Wifi logs concern that an illicit connection may be taking place
Hello folks, i have a concern that an illicit connection may be happening on my macbook air. i'll do my best to just put in the lines that have me concerned, though I'm not terribly clear about which parts are the important bits in a huge log. any insight would be helpful from the more knowledgeable. the console has a wifi log and now, for the 2nd time, i see a separate date specific wifi log with a name that looks like it ends in some kind of address or perhaps it is the time: Wifi-02-15-2021_00:00:00:000.log (i used zeros instead of the actual digets. These separated logs seem to disapear after a couple days I assume to the dump log instruction. I dont have an airport or use airdrop and have blue tooth and sharing off
Thanks:
Mon Feb 15 15:56:37.117 Roam: <airport[223]> _initInterface: AirPort Interface <en0> <11>
Mon Feb 15 15:56:37.117 P2P: <airport[223]> CreateVirtualInterface: Attempting to create AWDL interface for en0 with MAC address (mac address removed - doesn't look like one of mine) (attemptNumber = 0)
Mon Feb 15 15:56:37.117 Offload: <airport[223]> tcpKeepAliveActive: TCP keep-alive is active.
Mon Feb 15 15:56:37.120 P2P: <airport[223]> CreateVirtualInterface: Created AWDL interface awdl0 with address (address again removed) for en0
Mon Feb 15 15:56:37.120 Offload: <airport[223]> _openIpAddressMonitoringSockets: Monitoring IP address changes on en0
Mon Feb 15 15:56:37.123 WoW: <airport[223]> WoW params successfully configured on en0 ({
Mon Feb 15 15:56:37.123 "WOW_ENABLE_CAPTIVE" = 0;
Mon Feb 15 15:56:37.123 "WOW_ENABLE_LPAS" = 1;
Mon Feb 15 15:56:37.123 "WOW_PATTERNS" =
Mon Feb 15 15:56:37.123 })
Mon Feb 15 15:56:37.123 WoW: <airport[223]> WoW DISABLED (assert=no, pref=no activity=no, ps=battery (99), icloud=yes, tcpka=enabled, pno=47384764, lpas=yes)
Mon Feb 15 15:56:37.129 <airport[223]> _initLocaleManager: Started locale manager
Mon Feb 15 15:56:37.129 <airport[223]> _initInterface: Failed to query current SSID (Operation not supported)
Mon Feb 15 15:56:37.151 SC: <airport[223]> CoreCapture preference: 0
Mon Feb 15 15:56:37.151 SC: <airport[223]> finished with CoreCapture preferences
Mon Feb 15 15:56:37.151 Driver Discovery: <airport[223]> _initAttachedAirPortInterfaces: Considering bridge0
Mon Feb 15 15:56:37.154 Info: <airport[223]> RESET AWDL behavior for interface en0
Mon Feb 15 15:56:37.154 Info: <airport[223]> STOP AWDL behavior for interface en0
Mon Feb 15 15:56:37.191 IPC: <airport[223]> ADDED XPC CLIENT CONNECTION [locationd (pid=108, euid=205, egid=205)]
Mon Feb 15 15:56:37.191 IPC: <airport[223]> ADDED XPC CLIENT CONNECTION [SecurityAgent (pid=266, euid=92, egid=92)]
Mon Feb 15 15:56:37.191 IPC: <airport[223]> ADDED XPC CLIENT CONNECTION [bluetoothd (pid=121, euid=0, egid=0)]
Mon Feb 15 15:56:37.191 Info: <airport[223]> -[CWXPCSubsystem queryBSSIDForInterfaceWithName:connection:error:]: Failed to query current BSSID, returned error code -3903
Mon Feb 15 15:56:37.191 Info: <airport[223]> RELINQUISH BT PAGING LOCK request received from pid 121 (bluetoothd)
Mon Feb 15 15:56:37.191 Info: <airport[223]> START MONITORING EVENT request received from pid 266 (SecurityAgent)
Mon Feb 15 15:56:37.191 <airport[223]> ERROR: SecurityAgent (266) is not entitled for com.apple.wifi.events.private, will not register for event type 100
Mon Feb 15 15:56:37.191 Info: <airport[223]> START MONITORING EVENT request received from pid 266 (SecurityAgent)
Mon Feb 15 15:56:37.680 IPC: <airport[223]> ADDED XPC CLIENT CONNECTION [PerfPowerServices (pid=115, euid=0, egid=0)]
Mon Feb 15 15:56:37.680 Info: <airport[223]> START MONITORING EVENT request received from pid 115 (PerfPowerServices)
Mon Feb 15 15:56:37.746 Info: <WiFiAge[300]> -[AppDelegate applicationDidFinishLaunching:]: WiFiAgent launched [uid=0, gid=0 isBaseSystem=no]
Mon Feb 15 15:56:37.753 Info: <WiFiAge[300]> Wi-Fi Network Sync disabled for non-admin user
Mon Feb 15 15:56:37.756 IPC: <airport[223]> ADDED WIFI AGENT [WiFiAgent (pid=300, euid=0, egid=0)]
Mon Feb 15 15:56:37.756 Info: <airport[223]> START MONITORING EVENT request received from pid 300 (WiFiAgent)
Mon Feb 15 15:57:32.413 Info: <airport[223]> <awdl0> Will clear all active AWDL peer traffic registrations for 64794C02-BCB0-4253-81A1-B058EA8FC23E (services={
Mon Feb 15 15:57:32.413 })
Mon Feb 15 15:57:32.413 Info: <airport[223]> -[CWXPCInterfaceContext configureOneStatsAssocInfo:]_block_invoke: -[CWXPCInterfaceContext configureOneStatsAssocInfo:]_block_invoke: Disabling OneStatsAssocInfo stats
Mon Feb 15 17:55:19.995 Driver Event: <airport[223]> _bsd_80211_event_callback: DUMP_LOGS (en0)
MacBook Air 13″, 11.2