Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Excessive logging in 10.6

sandboxd and syslogd have basically taken over my computer, using 60% and 120% CPU respectively.

Something is making sandboxd repeatedly log things like:
Feb 3 00:29:57 Brians-mini sandboxd[16]: syslogd(15) deny file-read-data /private/var/log/asl/StoreData
Feb 3 00:29:57 Brians-mini sandboxd[16]: syslogd(15) deny mach-task-name
Feb 3 00:29:57 Brians-mini sandboxd[16]: syslogd(15) deny file-read-data /private/var/log/asl/StoreData
Feb 3 00:29:57 Brians-mini sandboxd[16]: syslogd(15) deny mach-task-name
Feb 3 00:29:59: --- last message repeated 1 time ---
Feb 3 00:29:57 Brians-mini sandboxd[16]: * process 16 exceeded 500 log message per second limit - remaining messages this second discarded *
Feb 3 00:29:57 Brians-mini sandboxd[16]: syslogd(15) deny mach-task-name
Feb 3 00:30:00: --- last message repeated 499 times ---
Feb 3 00:29:58 Brians-mini sandboxd[16]: * process 16 exceeded 500 log message per second limit - remaining messages this second discarded *
Feb 3 00:29:58 Brians-mini sandboxd[16]: syslogd(15) deny mach-task-name

It's trying to log more than 500 things in a second.

I do know that something is evidently trying to get into private/var/log/asl/StoreData what is that? and why is it protected?

It LOOKS like something is trying to log something, but isn't being allowed, and so sandboxd ends up logging that it disallowed someone else from logging. And it's trying to do this in a tight loop.

anyone seen anything like this?

BTW: If this isn't the right forum, can someone point me at the right one?

Mac Mini, Mac OS X (10.6.2)

Posted on Feb 4, 2010 12:10 PM

Reply
4 replies

Feb 5, 2010 7:16 AM in response to V.K.

no, I did't get the AV program until after the problems started...

and the problem turns out to have been caused by syslogd being sandboxed which caused a cascade of logging which was disallowed... I re-commented the sandbox section of /System/Library/LaunchDaemons/com.apple/syslogd.plist and the problem seems to have gone away!

Excessive logging in 10.6

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.