Currently Being ModeratedNov 10, 2013 5:51 AM (in response to emlynuk)
Additional Info: The external server being queried is ocsp.apple.com, IP 220.127.116.11
Currently Being ModeratedNov 16, 2013 9:25 AM (in response to emlynuk)
The oscpd daemon has a manual page ('man ocspd' in Terminal) or…
I would disable iCloud on one Mac & see if it has any effect, then re-enable slowly to see which task causes it. Reboot between each test. The daemon is launched 'on demand' so it might be any task that uses SSL or the security framework that forces the update.
It may be worth checking logs for ocspd messages (Apps/Utilities/Console), incase it is having trouble saving caches.
The usual boot to recovery mode, run disk repair & permissions repair tasks might help?
I guess you could look at the certificates in Keychain Access, but I don't know where to start in cleaning them up, sorry.
Currently Being ModeratedNov 17, 2013 2:24 PM (in response to emlynuk)
I am having the same problem with my copy of marvericks. I am seeing about 2gig per day going to ocspd. I am on limited downloads so this is becoming a big problem for me. I even had a day where I lost 8 gig but the usual amount is 2. I have taken to disconnecting my Mac when I am not using it 8-(.
I have turned off AppStore and iCloud to try an isolate but I will have to try Drew's suggestions.
Currently Being ModeratedNov 17, 2013 10:55 PM (in response to Linc Davis)
I have tried that previously with no success.
I do have a lot of certificates that I probably don't need so might try deleting some to see if that effects the download volume.
Currently Being ModeratedNov 17, 2013 11:37 PM (in response to clockworkapps)
Acutally I found this related problem
"So it turns out the problem is Apple is having problems with their online OCSP & CRL servers for their certificates.
Turning off CRL & OCSP checking in the Certificates Preferences in Keychain Access solved the problem."
It seems to be working for me! (until the next update)
Currently Being ModeratedNov 19, 2013 10:49 AM (in response to clockworkapps)
Clockworkapps, THANK YOU for finding this and posting it. I have also had this issue. I am on a satellite ISP and I was using over a gig a day. My 15 was not going to last very long! Also I had no idea where the data was going--I wasn't doing anything different from the last 11 months and I had never gone over my limit before. I suspected iOS7 upgrade, which might also have been using a lot of data, but this fix on my Mac did the trick.
I want to URGE Apple to fix this because I do not like having these items turned off--not good for safe surfing. How will we know if we can turn them back on?
I would have never looked at this or known to turn off the CRL and OCSP. Thanks for posting. I have also posted this fix on my satellite ISP's forum. They didn't know how to fix this when I called them.
Currently Being ModeratedNov 25, 2013 6:37 PM (in response to emlynuk)
I have the same problem, and it is near 3.5 GB per day. I just turned off OCSP, I will check if it helps.
Currently Being ModeratedNov 26, 2013 12:35 PM (in response to clockworkapps)
Brilliant - I would never have found this - I have Rubernet monitoring everything and Little Snitch locking everything down and still saw large amounts of my precious Satellite bandwidth being eaten up even with only "essential Apple services" running - and it looks like ocspd was most of it.
Currently Being ModeratedNov 27, 2013 10:00 PM (in response to clockworkapps)
This has saved the day for me! I had a couple days on which ocspd used upwards of 35GB! As a result I blew through my 200GB cap for last month. I only wish I had found the cause and solution sooner.
Currently Being ModeratedNov 28, 2013 4:20 AM (in response to Linc Davis)
Thanks for the suggestions.
I foolishly installed Mavericks on a Mini server and went on holiday for 10 days shortly after, came back to over-quota messages from my ISP. The increase in usage for me started around the 7th Nov, but I installed Mavericks on the 25th October, so not 100% certain Mavericks is the cause. Also, when I look at Purchases in App Store Mavericks says "Download" rather than "Installed" (which it says for everything else). Anyone else get that? Perhaps the upgrade didn't complete properly, although the machine says it's running 10.9.
Deleting the contents of /var/db/crls reduced my daily ocspd consumption from up to 8GB to around 1GB.
Turning off iCloud sync of Keychain and a few other things dropped it to ~100MB a day, so getting better but still uncool on limited quota and bandwidth.
I am loath to turn off checking altogether, but it's looking like that or ditching iCloud next.
Any other ideas?
Currently Being ModeratedNov 28, 2013 4:48 AM (in response to undertheappletree)
Interesting to see so many people suffering the same problem and some worse than me.
As others have mentioned, turning off certificate validation is probably a bad thing but in the meantime we have to manage our bandwidth.
I purchased Little Snitch (http://www.obdev.at/products/littlesnitch/index.html) to look at the problem in more detail including packet sniffing - unfortunately, the OCSP daemon is only acting as a proxy for other processes requesting certificate credentials but there appears to be no visability to which processes these are (although some are obviously, like when you start XCode).
Little Snitch (LS) allows you to block inividial processes/connections (or ask you) so what I have implemented to manage the bandwidth is get LS to ask me if I want to allow a particular external call from OCSP to an external provider. When it asks, you can make that permission perminant or not, so from the traffic info I can see in LS, I am now letting most requests through by default but blocking (asking) some of the big ones in particular developer.apple.com.
It's a bit of a pain to start, but only getting about 3 or 4 'ask' requests from LS now per day and bandwidth usage for that process down to about 200KB per day so workable.
Not sure how Apple is going to handle this one. It seems to me they are have a duty to check if certificates have been revoked, but the cost is huge in terms of bandwidth. Unfortunately, the fact that Apple almost expect unlimited bandwidth with all their online updates (e.g. IOS > 1GB, Pages > 300MB etc), the bandwidth here is liklely to be generally small and low priority for them.
As Apple never seem to contribute to these conversations (but I am sure they are listening) does anyone have any sensible suggestions...
Currently Being ModeratedNov 29, 2013 5:44 PM (in response to emlynuk)
I'm running an iMac in a single person business off an ethernet connection and also have had a huge increase in data usage. My normal 10GB monthly allowance got sucked out in 14 days last month. [My normal usage is about 100-200MB a day]. It started shortly after Maverics was installed..... 600-800Mb a day then rising to 1200-1500MB a day.
I have made 4-5 calls to Apple and hours of my time and no solution. The last lady suggested that I just unplug my ethernet cable when I go home each night... great problem solver! Recent nights I have quit all applications and yesterday evening signed out of iCloud to eliminate that as a possibility. This all seems to have accellerated the usage to a further ..... 2GB yesterday and now 3.5GB since midnight to noon.
Thanks clockworkapps for the heads up on the OCSP & CRL option. I've found them and turned them off ... hope it works and a beer for you if it does!
Currently Being ModeratedNov 29, 2013 8:04 PM (in response to clockworkapps)
Thanks for the tip, I'm having the same problem with my iMac (mid 2011). This is costing my a fortune in fees from my ISP for exceeding my monthly data quota. I have turned off the OCSP & CRL and I'll be watching very closely the data movement in the Activity Monitor.
Something doesn't jive though, and I hope this helps somebody find the source of the problem: I also have a MacBook Air (mid 2011) also running Mavericks and it doesn't have that problem. If it would be a server issue, both computers would have the same problem. I can't find anything different between the settings of these 2 computer that would explain the different behaviours.
More Like This
- Retrieving data ...
- This solved my question - 10 points
- This helped me - 5 points