529: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +1496,Jul,6,16:12:15,calvisitor-10-105-162-178,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us,E57,<*>::prePCIWake - power up complete - took <*> us +1497,Jul,6,16:12:15,calvisitor-10-105-162-178,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +1498,Jul,6,16:12:15,authorMacBook-Pro,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-06 23:12:15 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +1499,Jul,6,16:12:20,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +1500,Jul,6,16:15:50,calvisitor-10-105-162-178,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1501,Jul,6,16:16:11,calvisitor-10-105-162-178,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1502,Jul,6,16:17:36,authorMacBook-Pro,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +1503,Jul,6,16:17:39,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +1504,Jul,6,16:18:17,calvisitor-10-105-162-178,kernel,0,,ARPT: 740501.982555: wl0: MDNS: IPV6 Addr: fe80:0:0:0:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1505,Jul,6,16:29:37,calvisitor-10-105-162-178,kernel,0,,ARPT: 740504.547655: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +1506,Jul,6,16:29:37,calvisitor-10-105-162-178,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +1507,Jul,6,16:29:37,authorMacBook-Pro,networkd,195,,__42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc24283 119.81.102.227:80,E49,<*>-[NETClientConnection <*>]_block_invoke CI46 - Hit by torpedo! <*> <*> <*>:<*> +1508,Jul,6,16:29:42,authorMacBook-Pro,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +1509,Jul,6,16:29:42,authorMacBook-Pro,corecaptured,37102,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1510,Jul,6,16:29:43,authorMacBook-Pro,corecaptured,37102,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1511,Jul,6,16:29:48,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +1512,Jul,6,16:29:58,calvisitor-10-105-162-178,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1513,Jul,6,16:43:27,calvisitor-10-105-162-178,kernel,0,,in6_unlink_ifa: IPv6 address 0x77c911453a6db3ab has no prefix,E75,<*>: IPv6 address <*> has no prefix +1514,Jul,6,16:43:37,calvisitor-10-105-162-178,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1515,Jul,6,17:23:42,calvisitor-10-105-162-178,kernel,0,,"ARPT: 740631.402908: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 5802,",E137,"ARPT: <*>: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': <*>," +1516,Jul,6,17:23:43,calvisitor-10-105-162-178,sharingd,30299,,17:23:43.193 : Scanning mode Contacts Only,E70,<*>:<*>:<*> : Scanning mode Contacts Only +1517,Jul,6,17:23:46,calvisitor-10-105-162-178,QQ,10018,,"DB Error: 1 ""no such table: tb_c2cMsg_2658655094""",E197,"DB Error: <*> ""no such table: <*>""" +1518,Jul,6,17:28:48,calvisitor-10-105-162-178,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.37146,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +1519,Jul,6,17:34:52,calvisitor-10-105-162-178,QQ,10018,,FA||Url||taskID[2019353659] dealloc,E216,FA||Url||taskID[<*>] dealloc +1520,Jul,6,17:48:02,calvisitor-10-105-162-178,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 302, items, fQueryRetries, 0, fLastRetryTimestamp, 521080983.6",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +1521,Jul,6,17:57:59,calvisitor-10-105-162-178,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 300, items, fQueryRetries, 0, fLastRetryTimestamp, 521081581.2",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +1522,Jul,6,18:05:46,calvisitor-10-105-162-178,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1523,Jul,6,18:07:04,calvisitor-10-105-162-178,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +1524,Jul,6,18:09:02,calvisitor-10-105-162-178,kernel,0,,Sandbox: com.apple.WebKit(9854) deny(1) file-read-data /private/etc/hosts,E297,Sandbox: <*>(<*>) deny(<*>) file-read-data <*> +1525,Jul,6,18:09:43,calvisitor-10-105-162-178,QQ,10018,,FA||Url||taskID[2019353666] dealloc,E216,FA||Url||taskID[<*>] dealloc +1526,Jul,6,18:22:57,calvisitor-10-105-162-178,AirPlayUIAgent,415,,2017-07-06 06:22:57.163367 PM [AirPlayUIAgent] BecomingInactive: NSWorkspaceWillSleepNotification,E97,<*>-<*>-<*> <*>:<*>:<*> PM [AirPlayUIAgent] BecomingInactive: NSWorkspaceWillSleepNotification +1527,Jul,6,18:22:57,calvisitor-10-105-162-178,QQ,10018,,2017/07/06 18:22:57.953 | I | VoipWrapper | DAVEngineImpl.cpp:1400:Close | close video chat. llFriendUIN = 1742124257.,E53,<*>/<*>/<*> <*>:<*>:<*> | I | VoipWrapper | DAVEngineImpl.cpp:<*>:Close | close video chat. llFriendUIN = <*>. +1528,Jul,6,18:23:11,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 7518 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1529,Jul,6,18:23:43,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 258 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1530,Jul,6,18:36:51,calvisitor-10-105-162-178,kernel,0,,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01),E33,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (<*>) +1531,Jul,6,18:37:07,calvisitor-10-105-162-178,kernel,0,,Sandbox: com.apple.Addres(37204) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +1532,Jul,6,18:37:20,calvisitor-10-105-162-178,kernel,0,,full wake request (reason 2) 30914 ms,E221,full wake request (reason <*>) <*> ms +1533,Jul,6,18:37:30,calvisitor-10-105-162-178,sharingd,30299,,18:37:30.916 : BTLE scanner Powered Off,E63,<*>:<*>:<*> : BTLE scanner Powered Off +1534,Jul,6,18:37:37,calvisitor-10-105-162-178,QQ,10018,,############################## _getSysMsgList,E1,############################## _getSysMsgList +1535,Jul,6,18:50:29,calvisitor-10-105-162-178,kernel,0,,"ARPT: 744319.484045: wl0: wl_update_tcpkeep_seq: Original Seq: 1092633597, Ack: 2572586285, Win size: 4096",E149,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Original Seq: <*>, Ack: <*>, Win size: <*>" +1536,Jul,6,18:50:29,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 65594 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1537,Jul,6,18:50:29,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5880 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1538,Jul,6,18:50:29,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 16680 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1539,Jul,6,18:51:42,calvisitor-10-105-162-178,kernel,0,,kern_open_file_for_direct_io(0),E255,kern_open_file_for_direct_io(<*>) +1540,Jul,6,19:04:07,calvisitor-10-105-162-178,QQ,10018,,############################## _getSysMsgList,E1,############################## _getSysMsgList +1541,Jul,6,19:04:07,calvisitor-10-105-162-178,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1542,Jul,6,19:04:46,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 15823 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1543,Jul,6,19:17:46,calvisitor-10-105-162-178,kernel,0,,Wake reason: RTC (Alarm),E338,Wake reason: RTC (Alarm) +1544,Jul,6,19:17:46,calvisitor-10-105-162-178,sharingd,30299,,19:17:46.405 : BTLE scanner Powered Off,E63,<*>:<*>:<*> : BTLE scanner Powered Off +1545,Jul,6,19:17:46,calvisitor-10-105-162-178,kernel,0,,ARPT: 744472.877165: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +1546,Jul,6,19:18:27,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 15002 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1547,Jul,6,19:19:43,calvisitor-10-105-162-178,kernel,0,,ARPT: 744589.508896: wl0: setup_keepalive: Remote IP: 17.249.28.35,E147,ARPT: <*>: wl0: setup_keepalive: Remote IP: <*> +1548,Jul,6,19:31:29,calvisitor-10-105-162-178,kernel,0,,"ARPT: 744593.160590: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 1529267953, Ack 4054195714, Win size 380",E150,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq <*>, Ack <*>, Win size <*>" +1549,Jul,6,19:31:29,calvisitor-10-105-162-178,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1550,Jul,6,19:31:29,calvisitor-10-105-162-178,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1551,Jul,6,19:31:29,calvisitor-10-105-162-178,kernel,0,,ARPT: 744595.284508: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +1552,Jul,6,19:31:39,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 524667 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1553,Jul,6,19:31:41,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 63122 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1554,Jul,6,19:31:49,calvisitor-10-105-162-178,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1555,Jul,6,19:31:49,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 524657 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1556,Jul,6,19:32:24,calvisitor-10-105-162-178,kernel,0,,ARPT: 744650.016431: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:f882:21d2:d1af:f093,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1557,Jul,6,19:45:06,calvisitor-10-105-162-178,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1558,Jul,6,19:45:16,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2593 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1559,Jul,6,19:45:26,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 523840 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1560,Jul,6,19:45:43,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 62280 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1561,Jul,6,19:58:57,calvisitor-10-105-162-178,kernel,0,,"PM response took 129 ms (10018, QQ)",E289,"PM response took <*> ms (<*>, QQ)" +1562,Jul,6,20:03:04,calvisitor-10-105-162-178,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +1563,Jul,6,20:03:05,calvisitor-10-105-162-178,sharingd,30299,,20:03:05.179 : BTLE scanner Powered Off,E63,<*>:<*>:<*> : BTLE scanner Powered Off +1564,Jul,6,20:03:05,calvisitor-10-105-162-178,QQ,10018,,button report: 0x80039B7,E161,button report: <*> +1565,Jul,6,20:03:23,calvisitor-10-105-162-178,com.apple.AddressBook.InternetAccountsBridge,37261,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1566,Jul,6,20:04:04,calvisitor-10-105-162-178,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +1567,Jul,6,20:05:04,calvisitor-10-105-162-178,WeChat,24144,,jemmytest,E253,jemmytest +1568,Jul,6,20:05:07,calvisitor-10-105-162-178,Safari,9852,,KeychainGetICDPStatus: status: off,E257,KeychainGetICDPStatus: status: off +1569,Jul,6,20:05:36,calvisitor-10-105-162-178,CalendarAgent,279,,[com.apple.calendar.store.log.caldav.queue] [Adding [] to failed operations.],E31,[com.apple.calendar.store.log.caldav.queue] [Adding [; Sequence: <*>] to failed operations.] +1570,Jul,6,20:14:33,calvisitor-10-105-162-178,QQ,10018,,FA||Url||taskID[2019353677] dealloc,E216,FA||Url||taskID[<*>] dealloc +1571,Jul,6,20:30:35,calvisitor-10-105-162-178,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1572,Jul,6,20:35:33,calvisitor-10-105-162-178,WeChat,24144,,jemmytest,E253,jemmytest +1573,Jul,6,20:38:15,calvisitor-10-105-162-178,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +1574,Jul,6,20:46:03,calvisitor-10-105-162-178,GoogleSoftwareUpdateAgent,37316,,"2017-07-06 20:46:03.869 GoogleSoftwareUpdateAgent[37316/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher beginFetchWithDelegate:] KSOutOfProcessFetcher start fetch from URL: ""https://tools.google.com/service/update2?cup2hreq=5e15fbe422c816bef7c133cfffdb516e16923579b9be2dfae4d7d8d211b25017&cup2key=7:780377214""",E84,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSOutOfProcessFetcher beginFetchWithDelegate:] KSOutOfProcessFetcher start fetch from URL: ""<*>""" +1575,Jul,6,20:53:41,calvisitor-10-105-162-178,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 291, items, fQueryRetries, 0, fLastRetryTimestamp, 521092126.3",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +1576,Jul,6,21:00:02,calvisitor-10-105-162-178,locationd,82,,"NETWORK: no response from server, reachability, 2, queryRetries, 2",E270,"NETWORK: no response from server, reachability, <*>, queryRetries, <*>" +1577,Jul,6,21:03:09,calvisitor-10-105-162-178,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1578,Jul,6,21:08:02,calvisitor-10-105-162-178,Preview,11512,,"Page bounds {{0, 0}, {400, 400}}",E281,"Page bounds {{<*>, <*>}, {<*>, <*>}}" +1579,Jul,6,21:22:31,calvisitor-10-105-162-178,WeChat,24144,,Failed to connect (titleField) outlet from (MMSessionPickerChoosenRowView) to (NSTextField): missing setter or instance variable,E217,Failed to connect (titleField) outlet from (MMSessionPickerChoosenRowView) to (NSTextField): missing setter or instance variable +1580,Jul,6,22:05:30,calvisitor-10-105-162-178,CalendarAgent,279,,[com.apple.calendar.store.log.caldav.queue] [Account xpc_ben@163.com@https://caldav.163.com/caldav/principals/users/xpc_ben%40163.com/ timed out when executing operation: ],E29,[com.apple.calendar.store.log.caldav.queue] [Account <*> timed out when executing operation: ; Sequence: <*>] +1581,Jul,6,22:26:19,calvisitor-10-105-162-178,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1582,Jul,6,22:33:18,calvisitor-10-105-162-178,CalendarAgent,279,,"[com.apple.calendar.store.log.caldav.queue] [Account refresh failed with error: Error Domain=CoreDAVHTTPStatusErrorDomain Code=502 ""(null)"" UserInfo={AccountName=163, CalDAVErrFromRefresh=YES, CoreDAVHTTPHeaders={type = immutable dict, count = 5, entries => 0 : Connection = {contents = ""keep-alive""} 3 : Content-Type = text/html 4 : Content-Length = 166 5 : Server = nginx 6 : Date = {contents = ""Fri, 07 Jul 2017 05:32:43 GMT""} } }]",E30,"[com.apple.calendar.store.log.caldav.queue] [Account refresh failed with error: Error Domain=CoreDAVHTTPStatusErrorDomain Code=<*> ""(<*>)"" UserInfo={AccountName=<*>, CalDAVErrFromRefresh=YES, CoreDAVHTTPHeaders= [<*>]>{type = immutable dict, count = <*>, entries => <*> : Connection = [<*>]>{contents = ""keep-alive""} <*> : Content-Type = text/html <*> : Content-Length = <*> <*> : Server = nginx <*> : Date = [<*>]>{contents = ""<*> <*> <*>:<*>:<*> GMT""} } }]" +1583,Jul,6,22:37:40,calvisitor-10-105-162-178,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1584,Jul,6,23:00:45,calvisitor-10-105-162-178,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1585,Jul,6,23:28:39,calvisitor-10-105-162-178,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +1586,Jul,6,23:33:20,calvisitor-10-105-162-178,Preview,11512,,"Page bounds {{0, 0}, {400, 400}}",E281,"Page bounds {{<*>, <*>}, {<*>, <*>}}" +1587,Jul,6,23:33:55,calvisitor-10-105-162-178,SpotlightNetHelper,352,,"CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data",E183,"CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data" +1588,Jul,7,00:01:59,calvisitor-10-105-162-178,kernel,0,,Sandbox: SpotlightNetHelp(352) deny(1) ipc-posix-shm-read-data CFPBS:186A7:,E298,Sandbox: <*>(<*>) deny(<*>) ipc-posix-shm-read-data CFPBS:<*>: +1589,Jul,7,00:02:27,calvisitor-10-105-162-178,Safari,9852,,tcp_connection_tls_session_error_callback_imp 2438 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22,E319,tcp_connection_tls_session_error_callback_imp <*> __tcp_connection_tls_session_callback_write_block_invoke.<*> error <*> +1590,Jul,7,00:09:34,calvisitor-10-105-162-178,QQ,10018,,FA||Url||taskID[2019353724] dealloc,E216,FA||Url||taskID[<*>] dealloc +1591,Jul,7,00:10:01,calvisitor-10-105-162-178,taskgated,273,,"no application identifier provided, can't use provisioning profiles [pid=37563]",E273,"no application identifier provided, can't use provisioning profiles [pid=<*>]" +1592,Jul,7,00:12:09,calvisitor-10-105-162-178,SpotlightNetHelper,352,,tcp_connection_destination_handle_tls_close_notify 111 closing socket due to TLS CLOSE_NOTIFY alert,E315,tcp_connection_destination_handle_tls_close_notify <*> closing socket due to TLS CLOSE_NOTIFY alert +1593,Jul,7,00:24:41,calvisitor-10-105-162-178,com.apple.WebKit.Networking,9854,,CFNetwork SSLHandshake failed (-9802),E182,CFNetwork SSLHandshake failed (<*>) +1594,Jul,7,00:26:36,calvisitor-10-105-162-178,Preview,11512,,"Unable to simultaneously satisfy constraints: ( """", """", """", """", """", ""=NSSpace(8))-[NSTextField:0x7f8f02f1da90]>"" ) Will attempt to recover by breaking constraint Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger.",E325,"Unable to simultaneously satisfy constraints: ( "" H:[NSImageView:<*>(<*>)]>"", "" H:|-(<*>)-[NSImageView:<*>] (Names: PageItemCell:<*>, '|':PageItemCell:<*> )>"", "" 'NSView-Encapsulated-Layout-Width' H:[PageItemCell(<*>)] (Names: PageItemCell:<*> )>"", "" H:[NSImageView:<*>]-(<*>)-[NSTextField:<*>]>"", "" H:[NSTextField:<*>]-(<*>)-| (Names: PageItemCell:<*>, '|':PageItemCell:<*> )>"", "" H:[NSTextField:<*>]-(>=NSSpace(<*>))-[NSTextField:<*>]>"" ) Will attempt to recover by breaking constraint H:[NSImageView:<*>(<*>)]> Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger." +1595,Jul,7,00:26:41,calvisitor-10-105-162-178,Preview,11512,,"Unable to simultaneously satisfy constraints: ( """", """", """", """", """", ""=NSSpace(8))-[NSTextField:0x7f8efb89e7a0]>"" ) Will attempt to recover by breaking constraint Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger.",E325,"Unable to simultaneously satisfy constraints: ( "" H:[NSImageView:<*>(<*>)]>"", "" H:|-(<*>)-[NSImageView:<*>] (Names: PageItemCell:<*>, '|':PageItemCell:<*> )>"", "" 'NSView-Encapsulated-Layout-Width' H:[PageItemCell(<*>)] (Names: PageItemCell:<*> )>"", "" H:[NSImageView:<*>]-(<*>)-[NSTextField:<*>]>"", "" H:[NSTextField:<*>]-(<*>)-| (Names: PageItemCell:<*>, '|':PageItemCell:<*> )>"", "" H:[NSTextField:<*>]-(>=NSSpace(<*>))-[NSTextField:<*>]>"" ) Will attempt to recover by breaking constraint H:[NSImageView:<*>(<*>)]> Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger." +1596,Jul,7,00:30:06,calvisitor-10-105-162-178,syslogd,44,,"Configuration Notice: ASL Module ""com.apple.authkit.osx.asl"" sharing output destination ""/var/log/Accounts"" with ASL Module ""com.apple.Accounts"". Output parameters from ASL Module ""com.apple.Accounts"" override any specified in ASL Module ""com.apple.authkit.osx.asl"".",E191,"Configuration Notice: ASL Module ""com.apple.authkit.osx.asl"" sharing output destination ""<*>"" with ASL Module ""com.apple.Accounts"". Output parameters from ASL Module ""com.apple.Accounts"" override any specified in ASL Module ""com.apple.authkit.osx.asl""." +1597,Jul,7,00:43:06,calvisitor-10-105-162-178,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1598,Jul,7,00:43:09,calvisitor-10-105-162-178,imagent,355,,: NC Disabled: NO,E102,: NC Disabled: NO +1599,Jul,7,00:43:09,calvisitor-10-105-162-178,identityservicesd,272,,: NC Disabled: NO,E102,: NC Disabled: NO +1600,Jul,7,00:52:55,authorMacBook-Pro,corecaptured,37602,,"CCFile::copyFile fileName is [2017-07-07_00,52,55.450817]-CCIOReporter-001.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-07_00,52,55.450817]-CCIOReporter-001.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-07_00,52,54.449889]=AuthFail:sts:5_rsn:0/OneStats//[2017-07-07_00,52,55.450817]-CCIOReporter-001.xml",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1601,Jul,7,00:52:58,authorMacBook-Pro,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +1602,Jul,7,00:52:58,authorMacBook-Pro,UserEventAgent,43,,Captive: [CNInfoNetworkActive:1748] en0: SSID 'CalVisitor' making interface primary (cache indicates network not captive),E162,Captive: [CNInfoNetworkActive:<*>] en0: SSID 'CalVisitor' making interface primary (cache indicates network not captive) +1603,Jul,7,00:53:03,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 43840 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1604,Jul,7,00:53:09,calvisitor-10-105-162-178,mds,63,,(DiskStore.Normal:2382) 20cb04f 1.000086,E2,(DiskStore.Normal:<*>) <*> <*> +1605,Jul,7,00:53:19,calvisitor-10-105-162-178,sandboxd,129,[37617],com.apple.Addres(37617) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1606,Jul,7,00:53:26,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 5703 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1607,Jul,7,01:06:34,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1608,Jul,7,01:33:49,calvisitor-10-105-162-178,kernel,0,,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01),E33,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (<*>) +1609,Jul,7,01:34:46,calvisitor-10-105-162-178,kernel,0,,ARPT: 761864.513194: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1610,Jul,7,01:47:40,calvisitor-10-105-162-178,GoogleSoftwareUpdateAgent,37644,,"2017-07-07 01:47:40.090 GoogleSoftwareUpdateAgent[37644/0x7000002a0000] [lvl=2] -[KSOutOfProcessFetcher beginFetchWithDelegate:] KSOutOfProcessFetcher start fetch from URL: ""https://tools.google.com/service/update2?cup2hreq=c30943ccd5e0a03e93b6be3e2b7e2127989f08f1bde99263ffee091de8b8bc39&cup2key=7:1039900771""",E84,"<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSOutOfProcessFetcher beginFetchWithDelegate:] KSOutOfProcessFetcher start fetch from URL: ""<*>""" +1611,Jul,7,02:01:04,calvisitor-10-105-162-178,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +1612,Jul,7,02:14:41,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1613,Jul,7,02:15:01,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 38922 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1614,Jul,7,02:15:01,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 893 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1615,Jul,7,02:28:19,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1616,Jul,7,02:42:24,calvisitor-10-105-162-178,sandboxd,129,[37682],com.apple.Addres(37682) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1617,Jul,7,02:42:27,calvisitor-10-105-162-178,com.apple.AddressBook.InternetAccountsBridge,37682,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1618,Jul,7,02:55:51,calvisitor-10-105-162-178,com.apple.CDScheduler,258,,Thermal pressure state: 1 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1619,Jul,7,02:56:01,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 498005 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1620,Jul,7,03:09:18,calvisitor-10-105-162-178,kernel,0,,ARPT: 762302.122693: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.,E139,ARPT: <*>: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +1621,Jul,7,03:09:38,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 35733 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1622,Jul,7,03:10:18,calvisitor-10-105-162-178,kernel,0,,ARPT: 762363.637095: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1623,Jul,7,03:22:55,calvisitor-10-105-162-178,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +1624,Jul,7,03:22:55,calvisitor-10-105-162-178,kernel,0,,ARPT: 762366.143164: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +1625,Jul,7,03:23:15,calvisitor-10-105-162-178,com.apple.AddressBook.InternetAccountsBridge,37700,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 2,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1626,Jul,7,03:36:32,calvisitor-10-105-162-178,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1627,Jul,7,03:36:32,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +1628,Jul,7,03:50:09,calvisitor-10-105-162-178,kernel,0,,ARPT: 762484.281874: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +1629,Jul,7,03:50:19,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 33204 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1630,Jul,7,03:50:29,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 33282 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1631,Jul,7,03:51:08,calvisitor-10-105-162-178,kernel,0,,"ARPT: 762543.171617: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0,",E135,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': <*>," +1632,Jul,7,04:04:43,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.suggestions.harvest: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 106 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1633,Jul,7,04:04:43,calvisitor-10-105-162-178,kernel,0,,"ARPT: 762603.017378: wl0: setup_keepalive: Local port: 62991, Remote port: 443",E146,"ARPT: <*>: wl0: setup_keepalive: Local port: <*>, Remote port: <*>" +1634,Jul,7,04:17:24,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +1635,Jul,7,04:17:33,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 31570 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1636,Jul,7,04:17:37,calvisitor-10-105-162-178,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +1637,Jul,7,04:17:52,calvisitor-10-105-162-178,sandboxd,129,[37725],com.apple.Addres(37725) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1638,Jul,7,04:31:01,calvisitor-10-105-162-178,kernel,0,,AirPort: Link Down on awdl0. Reason 1 (Unspecified).,E109,AirPort: Link Down on awdl0. Reason <*> (Unspecified). +1639,Jul,7,04:44:38,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 491488 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1640,Jul,7,04:44:48,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1002 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1641,Jul,7,04:44:48,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1002 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1642,Jul,7,04:58:15,calvisitor-10-105-162-178,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +1643,Jul,7,04:58:15,calvisitor-10-105-162-178,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1644,Jul,7,04:58:16,calvisitor-10-105-162-178,kernel,0,,AirPort: Link Up on awdl0,E111,AirPort: Link Up on awdl0 +1645,Jul,7,04:58:35,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 29108 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1646,Jul,7,04:58:36,calvisitor-10-105-162-178,com.apple.AddressBook.InternetAccountsBridge,37745,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1647,Jul,7,04:58:40,calvisitor-10-105-162-178,sandboxd,129,[37745],com.apple.Addres(37745) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1648,Jul,7,05:11:52,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +1649,Jul,7,05:12:46,calvisitor-10-105-162-178,kernel,0,,ARPT: 762900.518967: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:3065:65eb:758e:972a,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1650,Jul,7,05:25:49,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 1065 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1651,Jul,7,05:26:27,calvisitor-10-105-162-178,kernel,0,,ARPT: 762962.511796: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1652,Jul,7,05:39:27,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 26744 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1653,Jul,7,05:39:27,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 26656 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1654,Jul,7,05:40:03,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 488163 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1655,Jul,7,05:52:44,calvisitor-10-105-162-178,kernel,0,,ARPT: 763023.568413: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +1656,Jul,7,05:52:44,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 25947 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1657,Jul,7,06:06:21,calvisitor-10-105-162-178,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us,E57,<*>::prePCIWake - power up complete - took <*> us +1658,Jul,7,06:06:21,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 25042 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1659,Jul,7,06:07:14,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 25077 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1660,Jul,7,06:48:46,authorMacBook-Pro,corecaptured,37783,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1661,Jul,7,07:01:09,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 21754 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1662,Jul,7,07:01:14,calvisitor-10-105-162-178,corecaptured,37799,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-07_07,01,14.472939]-CCIOReporter-002.xml, Current File [2017-07-07_07,01,14.472939]-CCIOReporter-002.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1663,Jul,7,07:15:32,calvisitor-10-105-162-178,kernel,0,,ARPT: 763490.115579: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1664,Jul,7,07:16:35,authorMacBook-Pro,configd,53,,"setting hostname to ""authorMacBook-Pro.local""",E311,"setting hostname to ""<*>""" +1665,Jul,7,07:16:48,calvisitor-10-105-162-178,corecaptured,37799,,"CCDataTap::profileRemoved, Owner: com.apple.driver.AirPort.Brcm4360.0, Name: StateSnapshots",E166,"CCDataTap::profileRemoved, Owner: <*>, Name: <*>" +1666,Jul,7,07:17:17,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 20786 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1667,Jul,7,07:30:15,calvisitor-10-105-162-178,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +1668,Jul,7,07:30:15,calvisitor-10-105-162-178,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1669,Jul,7,07:30:25,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 481541 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1670,Jul,7,07:30:35,calvisitor-10-105-162-178,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1671,Jul,7,07:59:26,calvisitor-10-105-162-178,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us,E57,<*>::prePCIWake - power up complete - took <*> us +1672,Jul,7,07:59:26,calvisitor-10-105-162-178,configd,53,,"setting hostname to ""authorMacBook-Pro.local""",E311,"setting hostname to ""<*>""" +1673,Jul,7,07:59:26,authorMacBook-Pro,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +1674,Jul,7,07:59:31,calvisitor-10-105-162-178,sandboxd,129,[10018],QQ(10018) deny mach-lookup com.apple.networking.captivenetworksupport,E51,<*>(<*>) deny mach-lookup com.apple.networking.captivenetworksupport +1675,Jul,7,07:59:46,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 479780 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1676,Jul,7,08:28:42,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +1677,Jul,7,08:28:48,calvisitor-10-105-162-178,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +1678,Jul,7,08:42:41,calvisitor-10-105-162-178,com.apple.CDScheduler,43,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1679,Jul,7,09:09:36,calvisitor-10-105-162-178,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-07 16:09:36 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +1680,Jul,7,09:09:55,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 14028 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1681,Jul,7,09:10:35,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1682,Jul,7,09:23:13,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 474773 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1683,Jul,7,09:37:11,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 473935 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1684,Jul,7,09:50:48,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 11575 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1685,Jul,7,09:51:24,calvisitor-10-105-162-178,kernel,0,,ARPT: 764299.017125: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:9cb8:f7f2:7c03:f956,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1686,Jul,7,10:04:25,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 472301 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1687,Jul,7,10:04:25,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 845 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1688,Jul,7,10:05:03,calvisitor-10-105-162-178,kernel,0,,ARPT: 764361.057441: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:9cb8:f7f2:7c03:f956,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1689,Jul,7,10:17:44,calvisitor-10-105-162-178,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 9959 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1690,Jul,7,10:17:44,calvisitor-10-105-162-178,kernel,0,,AirPort: Link Up on awdl0,E111,AirPort: Link Up on awdl0 +1691,Jul,7,10:18:03,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 10028 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1692,Jul,7,10:18:45,calvisitor-10-105-162-178,kernel,0,,"ARPT: 764427.640542: wl0: setup_keepalive: Seq: 204730741, Ack: 2772623181, Win size: 4096",E148,"ARPT: <*>: wl0: setup_keepalive: Seq: <*>, Ack: <*>, Win size: <*>" +1693,Jul,7,10:31:22,calvisitor-10-105-162-178,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +1694,Jul,7,10:31:22,calvisitor-10-105-162-178,kernel,0,,"RTC: Maintenance 2017/7/7 17:31:21, sleep 2017/7/7 17:18:49",E295,"RTC: Maintenance <*>/<*>/<*> <*>:<*>:<*>, sleep <*>/<*>/<*> <*>:<*>:<*>" +1695,Jul,7,10:31:32,calvisitor-10-105-162-178,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 9219 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1696,Jul,7,10:37:43,calvisitor-10-105-162-178,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +1697,Jul,7,10:37:43,calvisitor-10-105-162-178,QQ,10018,,############################## _getSysMsgList,E1,############################## _getSysMsgList +1698,Jul,7,10:37:43,calvisitor-10-105-162-178,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1699,Jul,7,10:37:43,calvisitor-10-105-162-178,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +1700,Jul,7,10:38:06,calvisitor-10-105-162-178,Mail,11203,,Unrecognized XSSimpleTypeDefinition: OneOff,E329,Unrecognized XSSimpleTypeDefinition: OneOff +1701,Jul,7,10:38:10,calvisitor-10-105-162-178,QQ,10018,,DB Path: /Users/xpc/Library/Containers/com.tencent.qq/Data/Documents/contents/916639562/QQ.db,E198,DB Path: <*> +1702,Jul,7,10:38:23,calvisitor-10-105-162-178,UserEventAgent,258,,Could not get event name for stream/token: com.apple.xpc.activity/4505: 132: Request for stale data,E195,Could not get event name for stream/token: com.apple.xpc.activity/<*>: <*>: Request for stale data +1703,Jul,7,10:54:41,calvisitor-10-105-162-178,ksfetch,37925,,2017-07-07 10:54:41.296 ksfetch[37925/0x7fff79824000] [lvl=2] KSHelperReceiveAllData() KSHelperTool read 1926 bytes from stdin.,E92,<*>-<*>-<*> <*>:<*>:<*> ksfetch[<*>/<*>] [lvl=<*>] KSHelperReceiveAllData() KSHelperTool read <*> bytes from stdin. +1704,Jul,7,10:54:41,calvisitor-10-105-162-178,GoogleSoftwareUpdateAgent,37924,,2017-07-07 10:54:41.875 GoogleSoftwareUpdateAgent[37924/0x7000002a0000] [lvl=2] -[KSUpdateCheckAction performAction] KSUpdateCheckAction starting update check for ticket(s): {( serverType=Omaha url=https://tools.google.com/service/update2 creationDate=2017-02-18 15:41:18 tagPath=/Applications/Google Chrome.app/Contents/Info.plist tagKey=KSChannelID brandPath=/Users/xpc/Library/Google/Google Chrome Brand.plist brandKey=KSBrandID versionPath=/Applications/Google Chrome.app/Contents/Info.plist versionKey=KSVersion cohort=1:1y5: cohortName=Stable ticketVersion=1 > )} Using server: >,E88,<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSUpdateCheckAction performAction] KSUpdateCheckAction starting update check for ticket(s): {( productID=<*> version=<*> xc= path=<*> serverType=Omaha url=<*> creationDate=<*>-<*>-<*> <*>:<*>:<*> tagPath=<*> tagKey=KSChannelID brandPath=<*> brandKey=KSBrandID versionPath=<*> versionKey=KSVersion cohort=<*>:<*>: cohortName=Stable ticketVersion=<*> > )} Using server: engine= > +1705,Jul,7,10:57:19,calvisitor-10-105-162-178,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +1706,Jul,7,11:01:11,calvisitor-10-105-162-178,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1707,Jul,7,11:22:27,calvisitor-10-105-162-178,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 294, items, fQueryRetries, 0, fLastRetryTimestamp, 521144227.4",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +1708,Jul,7,11:28:11,calvisitor-10-105-162-178,com.apple.ncplugin.weather,37956,,Error in CoreDragRemoveTrackingHandler: -1856,E213,Error in CoreDragRemoveTrackingHandler: <*> +1709,Jul,7,11:28:44,calvisitor-10-105-162-178,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.37963,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +1710,Jul,7,11:48:06,calvisitor-10-105-162-178,com.apple.WebKit.WebContent,32778,,[11:48:06.869] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92,E17,[<*>:<*>:<*>] FigAgglomeratorSetObjectForKey signalled err=<*> (kFigStringConformerError_ParamErr) (<*> key) at <*> line <*> +1711,Jul,7,11:57:06,calvisitor-10-105-162-178,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.37999,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +1712,Jul,7,11:57:23,calvisitor-10-105-162-178,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +1713,Jul,7,12:12:06,calvisitor-10-105-162-178,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.user.501,"Service ""com.apple.xpc.launchd.unmanaged.loginwindow.94"" tried to hijack endpoint ""com.apple.tsm.uiserver"" from owner: com.apple.SystemUIServer.agent",E306,"Service ""com.apple.xpc.launchd.unmanaged.loginwindow.<*>"" tried to hijack endpoint ""com.apple.tsm.uiserver"" from owner: com.apple.SystemUIServer.agent" +1714,Jul,7,12:12:27,calvisitor-10-105-162-178,locationd,82,,Location icon should now be in state 'Active',E258,Location icon should now be in state 'Active' +1715,Jul,7,12:14:35,calvisitor-10-105-162-178,kernel,0,,"ARPT: 770226.223664: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': 0,",E138,"ARPT: <*>: IOPMPowerSource Information: onWake, SleepType: Normal Sleep, 'ExternalConnected': Yes, 'TimeRemaining': <*>," +1716,Jul,7,12:14:38,calvisitor-10-105-162-178,com.apple.SecurityServer,80,,Session 101800 destroyed,E309,Session <*> destroyed +1717,Jul,7,12:15:44,calvisitor-10-105-162-178,quicklookd,38023,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +1718,Jul,7,12:15:44,calvisitor-10-105-162-178,quicklookd,38023,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +1719,Jul,7,12:15:59,calvisitor-10-105-162-178,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1720,Jul,7,12:16:28,calvisitor-10-105-162-178,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +1721,Jul,7,12:16:28,calvisitor-10-105-162-178,quicklookd,38023,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +1722,Jul,7,12:16:28,calvisitor-10-105-162-178,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +1723,Jul,7,12:17:49,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1724,Jul,7,12:20:19,calvisitor-10-105-162-178,kernel,0,,TBT W (2): 0x0040 [x],E314,TBT W (<*>): <*> [x] +1725,Jul,7,12:20:25,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +1726,Jul,7,12:20:41,calvisitor-10-105-162-178,AddressBookSourceSync,38055,,-[SOAPParser:0x7f84bad89660 parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid),E47,-[SOAPParser:<*> parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid) +1727,Jul,7,12:21:15,calvisitor-10-105-162-178,imagent,355,,: NC Disabled: NO,E102,: NC Disabled: NO +1728,Jul,7,12:23:11,calvisitor-10-105-162-178,kernel,0,,in6_unlink_ifa: IPv6 address 0x77c911453a6dbcdb has no prefix,E75,<*>: IPv6 address <*> has no prefix +1729,Jul,7,12:23:12,authorMacBook-Pro,kernel,0,,ARPT: 770518.944345: framerdy 0x0 bmccmd 3 framecnt 1024,E133,ARPT: <*>: framerdy <*> bmccmd <*> framecnt <*> +1730,Jul,7,12:24:25,authorMacBook-Pro,corecaptured,38064,,Received Capture Event,E294,Received Capture Event +1731,Jul,7,12:24:29,authorMacBook-Pro,corecaptured,38064,,"CCFile::copyFile fileName is [2017-07-07_12,24,25.108710]-io80211Family-007.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-07_12,24,25.108710]-io80211Family-007.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-07_12,24,29.298901]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-07_12,24,25.108710]-io80211Family-007.pcapng",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1732,Jul,7,12:24:31,authorMacBook-Pro,kernel,0,,ARPT: 770597.394609: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0,E129,ARPT: <*>: AQM agg params <*> maxlen hi/lo <*> <*> minlen <*> adjlen <*> +1733,Jul,7,12:24:31,authorMacBook-Pro,corecaptured,38064,,CCFile::captureLog,E167,CCFile::captureLog +1734,Jul,7,12:24:31,authorMacBook-Pro,corecaptured,38064,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-07_12,24,31.376032]-AirPortBrcm4360_Logs-011.txt, Current File [2017-07-07_12,24,31.376032]-AirPortBrcm4360_Logs-011.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1735,Jul,7,12:24:31,authorMacBook-Pro,corecaptured,38064,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1736,Jul,7,12:24:31,authorMacBook-Pro,corecaptured,38064,,CCFile::captureLog,E167,CCFile::captureLog +1737,Jul,7,12:30:08,authorMacBook-Pro,kernel,0,,ARPT: 770602.528852: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +1738,Jul,7,12:30:08,authorMacBook-Pro,kernel,0,,TBT W (2): 0x0040 [x],E314,TBT W (<*>): <*> [x] +1739,Jul,7,12:30:09,authorMacBook-Pro,kernel,0,,ARPT: 770605.092581: ARPT: Wake Reason: Wake on Scan offload,E131,ARPT: <*>: ARPT: Wake Reason: Wake on Scan offload +1740,Jul,7,12:30:14,calvisitor-10-105-162-178,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +1741,Jul,7,12:30:26,calvisitor-10-105-162-178,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +1742,Jul,7,12:30:29,calvisitor-10-105-162-178,kernel,0,,IO80211AWDLPeerManager::setAwdlAutoMode Resuming AWDL,E58,<*>::setAwdlAutoMode Resuming AWDL +1743,Jul,7,13:38:22,authorMacBook-Pro,corecaptured,38124,,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7,E175,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams <*> +1744,Jul,7,13:38:22,authorMacBook-Pro,corecaptured,38124,,"doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-07_13,38,22.072050] - AssocFail:sts:2_rsn:0.xml",E204,doSaveChannels@<*>: Will write to: <*> +1745,Jul,7,13:38:23,authorMacBook-Pro,corecaptured,38124,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-07_13,38,23.338868]-AirPortBrcm4360_Logs-013.txt, Current File [2017-07-07_13,38,23.338868]-AirPortBrcm4360_Logs-013.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1746,Jul,7,13:38:23,authorMacBook-Pro,corecaptured,38124,,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7,E175,CCIOReporterFormatter::addRegistryChildToChannelDictionary streams <*> +1747,Jul,7,13:38:24,authorMacBook-Pro,corecaptured,38124,,"CCFile::captureLog Received Capture notice id: 1499459904.126805, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1748,Jul,7,13:38:24,authorMacBook-Pro,corecaptured,38124,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-07_13,38,24.371339]-CCIOReporter-019.xml, Current File [2017-07-07_13,38,24.371339]-CCIOReporter-019.xml",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1749,Jul,7,13:38:29,authorMacBook-Pro,networkd,195,,-[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! NeteaseMusic.17988 tc12042 103.251.128.144:80,E43,-[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! <*> <*> <*>:<*> +1750,Jul,7,13:38:50,calvisitor-10-105-160-205,sandboxd,129,[38132],com.apple.Addres(38132) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1751,Jul,7,13:40:30,calvisitor-10-105-160-205,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +1752,Jul,7,13:40:31,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID,E42,-[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID +1753,Jul,7,13:40:35,authorMacBook-Pro,corecaptured,38124,,CCFile::captureLog,E167,CCFile::captureLog +1754,Jul,7,13:40:35,authorMacBook-Pro,corecaptured,38124,,Received Capture Event,E294,Received Capture Event +1755,Jul,7,13:40:35,authorMacBook-Pro,corecaptured,38124,,CCFile::captureLog,E167,CCFile::captureLog +1756,Jul,7,13:40:35,authorMacBook-Pro,corecaptured,38124,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-07_13,40,35.857095]-AirPortBrcm4360_Logs-022.txt, Current File [2017-07-07_13,40,35.857095]-AirPortBrcm4360_Logs-022.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1757,Jul,7,13:40:35,authorMacBook-Pro,corecaptured,38124,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-07_13,40,35.961495]-io80211Family-023.pcapng, Current File [2017-07-07_13,40,35.961495]-io80211Family-023.pcapng",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1758,Jul,7,13:40:36,authorMacBook-Pro,kernel,0,,ARPT: 770712.519828: framerdy 0x0 bmccmd 3 framecnt 1024,E133,ARPT: <*>: framerdy <*> bmccmd <*> framecnt <*> +1759,Jul,7,13:40:36,authorMacBook-Pro,corecaptured,38124,,"CCFile::captureLog Received Capture notice id: 1499460036.519390, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1760,Jul,7,13:40:37,authorMacBook-Pro,corecaptured,38124,,"CCFile::copyFile fileName is [2017-07-07_13,40,37.052249]-io80211Family-031.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-07_13,40,37.052249]-io80211Family-031.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-07_13,40,37.192896]=AuthFail:sts:5_rsn:0/IO80211AWDLPeerManager//[2017-07-07_13,40,37.052249]-io80211Family-031.pcapng",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1761,Jul,7,13:40:37,authorMacBook-Pro,corecaptured,38124,,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions,E176,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +1762,Jul,7,13:40:37,authorMacBook-Pro,corecaptured,38124,,"doSaveChannels@286: Will write to: /Library/Logs/CrashReporter/CoreCapture/IOReporters/[2017-07-07_13,40,35.959475] - AuthFail:sts:5_rsn:0.xml",E204,doSaveChannels@<*>: Will write to: <*> +1763,Jul,7,13:40:39,calvisitor-10-105-160-205,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +1764,Jul,7,13:40:52,calvisitor-10-105-160-205,QQ,10018,,############################## _getSysMsgList,E1,############################## _getSysMsgList +1765,Jul,7,13:42:10,calvisitor-10-105-160-205,kernel,0,,TBT W (2): 0x0040 [x],E314,TBT W (<*>): <*> [x] +1766,Jul,7,13:42:10,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +1767,Jul,7,13:42:15,authorMacBook-Pro,kernel,0,,ARPT: 770772.533370: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0,E129,ARPT: <*>: AQM agg params <*> maxlen hi/lo <*> <*> minlen <*> adjlen <*> +1768,Jul,7,13:42:17,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID,E41,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +1769,Jul,7,13:42:17,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Authenticated,E163,Captive: CNPluginHandler en0: Authenticated +1770,Jul,7,13:42:17,authorMacBook-Pro,configd,53,,network changed: v4(en0+:10.105.160.205) v6(en0:2607:f140:6000:8:c6b3:1ff:fecd:467f) DNS! Proxy SMB,E267,network changed: <*>(<*>:<*>) <*>(<*>) DNS! Proxy SMB +1771,Jul,7,13:42:30,authorMacBook-Pro,kernel,0,,ARPT: 770786.961436: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0,E129,ARPT: <*>: AQM agg params <*> maxlen hi/lo <*> <*> minlen <*> adjlen <*> +1772,Jul,7,13:42:34,authorMacBook-Pro,corecaptured,38124,,CCFile::captureLog,E167,CCFile::captureLog +1773,Jul,7,13:42:34,authorMacBook-Pro,corecaptured,38124,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-07_13,42,34.831310]-AirPortBrcm4360_Logs-041.txt, Current File [2017-07-07_13,42,34.831310]-AirPortBrcm4360_Logs-041.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1774,Jul,7,13:42:41,authorMacBook-Pro,kernel,0,,ARPT: 770798.478026: framerdy 0x0 bmccmd 3 framecnt 1024,E133,ARPT: <*>: framerdy <*> bmccmd <*> framecnt <*> +1775,Jul,7,13:42:46,authorMacBook-Pro,kernel,0,,ARPT: 770802.879782: wlc_dump_aggfifo:,E151,ARPT: <*>: wlc_dump_aggfifo: +1776,Jul,7,13:42:46,authorMacBook-Pro,corecaptured,38124,,Received Capture Event,E294,Received Capture Event +1777,Jul,7,13:42:48,authorMacBook-Pro,corecaptured,38124,,CCFile::captureLog,E167,CCFile::captureLog +1778,Jul,7,13:48:27,authorMacBook-Pro,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +1779,Jul,7,13:48:27,authorMacBook-Pro,kernel,0,,ARPT: 770812.035971: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +1780,Jul,7,13:48:29,authorMacBook-Pro,cdpd,11807,,Saw change in network reachability (isReachable=2),E301,Saw change in network reachability (isReachable=<*>) +1781,Jul,7,13:48:52,calvisitor-10-105-160-205,com.apple.AddressBook.InternetAccountsBridge,38158,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1782,Jul,7,13:58:13,authorMacBook-Pro,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +1783,Jul,7,13:58:22,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID,E42,-[NETClientConnection effectiveBundleID] using process name CalendarAgent as bundle ID (this is expected for daemons without bundle ID +1784,Jul,7,14:03:25,calvisitor-10-105-160-205,kernel,0,,AppleThunderboltNHIType2::prePCIWake - power up complete - took 1 us,E57,<*>::prePCIWake - power up complete - took <*> us +1785,Jul,7,14:03:30,calvisitor-10-105-160-205,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +1786,Jul,7,14:03:45,calvisitor-10-105-160-205,sandboxd,129,[38179],com.apple.Addres(38179) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1787,Jul,7,14:07:21,calvisitor-10-105-160-205,com.apple.WebKit.WebContent,32778,,[14:07:21.190] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +1788,Jul,7,14:09:44,calvisitor-10-105-160-205,cloudd,326,,"SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}",E303,"SecOSStatusWith error:[<*>] Error Domain=NSOSStatusErrorDomain Code=<*> ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}" +1789,Jul,7,14:09:45,calvisitor-10-105-160-205,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.user.501,"Service ""com.apple.xpc.launchd.unmanaged.loginwindow.94"" tried to hijack endpoint ""com.apple.tsm.uiserver"" from owner: com.apple.SystemUIServer.agent",E306,"Service ""com.apple.xpc.launchd.unmanaged.loginwindow.<*>"" tried to hijack endpoint ""com.apple.tsm.uiserver"" from owner: com.apple.SystemUIServer.agent" +1790,Jul,7,14:19:56,calvisitor-10-105-160-205,syslogd,44,,ASL Sender Statistics,E153,ASL Sender Statistics +1791,Jul,7,14:19:57,calvisitor-10-105-160-205,kernel,0,,in6_unlink_ifa: IPv6 address 0x77c911454f15210b has no prefix,E75,<*>: IPv6 address <*> has no prefix +1792,Jul,7,14:20:52,calvisitor-10-105-160-205,kernel,0,,"ARPT: 771388.849884: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +1793,Jul,7,14:33:34,calvisitor-10-105-160-205,syslogd,44,,ASL Sender Statistics,E153,ASL Sender Statistics +1794,Jul,7,14:33:34,calvisitor-10-105-160-205,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +1795,Jul,7,14:33:34,calvisitor-10-105-160-205,kernel,0,,ARPT: 771393.363637: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +1796,Jul,7,14:47:12,calvisitor-10-105-160-205,kernel,0,,ARPT: 771456.438849: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +1797,Jul,7,15:00:50,calvisitor-10-105-160-205,kernel,0,,ARPT: 771516.615152: AirPort_Brcm43xx::platformWoWEnable: WWEN[disable],E124,ARPT: <*>: <*>::platformWoWEnable: WWEN[disable] +1798,Jul,7,15:01:07,calvisitor-10-105-160-205,sandboxd,129,[38210],com.apple.Addres(38210) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1799,Jul,7,15:01:12,calvisitor-10-105-160-205,sandboxd,129,[38210],com.apple.Addres(38210) deny network-outbound /private/var/run/mDNSResponder,E52,<*>(<*>) deny network-outbound <*> +1800,Jul,7,15:14:27,calvisitor-10-105-160-205,kernel,0,,AirPort: Link Down on awdl0. Reason 1 (Unspecified).,E109,AirPort: Link Down on awdl0. Reason <*> (Unspecified). +1801,Jul,7,15:14:27,calvisitor-10-105-160-205,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1802,Jul,7,15:28:00,calvisitor-10-105-160-205,syslogd,44,,ASL Sender Statistics,E153,ASL Sender Statistics +1803,Jul,7,15:28:49,calvisitor-10-105-160-205,kernel,0,,"ARPT: 771631.938256: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 9235,",E134,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': <*>," +1804,Jul,7,16:04:15,calvisitor-10-105-160-205,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread +1805,Jul,7,16:04:15,calvisitor-10-105-160-205,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +1806,Jul,7,16:04:15,calvisitor-10-105-160-205,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +1807,Jul,7,16:04:15,calvisitor-10-105-160-205,kernel,0,,"Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0",E310,"Setting BTCoex Config: <*>:<*>, <*>:<*>, <*>:<*>, <*>:<*>" +1808,Jul,7,16:04:16,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 25340 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +1809,Jul,7,16:04:22,authorMacBook-Pro,netbiosd,38222,,Unable to start NetBIOS name service:,E326,Unable to start NetBIOS name service: +1810,Jul,7,16:04:28,authorMacBook-Pro,networkd,195,,-[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! QQ.10018 tc25354 123.151.10.190:80,E43,-[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! <*> <*> <*>:<*> +1811,Jul,7,16:04:44,calvisitor-10-105-161-77,kernel,0,,"ARPT: 771663.085756: wl0: Roamed or switched channel, reason #8, bssid 00:a6:ca:db:93:cc, last RSSI -60",E143,"ARPT: <*>: wl0: Roamed or switched channel, reason #<*>, bssid <*>:<*>:<*>:<*>, last RSSI <*>" +1812,Jul,7,16:05:37,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Inactive,E165,Captive: CNPluginHandler en0: Inactive +1813,Jul,7,16:05:38,authorMacBook-Pro,kernel,0,,en0: BSSID changed to 0c:68:03:d6:c5:1c,E207,en0: BSSID changed to <*> +1814,Jul,7,16:05:42,calvisitor-10-105-161-77,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +1815,Jul,7,16:24:10,authorMacBook-Pro,locationd,82,,"PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1009 ""The Internet connection appears to be offline."" UserInfo={NSUnderlyingError=0x7fb7f0035dc0 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 ""The Internet connection appears to be offline."" UserInfo={NSErrorFailingURLStringKey=https://gs-loc.apple.com/clls/wloc, NSErrorFailingURLKey=https://gs-loc.apple.com/clls/wloc, _kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=https://gs-loc.apple.com/clls/wloc, NSErrorFailingURLKey=https://gs-loc.apple.com/clls/wloc, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.}",E285,"PBRequester failed with Error Error Domain=NSURLErrorDomain Code=<*> ""The Internet connection appears to be offline."" UserInfo={NSUnderlyingError=<*> {Error Domain=kCFErrorDomainCFNetwork Code=<*> ""The Internet connection appears to be offline."" UserInfo={NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorCodeKey=<*>, _kCFStreamErrorDomainKey=<*>, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=<*>, NSErrorFailingURLKey=<*>, _kCFStreamErrorDomainKey=<*>, _kCFStreamErrorCodeKey=<*>, NSLocalizedDescription=The Internet connection appears to be offline.}" +1816,Jul,7,16:24:11,authorMacBook-Pro,corecaptured,38241,,"CCFile::copyFile fileName is [2017-07-07_16,24,11.442212]-AirPortBrcm4360_Logs-001.txt, source path:/var/log/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/DriverLogs//[2017-07-07_16,24,11.442212]-AirPortBrcm4360_Logs-001.txt, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.driver.AirPort.Brcm4360.0/[2017-07-07_16,24,11.124183]=AssocFail:sts:2_rsn:0/DriverLogs//[2017-07-07_16,24,11.442212]-AirPortBrcm4360_Logs-001.txt",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1817,Jul,7,16:24:11,authorMacBook-Pro,corecaptured,38241,,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions,E176,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +1818,Jul,7,16:24:16,authorMacBook-Pro,corecaptured,38241,,"CCFile::captureLog Received Capture notice id: 1499469856.145137, reason = AssocFail:sts:2_rsn:0",E169,"CCFile::captureLog Received Capture notice id: <*>, reason = AssocFail:sts:_rsn:" +1819,Jul,7,16:24:16,authorMacBook-Pro,corecaptured,38241,,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions,E176,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +1820,Jul,7,16:24:18,authorMacBook-Pro,corecaptured,38241,,Received Capture Event,E294,Received Capture Event +1821,Jul,7,16:24:23,authorMacBook-Pro,networkd,195,,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID,E41,-[NETClientConnection effectiveBundleID] using process name apsd as bundle ID (this is expected for daemons without bundle ID +1822,Jul,7,16:24:43,authorMacBook-Pro,QQ,10018,,############################## _getSysMsgList,E1,############################## _getSysMsgList +1823,Jul,7,16:24:49,authorMacBook-Pro,com.apple.AddressBook.InternetAccountsBridge,38247,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1824,Jul,7,16:45:57,authorMacBook-Pro,WindowServer,184,,CGXDisplayDidWakeNotification [771797848593539]: posting kCGSDisplayDidWake,E184,CGXDisplayDidWakeNotification [<*>]: posting kCGSDisplayDidWake +1825,Jul,7,16:46:23,calvisitor-10-105-160-85,com.apple.AddressBook.InternetAccountsBridge,38259,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 3,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1826,Jul,7,16:49:57,calvisitor-10-105-160-85,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +1827,Jul,7,16:53:53,calvisitor-10-105-160-85,com.apple.SecurityServer,80,,Session 102106 destroyed,E309,Session <*> destroyed +1828,Jul,7,16:57:09,calvisitor-10-105-160-85,com.apple.WebKit.WebContent,32778,,[16:57:09.235] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification,E12,[<*>:<*>:<*>] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification +1829,Jul,7,16:59:44,calvisitor-10-105-160-85,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1830,Jul,7,17:15:46,calvisitor-10-105-160-85,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.38405,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +1831,Jul,7,17:20:30,calvisitor-10-105-160-85,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1832,Jul,7,17:30:00,calvisitor-10-105-160-85,kernel,0,,Sandbox: QuickLookSatelli(38418) deny(1) mach-lookup com.apple.networkd,E299,Sandbox: <*>(<*>) deny(<*>) mach-lookup <*> +1833,Jul,7,17:30:00,calvisitor-10-105-160-85,QuickLookSatellite,38418,,"nw_path_evaluator_start_helper_connection net_helper_path_evaluation_start failed, dumping backtrace: [x86_64] libnetcore-583.50.1 0 libsystem_network.dylib 0x00007fff92fabde9 __nw_create_backtrace_string + 123 1 libsystem_network.dylib 0x00007fff92fc289f nw_path_evaluator_start_helper_connection + 196 2 libdispatch.dylib 0x00007fff980fa93d _dispatch_call_block_and_release + 12 3 libdispatch.dylib 0x00007fff980ef40b _dispatch_client_callout + 8 4 libdispatch.dylib 0x00007fff980f403b _dispatch_queue_drain + 754 5 libdispatch.dylib 0x00007fff980fa707 _dispatch_queue_invoke + 549 6 libdispatch.dylib 0x00007fff980f2d53 _dispatch_root_queue_drain + 538 7 libdispatch.dylib 0x00007fff980f2b00 _dispatch_worker_thread3 + 91 8 libsystem_pthread.dylib 0x00007fff8ebc44de _pthread_wqthread + 1129 9 libsystem_pthread.dylib 0x00007fff8ebc2341 start_wqthread + 13",E277,"nw_path_evaluator_start_helper_connection net_helper_path_evaluation_start failed, dumping backtrace: [<*>] libnetcore-<*> <*> libsystem_network.dylib <*> __nw_create_backtrace_string + <*> <*> libsystem_network.dylib <*> nw_path_evaluator_start_helper_connection + <*> <*> libdispatch.dylib <*> _dispatch_call_block_and_release + <*> <*> libdispatch.dylib <*> _dispatch_client_callout + <*> <*> libdispatch.dylib <*> _dispatch_queue_drain + <*> <*> libdispatch.dylib <*> _dispatch_queue_invoke + <*> <*> libdispatch.dylib <*> _dispatch_root_queue_drain + <*> <*> libdispatch.dylib <*> <*> + <*> <*> libsystem_pthread.dylib <*> _pthread_wqthread + <*> <*> libsystem_pthread.dylib <*> start_wqthread + <*>" +1834,Jul,7,17:34:51,calvisitor-10-105-160-85,Safari,9852,,KeychainGetICDPStatus: status: off,E257,KeychainGetICDPStatus: status: off +1835,Jul,7,17:45:26,calvisitor-10-105-160-85,loginwindow,94,,"CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.",E193,"CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=<*> in environment to log backtraces." +1836,Jul,7,18:02:24,calvisitor-10-105-160-85,kernel,0,,RTC: PowerByCalendarDate setting ignored,E296,RTC: PowerByCalendarDate setting ignored +1837,Jul,7,18:02:24,calvisitor-10-105-160-85,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 12 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1838,Jul,7,18:02:49,calvisitor-10-105-160-85,kernel,0,,Sandbox: com.apple.Addres(38449) deny(1) network-outbound /private/var/run/mDNSResponder,E300,Sandbox: <*>(<*>) deny(<*>) network-outbound <*> +1839,Jul,7,18:09:40,calvisitor-10-105-160-85,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1840,Jul,7,18:09:40,calvisitor-10-105-160-85,kernel,0,,en0: channel changed to 1,E208,en0: channel changed to <*> +1841,Jul,7,18:09:40,authorMacBook-Pro,kernel,0,,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (0x01),E33,[HID] [ATC] AppleDeviceManagementHIDEventService::processWakeReason Wake reason: Host (<*>) +1842,Jul,7,18:09:41,authorMacBook-Pro,cdpd,11807,,Saw change in network reachability (isReachable=0),E301,Saw change in network reachability (isReachable=<*>) +1843,Jul,7,18:09:46,authorMacBook-Pro,corecaptured,38453,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1844,Jul,7,18:10:00,calvisitor-10-105-160-85,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 40 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1845,Jul,7,18:10:10,calvisitor-10-105-160-85,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +1846,Jul,7,18:10:14,calvisitor-10-105-160-85,kernel,0,,en0::IO80211Interface::postMessage bssid changed,E56,<*>::<*>::postMessage bssid changed +1847,Jul,7,18:11:11,calvisitor-10-105-160-85,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +1848,Jul,7,18:11:20,calvisitor-10-105-160-85,com.apple.cts,258,,"com.apple.EscrowSecurityAlert.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 68031 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1849,Jul,7,18:11:21,calvisitor-10-105-160-85,com.apple.cts,258,,"com.apple.Safari.SafeBrowsing.Update: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 2889 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1850,Jul,7,18:11:40,calvisitor-10-105-160-85,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +1851,Jul,7,18:23:30,calvisitor-10-105-160-85,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 0 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +1852,Jul,7,18:23:32,calvisitor-10-105-160-85,kernel,0,,"IO80211AWDLPeerManager::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(true)",E61,"<*>::setAwdlSuspendedMode() Suspending AWDL, enterQuietMode(<*>)" +1853,Jul,7,18:23:40,calvisitor-10-105-160-85,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 67203 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1854,Jul,7,18:24:25,calvisitor-10-105-160-85,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 442301 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1855,Jul,7,18:37:36,calvisitor-10-105-160-85,AddressBookSourceSync,38490,,-[SOAPParser:0x7fca6040cb50 parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid),E47,-[SOAPParser:<*> parser:didStartElement:namespaceURI:qualifiedName:attributes:] Type not found in EWSItemType for ExchangePersonIdGuid (t:ExchangePersonIdGuid) +1856,Jul,7,18:38:03,calvisitor-10-105-160-85,com.apple.cts,258,,"com.apple.icloud.fmfd.heartbeat: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 441483 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1857,Jul,7,18:50:45,calvisitor-10-105-160-85,kernel,0,,"ARPT: 775899.188954: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq 2863091569, Ack 159598625, Win size 278",E150,"ARPT: <*>: wl0: wl_update_tcpkeep_seq: Updated seq/ack/win from UserClient Seq <*>, Ack <*>, Win size <*>" +1858,Jul,7,18:50:46,calvisitor-10-105-160-85,sharingd,30299,,18:50:46.109 : BTLE scanner Powered On,E64,<*>:<*>:<*> : BTLE scanner Powered On +1859,Jul,7,18:50:46,calvisitor-10-105-160-85,com.apple.cts,43,,"com.apple.SoftwareUpdate.Activity: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 4223 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1860,Jul,7,18:51:05,calvisitor-10-105-160-85,com.apple.cts,43,,"com.apple.CacheDelete.daily: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for 65558 seconds. Ignoring.",E189,"com.apple.<*>: scheduler_evaluate_activity told me to run this job; however, but the start time isn't for <*> seconds. Ignoring." +1861,Jul,7,19:04:23,calvisitor-10-105-160-85,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1862,Jul,7,19:04:45,calvisitor-10-105-160-85,com.apple.AddressBook.InternetAccountsBridge,38507,,dnssd_clientstub ConnectToServer: connect()-> No of tries: 1,E203,dnssd_clientstub ConnectToServer: connect()-> No of tries: <*> +1863,Jul,7,19:07:53,authorMacBook-Pro,kernel,0,,AppleCamIn::handleWakeEvent_gated,E119,AppleCamIn::handleWakeEvent_gated +1864,Jul,7,19:21:28,calvisitor-10-105-160-85,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-08 02:21:28 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +1865,Jul,7,19:43:07,calvisitor-10-105-160-85,kernel,0,,full wake promotion (reason 1) 374 ms,E220,full wake promotion (reason <*>) <*> ms +1866,Jul,7,19:43:09,calvisitor-10-105-160-85,CalendarAgent,279,,[com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-8].],E28,[com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-<*>].] +1867,Jul,7,20:08:13,calvisitor-10-105-160-85,secd,276,,"securityd_xpc_dictionary_handler cloudd[326] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}",E304,"securityd_xpc_dictionary_handler cloudd[<*>] copy_matching Error Domain=NSOSStatusErrorDomain Code=<*> ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}" +1868,Jul,7,20:32:00,calvisitor-10-105-160-85,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +1869,Jul,7,20:32:00,calvisitor-10-105-160-85,quicklookd,38603,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +1870,Jul,7,20:32:02,calvisitor-10-105-160-85,secd,276,,"securityd_xpc_dictionary_handler cloudd[326] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}",E304,"securityd_xpc_dictionary_handler cloudd[<*>] copy_matching Error Domain=NSOSStatusErrorDomain Code=<*> ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}" +1871,Jul,7,20:32:12,calvisitor-10-105-160-85,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +1872,Jul,7,20:32:28,calvisitor-10-105-160-85,iconservicesagent,328,,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor .,E40,-[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor . +1873,Jul,7,20:34:14,calvisitor-10-105-160-85,locationd,82,,"NETWORK: requery, 0, 0, 0, 0, 328, items, fQueryRetries, 0, fLastRetryTimestamp, 521177334.4",E271,"NETWORK: requery, <*>, <*>, <*>, <*>, <*>, items, fQueryRetries, <*>, fLastRetryTimestamp, <*>" +1874,Jul,7,20:39:28,calvisitor-10-105-160-85,com.apple.WebKit.Networking,9854,,"NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9806)",E275,"NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, <*>)" +1875,Jul,7,20:43:37,calvisitor-10-105-160-85,QuickLookSatellite,38624,,"[QL] No sandbox token for request , it will probably fail",E45,"[QL] No sandbox token for request .log>, it will probably fail" +1876,Jul,7,20:44:13,calvisitor-10-105-160-85,GPUToolsAgent,38749,,"schedule invalidation ",E302,"schedule invalidation , error: lost transport connection (<*>)>" +1877,Jul,7,20:50:32,calvisitor-10-105-160-85,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1878,Jul,7,20:51:27,calvisitor-10-105-160-85,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1879,Jul,7,20:52:49,calvisitor-10-105-160-85,com.apple.CDScheduler,258,,Thermal pressure state: 0 Memory pressure state: 0,E323,Thermal pressure state: <*> Memory pressure state: <*> +1880,Jul,7,20:57:37,calvisitor-10-105-160-85,Safari,9852,,KeychainGetICDPStatus: status: off,E257,KeychainGetICDPStatus: status: off +1881,Jul,7,21:01:22,calvisitor-10-105-160-85,quicklookd,38603,,Error returned from iconservicesagent: (null),E214,Error returned from iconservicesagent: (<*>) +1882,Jul,7,21:08:26,calvisitor-10-105-160-85,WeChat,24144,,jemmytest,E253,jemmytest +1883,Jul,7,21:12:46,calvisitor-10-105-160-85,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1884,Jul,7,21:18:04,calvisitor-10-105-160-85,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.38838,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SocialHelper.xpc/Contents/MacOS/com.apple.Safari.SocialHelper error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +1885,Jul,7,21:22:43,calvisitor-10-105-160-85,com.apple.WebKit.WebContent,38826,,[21:22:43.147] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921,E20,[<*>:<*>:<*>] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=<*> (kFigMediaValidatorError_VideoCodecNotSupported) (video codec <*>) at line <*> +1886,Jul,7,21:23:10,calvisitor-10-105-160-85,com.apple.WebKit.WebContent,38826,,<<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1,E101,<<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec <*> +1887,Jul,7,21:23:11,calvisitor-10-105-160-85,com.apple.WebKit.WebContent,38826,,<<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.,E100,<<<< MediaValidator >>>> <*>: Unrecognized codec <*>.(<*>). Failed codec specific check. +1888,Jul,7,21:24:19,calvisitor-10-105-160-85,WindowServer,184,,CoreAnimation: timed out fence 5fe83,E192,CoreAnimation: timed out fence <*> +1889,Jul,7,21:26:38,calvisitor-10-105-160-85,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1890,Jul,7,21:29:30,calvisitor-10-105-160-85,Safari,9852,,tcp_connection_tls_session_error_callback_imp 2515 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22,E319,tcp_connection_tls_session_error_callback_imp <*> __tcp_connection_tls_session_callback_write_block_invoke.<*> error <*> +1891,Jul,7,21:30:12,calvisitor-10-105-160-85,Safari,9852,,KeychainGetICDPStatus: keychain: -25300,E256,KeychainGetICDPStatus: keychain: <*> +1892,Jul,7,21:31:11,calvisitor-10-105-160-85,garcon,38866,,Failed to connect (view) outlet from (NSApplication) to (NSColorPickerGridView): missing setter or instance variable,E218,Failed to connect (view) outlet from (NSApplication) to (NSColorPickerGridView): missing setter or instance variable +1893,Jul,7,21:37:56,calvisitor-10-105-160-85,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +1894,Jul,7,21:47:20,calvisitor-10-105-160-85,QQ,10018,,2017/07/07 21:47:20.392 | I | VoipWrapper | DAVEngineImpl.cpp:1400:Close | close video chat. llFriendUIN = 515629905.,E53,<*>/<*>/<*> <*>:<*>:<*> | I | VoipWrapper | DAVEngineImpl.cpp:<*>:Close | close video chat. llFriendUIN = <*>. +1895,Jul,7,21:47:38,calvisitor-10-105-160-85,kernel,0,,ARPT: 783667.697957: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1896,Jul,7,21:57:08,calvisitor-10-105-160-85,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +1897,Jul,7,21:58:03,calvisitor-10-105-160-85,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1898,Jul,7,21:58:14,calvisitor-10-105-160-85,kernel,0,,"IOPMrootDomain: idle cancel, state 1",E250,"IOPMrootDomain: idle cancel, state <*>" +1899,Jul,7,21:58:33,calvisitor-10-105-160-85,NeteaseMusic,17988,,21:58:33.765 ERROR: 177: timed out after 15.000s (0 0); mMajorChangePending=0,E73,<*>:<*>:<*> ERROR: <*>: timed out after <*> (<*> <*>); mMajorChangePending=<*> +1900,Jul,7,21:59:08,calvisitor-10-105-160-85,kernel,0,,ARPT: 783790.553857: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1901,Jul,7,22:10:52,calvisitor-10-105-160-85,kernel,0,,ARPT: 783795.288172: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake,E127,ARPT: <*>: <*>::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake +1902,Jul,7,22:11:54,calvisitor-10-105-160-85,QQ,10018,,button report: 0x8002be0,E161,button report: <*> +1903,Jul,7,22:24:31,calvisitor-10-105-160-85,sharingd,30299,,22:24:31.135 : BTLE scanner Powered On,E64,<*>:<*>:<*> : BTLE scanner Powered On +1904,Jul,7,22:32:31,calvisitor-10-105-160-85,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-08 05:32:31 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +1905,Jul,7,22:46:29,calvisitor-10-105-160-85,QQ,10018,,button report: 0x8002be0,E161,button report: <*> +1906,Jul,7,22:47:06,calvisitor-10-105-160-85,kernel,0,,"ARPT: 783991.995027: wl0: setup_keepalive: interval 900, retry_interval 30, retry_count 10",E144,"ARPT: <*>: wl0: setup_keepalive: interval <*>, retry_interval <*>, retry_count <*>" +1907,Jul,7,23:00:44,calvisitor-10-105-160-85,kernel,0,,"ARPT: 784053.579480: wl0: setup_keepalive: Local port: 59927, Remote port: 443",E146,"ARPT: <*>: wl0: setup_keepalive: Local port: <*>, Remote port: <*>" +1908,Jul,7,23:00:46,calvisitor-10-105-160-85,kernel,0,,"ARPT: 784055.560270: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': 5600,",E134,"ARPT: <*>: IOPMPowerSource Information: onSleep, SleepType: Normal Sleep, 'ExternalConnected': No, 'TimeRemaining': <*>," +1909,Jul,7,23:14:23,calvisitor-10-105-160-85,kernel,0,,ARPT: 784117.089800: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1910,Jul,7,23:27:02,calvisitor-10-105-160-85,kernel,0,,ARPT: 784117.625615: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.,E139,ARPT: <*>: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +1911,Jul,7,23:38:27,calvisitor-10-105-160-85,kernel,0,,ARPT: 784178.158614: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +1912,Jul,7,23:38:32,authorMacBook-Pro,kernel,0,,en0::IO80211Interface::postMessage bssid changed,E56,<*>::<*>::postMessage bssid changed +1913,Jul,8,00:30:39,authorMacBook-Pro,kernel,0,,in6_unlink_ifa: IPv6 address 0x77c911454f1523ab has no prefix,E75,<*>: IPv6 address <*> has no prefix +1914,Jul,8,00:30:47,authorMacBook-Pro,networkd,195,,-[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! QQ.10018 tc25805 123.151.137.106:80,E43,-[NETClientConnection evaluateCrazyIvan46] CI46 - Perform CrazyIvan46! <*> <*> <*>:<*> +1915,Jul,8,00:30:48,calvisitor-10-105-160-47,symptomsd,215,,__73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2,E50,<*>-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value <*> +1916,Jul,8,00:44:20,calvisitor-10-105-160-47,kernel,0,,ARPT: 784287.966851: AirPort_Brcm43xx::platformWoWEnable: WWEN[enable],E125,ARPT: <*>: <*>::platformWoWEnable: WWEN[enable] +1917,Jul,8,00:45:21,calvisitor-10-105-160-47,kernel,0,,AppleThunderboltNHIType2::waitForOk2Go2Sx - intel_rp = 1 dlla_reporting_supported = 0,E54,<*>::<*> - intel_rp = <*> dlla_reporting_supported = <*> +1918,Jul,8,00:47:42,calvisitor-10-105-160-47,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +1919,Jul,8,00:58:14,calvisitor-10-105-160-47,kernel,0,,efi pagecount 72,E205,efi pagecount <*> +1920,Jul,8,01:51:46,calvisitor-10-105-160-47,kernel,0,,AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving).,E110,AirPort: Link Down on en0. Reason <*> (Disassociated because station leaving). +1921,Jul,8,01:51:50,authorMacBook-Pro,mDNSResponder,91,,mDNS_RegisterInterface: Frequent transitions for interface en0 (FE80:0000:0000:0000:C6B3:01FF:FECD:467F),E263,mDNS_RegisterInterface: Frequent transitions for interface en0 (<*>) +1922,Jul,8,01:52:19,calvisitor-10-105-163-147,kernel,0,,ARPT: 784486.498066: wlc_dump_aggfifo:,E151,ARPT: <*>: wlc_dump_aggfifo: +1923,Jul,8,01:52:19,calvisitor-10-105-163-147,corecaptured,38984,,CCFile::captureLogRun() Exiting CCFile::captureLogRun,E173,CCFile::captureLogRun() Exiting CCFile::captureLogRun +1924,Jul,8,01:52:20,calvisitor-10-105-163-147,corecaptured,38984,,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions,E176,CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions +1925,Jul,8,02:32:14,calvisitor-10-105-163-147,kernel,0,,Previous sleep cause: 5,E293,Previous sleep cause: <*> +1926,Jul,8,02:32:14,calvisitor-10-105-163-147,kernel,0,,**** [BroadcomBluetoothHostControllerUSBTransport][start] -- Completed (matched on Device) -- 0x3800 ****,E5,**** [BroadcomBluetoothHostControllerUSBTransport][start] -- Completed (matched on Device) -- <*> **** +1927,Jul,8,02:32:14,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x4 to 0x8000000000000000,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +1928,Jul,8,02:32:17,authorMacBook-Pro,kernel,0,,en0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 12 13 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161 165,E210,en0: Supported channels <*> +1929,Jul,8,02:32:23,authorMacBook-Pro,networkd,195,,nw_nat64_post_new_ifstate successfully changed NAT64 ifstate from 0x8000000000000000 to 0x4,E276,<*> successfully changed NAT64 ifstate from <*> to <*> +1930,Jul,8,02:32:46,calvisitor-10-105-162-175,corecaptured,38992,,"CCFile::captureLog Received Capture notice id: 1499506366.010075, reason = AuthFail:sts:5_rsn:0",E171,"CCFile::captureLog Received Capture notice id: <*>, reason = AuthFail:sts:_rsn:" +1931,Jul,8,02:32:46,calvisitor-10-105-162-175,corecaptured,38992,,"CCFile::captureLogRun Skipping current file Dir file [2017-07-08_02,32,46.787931]-AirPortBrcm4360_Logs-004.txt, Current File [2017-07-08_02,32,46.787931]-AirPortBrcm4360_Logs-004.txt",E172,"CCFile::captureLogRun Skipping current file Dir file [<*>-<*>-<*>,<*>,<*>]-<*>, Current File [<*>-<*>-<*>,<*>,<*>]-<*>" +1932,Jul,8,02:32:47,calvisitor-10-105-162-175,corecaptured,38992,,"CCFile::copyFile fileName is [2017-07-08_02,32,47.528554]-CCIOReporter-003.xml, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/OneStats//[2017-07-08_02,32,47.528554]-CCIOReporter-003.xml, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-08_02,32,46.517498]=AssocFail:sts:2_rsn:0/OneStats//[2017-07-08_02,32,47.528554]-CCIOReporter-003.xml",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1933,Jul,8,03:12:46,calvisitor-10-105-162-175,kernel,0,,did discard act 12083 inact 17640 purgeable 20264 spec 28635 cleaned 0,E201,did discard act <*> inact <*> purgeable <*> spec <*> cleaned <*> +1934,Jul,8,03:12:46,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 25902 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +1935,Jul,8,03:12:50,authorMacBook-Pro,kernel,0,,en0::IO80211Interface::postMessage bssid changed,E56,<*>::<*>::postMessage bssid changed +1936,Jul,8,03:13:06,calvisitor-10-105-162-108,corecaptured,38992,,"CCDataTap::profileRemoved, Owner: com.apple.iokit.IO80211Family, Name: AssociationEventHistory",E166,"CCDataTap::profileRemoved, Owner: <*>, Name: <*>" +1937,Jul,8,03:13:21,calvisitor-10-105-162-108,kernel,0,,"ARPT: 784632.788065: wl0: Roamed or switched channel, reason #8, bssid 5c:50:15:36:bc:03, last RSSI -69",E143,"ARPT: <*>: wl0: Roamed or switched channel, reason #<*>, bssid <*>:<*>:<*>:<*>, last RSSI <*>" +1938,Jul,8,03:13:24,calvisitor-10-105-162-108,QQ,10018,,"DB Error: 1 ""no such table: tb_c2cMsg_2909288299""",E197,"DB Error: <*> ""no such table: <*>""" +1939,Jul,8,03:29:10,calvisitor-10-105-162-108,kernel,0,,AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving).,E110,AirPort: Link Down on en0. Reason <*> (Disassociated because station leaving). +1940,Jul,8,03:32:43,calvisitor-10-105-162-228,kernel,0,,IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0,E252,<*>(<*>)::listenerCallback - Thunderbolt HPD packet for route = <*> port = <*> unplug = <*> +1941,Jul,8,03:32:43,calvisitor-10-105-162-228,kernel,0,,**** [BroadcomBluetoothHostControllerUSBTransport][start] -- Completed (matched on Device) -- 0x8800 ****,E5,**** [BroadcomBluetoothHostControllerUSBTransport][start] -- Completed (matched on Device) -- <*> **** +1942,Jul,8,03:32:43,authorMacBook-Pro,symptomsd,215,,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.,E44,-[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record. +1943,Jul,8,03:32:46,authorMacBook-Pro,ntpd,207,,sigio_handler: sigio_handler_active != 1,E312,sigio_handler: sigio_handler_active != <*> +1944,Jul,8,04:13:32,calvisitor-10-105-162-228,kernel,0,,Wake reason: ARPT (Network),E336,Wake reason: ARPT (Network) +1945,Jul,8,04:13:32,calvisitor-10-105-162-228,blued,85,,Host controller terminated,E244,Host controller terminated +1946,Jul,8,04:13:32,calvisitor-10-105-162-228,kernel,0,,[HID] [MT] AppleActuatorHIDEventDriver::start entered,E34,[HID] [MT] AppleActuatorHIDEventDriver::start entered +1947,Jul,8,04:13:32,authorMacBook-Pro,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +1948,Jul,8,04:13:39,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Evaluating,E164,Captive: CNPluginHandler en0: Evaluating +1949,Jul,8,04:13:39,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Authenticated,E163,Captive: CNPluginHandler en0: Authenticated +1950,Jul,8,04:16:14,calvisitor-10-105-161-176,kernel,0,,hibernate_setup(0) took 8471 ms,E239,hibernate_setup(<*>) took <*> ms +1951,Jul,8,04:16:14,authorMacBook-Pro,kernel,0,,in6_unlink_ifa: IPv6 address 0x77c911454f1528eb has no prefix,E75,<*>: IPv6 address <*> has no prefix +1952,Jul,8,04:16:14,authorMacBook-Pro,networkd,195,,__42-[NETClientConnection evaluateCrazyIvan46]_block_invoke CI46 - Hit by torpedo! QQ.10018 tc25995 121.51.36.148:443,E49,<*>-[NETClientConnection <*>]_block_invoke CI46 - Hit by torpedo! <*> <*> <*>:<*> +1953,Jul,8,04:16:15,authorMacBook-Pro,kernel,0,,"Setting BTCoex Config: enable_2G:1, profile_2g:0, enable_5G:1, profile_5G:0",E310,"Setting BTCoex Config: <*>:<*>, <*>:<*>, <*>:<*>, <*>:<*>" +1954,Jul,8,04:16:21,calvisitor-10-105-161-176,QQ,10018,,button report: 0x8002bdf,E161,button report: <*> +1955,Jul,8,04:16:21,calvisitor-10-105-161-176,QQ,10018,,FA||Url||taskID[2019353853] dealloc,E216,FA||Url||taskID[<*>] dealloc +1956,Jul,8,04:18:45,calvisitor-10-105-161-176,blued,85,,[BluetoothHIDDeviceController]ERROR: Could not find the disconnected object,E25,[BluetoothHIDDeviceController]ERROR: Could not find the disconnected object +1957,Jul,8,04:18:45,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Inactive,E165,Captive: CNPluginHandler en0: Inactive +1958,Jul,8,04:19:18,calvisitor-10-105-161-176,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO,E60,<*>::setAwdlOperatingMode Setting the AWDL operation mode from SUSPENDED to AUTO +1959,Jul,8,04:54:03,calvisitor-10-105-161-176,kernel,0,,**** [IOBluetoothHostControllerUSBTransport][start] -- completed -- result = TRUE -- 0x2800 ****,E8,**** [IOBluetoothHostControllerUSBTransport][start] -- completed -- result = <*> -- <*> **** +1960,Jul,8,04:54:12,authorMacBook-Pro,QQ,10018,,tcp_connection_handle_connect_conditions_bad 26042 failed: 3 - No network route,E318,tcp_connection_handle_connect_conditions_bad <*> failed: <*> - No network route +1961,Jul,8,05:34:31,calvisitor-10-105-160-181,kernel,0,,ARPT: 785104.988856: AirPort_Brcm43xx::syncPowerState: WWEN[enabled],E128,ARPT: <*>: <*>::syncPowerState: WWEN[enabled] +1962,Jul,8,05:34:31,calvisitor-10-105-160-181,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1963,Jul,8,05:34:31,calvisitor-10-105-160-181,kernel,0,,hibernate_machine_init reading,E230,hibernate_machine_init reading +1964,Jul,8,05:34:31,calvisitor-10-105-160-181,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1965,Jul,8,05:34:31,calvisitor-10-105-160-181,kernel,0,,AppleThunderboltGenericHAL::earlyWake - complete - took 1 milliseconds,E122,AppleThunderboltGenericHAL::earlyWake - complete - took <*> milliseconds +1966,Jul,8,05:34:31,calvisitor-10-105-160-181,blued,85,,[BluetoothHIDDeviceController]ERROR: Could not find the disconnected object,E25,[BluetoothHIDDeviceController]ERROR: Could not find the disconnected object +1967,Jul,8,05:34:44,calvisitor-10-105-162-124,configd,53,,"setting hostname to ""calvisitor-10-105-162-124.calvisitor.1918.berkeley.edu""",E311,"setting hostname to ""<*>""" +1968,Jul,8,05:51:55,calvisitor-10-105-162-124,kernel,0,,hibernate image path: /var/vm/sleepimage,E226,hibernate image path: <*> +1969,Jul,8,05:51:55,calvisitor-10-105-162-124,kernel,0,,efi pagecount 72,E205,efi pagecount <*> +1970,Jul,8,05:51:55,calvisitor-10-105-162-124,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1971,Jul,8,05:51:55,calvisitor-10-105-162-124,kernel,0,,hibernate_teardown_pmap_structs done: last_valid_compact_indx 315096,E242,hibernate_teardown_pmap_structs done: last_valid_compact_indx <*> +1972,Jul,8,05:52:04,authorMacBook-Pro,Mail,11203,,Unrecognized XSSimpleTypeDefinition: OneOff,E329,Unrecognized XSSimpleTypeDefinition: OneOff +1973,Jul,8,05:52:07,calvisitor-10-105-162-124,kernel,0,,vm_compressor_fastwake_warmup completed - took 12461 msecs,E334,vm_compressor_fastwake_warmup completed - took <*> msecs +1974,Jul,8,05:55:23,authorMacBook-Pro,corecaptured,39090,,"CCFile::captureLog Received Capture notice id: 1499518522.558304, reason = AssocFail:sts:2_rsn:0",E169,"CCFile::captureLog Received Capture notice id: <*>, reason = AssocFail:sts:_rsn:" +1975,Jul,8,05:56:40,authorMacBook-Pro,corecaptured,39090,,"CCFile::copyFile fileName is [2017-07-08_05,55,23.694116]-io80211Family-002.pcapng, source path:/var/log/CoreCapture/com.apple.iokit.IO80211Family/IO80211AWDLPeerManager//[2017-07-08_05,55,23.694116]-io80211Family-002.pcapng, dest path:/Library/Logs/CrashReporter/CoreCapture/com.apple.iokit.IO80211Family/[2017-07-08_05,56,40.163377]=AssocFail:sts:2_rsn:0/IO80211AWDLPeerManager//[2017-07-08_05,55,23.694116]-io80211Family-002.pcapng",E174,"CCFile::copyFile fileName is [<*>-<*>-<*>,<*>,<*>]-<*>, source path:<*>, dest path:<*>" +1976,Jul,8,05:56:47,authorMacBook-Pro,UserEventAgent,43,,Captive: CNPluginHandler en0: Authenticated,E163,Captive: CNPluginHandler en0: Authenticated +1977,Jul,8,05:56:53,calvisitor-10-105-162-124,WeChat,24144,,jemmytest,E253,jemmytest +1978,Jul,8,06:02:25,calvisitor-10-105-162-124,com.apple.AddressBook.ContactsAccountsService,289,,"[Accounts] Current connection, connection from pid 30318, doesn't have account access.",E21,"[Accounts] Current connection, connection from pid <*>, doesn't have account access." +1979,Jul,8,06:11:14,calvisitor-10-105-162-124,secd,276,,"securityd_xpc_dictionary_handler cloudd[326] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}",E304,"securityd_xpc_dictionary_handler cloudd[<*>] copy_matching Error Domain=NSOSStatusErrorDomain Code=<*> ""query missing class name"" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}" +1980,Jul,8,06:11:46,calvisitor-10-105-162-124,WindowServer,184,,send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.,E305,send_datagram_available_ping: pid <*> failed to act on a ping it dequeued before timing out. +1981,Jul,8,06:22:47,calvisitor-10-105-162-124,WeChat,24144,,"Unable to simultaneously satisfy constraints: ( """", """", """", """", """" ) Will attempt to recover by breaking constraint Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger.",E324,"Unable to simultaneously satisfy constraints: ( "" h=-&- v=-&- V:[NSScrollView:<*>]-(<*>)-| (Names: '|':NSView:<*> )>"", "" h=-&- v=-&- V:|-(<*>)-[NSScrollView:<*>] (Names: '|':NSView:<*> )>"", "" h=-&- v=--& V:[NSView:<*>(<*>)]>"", "" h=-&- v=-&- V:|-(<*>)-[NSView:<*>] (Names: '|':NSView:<*> )>"", "" h=-&- v=-&- V:[NSView:<*>]-(<*>)-| (Names: '|':NSView:<*> )>"" ) Will attempt to recover by breaking constraint h=-&- v=-&- V:|-(<*>)-[NSScrollView:<*>] (Names: '|':NSView:<*> )> Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger." +1982,Jul,8,06:22:52,calvisitor-10-105-162-124,com.apple.xpc.launchd,1,com.apple.xpc.launchd.domain.pid.WebContent.39146,"Path not allowed in target domain: type = pid, path = /System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc",E283,"Path not allowed in target domain: type = pid, path = <*> error = <*>: The specified service did not ship in the requestor's bundle, origin = <*>" +1983,Jul,8,06:26:32,calvisitor-10-105-162-124,GoogleSoftwareUpdateAgent,39159,,2017-07-08 06:26:32.364 GoogleSoftwareUpdateAgent[39159/0x7000002a0000] [lvl=2] -[KSAgentApp(KeystoneDelegate) updateEngineFinishedWithErrors:] Keystone finished: errors=0,E78,<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSAgentApp(KeystoneDelegate) updateEngineFinishedWithErrors:] Keystone finished: errors=<*> +1984,Jul,8,06:26:32,calvisitor-10-105-162-124,GoogleSoftwareUpdateAgent,39159,,2017-07-08 06:26:32.365 GoogleSoftwareUpdateAgent[39159/0x7000002a0000] [lvl=2] -[KSAgentApp(KeystoneThread) runKeystonesInThreadWithArg:] About to run checks for any other apps.,E79,<*>-<*>-<*> <*>:<*>:<*> GoogleSoftwareUpdateAgent[<*>/<*>] [lvl=<*>] -[KSAgentApp(KeystoneThread) runKeystonesInThreadWithArg:] About to run checks for any other apps. +1985,Jul,8,06:45:24,calvisitor-10-105-162-124,kernel,0,,ARPT: 787923.793193: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.,E139,ARPT: <*>: wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on. +1986,Jul,8,06:46:42,calvisitor-10-105-162-124,WeChat,24144,,"Arranged view frame: {{0, 0}, {260, 877}}",E152,"Arranged view frame: {{<*>, <*>}, {<*>, <*>}}" +1987,Jul,8,07:01:03,calvisitor-10-105-162-124,CalendarAgent,279,,[com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-8].],E28,[com.apple.calendar.store.log.caldav.coredav] [Refusing to parse response to PROPPATCH because of content-type: [text/html; charset=UTF-<*>].] +1988,Jul,8,07:12:41,calvisitor-10-105-162-124,kernel,0,,IO80211AWDLPeerManager::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED,E59,<*>::setAwdlOperatingMode Setting the AWDL operation mode from AUTO to SUSPENDED +1989,Jul,8,07:12:45,calvisitor-10-105-162-124,corecaptured,39203,,CCProfileMonitor::setStreamEventHandler,E179,CCProfileMonitor::setStreamEventHandler +1990,Jul,8,07:25:32,calvisitor-10-105-162-124,locationd,82,,Location icon should now be in state 'Inactive',E259,Location icon should now be in state 'Inactive' +1991,Jul,8,07:27:17,calvisitor-10-105-162-124,CommCenter,263,,Telling CSI to go low power.,E321,Telling CSI to go low power. +1992,Jul,8,07:27:36,calvisitor-10-105-162-124,kernel,0,,ARPT: 790457.609414: AirPort_Brcm43xx::powerChange: System Sleep,E126,ARPT: <*>: <*>::powerChange: System Sleep +1993,Jul,8,07:29:50,authorMacBook-Pro,Dock,307,,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-08 14:29:50 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319),E48,-[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (<*>) UASuggestedActionType=<*> (<*>)/(<*>) opts=(<*>) when=<*> +1994,Jul,8,07:30:15,calvisitor-10-105-162-124,secd,276,,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=1035 ""Account identity not set"" UserInfo={NSDescription=Account identity not set}",E313,"SOSAccountThisDeviceCanSyncWithCircle sync with device failure: Error Domain=com.apple.security.sos.error Code=<*> ""Account identity not set"" UserInfo={NSDescription=Account identity not set}" +1995,Jul,8,07:31:20,calvisitor-10-105-162-124,kernel,0,,Bluetooth -- LE is supported - Disable LE meta event,E157,Bluetooth -- LE is supported - Disable LE meta event +1996,Jul,8,07:32:03,calvisitor-10-105-162-124,kernel,0,,ARPT: 790564.863081: wl0: MDNS: IPV6 Addr: 2607:f140:6000:8:c6b3:1ff:fecd:467f,E142,ARPT: <*>: wl0: MDNS: IPV6 Addr: <*> +1997,Jul,8,07:43:38,calvisitor-10-105-162-124,kernel,0,,"USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3",E331,USBMSC Identifier (non-unique): <*> +1998,Jul,8,07:57:11,calvisitor-10-105-162-124,kernel,0,,AppleCamIn::systemWakeCall - messageType = 0xE0000340,E120,AppleCamIn::systemWakeCall - messageType = <*> +1999,Jul,8,08:10:46,calvisitor-10-105-162-124,kernel,0,,Wake reason: RTC (Alarm),E338,Wake reason: RTC (Alarm) +2000,Jul,8,08:10:46,calvisitor-10-105-162-124,kernel,0,,AppleCamIn::wakeEventHandlerThread,E121,AppleCamIn::wakeEventHandlerThread From 9a52591e42c18b6f7d9130b74c66b975793d2a61 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Mon, 2 Feb 2026 15:14:59 +0100 Subject: [PATCH 23/28] adapt NewValueDetector to use persistency class --- src/detectmatelibrary/common/detector.py | 41 +++++++++- .../common/persistency/event_persistency.py | 8 +- .../detectors/new_value_detector.py | 75 +++++++++++++++---- .../test_detectors/test_new_value_detector.py | 39 ++++++---- 4 files changed, 131 insertions(+), 32 deletions(-) diff --git a/src/detectmatelibrary/common/detector.py b/src/detectmatelibrary/common/detector.py index 43965b1..2dc5564 100644 --- a/src/detectmatelibrary/common/detector.py +++ b/src/detectmatelibrary/common/detector.py @@ -1,3 +1,4 @@ +from detectmatelibrary.common._config._formats import AllLogVariables, LogVariables from detectmatelibrary.common.core import CoreComponent, CoreConfig from detectmatelibrary.utils.data_buffer import ArgsBuffer, BufferMode @@ -6,7 +7,7 @@ from detectmatelibrary.schemas import ParserSchema, DetectorSchema from typing_extensions import override -from typing import List, Optional, Any +from typing import Dict, List, Optional, Any def _extract_timestamp( @@ -36,7 +37,7 @@ class CoreDetectorConfig(CoreConfig): method_type: str = "core_detector" parser: str = "" - auto_config: bool = False + auto_config: bool = True class CoreDetector(CoreComponent): @@ -88,3 +89,39 @@ def train( self, input_: ParserSchema | list[ParserSchema] # type: ignore ) -> None: pass + + @staticmethod + def get_configured_variables( + input_: ParserSchema, + log_variables: LogVariables | AllLogVariables | dict[str, Any], + ) -> Dict[str, Any]: + """Extract variables from input based on what's defined in the config. + + Args: + input_: Parser schema containing variables and logFormatVariables + log_variables: Config specifying which variables to extract per EventID + + Returns: + Dict mapping variable names to their values from the input + """ + event_id = input_["EventID"] + result: Dict[str, Any] = {} + + # Get the config for this event + event_config = log_variables[event_id] if event_id in log_variables else None + if event_config is None: + return result + + # Extract template variables by position + if hasattr(event_config, "variables"): + for pos, var in event_config.variables.items(): + if pos < len(input_["variables"]): + result[var.name] = input_["variables"][pos] + + # Extract header/log format variables by name + if hasattr(event_config, "header_variables"): + for name in event_config.header_variables: + if name in input_["logFormatVariables"]: + result[name] = input_["logFormatVariables"][name] + + return result diff --git a/src/detectmatelibrary/common/persistency/event_persistency.py b/src/detectmatelibrary/common/persistency/event_persistency.py index 7d922ab..4861b8a 100644 --- a/src/detectmatelibrary/common/persistency/event_persistency.py +++ b/src/detectmatelibrary/common/persistency/event_persistency.py @@ -35,12 +35,14 @@ def ingest_event( self, event_id: int, event_template: str, - variables: list[Any], - log_format_variables: Dict[str, Any], + variables: list[Any] = [], + named_variables: Dict[str, Any] = {} ) -> None: """Ingest event data into the appropriate EventData store.""" + if not variables and not named_variables: + return self.event_templates[event_id] = event_template - all_variables = self.get_all_variables(variables, log_format_variables) + all_variables = self.get_all_variables(variables, named_variables) data_structure = self.events_data.get(event_id) if data_structure is None: diff --git a/src/detectmatelibrary/detectors/new_value_detector.py b/src/detectmatelibrary/detectors/new_value_detector.py index 48a7c92..4dbb499 100644 --- a/src/detectmatelibrary/detectors/new_value_detector.py +++ b/src/detectmatelibrary/detectors/new_value_detector.py @@ -1,13 +1,18 @@ +from detectmatelibrary.common._config import generate_detector_config from detectmatelibrary.common._config._formats import LogVariables, AllLogVariables from detectmatelibrary.common.detector import CoreDetectorConfig from detectmatelibrary.common.detector import CoreDetector +from detectmatelibrary.common.persistency.event_data_structures.trackers.stability.stability_tracker import ( + EventStabilityTracker +) +from detectmatelibrary.common.persistency.event_persistency import EventPersistency from detectmatelibrary.utils.data_buffer import BufferMode from detectmatelibrary.schemas import ParserSchema, DetectorSchema -from typing import Any, cast +from typing import Any # *************** New value methods **************************************** @@ -82,7 +87,9 @@ class NewValueDetector(CoreDetector): """Detect new values in log data as anomalies based on learned values.""" def __init__( - self, name: str = "NewValueDetector", config: CoreDetectorConfig = CoreDetectorConfig() + self, + name: str = "NewValueDetector", + config: NewValueDetectorConfig = NewValueDetectorConfig() ) -> None: if isinstance(config, dict): @@ -90,13 +97,23 @@ def __init__( super().__init__(name=name, buffer_mode=BufferMode.NO_BUF, config=config) - self.config = cast(NewValueDetectorConfig, self.config) - self.known_values: dict[str, Any] = {} + self.config: NewValueDetectorConfig # type narrowing for IDE + + self.persistency = EventPersistency( + event_data_class=EventStabilityTracker, + ) + # auto config checks if individual variables are stable to select combos from + self.auto_conf_persistency = EventPersistency( + event_data_class=EventStabilityTracker + ) def train(self, input_: ParserSchema) -> None: # type: ignore """Train the detector by learning values from the input data.""" - train_new_values( - known_values=self.known_values, input_=input_, variables=self.config.log_variables # type: ignore + configured_variables = self.get_configured_variables(input_, self.config.log_variables) + self.persistency.ingest_event( + event_id=input_["EventID"], + event_template=input_["template"], + named_variables=configured_variables ) def detect( @@ -105,17 +122,49 @@ def detect( """Detect new values in the input data.""" alerts: dict[str, str] = {} - overall_score = detect_new_values( - known_values=self.known_values, - input_=input_, - variables=self.config.log_variables, # type: ignore - alerts=alerts - ) + configured_variables = self.get_configured_variables(input_, self.config.log_variables) + + overall_score = 0.0 + + for event_id, event_tracker in self.persistency.get_events_data().items(): + for event_id, multi_tracker in event_tracker.get_data().items(): + value = configured_variables.get(event_id) + if value is None: + continue + if value not in multi_tracker.unique_set: + alerts[f"EventID {event_id}"] = ( + f"Unknown value: {value} detected." + ) + overall_score += 1.0 if overall_score > 0: output_["score"] = overall_score - output_["description"] = "Method that detect new value in the logs" + output_["description"] = "Method that detect new values in the logs" output_["alertsObtain"].update(alerts) return True return False + + def configure(self, input_: ParserSchema) -> None: + self.auto_conf_persistency.ingest_event( + event_id=input_["EventID"], + event_template=input_["template"], + variables=input_["variables"], + named_variables=input_["logFormatVariables"], + ) + + def set_configuration(self) -> None: + variables = {} + templates = {} + for event_id, tracker in self.auto_conf_persistency.get_events_data().items(): + stable_vars = tracker.get_variables_by_classification("STABLE") # type: ignore + variables[event_id] = stable_vars + templates[event_id] = self.auto_conf_persistency.get_event_template(event_id) + config_dict = generate_detector_config( + variable_selection=variables, + templates=templates, + detector_name=self.name, + method_type=self.config.method_type, + ) + # Update the config object from the dictionary instead of replacing it + self.config = NewValueDetectorConfig.from_dict(config_dict, self.name) diff --git a/tests/test_detectors/test_new_value_detector.py b/tests/test_detectors/test_new_value_detector.py index c2b547d..ae77a0a 100644 --- a/tests/test_detectors/test_new_value_detector.py +++ b/tests/test_detectors/test_new_value_detector.py @@ -81,14 +81,15 @@ def test_default_initialization(self): assert detector.data_buffer.mode == BufferMode.NO_BUF assert detector.input_schema == schemas.ParserSchema assert detector.output_schema == schemas.DetectorSchema - assert hasattr(detector, 'known_values') + assert hasattr(detector, 'persistency') def test_custom_config_initialization(self): """Test detector initialization with custom configuration.""" detector = NewValueDetector(name="CustomInit", config=config) assert detector.name == "CustomInit" - assert isinstance(detector.known_values, dict) + assert hasattr(detector, 'persistency') + assert isinstance(detector.persistency.events_data, dict) class TestNewValueDetectorTraining: @@ -113,17 +114,22 @@ def test_train_all_multiple_values(self): }) detector.train(parser_data) - # Verify all values were learned - assert len(detector.known_values) == 2 - assert "INFO" in detector.known_values["level"] - assert "WARNING" in detector.known_values["level"] - assert "ERROR" in detector.known_values["level"] - assert "assa" in detector.known_values[1] + # Verify all values were learned via persistency + event_data = detector.persistency.get_event_data(1) + assert event_data is not None + # Check that we track 2 variables: "level" (header) and "test" (from pos 1) + assert len(event_data) == 2 + # Check the level values + assert "INFO" in event_data["level"].unique_set + assert "WARNING" in event_data["level"].unique_set + assert "ERROR" in event_data["level"].unique_set + # Check the variable at position 1 (named "test") + assert "assa" in event_data["test"].unique_set def test_train_multiple_values(self): """Test training with multiple different values.""" detector = NewValueDetector(config=config, name="MultipleDetector") - # Train with multiple values + # Train with multiple values (only event 1 should be tracked per config) for event in range(3): for level in ["INFO", "WARNING", "ERROR"]: parser_data = schemas.ParserSchema({ @@ -139,11 +145,16 @@ def test_train_multiple_values(self): }) detector.train(parser_data) - assert len(detector.known_values) == 1 - assert "INFO" in detector.known_values[1]["level"] - assert "WARNING" in detector.known_values[1]["level"] - assert "ERROR" in detector.known_values[1]["level"] - assert "assa" in detector.known_values[1][1] + # Only event 1 should be tracked (based on log_variables config) + assert len(detector.persistency.events_data) == 1 + event_data = detector.persistency.get_event_data(1) + assert event_data is not None + # Check the level values + assert "INFO" in event_data["level"].unique_set + assert "WARNING" in event_data["level"].unique_set + assert "ERROR" in event_data["level"].unique_set + # Check the variable at position 1 (named "test") + assert "assa" in event_data["test"].unique_set class TestNewValueDetectorDetection: From ebfcbd7c741b6ea1204674698c8996d795cbb7e7 Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Tue, 3 Feb 2026 12:01:01 +0100 Subject: [PATCH 24/28] fix persistency tests --- tests/test_common/test_persistency.py | 36 ++++--- tests/test_common/test_stability_tracking.py | 102 +++++++++--------- .../test_new_value_combo_detector.py | 2 +- 3 files changed, 69 insertions(+), 71 deletions(-) diff --git a/tests/test_common/test_persistency.py b/tests/test_common/test_persistency.py index e730619..ac3c7c6 100644 --- a/tests/test_common/test_persistency.py +++ b/tests/test_common/test_persistency.py @@ -15,6 +15,7 @@ from detectmatelibrary.common.persistency.event_data_structures.trackers import ( EventTracker, SingleStabilityTracker, + EventStabilityTracker ) @@ -23,21 +24,21 @@ "event_id": "E001", "event_template": "User <*> logged in from <*>", "variables": ["alice", "192.168.1.1"], - "log_format_variables": {"timestamp": "2024-01-01 10:00:00"}, + "named_variables": {"timestamp": "2024-01-01 10:00:00"}, } SAMPLE_EVENT_2 = { "event_id": "E002", "event_template": "Error in module <*>: <*>", "variables": ["auth", "timeout"], - "log_format_variables": {"timestamp": "2024-01-01 10:01:00"}, + "named_variables": {"timestamp": "2024-01-01 10:01:00"}, } SAMPLE_EVENT_3 = { "event_id": "E001", "event_template": "User <*> logged in from <*>", "variables": ["bob", "192.168.1.2"], - "log_format_variables": {"timestamp": "2024-01-01 10:02:00"}, + "named_variables": {"timestamp": "2024-01-01 10:02:00"}, } @@ -151,15 +152,17 @@ def test_variable_blacklist(self): assert "var_0" in data.columns # First variable should be present assert "var_1" not in data.columns # Second variable should be blocked - def test_get_all_variables_static_method(self): - """Test the get_all_variables static method.""" + def test_get_all_variables_method(self): + """Test the get_all_variables instance method.""" variables = ["value1", "value2", "value3"] - log_format_variables = {"timestamp": "2024-01-01", "level": "INFO"} + named_variables = {"timestamp": "2024-01-01", "level": "INFO"} blacklist = [1] # Blacklist index 1 - combined = EventPersistency.get_all_variables( - variables, log_format_variables, blacklist + persistency = EventPersistency( + event_data_class=EventDataFrame, + variable_blacklist=blacklist, ) + combined = persistency.get_all_variables(variables, named_variables) assert "timestamp" in combined assert "level" in combined @@ -314,7 +317,7 @@ def test_pandas_backend_full_workflow(self): event_id=f"E{i % 3}", event_template=f"Template {i % 3}", variables=[str(i), str(i * 10)], - log_format_variables={}, + named_variables={}, ) # Verify all events stored @@ -339,7 +342,7 @@ def test_polars_backend_full_workflow(self): event_id="E001", event_template="Test template", variables=[str(i)], - log_format_variables={}, + named_variables={}, ) # Verify data retrieval works @@ -350,8 +353,7 @@ def test_polars_backend_full_workflow(self): def test_tracker_backend_full_workflow(self): """Test complete workflow with Tracker backend.""" persistency = EventPersistency( - event_data_class=EventTracker, - event_data_kwargs={"tracker_type": SingleStabilityTracker}, + event_data_class=EventStabilityTracker, ) # Ingest events with patterns @@ -360,7 +362,7 @@ def test_tracker_backend_full_workflow(self): event_id="E001", event_template="Test template", variables=["constant", str(i)], - log_format_variables={}, + named_variables={}, ) # Verify tracker functionality @@ -384,7 +386,7 @@ def test_mixed_event_ids_and_templates(self): event_id=event_id, event_template=template, variables=variables, - log_format_variables={}, + named_variables={}, ) # Verify correct storage @@ -410,7 +412,7 @@ def test_large_scale_ingestion(self): event_id=f"E{i % 10}", event_template=f"Template {i % 10}", variables=[str(i), str(i * 2)], - log_format_variables={"timestamp": f"2024-01-01 10:{i % 60}:00"}, + named_variables={"timestamp": f"2024-01-01 10:{i % 60}:00"}, ) # Verify all data stored @@ -437,7 +439,7 @@ def test_variable_blacklist_across_backends(self): event_id="E001", event_template="Test", variables=["alice", "1234"], - log_format_variables={"timestamp": "2024-01-01"}, + named_variables={"timestamp": "2024-01-01"}, ) data1 = p1.get_event_data("E001") assert "var_0" in data1.columns # First variable @@ -453,7 +455,7 @@ def test_variable_blacklist_across_backends(self): event_id="E001", event_template="Test", variables=["bob", "5678"], - log_format_variables={"timestamp": "2024-01-02"}, + named_variables={"timestamp": "2024-01-02"}, ) data2 = p2.get_event_data("E001") assert "var_0" in data2.columns # First variable diff --git a/tests/test_common/test_stability_tracking.py b/tests/test_common/test_stability_tracking.py index 1ea0d90..b9ade74 100644 --- a/tests/test_common/test_stability_tracking.py +++ b/tests/test_common/test_stability_tracking.py @@ -8,14 +8,10 @@ from detectmatelibrary.common.persistency.event_data_structures.trackers import ( StabilityClassifier, SingleStabilityTracker, - MultiTracker, - EventTracker, + MultiStabilityTracker, + EventStabilityTracker, Classification, ) -from detectmatelibrary.common.persistency.event_data_structures.trackers.converter import ( - InvariantConverter, - ComboConverter, -) from detectmatelibrary.utils.RLE_list import RLEList @@ -223,22 +219,22 @@ def test_change_detection(self): class TestMultiVariableTracker: - """Test suite for MultiVariableTracker manager.""" + """Test suite for MultiStabilityTracker manager.""" def test_initialization_default(self): - """Test MultiVariableTracker initialization.""" - trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) + """Test MultiStabilityTracker initialization.""" + trackers = MultiStabilityTracker(single_tracker_type=SingleStabilityTracker) assert trackers is not None - assert trackers.tracker_type == SingleStabilityTracker + assert trackers.single_tracker_type == SingleStabilityTracker def test_initialization_with_kwargs(self): - """Test initialization without kwargs - MultiVariableTracker doesn't store tracker kwargs.""" - trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) - assert trackers.tracker_type == SingleStabilityTracker + """Test initialization without kwargs - MultiStabilityTracker doesn't store tracker kwargs.""" + trackers = MultiStabilityTracker(single_tracker_type=SingleStabilityTracker) + assert trackers.single_tracker_type == SingleStabilityTracker def test_add_data_single_variable(self): """Test adding data for a single variable.""" - trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) + trackers = MultiStabilityTracker(single_tracker_type=SingleStabilityTracker) data = {"var1": "value1"} trackers.add_data(data) @@ -248,7 +244,7 @@ def test_add_data_single_variable(self): def test_add_data_multiple_variables(self): """Test adding data for multiple variables.""" - trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) + trackers = MultiStabilityTracker(single_tracker_type=SingleStabilityTracker) data = {"var1": "value1", "var2": "value2", "var3": "value3"} trackers.add_data(data) @@ -260,7 +256,7 @@ def test_add_data_multiple_variables(self): def test_add_data_multiple_times(self): """Test adding data multiple times.""" - trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) + trackers = MultiStabilityTracker(single_tracker_type=SingleStabilityTracker) trackers.add_data({"var1": "a", "var2": "x"}) trackers.add_data({"var1": "b", "var2": "y"}) @@ -272,7 +268,7 @@ def test_add_data_multiple_times(self): def test_classify_all_variables(self): """Test classifying all variables.""" - trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) + trackers = MultiStabilityTracker(single_tracker_type=SingleStabilityTracker) # Add enough data for classification for i in range(10): @@ -285,7 +281,7 @@ def test_classify_all_variables(self): def test_get_stable_variables(self): """Test retrieving stable variables.""" - trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) + trackers = MultiStabilityTracker(single_tracker_type=SingleStabilityTracker) # Create stable pattern for i in range(40): @@ -300,7 +296,7 @@ def test_get_stable_variables(self): def test_get_trackers(self): """Test retrieving all trackers.""" - trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) + trackers = MultiStabilityTracker(single_tracker_type=SingleStabilityTracker) trackers.add_data({"var1": "a", "var2": "b"}) all_trackers = trackers.get_trackers() @@ -309,7 +305,7 @@ def test_get_trackers(self): def test_dynamic_tracker_creation(self): """Test that trackers are created dynamically.""" - trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) + trackers = MultiStabilityTracker(single_tracker_type=SingleStabilityTracker) # First add trackers.add_data({"var1": "a"}) @@ -325,17 +321,17 @@ def test_dynamic_tracker_creation(self): class TestEventVariableTrackerData: - """Test suite for EventVariableTrackerData.""" + """Test suite for EventStabilityTracker.""" def test_initialization(self): - """Test EventVariableTrackerData initialization.""" - evt = EventTracker(tracker_type=SingleStabilityTracker) + """Test EventStabilityTracker initialization.""" + evt = EventStabilityTracker() assert evt is not None - assert isinstance(evt.multi_tracker, MultiTracker) + assert isinstance(evt.multi_tracker, MultiStabilityTracker) def test_add_data(self): """Test adding data.""" - evt = EventTracker(tracker_type=SingleStabilityTracker) + evt = EventStabilityTracker() data = {"var1": "value1", "var2": "value2"} evt.add_data(data) @@ -345,7 +341,7 @@ def test_add_data(self): def test_get_variables(self): """Test retrieving variable names.""" - evt = EventTracker(tracker_type=SingleStabilityTracker) + evt = EventStabilityTracker() evt.add_data({"var1": "a", "var2": "b", "var3": "c"}) var_names = evt.get_variables() @@ -356,7 +352,7 @@ def test_get_variables(self): def test_get_stable_variables(self): """Test retrieving stable variables.""" - evt = EventTracker(tracker_type=SingleStabilityTracker) + evt = EventStabilityTracker() for i in range(40): evt.add_data({ @@ -368,8 +364,8 @@ def test_get_stable_variables(self): assert isinstance(stable_vars, list) def test_integration_with_stability_tracker(self): - """Test full integration with SingleVariableTracker.""" - evt = EventTracker(tracker_type=SingleStabilityTracker) + """Test full integration with SingleStabilityTracker.""" + evt = EventStabilityTracker() # Simulate log processing for i in range(50): @@ -386,33 +382,35 @@ def test_integration_with_stability_tracker(self): assert len(var_names) == 3 assert isinstance(stable_vars, list) - def test_to_data_with_variable_level(self): - """Test to_data method with variable level (default).""" - evt = EventTracker(tracker_type=SingleStabilityTracker, feature_type="variable") + def test_to_data_default_converter(self): + """Test to_data method with default converter (identity function).""" + evt = EventStabilityTracker() raw_data = {"var1": "value1", "var2": "value2"} converted_data = evt.to_data(raw_data) - # Should use invariant_conversion which returns the dict as-is + # Default converter returns the dict as-is assert converted_data == raw_data assert "var1" in converted_data assert "var2" in converted_data - def test_to_data_with_variable_combo_level(self): - """Test to_data method with variable_combo level.""" - evt = EventTracker(tracker_type=SingleStabilityTracker, feature_type="variable_combo") + def test_to_data_with_custom_converter(self): + """Test to_data method with custom converter function.""" + # Custom converter that uppercases string values + def uppercase_converter(data: dict) -> dict: + return {k: v.upper() if isinstance(v, str) else v for k, v in data.items()} + + evt = EventStabilityTracker(converter_function=uppercase_converter) - raw_data = {"combo1": ("a", "b"), "combo2": ("x", "y")} + raw_data = {"var1": "value1", "var2": "value2"} converted_data = evt.to_data(raw_data) - # Should use combo_conversion which returns the dict as-is - assert converted_data == raw_data - assert "combo1" in converted_data - assert "combo2" in converted_data + assert converted_data["var1"] == "VALUE1" + assert converted_data["var2"] == "VALUE2" def test_to_data_integration_with_add_data(self): """Test that to_data and add_data work together correctly.""" - evt = EventTracker(tracker_type=SingleStabilityTracker, feature_type="variable") + evt = EventStabilityTracker() # Use to_data to convert raw data, then add it raw_data = {"user": "alice", "ip": "192.168.1.1"} @@ -425,14 +423,12 @@ def test_to_data_integration_with_add_data(self): assert "user" in trackers assert "ip" in trackers - def test_conversion_function_assignment(self): - """Test that converter is correctly assigned based on feature_type.""" - evt_var = EventTracker(tracker_type=SingleStabilityTracker, feature_type="variable") - evt_combo = EventTracker(tracker_type=SingleStabilityTracker, feature_type="variable_combo") - - # Check that the correct converters are assigned - assert isinstance(evt_var.converter, InvariantConverter) - assert isinstance(evt_combo.converter, ComboConverter) + def test_converter_function_is_callable(self): + """Test that converter_function is correctly set.""" + evt = EventStabilityTracker() + # Default converter should be identity function + assert callable(evt.converter_function) + assert evt.converter_function({"a": 1}) == {"a": 1} class TestClassification: @@ -495,7 +491,7 @@ def test_full_workflow_stabilizing_variable(self): def test_multiple_variables_with_different_patterns(self): """Test tracking multiple variables with different patterns.""" - trackers = MultiTracker(single_tracker_type=SingleStabilityTracker) + trackers = MultiStabilityTracker(single_tracker_type=SingleStabilityTracker) # Simulate 100 events for i in range(100): @@ -519,8 +515,8 @@ def test_multiple_variables_with_different_patterns(self): assert isinstance(classifications["status"], Classification) def test_event_variable_tracker_real_world_scenario(self): - """Test EventVariableTrackerData with realistic log data.""" - evt = EventTracker(tracker_type=SingleStabilityTracker) + """Test EventStabilityTracker with realistic log data.""" + evt = EventStabilityTracker() # Simulate web server logs for i in range(200): diff --git a/tests/test_detectors/test_new_value_combo_detector.py b/tests/test_detectors/test_new_value_combo_detector.py index 9bf8183..a683a99 100644 --- a/tests/test_detectors/test_new_value_combo_detector.py +++ b/tests/test_detectors/test_new_value_combo_detector.py @@ -431,7 +431,7 @@ def test_configure_method_ingests_events(self): detector.configure(parser_data) # Verify events were ingested - events_data = detector.persistency.get_events_data() + events_data = detector.auto_conf_persistency.get_events_data() assert len(events_data) == 3 assert 1 in events_data assert 2 in events_data From b990b75ad9429126c8e08ee1a668ecb4d545d3dd Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Thu, 5 Feb 2026 09:33:06 +0100 Subject: [PATCH 25/28] remove unnecessary functions --- .../detectors/new_value_detector.py | 62 ------------------- 1 file changed, 62 deletions(-) diff --git a/src/detectmatelibrary/detectors/new_value_detector.py b/src/detectmatelibrary/detectors/new_value_detector.py index 4dbb499..e658217 100644 --- a/src/detectmatelibrary/detectors/new_value_detector.py +++ b/src/detectmatelibrary/detectors/new_value_detector.py @@ -15,68 +15,6 @@ from typing import Any -# *************** New value methods **************************************** -def _get_element(input_: ParserSchema, var_pos: str | int) -> Any: - if isinstance(var_pos, str): - return input_["logFormatVariables"][var_pos] - elif len(input_["variables"]) > var_pos: - return input_["variables"][var_pos] - - -def train_new_values( - known_values: dict[str, set[Any] | dict[str, Any]], - input_: ParserSchema, - variables: AllLogVariables | LogVariables -) -> None: - - if (relevant_log_fields := variables[input_["EventID"]]) is None: - return - relevant_log_fields = relevant_log_fields.get_all() # type: ignore - - kn_v = known_values - if isinstance(variables, LogVariables): - if input_["EventID"] not in known_values: - known_values[input_["EventID"]] = {} - kn_v = known_values[input_["EventID"]] # type: ignore - - for var_pos in relevant_log_fields.keys(): # type: ignore - if var_pos not in kn_v: - kn_v[var_pos] = set() - - kn_v[var_pos].add(_get_element(input_, var_pos=var_pos)) # type: ignore - - -def detect_new_values( - known_values: dict[str, Any], - input_: ParserSchema, - variables: AllLogVariables | LogVariables, - alerts: dict[str, str], -) -> float: - - overall_score = 0.0 - if (relevant_log_fields := variables[input_["EventID"]]) is None: - return 0. - relevant_log_fields = relevant_log_fields.get_all() # type: ignore - - kn_v = known_values - if isinstance(variables, LogVariables): - if input_["EventID"] not in known_values: - return overall_score - kn_v = known_values[input_["EventID"]] - - for var_pos in relevant_log_fields.keys(): # type: ignore - score = 0.0 - value = _get_element(input_, var_pos=var_pos) - - if value not in kn_v[var_pos]: - score = 1.0 - alerts.update({f"New variable in {var_pos}": str(value)}) - overall_score += score - - return overall_score - - -# ************************************************************************ class NewValueDetectorConfig(CoreDetectorConfig): method_type: str = "new_value_detector" From 91c325dc2c2f639e356f0bd7e283f279c65fc29f Mon Sep 17 00:00:00 2001 From: viktorbeck98 Date: Fri, 6 Feb 2026 16:44:07 +0100 Subject: [PATCH 26/28] adapt config + fix detectors --- config/pipeline_config_default.yaml | 99 +++---- .../common/_config/__init__.py | 109 ++++---- .../common/_config/_compile.py | 201 +++++++++----- .../common/_config/_formats.py | 161 ++++++----- src/detectmatelibrary/common/detector.py | 4 +- .../detectors/new_value_combo_detector.py | 162 ++++++++--- .../detectors/new_value_detector.py | 17 +- .../detectors/random_detector.py | 14 +- src/detectmatelibrary/parsers/json_parser.py | 2 +- tests/test_common/test_config.py | 83 ++---- tests/test_common/test_config_roundtrip.py | 256 ++++++++++++++++++ .../test_new_value_combo_detector.py | 241 +++-------------- .../test_detectors/test_new_value_detector.py | 165 ++--------- tests/test_detectors/test_random_detector.py | 29 +- tests/test_folder/test_config.yaml | 131 ++++----- tests/test_pipelines/test_basic_pipelines.py | 2 +- 16 files changed, 869 insertions(+), 807 deletions(-) create mode 100644 tests/test_common/test_config_roundtrip.py diff --git a/config/pipeline_config_default.yaml b/config/pipeline_config_default.yaml index 16ac77b..98a53b0 100644 --- a/config/pipeline_config_default.yaml +++ b/config/pipeline_config_default.yaml @@ -41,75 +41,48 @@ detectors: RandomDetector: method_type: random_detector auto_config: False - params: - log_variables: - - id: test - event: 1 - template: dummy_template - variables: - - pos: 0 - name: var1 - params: - threshold: 0. - header_variables: - - pos: level - params: {} + params: {} + events: + 1: + test: + params: {} + variables: + - pos: 0 + name: var1 + params: + threshold: 0. + header_variables: + - pos: level + params: {} NewValueDetector: method_type: new_value_detector auto_config: False - params: - log_variables: - - id: test - event: 1 - template: dummy_template - variables: - - pos: 0 - name: var1 - params: - threshold: 0. - header_variables: - - pos: level - params: {} - NewValueDetector_All: - method_type: new_value_detector - auto_config: False - params: - all_log_variables: - variables: - - pos: 0 - name: var1 - params: - threshold: 0. - header_variables: - - pos: level - params: {} + params: {} + events: + 1: + test: + params: {} + variables: + - pos: 0 + name: var1 + params: + threshold: 0. + header_variables: + - pos: level + params: {} NewValueComboDetector: method_type: new_value_combo_detector auto_config: False params: - comb_size: 2 - log_variables: - - id: test - event: 1 - template: dummy_template - variables: - - pos: 0 - name: var1 - header_variables: - - pos: level - NewValueComboDetector_All: - method_type: new_value_combo_detector - auto_config: False - params: - comb_size: 2 - all_log_variables: - variables: - - pos: 0 - name: var1 - params: - threshold: 0. - header_variables: - - pos: level - params: {} + comb_size: 3 + events: + 1: + test: + params: {} + variables: + - pos: 0 + name: var1 + header_variables: + - pos: level diff --git a/src/detectmatelibrary/common/_config/__init__.py b/src/detectmatelibrary/common/_config/__init__.py index 5aa90ff..297201c 100644 --- a/src/detectmatelibrary/common/_config/__init__.py +++ b/src/detectmatelibrary/common/_config/__init__.py @@ -1,9 +1,12 @@ -from detectmatelibrary.common._config._compile import ConfigMethods +from detectmatelibrary.common._config._compile import ConfigMethods, generate_detector_config +from detectmatelibrary.common._config._formats import EventsConfig + +__all__ = ["ConfigMethods", "generate_detector_config", "EventsConfig", "BasicConfig"] from pydantic import BaseModel, ConfigDict from typing_extensions import Self -from typing import Any, Dict, List, Optional +from typing import Any, Dict from copy import deepcopy @@ -36,60 +39,54 @@ def from_dict(cls, data: Dict[str, Any], method_id: str) -> Self: return cls(**ConfigMethods.process(config_)) + def to_dict(self, method_id: str) -> Dict[str, Any]: + """Convert the config back to YAML-compatible dictionary format. + + This is the inverse of from_dict() and ensures yaml -> pydantic -> yaml preservation. + + Args: + method_id: The method identifier to use in the output structure + + Returns: + Dictionary with structure: {comp_type: {method_id: config_data}} + """ + # Build the config in the format expected by from_dict + result: Dict[str, Any] = { + "method_type": self.method_type, + "auto_config": self.auto_config, + } -def generate_detector_config( - variable_selection: Dict[int, List[str]], - templates: Dict[Any, str | None], - detector_name: str, - method_type: str, - base_config: Optional[Dict[str, Any]] = None, - **additional_params: Any, -) -> Dict[str, Any]: - """Generate the configuration for detectors. Output is a dictionary. - - Args: - variable_selection (Dict[int, List[str]]): Mapping of event IDs to variable names. - templates (Dict[Any, str | None]): Mapping of event IDs to their templates. - detector_name (str): Name of the detector. - method_type (str): Type of the detection method. - base_config (Optional[Dict[str, Any]]): Base configuration to build upon. - **additional_params: Additional parameters for the detector. - """ - - if base_config is None: - base_config = { - "detectors": { - detector_name: { - "method_type": method_type, - "auto_config": False, - "params": { - "log_variables": [] - }, - } + # Collect all non-meta fields for params + params = {} + events_data = None + + for field_name, field_value in self: + # Skip meta fields + if field_name in ("comp_type", "method_type", "auto_config"): + continue + + # Handle EventsConfig specially + if field_name == "events": + if field_value is not None: + if isinstance(field_value, EventsConfig): + events_data = field_value.to_dict() + else: + events_data = field_value + else: + # All other fields go into params + params[field_name] = field_value + + # Add params if there are any + if params: + result["params"] = params + + # Add events if they exist + if events_data is not None: + result["events"] = events_data + + # Wrap in the comp_type and method_id structure + return { + self.comp_type: { + method_id: result } } - config = deepcopy(base_config) - - detectors = config.setdefault("detectors", {}) - detector = detectors.setdefault(detector_name, {}) - detector.setdefault("method_type", method_type) - detector.setdefault("auto_config", False) - params = detector.setdefault("params", {}) - params.update(additional_params) - log_variables = params.setdefault("log_variables", []) - - for event_id, all_variables in variable_selection.items(): - variables = [ - {"pos": int(name.split("_")[1]), "name": name} - for name in all_variables if name.startswith("var_") - ] - header_variables = [{"pos": name} for name in all_variables if not name.startswith("var_")] - - log_variables.append({ - "id": f"id_{event_id}", - "event": event_id, - "template": templates.get(event_id, ""), - "variables": variables, - "header_variables": header_variables, - }) - return config diff --git a/src/detectmatelibrary/common/_config/_compile.py b/src/detectmatelibrary/common/_config/_compile.py index 8de129b..d61ce8d 100644 --- a/src/detectmatelibrary/common/_config/_compile.py +++ b/src/detectmatelibrary/common/_config/_compile.py @@ -1,10 +1,43 @@ +from detectmatelibrary.common._config._formats import EventsConfig -from detectmatelibrary.common._config._formats import apply_format +from typing import Any, Dict, List, Sequence, Tuple, Union +import warnings +import re -from typing import Any, Dict, List, Optional -from copy import deepcopy -import warnings +def _classify_variables( + var_names: Sequence[str], var_pattern: re.Pattern[str] +) -> Dict[str, Any]: + """Classify variable names into positional and header variables. + + Returns an instance config dict with 'params', 'variables', and + 'header_variables' keys. + """ + positional_variables = [] + header_variables = [] + + for var_name in var_names: + match = var_pattern.match(var_name) + if match: + position = int(match.group(1)) + positional_variables.append({ + "pos": position, + "name": var_name, + "params": {} + }) + else: + header_variables.append({ + "pos": var_name, + "params": {} + }) + + instance_config: Dict[str, Any] = {"params": {}} + if positional_variables: + instance_config["variables"] = positional_variables + if header_variables: + instance_config["header_variables"] = header_variables + + return instance_config class MethodNotFoundError(Exception): @@ -26,19 +59,14 @@ def __init__(self, expected_type: str, actual_type: str) -> None: ) -class AutoConfigError(Exception): +class MissingParamsWarning(UserWarning): def __init__(self) -> None: - super().__init__("When auto_config = False, there must be a params field.") + super().__init__("'auto_config = False' and no 'params' or 'events' provided. Is that intended?") class AutoConfigWarning(UserWarning): def __init__(self) -> None: - super().__init__("auto_config = True will overwrite your params.") - - -class MissingFormat(Exception): - def __init__(self) -> None: - super().__init__("params is a list an is missing its format id") + super().__init__("'auto_config = True' will overwrite 'events' and 'params'.") class ConfigMethods: @@ -57,87 +85,114 @@ def get_method( return args[method_id] @staticmethod - def check_type(config: Dict[str, Any], method_type: str) -> MethodTypeNotMatch | None: + def check_type(config: Dict[str, Any], method_type: str) -> None: if config["method_type"] != method_type: raise MethodTypeNotMatch(expected_type=method_type, actual_type=config["method_type"]) - return None @staticmethod def process(config: Dict[str, Any]) -> Dict[str, Any]: - if "params" not in config and not config["auto_config"]: - raise AutoConfigError() + has_params = "params" in config + has_events = "events" in config - if "params" in config: - if config["auto_config"]: - warnings.warn(AutoConfigWarning()) - if isinstance(config["params"], list): - raise MissingFormat() + if not has_params and not has_events and not config.get("auto_config", False): + warnings.warn(MissingParamsWarning()) - for param in config["params"].copy(): - config["params"][param.replace("all_", "")] = apply_format( - param, config["params"][param] - ) - if "all_" in param: - config["params"].pop(param) + if has_params: + if config.get("auto_config", False): + warnings.warn(AutoConfigWarning()) config.update(config["params"]) config.pop("params") + + # Handle "events" key at top level + if has_events: + config["events"] = EventsConfig._init(config["events"]) + return config def generate_detector_config( - variable_selection: Dict[int, List[str]], - templates: Dict[Any, str | None], + variable_selection: Dict[int, List[Union[str, Tuple[str, ...]]]], detector_name: str, method_type: str, - base_config: Optional[Dict[str, Any]] = None, - **additional_params: Any, + **additional_params: Any ) -> Dict[str, Any]: - """Generate the configuration for detectors. Output is a dictionary. + """Generate a detector configuration dictionary from variable selections. + + Transforms a variable selection mapping into the nested configuration + structure required by detector configs. Supports both individual variable + names (strings) and tuples of variable names. Each tuple produces a + separate detector instance in the config. Args: - variable_selection (Dict[int, List[str]]): Mapping of event IDs to variable names. - templates (Dict[Any, str | None]): Mapping of event IDs to their templates. - detector_name (str): Name of the detector. - method_type (str): Type of the detection method. - base_config (Optional[Dict[str, Any]]): Base configuration to build upon. - **additional_params: Additional parameters for the detector. + variable_selection: Maps event_id to list of variable names or tuples + of variable names. Strings are grouped into a single instance. + Each tuple becomes its own instance. Variable names matching + 'var_\\d+' are positional template variables; others are header + variables. + detector_name: Name of the detector, used as the base instance_id. + method_type: Type of detection method (e.g., "new_value_detector"). + **additional_params: Additional parameters for the detector's params + dict (e.g., comb_size=3). + + Returns: + Dictionary with structure compatible with detector config classes. + + Examples: + Single variable names (one instance per event):: + + config = generate_detector_config( + variable_selection={1: ["var_0", "var_1", "level"]}, + detector_name="MyDetector", + method_type="new_value_detector", + ) + + Tuples of variable names (one instance per tuple):: + + config = generate_detector_config( + variable_selection={1: [("username", "src_ip"), ("var_0", "var_1")]}, + detector_name="MyDetector", + method_type="new_value_combo_detector", + comb_size=2, + ) """ + var_pattern = re.compile(r"^var_(\d+)$") + + events_config: Dict[int, Dict[str, Any]] = {} + + for event_id, variable_names in variable_selection.items(): + instances: Dict[str, Any] = {} + + # Separate plain strings from tuples + single_vars: List[str] = [] + tuple_vars: List[Tuple[str, ...]] = [] - if base_config is None: - base_config = { - "detectors": { - detector_name: { - "method_type": method_type, - "auto_config": False, - "params": { - "log_variables": [] - }, - } + for entry in variable_names: + if isinstance(entry, tuple): + tuple_vars.append(entry) + else: + single_vars.append(entry) + + # Plain strings -> single instance keyed by detector_name + if single_vars: + instances[detector_name] = _classify_variables(single_vars, var_pattern) + + # Each tuple -> its own instance, keyed by joined variable names + for combo in tuple_vars: + instance_id = f"{detector_name}_{'_'.join(combo)}" + instances[instance_id] = _classify_variables(combo, var_pattern) + + events_config[event_id] = instances + + config_dict = { + "detectors": { + detector_name: { + "method_type": method_type, + "auto_config": False, + "params": additional_params, + "events": events_config } } - config = deepcopy(base_config) - - detectors = config.setdefault("detectors", {}) - detector = detectors.setdefault(detector_name, {}) - detector.setdefault("method_type", method_type) - detector.setdefault("auto_config", False) - params = detector.setdefault("params", {}) - params.update(additional_params) - log_variables = params.setdefault("log_variables", []) - - for event_id, all_variables in variable_selection.items(): - variables = [ - {"pos": int(name.split("_")[1]), "name": name} - for name in all_variables if name.startswith("var_") - ] - header_variables = [{"pos": name} for name in all_variables if not name.startswith("var_")] - - log_variables.append({ - "id": f"id_{event_id}", - "event": event_id, - "template": templates.get(event_id, ""), - "variables": variables, - "header_variables": header_variables, - }) - return config + } + + return config_dict diff --git a/src/detectmatelibrary/common/_config/_formats.py b/src/detectmatelibrary/common/_config/_formats.py index da83a33..d004da1 100644 --- a/src/detectmatelibrary/common/_config/_formats.py +++ b/src/detectmatelibrary/common/_config/_formats.py @@ -10,21 +10,39 @@ class Variable(BaseModel): name: str params: Dict[str, Any] = {} + def to_dict(self) -> Dict[str, Any]: + """Convert Variable to YAML-compatible dictionary.""" + result: Dict[str, Any] = { + "pos": self.pos, + "name": self.name, + } + if self.params: + result["params"] = self.params + return result + class Header(BaseModel): pos: str params: Dict[str, Any] = {} + def to_dict(self) -> Dict[str, Any]: + """Convert Header to YAML-compatible dictionary.""" + result: Dict[str, Any] = { + "pos": self.pos, + } + if self.params: + result["params"] = self.params + return result + -class _LogVariable(BaseModel): - id: str - event: int - template: str +class _EventInstance(BaseModel): + """Configuration for a specific instance within an event.""" + params: Dict[str, Any] = {} variables: Dict[int, Variable] = {} header_variables: Dict[str, Header] = {} @classmethod - def _init(cls, **kwargs: dict[str, Any]) -> "_LogVariable": + def _init(cls, **kwargs: dict[str, Any]) -> "_EventInstance": for var, cl in zip(["variables", "header_variables"], [Variable, Header]): if var in kwargs: new_dict = {} @@ -37,74 +55,89 @@ def _init(cls, **kwargs: dict[str, Any]) -> "_LogVariable": def get_all(self) -> Dict[Any, Header | Variable]: return {**self.variables, **self.header_variables} - -# Main-formats ********************************************************+ -class LogVariables(BaseModel): - logvars: Dict[Any, _LogVariable] - __index: int = 0 - - @classmethod - def _init(cls, params: list[Dict[str, Any]]) -> Self: - new_dict = {} - for param in params: - aux = _LogVariable._init(**param) - new_dict[aux.event] = aux - - return cls(logvars=new_dict) - - def __next__(self) -> Any | StopIteration: - if len(keys := list(self.logvars.keys())) > self.__index: - value = self.logvars[keys[self.__index]] - self.__index += 1 - return value - raise StopIteration - - def __iter__(self) -> Self: # type: ignore - return self - - def __getitem__(self, idx: str | int) -> _LogVariable | None: - if idx not in self.logvars: - return None - return self.logvars[idx] - - def __contains__(self, idx: str | int) -> bool: - return idx in self.logvars + def to_dict(self) -> Dict[str, Any]: + """Convert _EventInstance to YAML-compatible dictionary.""" + result: Dict[str, Any] = {} + # Always include params even if empty (to match YAML structure) + result["params"] = self.params + if self.variables: + result["variables"] = [var.to_dict() for var in self.variables.values()] + if self.header_variables: + result["header_variables"] = [header.to_dict() for header in self.header_variables.values()] + return result -class AllLogVariables(BaseModel): - variables: Dict[int, Variable] = {} - header_variables: Dict[str, Header] = {} +class _EventConfig(BaseModel): + """Configuration for all instances of a specific event.""" + instances: Dict[str, _EventInstance] @classmethod - def _init(cls, kwargs: Dict[str, Any]) -> "AllLogVariables": - for var, cl in zip(["variables", "header_variables"], [Variable, Header]): - if var in kwargs: - new_dict = {} - for v in kwargs[var]: - aux = cl(**v) - new_dict[aux.pos] = aux - kwargs[var] = new_dict - return cls(**kwargs) + def _init(cls, instances_dict: Dict[str, Dict[str, Any]]) -> "_EventConfig": + instances = {} + for instance_id, instance_data in instances_dict.items(): + instances[instance_id] = _EventInstance._init(**instance_data) + return cls(instances=instances) + + @property + def variables(self) -> Dict[int, Variable]: + """Pass-through to first instance for compatibility.""" + if self.instances: + return next(iter(self.instances.values())).variables + return {} + + @property + def header_variables(self) -> Dict[str, Header]: + """Pass-through to first instance for compatibility.""" + if self.instances: + return next(iter(self.instances.values())).header_variables + return {} def get_all(self) -> Dict[Any, Header | Variable]: - return {**self.variables, **self.header_variables} + """Pass-through to first instance for compatibility.""" + if self.instances: + return next(iter(self.instances.values())).get_all() + return {} - def __getitem__(self, idx: Any) -> Self: - return self + def to_dict(self) -> Dict[str, Any]: + """Convert _EventConfig to YAML-compatible dictionary.""" + return { + instance_id: instance.to_dict() + for instance_id, instance in self.instances.items() + } - def __contains__(self, idx: str | int) -> bool: - return True +# Main-formats ********************************************************+ +class EventsConfig(BaseModel): + """Events configuration dict keyed by event_id.""" + events: Dict[Any, _EventConfig] -# Initialize ********************************************************+ -_formats: dict[str, type[LogVariables | AllLogVariables]] = { - "log_variables": LogVariables, - "all_log_variables": AllLogVariables -} + @classmethod + def _init(cls, events_dict: Dict[Any, Dict[str, Any]]) -> Self: + new_dict = {} + for event_id, instances in events_dict.items(): + new_dict[event_id] = _EventConfig._init(instances) + return cls(events=new_dict) + def __getitem__(self, idx: str | int) -> _EventConfig | None: + if idx not in self.events: + return None + return self.events[idx] -def apply_format(format: str, params: Any) -> Any: - if format in _formats: - f_cls = _formats[format] - return f_cls._init(params) - return params + def __contains__(self, idx: str | int) -> bool: + return idx in self.events + + def to_dict(self) -> Dict[Any, Any]: + """Convert EventsConfig to YAML-compatible dictionary. + + This unwraps the internal 'events' dict structure to match YAML + format. + """ + result = {} + for event_id, event_config in self.events.items(): + # Convert string keys back to int if they were originally int + try: + key = int(event_id) + except (ValueError, TypeError): + key = event_id + result[key] = event_config.to_dict() + return result diff --git a/src/detectmatelibrary/common/detector.py b/src/detectmatelibrary/common/detector.py index 2dc5564..ff46af0 100644 --- a/src/detectmatelibrary/common/detector.py +++ b/src/detectmatelibrary/common/detector.py @@ -1,4 +1,4 @@ -from detectmatelibrary.common._config._formats import AllLogVariables, LogVariables +from detectmatelibrary.common._config._formats import EventsConfig from detectmatelibrary.common.core import CoreComponent, CoreConfig from detectmatelibrary.utils.data_buffer import ArgsBuffer, BufferMode @@ -93,7 +93,7 @@ def train( @staticmethod def get_configured_variables( input_: ParserSchema, - log_variables: LogVariables | AllLogVariables | dict[str, Any], + log_variables: EventsConfig | dict[str, Any], ) -> Dict[str, Any]: """Extract variables from input based on what's defined in the config. diff --git a/src/detectmatelibrary/detectors/new_value_combo_detector.py b/src/detectmatelibrary/detectors/new_value_combo_detector.py index b376325..6009d0c 100644 --- a/src/detectmatelibrary/detectors/new_value_combo_detector.py +++ b/src/detectmatelibrary/detectors/new_value_combo_detector.py @@ -1,4 +1,4 @@ -from detectmatelibrary.common._config._formats import LogVariables, AllLogVariables +from detectmatelibrary.common._config._formats import EventsConfig from detectmatelibrary.common._config import generate_detector_config from detectmatelibrary.common.detector import CoreDetectorConfig @@ -11,21 +11,46 @@ ) from detectmatelibrary.common.persistency.event_persistency import EventPersistency -import detectmatelibrary.schemas as schemas +from detectmatelibrary.schemas import ParserSchema, DetectorSchema -from typing import Any, Set, Dict, cast, Tuple +from typing import Any, Dict, Sequence, cast, Tuple +from itertools import combinations -def get_combo(variables: Dict[str, Any]) -> Dict[str, Tuple[Any, ...]]: +def get_combo(variables: Dict[str, Any]) -> Dict[Tuple[str, ...], Tuple[Any, ...]]: """Get a single combination of all variables as a key-value pair.""" - return {"-".join(variables.keys()): tuple(variables.values())} + return {tuple(variables.keys()): tuple(variables.values())} + + +def _combine( + iterable: Sequence[str], max_combo_length: int = 2 +) -> list[Tuple[str, ...]]: + """Get all possible combinations of an iterable.""" + combos: list[Tuple[str, ...]] = [] + for i in range(2, min(len(iterable), max_combo_length, 5) + 1): + combo = list(combinations(iterable, i)) + combos.extend(combo) + return combos + + +def get_all_possible_combos( + variables: Dict[str, Any], max_combo_length: int = 2 +) -> Dict[Tuple[str, ...], Tuple[Any, ...]]: + """Get all combinations of specified variables as key-value pairs.""" + combo_dict = {} + combos = _combine(list(variables.keys()), max_combo_length) + for combo in combos: + key = tuple(combo) # Use tuple of variable names as key + value = tuple(variables[var] for var in combo) + combo_dict[key] = value + return combo_dict # ********************************************************************* class NewValueComboDetectorConfig(CoreDetectorConfig): method_type: str = "new_value_combo_detector" - log_variables: LogVariables | AllLogVariables | dict[str, Any] = {} + events: EventsConfig | dict[str, Any] = {} comb_size: int = 2 @@ -41,7 +66,6 @@ def __init__( super().__init__(name=name, buffer_mode=BufferMode.NO_BUF, config=config) self.config = cast(NewValueComboDetectorConfig, self.config) - self.known_combos: Dict[str | int, Set[Any]] = {"all": set()} self.persistency = EventPersistency( event_data_class=EventStabilityTracker, event_data_kwargs={"converter_function": get_combo} @@ -50,56 +74,110 @@ def __init__( self.auto_conf_persistency = EventPersistency( event_data_class=EventStabilityTracker ) + self.auto_conf_persistency_combos = EventPersistency( + event_data_class=EventStabilityTracker, + event_data_kwargs={"converter_function": get_all_possible_combos} + ) + + # TEMPORARY: + self.inputs: list[ParserSchema] = [] - def train(self, input_: schemas.ParserSchema) -> None: # type: ignore + def train(self, input_: ParserSchema) -> None: # type: ignore + # print("EVENT_ID:", input_["EventID"]) + # print(f"INPUT VARIABLES: {input_['variables']}") + # print(f"INPUT LOG FORMAT VARIABLES: {input_['logFormatVariables']}") + config = cast(NewValueComboDetectorConfig, self.config) + configured_variables = self.get_configured_variables(input_, config.events) + # print(f"Configured variables for training: {configured_variables}\n") self.persistency.ingest_event( event_id=input_["EventID"], event_template=input_["template"], - variables=input_["variables"], - log_format_variables=input_["logFormatVariables"], + # variables=input_["variables"], + # named_variables=input_["logFormatVariables"], + named_variables=configured_variables ) def detect( - self, input_: schemas.ParserSchema, output_: schemas.DetectorSchema # type: ignore + self, input_: ParserSchema, output_: DetectorSchema # type: ignore ) -> bool: alerts: Dict[str, str] = {} + config = cast(NewValueComboDetectorConfig, self.config) + configured_variables = self.get_configured_variables(input_, config.events) - all_variables = self.persistency.get_all_variables( - variables=input_["variables"], - log_format_variables=input_["logFormatVariables"], - ) - combo = tuple(get_combo(all_variables).items())[0] + combo_dict = get_combo(configured_variables) + + overall_score = 0.0 for event_id, event_tracker in self.persistency.get_events_data().items(): - for event_id, multi_tracker in event_tracker.get_data().items(): - if combo not in multi_tracker.unique_set: + for combo_key, multi_tracker in event_tracker.get_data().items(): + # Get the value tuple for this combo key + value_tuple = combo_dict.get(combo_key) + if value_tuple is None: + continue + if value_tuple not in multi_tracker.unique_set: alerts[f"EventID {event_id}"] = ( - f"Unknown value combination: {combo}" + f"Unknown value combination: {value_tuple}" ) - if alerts: - output_["alertsObtain"] = alerts + overall_score += 1.0 + + if overall_score > 0: + output_["score"] = overall_score + output_["description"] = ( + f"{self.name} detects value combinations not encountered " + "in training as anomalies." + ) + output_["alertsObtain"].update(alerts) return True return False - def configure(self, input_: schemas.ParserSchema) -> None: + def configure(self, input_: ParserSchema) -> None: + # TEMPORARY: + self.inputs.append(input_) + self.auto_conf_persistency.ingest_event( event_id=input_["EventID"], event_template=input_["template"], variables=input_["variables"], - log_format_variables=input_["logFormatVariables"], + named_variables=input_["logFormatVariables"], ) - def set_configuration(self, max_combo_size: int = 6) -> None: + def set_configuration(self, max_combo_size: int = 3) -> None: + + # run WITH auto_conf_persistency variable_combos = {} - templates = {} for event_id, tracker in self.auto_conf_persistency.get_events_data().items(): stable_vars = tracker.get_variables_by_classification("STABLE") # type: ignore if len(stable_vars) > 1: variable_combos[event_id] = stable_vars - templates[event_id] = self.auto_conf_persistency.get_event_template(event_id) config_dict = generate_detector_config( variable_selection=variable_combos, - templates=templates, + detector_name=self.name, + method_type=self.config.method_type, + comb_size=max_combo_size + ) + # Update the config object from the dictionary instead of replacing it + self.config = NewValueComboDetectorConfig.from_dict(config_dict, self.name) + + # TEMPORARY: + # Re-ingest all inputs to learn combos based on new configuration + for input_ in self.inputs: + configured_variables = self.get_configured_variables(input_, self.config.events) + # print(f"All POSSIBLE COMBOS: EVENT {input_['EventID']}: {all_possible_combos}\n") + self.auto_conf_persistency_combos.ingest_event( + event_id=input_["EventID"], + event_template=input_["template"], + named_variables=configured_variables + ) + + # rerun to set final config WITH auto_conf_persistency_combos + combo_selection = {} + for event_id, tracker in self.auto_conf_persistency_combos.get_events_data().items(): + stable_combos = tracker.get_variables_by_classification("STABLE") # type: ignore + # Keep combos as tuples - each will become a separate config entry + if len(stable_combos) >= 1: + combo_selection[event_id] = stable_combos + config_dict = generate_detector_config( + variable_selection=combo_selection, detector_name=self.name, method_type=self.config.method_type, comb_size=max_combo_size @@ -204,7 +282,7 @@ def set_configuration(self, max_combo_size: int = 6) -> None: # ] # # Create ParserSchema objects from sample data -# parser_schemas = [schemas.ParserSchema(kwargs=event) for event in sample_events] +# parser_schemas = [ParserSchema(kwargs=event) for event in sample_events] # # Initialize the detector # detector = NewValueComboDetector(name="TestComboDetector") @@ -219,11 +297,9 @@ def set_configuration(self, max_combo_size: int = 6) -> None: # detector.configure(schema) # # Set configuration based on learned stable variables +# print("PERSISTENCY",detector.auto_conf_persistency.get_events_data()) # detector.set_configuration(max_combo_size=2) -# print(f"Configured log_variables: {detector.config.log_variables}") -# print(f"Combo size: {detector.config.comb_size}") - # # Phase 2: Training - learn normal value combinations # print("\n[Phase 2] Running training phase...") # for schema in parser_schemas: @@ -231,12 +307,10 @@ def set_configuration(self, max_combo_size: int = 6) -> None: # # Show what the detector learned # print("\nLearned event data:") -# for event_id, tracker in detector.persistency.get_events_data().items(): -# print(f" EventID {event_id}: {tracker}") +# print(detector.persistency.get_events_data()) # # Phase 3: Detection (note: detect method is incomplete in current code) # print("\n[Phase 3] Detection phase...") -# print("Note: The detect() method is currently incomplete.") # # Example anomalous event - user1 logging in from unusual IP # anomalous_event = { @@ -245,14 +319,22 @@ def set_configuration(self, max_combo_size: int = 6) -> None: # "variables": ["MALICIOUS_USER", "MALICIOUS_IP"], # "logFormatVariables": {"username": "MALICIOUS_USER", "src_ip": "MALICIOUS_IP"}, # } -# anomalous_schema = schemas.ParserSchema(kwargs=anomalous_event) - +# benign_event = { +# "EventID": 4624, +# "template": "User <*> logged in from <*>", +# "variables": ["user1", "192.168.1.100"], +# "logFormatVariables": {"username": "user1", "src_ip": "192.168.1.100"}, +# } +# anomalous_schema = ParserSchema(kwargs=anomalous_event) +# benign_schema = ParserSchema(kwargs=benign_event) # # Create output schema for detection results -# output_schema = schemas.DetectorSchema(kwargs={"alertsObtain": {}}) +# output_schema = DetectorSchema(kwargs={"alertsObtain": {}}) -# for schema in [anomalous_schema]: -# detector.detect(schema, output_=output_schema) +# anomalies = [] +# for schema in [anomalous_schema, benign_schema]: +# anomalous = detector.detect(schema, output_=output_schema) +# anomalies.append(anomalous) # print("\nDetection output:") -# print(output_schema) +# print(anomalies) diff --git a/src/detectmatelibrary/detectors/new_value_detector.py b/src/detectmatelibrary/detectors/new_value_detector.py index e658217..09a1945 100644 --- a/src/detectmatelibrary/detectors/new_value_detector.py +++ b/src/detectmatelibrary/detectors/new_value_detector.py @@ -1,5 +1,5 @@ -from detectmatelibrary.common._config import generate_detector_config -from detectmatelibrary.common._config._formats import LogVariables, AllLogVariables +from detectmatelibrary.common._config._compile import generate_detector_config +from detectmatelibrary.common._config._formats import EventsConfig from detectmatelibrary.common.detector import CoreDetectorConfig from detectmatelibrary.common.detector import CoreDetector @@ -18,7 +18,7 @@ class NewValueDetectorConfig(CoreDetectorConfig): method_type: str = "new_value_detector" - log_variables: LogVariables | AllLogVariables | dict[str, Any] = {} + events: EventsConfig | dict[str, Any] = {} class NewValueDetector(CoreDetector): @@ -47,7 +47,7 @@ def __init__( def train(self, input_: ParserSchema) -> None: # type: ignore """Train the detector by learning values from the input data.""" - configured_variables = self.get_configured_variables(input_, self.config.log_variables) + configured_variables = self.get_configured_variables(input_, self.config.events) self.persistency.ingest_event( event_id=input_["EventID"], event_template=input_["template"], @@ -60,7 +60,7 @@ def detect( """Detect new values in the input data.""" alerts: dict[str, str] = {} - configured_variables = self.get_configured_variables(input_, self.config.log_variables) + configured_variables = self.get_configured_variables(input_, self.config.events) overall_score = 0.0 @@ -71,13 +71,13 @@ def detect( continue if value not in multi_tracker.unique_set: alerts[f"EventID {event_id}"] = ( - f"Unknown value: {value} detected." + f"Unknown value: '{value}'" ) overall_score += 1.0 if overall_score > 0: output_["score"] = overall_score - output_["description"] = "Method that detect new values in the logs" + output_["description"] = f"{self.name} detects values not encountered in training as anomalies." output_["alertsObtain"].update(alerts) return True @@ -93,14 +93,11 @@ def configure(self, input_: ParserSchema) -> None: def set_configuration(self) -> None: variables = {} - templates = {} for event_id, tracker in self.auto_conf_persistency.get_events_data().items(): stable_vars = tracker.get_variables_by_classification("STABLE") # type: ignore variables[event_id] = stable_vars - templates[event_id] = self.auto_conf_persistency.get_event_template(event_id) config_dict = generate_detector_config( variable_selection=variables, - templates=templates, detector_name=self.name, method_type=self.config.method_type, ) diff --git a/src/detectmatelibrary/detectors/random_detector.py b/src/detectmatelibrary/detectors/random_detector.py index 3c019df..6e2f2aa 100644 --- a/src/detectmatelibrary/detectors/random_detector.py +++ b/src/detectmatelibrary/detectors/random_detector.py @@ -1,4 +1,4 @@ -from detectmatelibrary.common._config._formats import LogVariables, AllLogVariables +from detectmatelibrary.common._config._formats import EventsConfig, Variable from detectmatelibrary.common.detector import CoreDetector, CoreDetectorConfig @@ -14,7 +14,7 @@ class RandomDetectorConfig(CoreDetectorConfig): method_type: str = "random_detector" - log_variables: LogVariables | AllLogVariables | dict[str, Any] = {} + events: EventsConfig | dict[str, Any] = {} class RandomDetector(CoreDetector): @@ -42,13 +42,19 @@ def detect( overall_score = 0.0 alerts = {} - relevant_log_fields = self.config.log_variables[input_["EventID"]].get_all() # type: ignore + event_config = self.config.events[input_["EventID"]] + if event_config is None: + return False + + relevant_log_fields = event_config.get_all() for log_variable in relevant_log_fields.values(): score = 0.0 random = np.random.rand() if random > log_variable.params["threshold"]: score = 1.0 - alerts.update({log_variable.name: str(score)}) # type: ignore + # Variable has .name, Header has .pos (str) + var_name = log_variable.name if isinstance(log_variable, Variable) else log_variable.pos + alerts.update({var_name: str(score)}) overall_score += score if overall_score > 0: diff --git a/src/detectmatelibrary/parsers/json_parser.py b/src/detectmatelibrary/parsers/json_parser.py index aee11d0..117dbb2 100644 --- a/src/detectmatelibrary/parsers/json_parser.py +++ b/src/detectmatelibrary/parsers/json_parser.py @@ -5,7 +5,7 @@ from collections.abc import Mapping from typing import Any, Iterable, Optional -import ujson as json # type: ignore +import ujson as json # type: ignore[import-untyped] def iter_flatten(obj: dict[str, Any], sep: str = '.') -> Iterable[tuple[str, Any]]: diff --git a/tests/test_common/test_config.py b/tests/test_common/test_config.py index 33f02c9..804a41a 100644 --- a/tests/test_common/test_config.py +++ b/tests/test_common/test_config.py @@ -3,14 +3,13 @@ from detectmatelibrary.common._config._compile import ( ConfigMethods, MethodNotFoundError, + MissingParamsWarning, TypeNotFoundError, MethodTypeNotMatch, - AutoConfigError, AutoConfigWarning, - MissingFormat, ) from detectmatelibrary.common._config._formats import ( - AllLogVariables, _LogVariable + EventsConfig, _EventConfig ) from detectmatelibrary.common._config import BasicConfig @@ -81,7 +80,7 @@ def test_process_auto_config(self): assert "params" not in config def test_process_auto_config_false(self): - with pytest.raises(AutoConfigError): + with pytest.warns(MissingParamsWarning): ConfigMethods.process(ConfigMethods.get_method( config_test, method_id="detector_wrong", comp_type="detectors" )) @@ -94,14 +93,6 @@ def test_process_auto_config_warning(self): class TestParamsFormat: - def test_all(self): - config_test = load_test_config() - config = ConfigMethods.process(ConfigMethods.get_method( - config_test, method_id="detector_all", comp_type="detectors" - )) - - assert len(config) == 4 - def test_correct_format(self): config_test = load_test_config() config = ConfigMethods.process(ConfigMethods.get_method( @@ -111,19 +102,19 @@ def test_correct_format(self): assert config["method_type"] == "ExampleDetector" assert config["parser"] == "example_parser_1" assert not config["auto_config"] - for logvar in config["log_variables"]: - assert isinstance(logvar, _LogVariable) + assert isinstance(config["events"], EventsConfig) - assert logvar.id == "example_detector_1" - assert logvar.event == 1 - assert logvar.template == "jk2_init() Found child <*>" + # Get the event config for event_id 1 + event_config = config["events"][1] + assert isinstance(event_config, _EventConfig) - assert logvar.variables[0].pos == 0 - assert logvar.variables[0].name == "child_process" - assert logvar.variables[0].params == {"threshold": 0.5} + # Check variables via pass-through properties + assert event_config.variables[0].pos == 0 + assert event_config.variables[0].name == "child_process" + assert event_config.variables[0].params == {"threshold": 0.5} - assert logvar.header_variables["Level"].pos == "Level" - assert logvar.header_variables["Level"].params == {"threshold": 0.2} + assert event_config.header_variables["Level"].pos == "Level" + assert event_config.header_variables["Level"].params == {"threshold": 0.2} def test_correct_format2(self): config = ConfigMethods.process(ConfigMethods.get_method( @@ -133,17 +124,16 @@ def test_correct_format2(self): assert config["method_type"] == "ExampleDetector" assert config["parser"] == "example_parser_1" assert not config["auto_config"] - for logvar in config["log_variables"]: - assert isinstance(logvar, _LogVariable) + assert isinstance(config["events"], EventsConfig) - assert logvar.id == "example_detector_1" - assert logvar.event == 1 - assert logvar.template == "jk2_init() Found child <*>" + # Get the event config for event_id 1 + event_config = config["events"][1] + assert isinstance(event_config, _EventConfig) - assert len(logvar.variables) == 0 + assert len(event_config.variables) == 0 - assert logvar.header_variables["Level"].pos == "Level" - assert logvar.header_variables["Level"].params == {"threshold": 0.2} + assert event_config.header_variables["Level"].pos == "Level" + assert event_config.header_variables["Level"].params == {"threshold": 0.2} def test_return_none_if_not_found(self): config_test = load_test_config() @@ -151,33 +141,23 @@ def test_return_none_if_not_found(self): config_test, method_id="detector_variables", comp_type="detectors" )) - assert isinstance(config["log_variables"][1], _LogVariable) - assert config["log_variables"]["NotExisting"] is None + assert isinstance(config["events"][1], _EventConfig) + assert config["events"]["NotExisting"] is None def test_get_dict(self): config_test = load_test_config() config = ConfigMethods.process(ConfigMethods.get_method( config_test, method_id="detector_variables", comp_type="detectors" )) - variables = config["log_variables"][1].get_all() + variables = config["events"][1].get_all() assert len(variables) == 4 - def test_missing_format(self): - with pytest.raises(MissingFormat): - ConfigMethods.process(ConfigMethods.get_method( - config_test, method_id="detector_missing_format", comp_type="detectors" - )) - def test_incorrect_format(self): with pytest.raises(ValidationError): ConfigMethods.process(ConfigMethods.get_method( config_test, method_id="detector_incorrect_format1", comp_type="detectors" )) - with pytest.raises(ValidationError): - ConfigMethods.process(ConfigMethods.get_method( - config_test, method_id="detector_incorrect_format2", comp_type="detectors" - )) class MockupParserConfig(BasicConfig): @@ -195,14 +175,6 @@ class MockuptDetectorConfig(BasicConfig): parser: str = "" -class MockuptDetectorAllConfig(BasicConfig): - method_type: str = "ExampleDetector" - comp_type: str = "detectors" - parser: str = "" - - log_variables: AllLogVariables = AllLogVariables() - - class TestBasicConfig: def test_parser_from_dict(self): config_test = load_test_config() @@ -218,12 +190,3 @@ def test_detectir_from_dict(self): assert config.auto_config assert config.parser == "example_parser_1" - - def test_detector_all(self): - config_test = load_test_config() - config = MockuptDetectorAllConfig.from_dict(config_test, "detector_all") - - assert not config.auto_config - assert config.log_variables[1].variables[0].pos == 0 - assert config.log_variables["as"].variables[0].pos == 0 - assert config.log_variables[43].variables[0].pos == 0 diff --git a/tests/test_common/test_config_roundtrip.py b/tests/test_common/test_config_roundtrip.py new file mode 100644 index 0000000..85517e1 --- /dev/null +++ b/tests/test_common/test_config_roundtrip.py @@ -0,0 +1,256 @@ +"""Test that YAML -> Pydantic -> YAML is preserved (round-trip test).""" + +from detectmatelibrary.common._config import BasicConfig +from detectmatelibrary.common._config._formats import EventsConfig + +import yaml + + +class MockupParserConfig(BasicConfig): + method_type: str = "ExampleParser" + comp_type: str = "parsers" + auto_config: bool = False + log_format: str = "" + depth: int = -1 + + +class MockupDetectorConfig(BasicConfig): + method_type: str = "ExampleDetector" + comp_type: str = "detectors" + auto_config: bool = False + parser: str = "" + events: EventsConfig | None = None + + +def load_test_config() -> dict: + with open("tests/test_folder/test_config.yaml", 'r') as file: + return yaml.safe_load(file) + + +class TestConfigRoundtrip: + """Test that yaml -> pydantic class -> yaml is preserved.""" + + def test_parser_roundtrip_simple(self): + """Test parser config without events.""" + config_yaml = load_test_config() + method_id = "example_parser" + + # Load from YAML + config = MockupParserConfig.from_dict(config_yaml, method_id) + + # Convert back to dict + result_dict = config.to_dict(method_id) + + # Extract the original and result configs + original = config_yaml["parsers"][method_id] + result = result_dict["parsers"][method_id] + + # Compare all fields + assert result["method_type"] == original["method_type"] + assert result["auto_config"] == original["auto_config"] + assert result["params"]["log_format"] == original["params"]["log_format"] + assert result["params"]["depth"] == original["params"]["depth"] + + def test_detector_roundtrip_with_events(self): + """Test detector config with events structure.""" + config_yaml = load_test_config() + method_id = "detector_variables" + + # Load from YAML + config = MockupDetectorConfig.from_dict(config_yaml, method_id) + + # Convert back to dict + result_dict = config.to_dict(method_id) + + # Extract the original and result configs + original = config_yaml["detectors"][method_id] + result = result_dict["detectors"][method_id] + + # Compare basic fields + assert result["method_type"] == original["method_type"] + assert result["auto_config"] == original["auto_config"] + # parser is in params after to_dict (normalized format) + assert result["params"]["parser"] == original["parser"] + + # Compare events structure + assert "events" in result + assert 1 in result["events"] # event_id = 1 + assert "example_detector_1" in result["events"][1] # instance_id + + instance = result["events"][1]["example_detector_1"] + original_instance = original["events"][1]["example_detector_1"] + + # Check variables + assert len(instance["variables"]) == len(original_instance["variables"]) + + zipped = zip(instance["variables"], original_instance["variables"]) + for i, (result_var, orig_var) in enumerate(zipped): + assert result_var["pos"] == orig_var["pos"] + assert result_var["name"] == orig_var["name"] + if "params" in orig_var: + assert result_var["params"] == orig_var["params"] + + def test_detector_roundtrip_auto_config(self): + """Test detector with auto_config = True.""" + config_yaml = load_test_config() + method_id = "detector_auto" + + # Load from YAML + config = MockupDetectorConfig.from_dict(config_yaml, method_id) + + # Convert back to dict + result_dict = config.to_dict(method_id) + + # Extract configs + original = config_yaml["detectors"][method_id] + result = result_dict["detectors"][method_id] + + # Compare + assert result["method_type"] == original["method_type"] + assert result["auto_config"] == original["auto_config"] + assert result["auto_config"] is True + assert result["params"]["parser"] == original["parser"] + + def test_full_yaml_roundtrip(self): + """Test that the entire structure can be serialized and matches.""" + config_yaml = load_test_config() + + # Test parser + parser_config = MockupParserConfig.from_dict(config_yaml, "example_parser") + parser_dict = parser_config.to_dict("example_parser") + + # Verify parser structure exists + assert "parsers" in parser_dict + assert "example_parser" in parser_dict["parsers"] + assert "method_type" in parser_dict["parsers"]["example_parser"] + + # Test detector with events + detector_config = MockupDetectorConfig.from_dict(config_yaml, "detector_variables") + detector_dict = detector_config.to_dict("detector_variables") + + # Verify detector structure exists + assert "detectors" in detector_dict + assert "detector_variables" in detector_dict["detectors"] + assert "events" in detector_dict["detectors"]["detector_variables"] + + def test_empty_params_preserved(self): + """Test that empty params dict is preserved.""" + config_yaml = load_test_config() + method_id = "detector_variables" + + config = MockupDetectorConfig.from_dict(config_yaml, method_id) + result_dict = config.to_dict(method_id) + + # Instance level params + instance = result_dict["detectors"][method_id]["events"][1]["example_detector_1"] + assert "params" in instance + assert instance["params"] == {} + + def test_header_variables_roundtrip(self): + """Test that header_variables are preserved.""" + config_yaml = load_test_config() + method_id = "detector_variables" # This one has header_variables + + config = MockupDetectorConfig.from_dict(config_yaml, method_id) + result_dict = config.to_dict(method_id) + + instance = result_dict["detectors"][method_id]["events"][1]["example_detector_1"] + original_instance = config_yaml["detectors"][method_id]["events"][1]["example_detector_1"] + + # Check header variables exist + assert "header_variables" in instance + assert len(instance["header_variables"]) == len(original_instance["header_variables"]) + + zipped = zip( + instance["header_variables"], original_instance["header_variables"] + ) + for result_hvar, orig_hvar in zipped: + assert result_hvar["pos"] == orig_hvar["pos"] + if "params" in orig_hvar: + assert result_hvar["params"] == orig_hvar["params"] + + def test_no_events_field_when_none(self): + """Test that events field is not included when it doesn't exist.""" + config_yaml = load_test_config() + method_id = "example_parser" + + config = MockupParserConfig.from_dict(config_yaml, method_id) + result_dict = config.to_dict(method_id) + + # Parser should not have events field + assert "events" not in result_dict["parsers"][method_id] + + def test_true_roundtrip_preservation(self): + """Test that yaml -> pydantic -> yaml -> pydantic produces identical + objects.""" + config_yaml = load_test_config() + method_id = "detector_variables" + + # First load + config1 = MockupDetectorConfig.from_dict(config_yaml, method_id) + + # Convert back to dict + dict1 = config1.to_dict(method_id) + + # Second load from the converted dict + config2 = MockupDetectorConfig.from_dict(dict1, method_id) + + # Convert back again + dict2 = config2.to_dict(method_id) + + # The two configs should be identical + assert config1.method_type == config2.method_type + assert config1.comp_type == config2.comp_type + assert config1.auto_config == config2.auto_config + assert config1.parser == config2.parser + + # Events should match + assert config1.events is not None + assert config2.events is not None + + # Check event structure matches + for event_id in config1.events.events.keys(): + assert event_id in config2.events.events + for instance_id in config1.events.events[event_id].instances.keys(): + assert instance_id in config2.events.events[event_id].instances + + inst1 = config1.events.events[event_id].instances[instance_id] + inst2 = config2.events.events[event_id].instances[instance_id] + + # Check variables match + assert len(inst1.variables) == len(inst2.variables) + for pos in inst1.variables.keys(): + assert pos in inst2.variables + assert inst1.variables[pos].name == inst2.variables[pos].name + assert inst1.variables[pos].params == inst2.variables[pos].params + + # Check header_variables match + assert len(inst1.header_variables) == len(inst2.header_variables) + for pos in inst1.header_variables.keys(): + assert pos in inst2.header_variables + assert inst1.header_variables[pos].params == inst2.header_variables[pos].params + + # The two dicts should be identical + assert dict1 == dict2 + + def test_parser_true_roundtrip(self): + """Test parser yaml -> pydantic -> yaml -> pydantic roundtrip.""" + config_yaml = load_test_config() + method_id = "example_parser" + + # First load + config1 = MockupParserConfig.from_dict(config_yaml, method_id) + + # Convert back to dict and reload + dict1 = config1.to_dict(method_id) + config2 = MockupParserConfig.from_dict(dict1, method_id) + dict2 = config2.to_dict(method_id) + + # Compare + assert config1.method_type == config2.method_type + assert config1.log_format == config2.log_format + assert config1.depth == config2.depth + assert config1.auto_config == config2.auto_config + + # Dicts should be identical + assert dict1 == dict2 diff --git a/tests/test_detectors/test_new_value_combo_detector.py b/tests/test_detectors/test_new_value_combo_detector.py index a683a99..a2a943d 100644 --- a/tests/test_detectors/test_new_value_combo_detector.py +++ b/tests/test_detectors/test_new_value_combo_detector.py @@ -1,7 +1,8 @@ from detectmatelibrary.detectors.new_value_combo_detector import ( - NewValueComboDetector, BufferMode, generate_detector_config + NewValueComboDetector, BufferMode ) +from detectmatelibrary.common._config import generate_detector_config import detectmatelibrary.schemas as schemas from detectmatelibrary.utils.aux import time_test_mode @@ -17,44 +18,16 @@ "method_type": "new_value_combo_detector", "auto_config": False, "params": { - "comb_size": 4, - "log_variables": [{ - "id": "instance1", - "event": 1, - "template": "adsdas", - "variables": [{ - "pos": 0, "name": "sad", "params": {} - }] - }] - } - }, - "AllDetector": { - "method_type": "new_value_combo_detector", - "auto_config": False, - "params": { - "comb_size": 2, - "all_log_variables": { - "variables": [{ - "pos": 1, "name": "test", "params": {} - }], - "header_variables": [{ - "pos": "level", "params": {} - }] - } - } - }, - "AllDetectorTooBig": { - "method_type": "new_value_combo_detector", - "auto_config": False, - "params": { - "comb_size": 5, - "all_log_variables": { - "variables": [{ - "pos": 1, "name": "test", "params": {} - }], - "header_variables": [{ - "pos": "level", "params": {} - }] + "comb_size": 4 + }, + "events": { + 1: { + "instance1": { + "params": {}, + "variables": [{ + "pos": 0, "name": "sad", "params": {} + }] + } } } }, @@ -62,36 +35,20 @@ "method_type": "new_value_combo_detector", "auto_config": False, "params": { - "comb_size": 2, - "log_variables": [{ - "id": "test", - "event": 1, - "template": "qwewqe", - "variables": [{ - "pos": 1, "name": "test", "params": {} - }], - "header_variables": [{ - "pos": "level", "params": {} - }] - }] - } - }, - "MultipleDetectorTooBig": { - "method_type": "new_value_combo_detector", - "auto_config": False, - "params": { - "comb_size": 5, - "log_variables": [{ - "id": "test", - "event": 1, - "template": "qwewqe", - "variables": [{ - "pos": 1, "name": "test", "params": {} - }], - "header_variables": [{ - "pos": "level", "params": {} - }] - }] + "comb_size": 2 + }, + "events": { + 1: { + "test": { + "params": {}, + "variables": [{ + "pos": 1, "name": "test", "params": {} + }], + "header_variables": [{ + "pos": "level", "params": {} + }] + } + } } } } @@ -113,34 +70,10 @@ def test_custom_config_initialization(self): assert detector.name == "CustomInit" assert detector.config.comb_size == 4 - assert isinstance(detector.known_combos, dict) class TestNewValueComboDetectorTraining: - def test_train_all_multiple_values(self): - detector = NewValueComboDetector(config=config, name="AllDetector") - - # Train with multiple values - for level in ["INFO", "WARNING", "ERROR"]: - parser_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 1, - "template": "test template", - "variables": ["0", "assa"], - "logID": 1, - "parsedLogID": 1, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": level} - }) - detector.train(parser_data) - - combos = {"all": set({ - ("assa", "INFO"), ("assa", "WARNING"), ("assa", "ERROR") - })} - assert combos == detector.known_combos - def test_train_multiple_values(self): detector = NewValueComboDetector(config=config, name="MultipleDetector") @@ -160,114 +93,12 @@ def test_train_multiple_values(self): }) detector.train(parser_data) - combos = {"all": set(), 1: set({ - ("assa", "INFO"), ("assa", "WARNING"), ("assa", "ERROR") - })} - assert combos == detector.known_combos + # Only event 1 should be tracked (based on events config) + assert len(detector.persistency.events_data) == 1 class TestNewValueComboDetectorDetection: - """Test NewValueDetector detection functionality.""" - - def test_detect_known_value_no_alert_all(self): - """Test that known values don't trigger alerts.""" - detector = NewValueComboDetector(config=config, name="AllDetector") - - # Train with a value - train_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 1, - "template": "test template", - "variables": ["adsasd", "asdasd"], - "logID": 1, - "parsedLogID": 1, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "INFO"} - }) - detector.train(train_data) - - train_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 1, - "template": "test template", - "variables": ["adsasd", "other_value"], - "logID": 1, - "parsedLogID": 1, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "CRITICAL"} - }) - detector.train(train_data) - - # Detect with the same value - test_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 12, - "template": "test template", - "variables": ["adsasd", "asdasd"], - "logID": 2, - "parsedLogID": 2, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "INFO"} - }) - output = schemas.DetectorSchema() - - result = detector.detect(test_data, output) - - # Should not trigger alert for known value - assert not result - assert output.score == 0.0 - - def test_detect_known_value_alert_all(self): - detector = NewValueComboDetector(config=config, name="AllDetector") - - # Train with a value - train_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 1, - "template": "test template", - "variables": ["adsasd", "asdasd"], - "logID": 1, - "parsedLogID": 1, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "INFO"} - }) - detector.train(train_data) - - train_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 1, - "template": "test template", - "variables": ["adsasd", "other_value"], - "logID": 1, - "parsedLogID": 1, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "CRITICAL"} - }) - detector.train(train_data) - - # Detect with the same value - test_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 12, - "template": "test template", - "variables": ["adsasd", "asdasd"], - "logID": 2, - "parsedLogID": 2, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "CRITICAL"} - }) - output = schemas.DetectorSchema() - - result = detector.detect(test_data, output) - - assert result - assert output.score == 1.0 + """Test NewValueComboDetector detection functionality.""" def test_detect_known_value_no_alert(self): detector = NewValueComboDetector(config=config, name="MultipleDetector") @@ -348,12 +179,12 @@ def test_detect_known_value_alert(self): }) detector.train(train_data) - # Detect with the same value + # Detect with an unknown combination (pos 1 has a new value) test_data = schemas.ParserSchema({ "parserType": "test", "EventID": 1, "template": "test template", - "variables": ["adsasd"], + "variables": ["adsasd", "new_unknown_value"], "logID": 2, "parsedLogID": 2, "parserID": "test_parser", @@ -376,11 +207,9 @@ def test_generate_detector_config_basic(self): variable_selection = { 1: ["var_0", "var_1"] } - templates = {1: "Test template"} config_dict = generate_detector_config( variable_selection=variable_selection, - templates=templates, detector_name="TestDetector", method_type="new_value_combo_detector", comb_size=2 @@ -391,7 +220,7 @@ def test_generate_detector_config_basic(self): detector_config = config_dict["detectors"]["TestDetector"] assert detector_config["method_type"] == "new_value_combo_detector" assert detector_config["params"]["comb_size"] == 2 - assert len(detector_config["params"]["log_variables"]) == 1 + assert len(detector_config["events"]) == 1 def test_generate_detector_config_multiple_events(self): """Test config generation with multiple events.""" @@ -400,16 +229,14 @@ def test_generate_detector_config_multiple_events(self): 2: ["var_0", "var_2", "var_3"], 3: ["level"] } - templates = {1: "Template 1", 2: "Template 2", 3: "Template 3"} config_dict = generate_detector_config( variable_selection=variable_selection, - templates=templates, detector_name="MultiEventDetector", method_type="new_value_combo_detector" ) - assert len(config_dict["detectors"]["MultiEventDetector"]["params"]["log_variables"]) == 3 + assert len(config_dict["detectors"]["MultiEventDetector"]["events"]) == 3 def test_configure_method_ingests_events(self): """Test that configure method properly ingests events.""" @@ -460,7 +287,7 @@ def test_set_configuration_updates_config(self): detector.set_configuration(max_combo_size=2) # Verify config was updated - assert detector.config.log_variables is not None + assert detector.config.events is not None assert detector.config.comb_size == 2 def test_configuration_workflow(self): diff --git a/tests/test_detectors/test_new_value_detector.py b/tests/test_detectors/test_new_value_detector.py index ae77a0a..4069774 100644 --- a/tests/test_detectors/test_new_value_detector.py +++ b/tests/test_detectors/test_new_value_detector.py @@ -4,7 +4,7 @@ - Initialization and configuration - Training functionality to learn known values - Detection logic for new/unknown values -- Hierarchical configuration handling (event-specific and "all" events) +- Event-specific configuration handling - Input/output schema validation """ @@ -23,46 +23,34 @@ "CustomInit": { "method_type": "new_value_detector", "auto_config": False, - "params": { - "log_variables": [{ - "id": "instanace1", - "event": 1, - "template": "adsdas", - "variables": [{ - "pos": 0, "name": "sad", "params": {} - }] - }] - } - }, - "AllDetector": { - "method_type": "new_value_detector", - "auto_config": False, - "params": { - "all_log_variables": { - "variables": [{ - "pos": 1, "name": "test", "params": {} - }], - "header_variables": [{ - "pos": "level", "params": {} - }] + "params": {}, + "events": { + 1: { + "instance1": { + "params": {}, + "variables": [{ + "pos": 0, "name": "sad", "params": {} + }] + } } } }, "MultipleDetector": { "method_type": "new_value_detector", "auto_config": False, - "params": { - "log_variables": [{ - "id": "test", - "event": 1, - "template": "qwewqe", - "variables": [{ - "pos": 1, "name": "test", "params": {} - }], - "header_variables": [{ - "pos": "level", "params": {} - }] - }] + "params": {}, + "events": { + 1: { + "test": { + "params": {}, + "variables": [{ + "pos": 1, "name": "test", "params": {} + }], + "header_variables": [{ + "pos": "level", "params": {} + }] + } + } } } } @@ -95,37 +83,6 @@ def test_custom_config_initialization(self): class TestNewValueDetectorTraining: """Test NewValueDetector training functionality.""" - def test_train_all_multiple_values(self): - """Test training with multiple different values.""" - detector = NewValueDetector(config=config, name="AllDetector") - - # Train with multiple values - for level in ["INFO", "WARNING", "ERROR"]: - parser_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 1, - "template": "test template", - "variables": ["0", "assa"], - "logID": 1, - "parsedLogID": 1, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": level} - }) - detector.train(parser_data) - - # Verify all values were learned via persistency - event_data = detector.persistency.get_event_data(1) - assert event_data is not None - # Check that we track 2 variables: "level" (header) and "test" (from pos 1) - assert len(event_data) == 2 - # Check the level values - assert "INFO" in event_data["level"].unique_set - assert "WARNING" in event_data["level"].unique_set - assert "ERROR" in event_data["level"].unique_set - # Check the variable at position 1 (named "test") - assert "assa" in event_data["test"].unique_set - def test_train_multiple_values(self): """Test training with multiple different values.""" detector = NewValueDetector(config=config, name="MultipleDetector") @@ -145,7 +102,7 @@ def test_train_multiple_values(self): }) detector.train(parser_data) - # Only event 1 should be tracked (based on log_variables config) + # Only event 1 should be tracked (based on events config) assert len(detector.persistency.events_data) == 1 event_data = detector.persistency.get_event_data(1) assert event_data is not None @@ -160,80 +117,6 @@ def test_train_multiple_values(self): class TestNewValueDetectorDetection: """Test NewValueDetector detection functionality.""" - def test_detect_known_value_no_alert_all(self): - """Test that known values don't trigger alerts.""" - detector = NewValueDetector(config=config, name="AllDetector") - - # Train with a value - train_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 1, - "template": "test template", - "variables": ["adsasd", "asdasd"], - "logID": 1, - "parsedLogID": 1, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "INFO"} - }) - detector.train(train_data) - - # Detect with the same value - test_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 12, - "template": "test template", - "variables": ["adsasd", "asdasd"], - "logID": 2, - "parsedLogID": 2, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "INFO"} - }) - output = schemas.DetectorSchema() - - result = detector.detect(test_data, output) - - # Should not trigger alert for known value - assert not result - assert output.score == 0.0 - - def test_detect_known_value_alert_all(self): - detector = NewValueDetector(config=config, name="AllDetector") - - # Train with a value - train_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 1, - "template": "test template", - "variables": ["adsasd", "asdasd"], - "logID": 1, - "parsedLogID": 1, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "INFO"} - }) - detector.train(train_data) - - # Detect with the same value - test_data = schemas.ParserSchema({ - "parserType": "test", - "EventID": 12, - "template": "test template", - "variables": ["adsasd", "asdasd"], - "logID": 2, - "parsedLogID": 2, - "parserID": "test_parser", - "log": "test log message", - "logFormatVariables": {"level": "CRITICAL"} - }) - output = schemas.DetectorSchema() - - result = detector.detect(test_data, output) - - assert result - assert output.score == 1.0 - def test_detect_known_value_no_alert(self): detector = NewValueDetector(config=config, name="MultipleDetector") diff --git a/tests/test_detectors/test_random_detector.py b/tests/test_detectors/test_random_detector.py index 571c7c5..80922ab 100644 --- a/tests/test_detectors/test_random_detector.py +++ b/tests/test_detectors/test_random_detector.py @@ -11,19 +11,20 @@ "TestDetector": { "auto_config": False, "method_type": "random_detector", - "params": { - "log_variables": [{ - "id": "test", - "event": 1, - "template": "dummy template", - "variables": [{ - "pos": 0, - "name": "process", - "params": { - "threshold": 0. - } - }] - }] + "params": {}, + "events": { + 1: { + "test": { + "params": {}, + "variables": [{ + "pos": 0, + "name": "process", + "params": { + "threshold": 0. + } + }] + } + } } } } @@ -39,7 +40,7 @@ def test_full_process_pipeline(self): assert detector is not None assert detector.name == "TestDetector" - assert detector.config.log_variables[1].variables[0].name == "process" + assert detector.config.events[1].variables[0].name == "process" class TestRandomDetectorEdgeCases: diff --git a/tests/test_folder/test_config.yaml b/tests/test_folder/test_config.yaml index b4c917f..8dd3b6c 100644 --- a/tests/test_folder/test_config.yaml +++ b/tests/test_folder/test_config.yaml @@ -1,3 +1,9 @@ +readers: + File_reader: + method_type: log_file_reader + params: + file: "" + parsers: example_parser: method_type: ExampleParser @@ -6,38 +12,22 @@ parsers: log_format: "[