Wifi logs concern that an illicit connection may be taking place

Hello folks, i have a concern that an illicit connection may be happening on my macbook air. i'll do my best to just put in the lines that have me concerned, though I'm not terribly clear about which parts are the important bits in a huge log. any insight would be helpful from the more knowledgeable. the console has a wifi log and now, for the 2nd time, i see a separate date specific wifi log with a name that looks like it ends in some kind of address or perhaps it is the time: Wifi-02-15-2021_00:00:00:000.log (i used zeros instead of the actual digets. These separated logs seem to disapear after a couple days I assume to the dump log instruction. I dont have an airport or use airdrop and have blue tooth and sharing off


Thanks:


Mon Feb 15 15:56:37.117 Roam: <airport[223]> _initInterface: AirPort Interface <en0> <11>

Mon Feb 15 15:56:37.117 P2P: <airport[223]> CreateVirtualInterface: Attempting to create AWDL interface for en0 with MAC address (mac address removed - doesn't look like one of mine) (attemptNumber = 0)

Mon Feb 15 15:56:37.117 Offload: <airport[223]> tcpKeepAliveActive: TCP keep-alive is active.

Mon Feb 15 15:56:37.120 P2P: <airport[223]> CreateVirtualInterface: Created AWDL interface awdl0 with address (address again removed) for en0

Mon Feb 15 15:56:37.120 Offload: <airport[223]> _openIpAddressMonitoringSockets: Monitoring IP address changes on en0

Mon Feb 15 15:56:37.123 WoW: <airport[223]> WoW params successfully configured on en0 ({

Mon Feb 15 15:56:37.123 "WOW_ENABLE_CAPTIVE" = 0;

Mon Feb 15 15:56:37.123 "WOW_ENABLE_LPAS" = 1;

Mon Feb 15 15:56:37.123 "WOW_PATTERNS" =


Mon Feb 15 15:56:37.123 })

Mon Feb 15 15:56:37.123 WoW: <airport[223]> WoW DISABLED (assert=no, pref=no activity=no, ps=battery (99), icloud=yes, tcpka=enabled, pno=47384764, lpas=yes)

Mon Feb 15 15:56:37.129 <airport[223]> _initLocaleManager: Started locale manager

Mon Feb 15 15:56:37.129 <airport[223]> _initInterface: Failed to query current SSID (Operation not supported)

Mon Feb 15 15:56:37.151 SC: <airport[223]> CoreCapture preference: 0

Mon Feb 15 15:56:37.151 SC: <airport[223]> finished with CoreCapture preferences

Mon Feb 15 15:56:37.151 Driver Discovery: <airport[223]> _initAttachedAirPortInterfaces: Considering bridge0

Mon Feb 15 15:56:37.154 Info: <airport[223]> RESET AWDL behavior for interface en0

Mon Feb 15 15:56:37.154 Info: <airport[223]> STOP AWDL behavior for interface en0

Mon Feb 15 15:56:37.191 IPC: <airport[223]> ADDED XPC CLIENT CONNECTION [locationd (pid=108, euid=205, egid=205)]

Mon Feb 15 15:56:37.191 IPC: <airport[223]> ADDED XPC CLIENT CONNECTION [SecurityAgent (pid=266, euid=92, egid=92)]

Mon Feb 15 15:56:37.191 IPC: <airport[223]> ADDED XPC CLIENT CONNECTION [bluetoothd (pid=121, euid=0, egid=0)]

Mon Feb 15 15:56:37.191 Info: <airport[223]> -[CWXPCSubsystem queryBSSIDForInterfaceWithName:connection:error:]: Failed to query current BSSID, returned error code -3903

Mon Feb 15 15:56:37.191 Info: <airport[223]> RELINQUISH BT PAGING LOCK request received from pid 121 (bluetoothd)

Mon Feb 15 15:56:37.191 Info: <airport[223]> START MONITORING EVENT request received from pid 266 (SecurityAgent)

Mon Feb 15 15:56:37.191 <airport[223]> ERROR: SecurityAgent (266) is not entitled for com.apple.wifi.events.private, will not register for event type 100

Mon Feb 15 15:56:37.191 Info: <airport[223]> START MONITORING EVENT request received from pid 266 (SecurityAgent)


Mon Feb 15 15:56:37.680 IPC: <airport[223]> ADDED XPC CLIENT CONNECTION [PerfPowerServices (pid=115, euid=0, egid=0)]

Mon Feb 15 15:56:37.680 Info: <airport[223]> START MONITORING EVENT request received from pid 115 (PerfPowerServices)

Mon Feb 15 15:56:37.746 Info: <WiFiAge[300]> -[AppDelegate applicationDidFinishLaunching:]: WiFiAgent launched [uid=0, gid=0 isBaseSystem=no]

Mon Feb 15 15:56:37.753 Info: <WiFiAge[300]> Wi-Fi Network Sync disabled for non-admin user

Mon Feb 15 15:56:37.756 IPC: <airport[223]> ADDED WIFI AGENT [WiFiAgent (pid=300, euid=0, egid=0)]

Mon Feb 15 15:56:37.756 Info: <airport[223]> START MONITORING EVENT request received from pid 300 (WiFiAgent)


Mon Feb 15 15:57:32.413 Info: <airport[223]> <awdl0> Will clear all active AWDL peer traffic registrations for 64794C02-BCB0-4253-81A1-B058EA8FC23E (services={

Mon Feb 15 15:57:32.413 })

Mon Feb 15 15:57:32.413 Info: <airport[223]> -[CWXPCInterfaceContext configureOneStatsAssocInfo:]_block_invoke: -[CWXPCInterfaceContext configureOneStatsAssocInfo:]_block_invoke: Disabling OneStatsAssocInfo stats


Mon Feb 15 17:55:19.995 Driver Event: <airport[223]> _bsd_80211_event_callback: DUMP_LOGS (en0)




MacBook Air 13″, 11.2

Posted on Feb 16, 2021 1:48 PM

Reply

Similar questions

2 replies

Feb 16, 2021 2:14 PM in response to TwinkleLittleStarlet

What led you to look into these logs in the first place?

If you start looking into these things you are likely to find lots of stuff that you (and I) are not familiar with, but that doesn’t mean there is any hacking going on.


If you have any reason to be concerned, I suggest you run Etrecheck and post its full report report here so we can see if there is something like adware or any dubious system modifications.


The most likely is that there nothing to worry but the Etrecheck report-which is meant precisely so that other users here know enough about your mac to be able to understand what (if anything) is wrong-should help us know for sure.

Feb 16, 2021 2:23 PM in response to TwinkleLittleStarlet

You don't say how you are connected to the internet. Most modems also have Wi-Fi networks and access to these networks can be managed by requiring a password. If you are concerned, then simply either add the requirement for a password, or change the current password. You do not have to enter a password each time since you can set it up for your computer to automatically enter the needed password. Then you can rest easy.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Wifi logs concern that an illicit connection may be taking place

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.