I have a process running called Ciconia. I have no idea what it is.

I'm looking at Activity Monitor, and I see that process. I'm tempted to kill it, but I thought I'd search for it first. I don't find anything about it. So, I thought I'd ask here.

MacBook Pro 16″, macOS 13.4

Posted on Jul 24, 2023 1:26 PM

Reply
11 replies

Jul 24, 2023 1:53 PM in response to stevegoldfield

It appears to be connected to iCloud which I never use aside from FindMyMac.


stevegoldfield@MacBook-Pro ~ % ps -ax | grep Ciconia

 776 ??     0:00.09 /System/Library/PrivateFrameworks/iCloudDriveService.framework/XPCServices/Ciconia.xpc/Contents/MacOS/Ciconia


So far, I haven't been able to kill it, though it belongs to me. Ah, force quit killed it. I'll see if it restarts.

Jul 24, 2023 3:21 PM in response to dialabrain

dialabrain wrote:

No one ever listens to me. 😎

I listen to you.


I have this XPC on the current version of Ventura. Ciconcia is a type of bird in the stork family. Apple already uses the work "bird" for various iCloud tasks. This was obviously some secret project that kept it codeword name for some reason. Unfortunately, the only other type of software that regularly uses obscure, but legit, words like that is malware. Everybody's just got to be clever, don't they?

Sep 12, 2023 1:38 PM in response to stevegoldfield

https://github.com/kzykhys/Ciconia


I just found the same thing on iOS logs: (brand new iphone 14 in lock down mode w/o cellular data)


brctl: dumping
    containers:   <all>
    from:         iPhone
    FPFS Feature: Disabled
dump taken at 9/12/23, 12:57:00 PM [account=18275296481] [inCarry=No] [home=/private/var/mobile]

database version: 21006
fsType: Legacy
ciconia state: 3
ciconia version: 135

boot_history (startup 235092.2s ago)
-----------------------------------------------------
server_truth
  [8/23/23, 8:22:52 AM] OS:20G75 CloudDocs:1553.142.1 BirdSchema:21006 DBSchema:21006
client_truth
  [8/23/23, 8:22:53 AM] OS:20G75 CloudDocs:1553.142.1 BirdSchema:21006 DBSchema:21006
backup_detector
  [1165438|1640159|5] OS:20G75 CloudDocs:1553.142.1 DBSchema:21006

ciconia_history
-----------------------------------------------------
  [8/24/23, 8:01:55 AM] OS:20G75 CloudDocs:1553.142.1 BirdSchema:21006 DBSchema:21006 CiconiaVersion:135 Duration:20.98118197917938 UUID:792A1116-D7FA-4431-B806-211EB42B0A0C LastOriginatorID:0 LastError:(null)

server_state
-----------------------------------------------------
last-sync:2023-09-05 12:03:16 AM +0000 nextRank:3869 minUsedTime:1693080102 shared-db{last-sync:2023-09-04/4:54:09 PM, caught-up, token:unkown-token-size:9 (AQAAAYpineXc)}


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

I have a process running called Ciconia. I have no idea what it is.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.