Q: Where does El Capitan (actually) store system crash logs?
-
Aug 15, 2016 8:25 PMby Eric Root,Try running this program and then copy and paste the output in a reply. The program was created by Etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown.
-
Aug 16, 2016 2:40 AMby Nikolai Franke,Hello Eric, thanks a lot for your reply. Here's the report:
EtreCheck version: 3.0.1 (304)
Report generated 2016-08-16 11:36:45
Download EtreCheck from https://etrecheck.com
Runtime 2:56
Performance: Excellent
Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Problem: Other problem
Description:
computer freezes
Mac Pro (Early 2009)
[Technical Specifications] - [User Guide] - [Warranty & Service]
Mac Pro - model: MacPro4,1
1 2,93 GHz Quad-Core Intel Xeon CPU: 4-core
12 GB RAM Upgradeable - [Instructions]
DIMM 1
4 GB DDR3 ECC 1066 MHz ok
DIMM 2
4 GB DDR3 ECC 1066 MHz ok
DIMM 3
2 GB DDR3 ECC 1066 MHz ok
DIMM 4
2 GB DDR3 ECC 1066 MHz ok
Bluetooth: Old - Handoff/Airdrop2 not supported
Wireless: en2: 802.11 a/b/g/n
ATI Radeon HD 4870 - VRAM: 512 MB
4613 FA 1280 x 1024 @ 60 Hz
Cinema HD 2560 x 1600
OS X El Capitan 10.11.6 (15G31) - Time since boot: less than an hour
HL-DT-ST DVD-RW GH41N ()
Corsair CSSD-F120GB2 disk2 : (120,03 GB) (Solid State - TRIM: No)
EFI (disk2s1) <not mounted> : 210 MB
a0_ai004-44ai-01840 (disk2s2) / : 119.17 GB (51.66 GB free)
Recovery HD (disk2s3) <not mounted> [Recovery]: 650 MB
WDC WD6400AAKS-41H2B0 disk0 : (640,14 GB) (Rotational)
EFI (disk0s1) <not mounted> : 210 MB
aa_A221ab3044300 (disk0s2) /Volumes/aa_A221ab3044300 : 639.79 GB (180.36 GB free)
Hitachi HDS723030ALA640 disk1 : (3 TB) (Rotational)
EFI (disk1s1) <not mounted> : 210 MB
scratchdisk (disk1s2) /Volumes/scratchdisk : 73.48 GB (71.68 GB free)
Recovery HD (disk1s3) <not mounted> [Recovery]: 650 MB
Boot OS X (disk1s5) <not mounted> : 134 MB
lager (disk1s6) /Volumes/lager : 870.61 GB (28.79 GB free)
iTunesLibrary (disk1s7) /Volumes/iTunesLibrary : 1.05 TB (757.89 GB free)
Boot OS X (disk1s9) <not mounted> : 134 MB
timemachine (disk5) /Volumes/timemachine : 859.32 GB (103.04 GB free)
Core Storage: disk1s4 859.66 GB Online
osx109 (disk4) /Volumes/osx109 : 143.80 GB (59.71 GB free)
Core Storage: disk1s8 144.14 GB Online
Seagate GoFlex Slim Mac 500,11 GB
EFI (disk6s1) <not mounted> : 210 MB
kha_pt-AAIAOAACCGT (disk6s2) /Volumes/kha_pt-AAIAOAACCGT : 499.76 GB (478.20 GB free)
Apple, Inc. Keyboard Hub
Apple, Inc Apple Keyboard
SteelSeries Sensei Raw Gaming Mouse
Apple Computer, Inc. Apple Cinema HD Display
Seagate Expansion Desk 4 TB
EFI (disk3s1) <not mounted> : 210 MB
a0 (disk3s2) /Volumes/a0 : 119.35 GB (7.62 GB free)
Recovery HD (disk3s3) <not mounted> [Recovery]: 784 MB
osx109 (disk3s4) /Volumes/osx109 1 : 110.00 GB (28.28 GB free)
kha (disk3s5) /Volumes/kha : 500.00 GB (440.97 GB free)
aa (disk3s6) /Volumes/aa : 1.00 TB (489.32 GB free)
lager (disk3s7) /Volumes/lager 1 : 870.00 GB (15.40 GB free)
iTunesLibrary (disk3s8) /Volumes/iTunesLibrary 1 : 1.00 TB (582.62 GB free)
Lager 2 (disk3s9) /Volumes/Lager 2 : 399.64 GB (329.46 GB free)
Apple Inc. BRCM2046 Hub
Apple Inc. Bluetooth USB Host Controller
/etc/hosts - Count: 60
Mac App Store and identified developers
/Library/Extensions
[loaded] com.steelseries.ssenext.driver (0.89 - SDK 10.8 - 2016-08-02) [Support]
[not loaded] 9 Apple tasks
[loaded] 157 Apple tasks
[running] 72 Apple tasks
[not loaded] 46 Apple tasks
[loaded] 162 Apple tasks
[running] 82 Apple tasks
[not loaded] com.adobe.AAM.Updater-1.0.plist (2016-08-10) [Support]
[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (2016-07-11)
[loaded] com.adobe.CS5ServiceManager.plist (2016-08-02)
[loaded] com.oracle.java.Java-Updater.plist (2016-03-06)
[running] com.steelseries.SSENext.plist (2016-07-30)
[loaded] com.adobe.ARMDC.Communicator.plist (2016-07-11) [Support]
[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (2016-07-11) [Support]
[loaded] com.adobe.SwitchBoard.plist (2016-08-02)
[running] com.adobe.agsservice.plist (2016-08-12) [Support]
[loaded] com.adobe.fpsaud.plist (2016-06-29)
[running] com.bombich.ccchelper.plist (2016-02-25) [Support]
[loaded] com.linotype.FontExplorerX.securityhelper.plist (2016-02-26) [Support]
[loaded] com.oracle.java.Helper-Tool.plist (2016-03-06)
[loaded] com.adobe.ARM.[...].plist (2016-03-05)
[loaded] com.adobe.ARM.[...].plist (2016-03-07)
[not loaded] com.linotype.FontFolderProtector.plist (2016-02-26) - /Applications/FontExplorer X Pro.app/Contents/Helpers/FontFolderProtector: Executable not found!
Butler Application Hidden (/Applications/Butler.app)
CCC User Agent Application Hidden (/Applications/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC User Agent.app)
Dropbox Application (/Applications/Dropbox.app)
Default Folder X Application (/Applications/Default Folder X.app)
AdobeResourceSynchronizer Application Hidden (/Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app)
AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 - SDK 10.6 (2016-07-26) [Support]
FlashPlayer-10.6: 22.0.0.209 - SDK 10.9 (2016-07-12) [Support]
QuickTime Plugin: 7.7.3 (2016-07-09)
AdobePDFViewerNPAPI: 15.017.20053 - SDK 10.11 (2016-08-07) [Support]
AdobePDFViewer: 15.017.20053 - SDK 10.11 (2016-08-07) [Support]
Flash Player: 22.0.0.209 - SDK 10.9 (2016-07-12) [Support]
Default Browser: 601 - SDK 10.11 (2016-07-09)
Silverlight: 5.1.41212.0 - SDK 10.6 (2016-06-03) [Support]
JavaAppletPlugin: Java 8 Update 101 build 13 (2016-07-24) Check version
uBlock - Chris Aljoudi - https://chrismatic.io/ (2015-08-18)
3rd Party Preference Panes: ⓘ
Flash Player (2016-06-29) [Support]
Java (2016-07-24) [Support]
Skip System Files: NO
Auto backup: YES
Volumes being backed up:
kha_pt-AAIAOAACCGT: Disk size: 499.76 GB Disk used: 21.56 GB
a0_ai004-44ai-01840: Disk size: 119.17 GB Disk used: 67.52 GB
Destinations:
timemachine [Local]
Total size: 859.32 GB
Total number of backups: 57
Oldest backup: 29.2.16 00:11
Last backup: 16.8.16 02:13
Size of backup disk: Adequate
Backup size 859.32 GB > (Disk used 89.08 GB X 3)
46% mdworker(22)
16% rsync(3)
13% Finder
11% Spotlight
10% WindowServer
6.80 GB com.apple.WebKit.WebContent(20)
1.04 GB kernel_task
799 MB mdworker(22)
209 MB Safari
135 MB mds_stores
Virtual Memory Information: ⓘ
119 MB Free RAM
12.00 GB Used RAM (1.43 GB Cached)
1.80 GB Swap Used
Aug 16, 2016, 11:27:47 AM Self test - passed
Aug 14, 2016, 11:38:36 AM ~/Library/Logs/DiagnosticReports/suggestd_2016-08-14-113836_[redacted].crash
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/ suggestd
Aug 14, 2016, 12:16:33 AM ~/Library/Logs/DiagnosticReports/SpotlightNetHelper_2016-08-14-001633_[redacted ].crash
/System/Library/PrivateFrameworks/ParsecUI.framework/Versions/A/Support/Spotlig htNetHelper.app/Contents/MacOS/SpotlightNetHelper
Aug 13, 2016, 06:58:38 PM /Library/Logs/DiagnosticReports/DEVONthink Pro_2016-08-13-185838_[redacted].hang
/Applications/DEVONthink Pro.app/Contents/MacOS/DEVONthink Pro
Aug 13, 2016, 06:05:58 PM /Library/Logs/DiagnosticReports/Adobe Bridge CC_2016-08-13-180558_[redacted].cpu_resource.diag [Details]
/Applications/Adobe Bridge CC/Adobe Bridge CC.app/Contents/MacOS/Adobe Bridge CC
Aug 13, 2016, 05:05:48 PM ~/Library/Logs/DiagnosticReports/Adobe Bridge CC_2016-08-13-170548_[redacted].crash
Aug 13, 2016, 02:42:20 PM /Library/Logs/DiagnosticReports/Safari_2016-08-13-144220_[redacted].crash
com.apple.Safari - /Applications/Safari.app/Contents/MacOS/Safari
-
Aug 16, 2016 3:12 AMby Nikolai Franke,… and the Detail from the 5th last line in the report (in case that is of any use) :
Date/Time: 2016-08-13 18:03:15 +0200
OS Version: Mac OS X 10.11.6 (Build 15G31)
Architecture: x86_64
Report Version: 19
Command: Adobe Bridge CC
Path: /Applications/Adobe Bridge CC/Adobe Bridge CC.app/Contents/MacOS/Adobe Bridge CC
Version: 6.2.0.179 (6.2.0.179)
Parent: launchd [1]
PID: 1314
Event: cpu usage (microstackshots only)
Thread: 0x1bef6 (60% cpu over 150 seconds)
Duration: 150.00s
Steps: 138
Hardware model: MacPro4,1
Active cpus: 8
Fan speed: 951 rpm
-
Aug 17, 2016 5:33 PMby Eric Root,[loaded] com.linotype.FontExplorerX.securityhelper.plist (2016-02-26) [Support]
Try uninstalling the above using the Developer's uninstall instructions.
-
Aug 18, 2016 3:48 AMby Nikolai Franke,Hello again Eric. Just to be sure—you're saying I should try uninstalling the entire application, not just that single plist file, right?
As for the /etc/hosts file—I've followed the instructions, no idea where that came from, I haven't done a clean install in a very long time, always just migrated; well. No pirated software on my computer, that much is certain.
I'll remove the plist, or the entire application according to your advice and see (and post another etrecheck result).Thanks so far.
-
Aug 18, 2016 5:11 AMby Barney-15E,What kind of "crashes" are you getting?
Is it just individual apps crashing or is it a kernel panic which causes the Mac to restart, and may show a gray screen saying that you need to restart in several languages?
For either, try booting into Safe Mode and see what happens. It will be sluggish and some things do not work, but if the crashes stop, that may indicate a problem with the third-party kernel extension you have installed, Steel Series ssenext driver.
-
Aug 18, 2016 5:21 AMby Nikolai Franke,Hello Barney
Since I don't know where the crash files are stored, I can't tell what's going on on the technical side. What I see is this: Everything on the screen freezes with exception of the mouse pointer. The screen however remains lit. No input has any effect, be it keyboard, mouse, display buttons (I use an apple cinema display), again with one exception, namely the power button held down until cold switch-off. I'm not entirely certain how you'd call this. Freezing?
Nothing else ever happens. Do you still recommend uninstalling SteelSeries ssenext driver? Btw., in the meanwhile I managed to find out how permissions repair work in El Capitan (as you of course know, they have for reasons unknown (to me) disappeared from disk utility), and running them several times seems to have reduces those freezing events to half or even a third or so. Does that indicate anything?
(As I have to work with the machine quite urgently at present, I'll wait for your reply until I go into sluggish safe mode.)
Thanks a lot!
-
Aug 18, 2016 5:31 AMby Barney-15E,Repair permissions was removed because the things it repaired cannot be changed under SIP. There is nothing to repair. The OS will set/fix the permissions when you upgrade (not sure about an update).
What does the ssenext driver support?
Depending on how often it freezes, working in Safe Mode can help determine if the problem is caused by the driver as can temporarily uninstalling it.
If it is freezing, then it likely isn't creating a crash log as it is frozen. Sometimes the spindump program will catch such things and dump out a report, but if nothing is working, I would assume it can't work either.
-
Aug 18, 2016 5:37 AMby Nikolai Franke,Ok, I see. Running the repair permissions did however display a very long list of repaired permissions (verification beforehand did display a very long list of permissions in need of repair). Does that indicate an ever deeper problem (like: The upgrade was only half installed or so?)
And would you call a freeze what I describe?
-
Aug 18, 2016 5:20 PMby Barney-15E,It always did that. It just didn't mean anything then or now. Many of the things it said were wrong and "repaired" were not repaired because they were not wrong. Repairing permissions has always been voodoo except in the rare cases that some rogue software (like Adobe's) wrecked the permissions on the folders it installed it's components into.
What you describe likely prevented the OS from writing any crash/dump files. You can look into System Diagnostic Reports in Console and see if it has any that start with Kernel. If so, post the most recent one.
The uncorrupted OS does not behave like that. That kind of behavior usually indicates some third-party software interference. It could be hard drive corruption, but that usually results in lots of beach-balling, not full up freezing as you describe.
