Start time: 21:01:16 03/04/15
Revision: 1275
Model Identifier: Macmini6,2
System Version: OS X 10.9.5 (13F34)
Kernel Version: Darwin 13.4.0
Time since boot: 22:36
Root access: No
UID: 501
TCP/IP
Subnet mask: 255.255.255.248
Diagnostic reports
2015-01-17 CrashPlan crash x6
Kernel log
Mar 3 22:26:13 SMC::smcGetLightshowVers ERROR: smcReadKey LsNM failed (kSMCKeyNotFound)
Mar 3 22:26:13 SMC::smcPublishLightshowVersion ERROR: smcGetLightshowVers failed (kSMCKeyNotFound)
Mar 3 22:26:13 SMC::smcInitHelper ERROR: smcPublishLightshowVersion failed (kSMCKeyNotFound)
Mar 3 22:26:30 **** [IOBluetoothHostControllerUSBTransport][SuspendDevice] -- Suspend -- suspendDeviceCallResult = 0x0000 (kIOReturnSuccess) -- 0xa400 ****
Mar 3 22:40:00 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff80310cd178
Mar 3 23:49:39 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff80314cf178
Mar 4 00:57:45 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff8030637298
Mar 4 02:03:30 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff803a2f68e8
Mar 4 03:08:12 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff803a2ff7c8
Mar 4 04:12:43 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff802c439650
Mar 4 05:17:26 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff8030d51530
Mar 4 06:21:53 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff802f8dd7c8
Mar 4 07:26:13 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff802da9d7c8
Mar 4 08:30:41 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff80314998e8
Mar 4 09:35:01 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff80314cd000
Mar 4 10:39:40 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff803030eb80
Mar 4 11:43:55 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff802da9d7c8
Mar 4 12:48:40 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff80314cd000
Mar 4 13:52:50 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff802f575530
Mar 4 14:57:08 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff802f8dd410
Mar 4 16:01:49 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff802f574dc0
Mar 4 17:06:14 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff802fefd770
Mar 4 18:10:42 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff8030c45000
Mar 4 19:15:39 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff80314cd000
Mar 4 20:19:53 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff802c43aca0
System log
Mar 4 19:14:40 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +15ms] Error retrieving data, Could not connect to the server.
Mar 4 19:14:40 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +16ms] Error retrieving data, Could not connect to the server.
Mar 4 20:18:19 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +21ms] Error retrieving data, Could not connect to the server.
Mar 4 20:18:20 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +0ms] Error retrieving data, Could not connect to the server.
Mar 4 20:18:20 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +17ms] Error retrieving data, Could not connect to the server.
Mar 4 20:18:20 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +19ms] Error retrieving data, Could not connect to the server.
Mar 4 20:18:20 serveradmin: [XcodeRequestHandler+EntityHelpers.m:604 7c384310 +0ms] Cannot get ACLs because entity GUID is nil
Mar 4 20:18:20 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +15ms] Error retrieving data, Could not connect to the server.
Mar 4 20:18:20 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +15ms] Error retrieving data, Could not connect to the server.
Mar 4 20:18:20 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +17ms] Error retrieving data, Could not connect to the server.
Mar 4 20:18:20 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +19ms] Error retrieving data, Could not connect to the server.
Mar 4 20:18:20 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +16ms] Error retrieving data, Could not connect to the server.
Mar 4 20:18:20 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +15ms] Error retrieving data, Could not connect to the server.
Mar 4 20:19:28 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +21ms] Error retrieving data, Could not connect to the server.
Mar 4 20:19:28 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +16ms] Error retrieving data, Could not connect to the server.
Mar 4 20:19:29 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +4ms] Error retrieving data, Could not connect to the server.
Mar 4 20:19:29 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +15ms] Error retrieving data, Could not connect to the server.
Mar 4 20:19:29 serveradmin: [XcodeRequestHandler+EntityHelpers.m:604 7c384310 +0ms] Cannot get ACLs because entity GUID is nil
Mar 4 20:19:29 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +16ms] Error retrieving data, Could not connect to the server.
Mar 4 20:19:29 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +16ms] Error retrieving data, Could not connect to the server.
Mar 4 20:19:29 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +16ms] Error retrieving data, Could not connect to the server.
Mar 4 20:19:29 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +15ms] Error retrieving data, Could not connect to the server.
Mar 4 20:19:29 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +19ms] Error retrieving data, Could not connect to the server.
Mar 4 20:19:29 serveradmin: [CSRemoteServiceClient.m:252 7c384310 +16ms] Error retrieving data, Could not connect to the server.
Mar 4 21:01:16 sudo: svadmin : 3 incorrect password attempts ; TTY=ttys000 ; PWD=/Users/USER ; USER=root ; COMMAND=validate
launchd log
Mar 3 22:26:13 com.apple.Kerberos.kdc: Exited with code: 1
Mar 3 22:26:24 org.apache.httpd: Exited with code: 1
Mar 3 22:26:36 org.apache.httpd: Exited with code: 1
Mar 3 22:26:37 org.apache.httpd: Exited with code: 1
Mar 3 22:27:39 com.apple.mrt.uiagent: Exited with code: 255
Mar 3 23:02:10 com.apple.iTunesHelper.5312: Exited with code: 1
Mar 3 23:02:11 com.apple.loginwindow: Exited with code: 3
Loaded kernel extensions
com.sophos.kext.sav (9.2.50)
com.sophos.nke.swi (9.2.50)
Daemons loaded
No
Agents loaded
com.apple.mrt.uiagent
- status: 255
com.sophos.uiserver
User login items
iTunesHelper
- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
CrashPlan menu bar
- missing value
CrashPlan menu bar
- /Applications/CrashPlan.app/Contents/Helpers/CrashPlan menu bar.app
Restricted files: 16
Contents of /Library/LaunchAgents/com.sophos.uiserver.plist
- mod date: Oct 16 08:20:52 2014
- checksum: 40276757
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.sophos.uiserver</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Sophos Anti-Virus/SophosUIServer.app/Contents/MacOS/SophosUIServer</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.apple.serverd.plist
- mod date: Aug 3 14:22:47 2014
- checksum: 3631376130
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.serverd</string>
<key>MachServices</key>
<dict>
<key>com.apple.serverd</key>
<true/>
</dict>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.apple.serverd</string>
</array>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.barebones.authd.plist
- mod date: Sep 21 16:56:14 2014
- checksum: 1995816654
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>Label</key>
<string>com.barebones.authd</string>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.barebones.authd</string>
</array>
<key>Sockets</key>
<dict>
<key>com.barebones.authd.socket</key>
<dict>
<key>SockPathMode</key>
<integer>438</integer>
<key>SockPathName</key>
<string>/var/tmp/com.barebones.authd.socket</string>
</dict>
</dict>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.crashplan.engine.plist
- mod date: Jan 18 08:33:38 2015
- checksum: 4254686880
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.crashplan.engine</string>
<key>UserName</key>
<string>root</string>
<key>GroupName</key>
<string>wheel</string>
<key>Nice</key>
<integer>20</integer>
<key>KeepAlive</key>
<true/>
<key>OnDemand</key>
<false/>
<key>RunAtLoad</key>
<true/>
<key>AbandonProcessGroup</key>
<true/>
<key>WorkingDirectory</key>
<string>/Applications/CrashPlan.app/Contents/Resources/Java</string>
<key>ProgramArguments</key>
<array>
<string>/Applications/CrashPlan.app/Contents/MacOS/CrashPlanService</string>
...and 26 more line(s)
Contents of /Library/LaunchDaemons/com.hanynet.icefloor.plist
- mod date: Aug 16 12:11:53 2014
- checksum: 3559184017
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.hanynet.icefloor</string>
<key>ProgramArguments</key>
<array>
<string>/etc/icefloor.sh</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>ServiceDescription</key>
<string>PFLists: starting PF firewall</string>
<key>ExitTimeOut</key>
<integer>1</integer>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.sophos.common.servicemanager.plist
- mod date: Oct 16 08:20:50 2014
- checksum: 1792128556
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
<key>Label</key>
<string>com.sophos.common.servicemanager</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Sophos Anti-Virus/SophosServiceManager.bundle/Contents/MacOS/SophosServiceManager</str ing>
</array>
<key>KeepAlive</key>
<true/>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
- mod date: Feb 12 13:10:48 2015
- checksum: 2747728705
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>EnvironmentVariables</key>
<dict>
<key>SERVER_INSTALL_PATH_PREFIX</key>
<string>/Applications/Server.app/Contents/ServerRoot</string>
<key>XPC_SERVICES_UNAVAILABLE</key>
<string>1</string>
</dict>
<key>Label</key>
<string>org.apache.httpd</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/httpd</string>
<string>-D</string>
<string>FOREGROUND</string>
<string>-f</string>
<string>/Library/Server/Web/Config/apache2/httpd_server_app.conf</string>
<string>-D</string>
...and 4 more line(s)
Contents of /System/Library/LaunchDaemons/org.postfix.master.plist
- mod date: Aug 3 18:23:35 2014
- checksum: 1207539540
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>org.postfix.master</string>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/postfix/master</string>
</array>
</dict>
</plist>
Contents of /private/etc/pear.conf
- mod date: Aug 3 14:23:50 2014
- checksum: 642679157
a:31:{s:9:"cache_dir";s:23:"/private/tmp/pear/cache";s:15:"default_channel";s:1 2:"pear.php.net";s:16:"preferred_mirror";s:12:"pear.php.net";s:13:"remote_config ";s:0:"";s:13:"auto_discover";i:0;s:13:"master_server";s:12:"pear.php.net";s:10: "http_proxy";s:0:"";s:7:"php_dir";s:12:"/usr/lib/php";s:7:"ext_dir";s:49:"/usr/l ib/php/extensions/no-debug-non-zts-20100525";s:7:"doc_dir";s:16:"/usr/lib/php/do c";s:7:"bin_dir";s:8:"/usr/bin";s:8:"data_dir";s:17:"/usr/lib/php/data";s:7:"cfg _dir";s:16:"/usr/lib/php/cfg";s:7:"www_dir";s:19:"/usr/lib/php/htdocs";s:8:"test _dir";s:17:"/usr/lib/php/test";s:8:"temp_dir";s:22:"/private/tmp/pear/temp";s:12 :"download_dir";s:26:"/private/tmp/pear/download";s:7:"php_bin";s:12:"/usr/bin/p hp";s:10:"php_prefix";s:0:"";s:10:"php_suffix";s:0:"";s:7:"php_ini";s:0:"";s:8:" username";s:0:"";s:8:"password";s:0:"";s:7:"verbose";i:1;s:15:"preferred_state"; s:6:"stable";s:5:"umask";i:18;s:9:"cache_ttl";i:3600;s:8:"sig_type";s:3:"gpg";s: 7:"sig_bin";s:18:"/usr/local/bin/gpg";s:9:"sig_keyid";s:0:"";s:10:"sig_keydir";s :21:"/private/etc/pearkeys";}
Contents of /private/etc/ssh_config
- mod date: Aug 3 14:22:52 2014
- checksum: 1744278567
Host *
SendEnv LANG LC_*
GSSAPIAuthentication yes
GSSAPIDelegateCredentials no
GSSAPIKeyExchange no
GSSAPITrustDNS no
Contents of /private/etc/sshd_config
- mod date: Aug 3 14:22:52 2014
- checksum: 511312980
SyslogFacility AUTHPRIV
AuthorizedKeysFile .ssh/authorized_keys
KerberosAuthentication yes
KerberosOrLocalPasswd yes
KerberosTicketCleanup yes
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
GSSAPIStrictAcceptorCheck yes
GSSAPIKeyExchange no
UsePrivilegeSeparation sandbox # Default for new installations.
AcceptEnv LANG LC_*
Subsystem sftp /usr/libexec/sftp-server
Contents of /private/etc/syslog.conf
- mod date: Aug 16 12:11:53 2014
- checksum: 1334810047
install.* @127.0.0.1:32376
auth.* @127.0.0.1:60762
local2.* /var/log/pffirewall.log
Contents of Library/LaunchAgents/com.apple.serveralertproxy.plist
- mod date: Feb 12 12:16:19 2015
- checksum: 3575397582
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>MachServices</key>
<dict>
<key>com.apple.server.alerts.xpc</key>
<true/>
<key>com.apple.server.aps</key>
<true/>
</dict>
<key>LaunchEvents</key>
<dict>
<key>com.apple.usernotificationcenter.matching</key>
<dict>
<key>alertproxy</key>
<dict>
<key>bundleid</key>
<string>com.apple.Server.v3</string>
<key>events</key>
<array>
<string>didDeliverNotification</string>
<string>didActivateNotification</string>
</array>
</dict>
...and 14 more line(s)
Bad plists
/Library/Preferences/ApplePushServiceProvider/com.apple.apspd.plist
Extensions
/Library/Extensions/SophosNetworkInterceptor.kext
- com.sophos.nke.swi
/Library/Extensions/SophosOnAccessInterceptor.kext
- com.sophos.kext.sav
Applications
/Applications/IceFloor.app
- com.hanynet.icefloor
/Applications/Server.app/Contents/Applications/Xsan Admin.app
- N/A
Frameworks
/Library/Frameworks/SAVI.framework
- com.sophos.sav.savi
/Library/Frameworks/SUMScanKit.framework
- com.sophos.sum.scan.kit
/Library/Frameworks/SophosGenericsCommon.framework
- com.sophos.macendpoint.SophosGenericsCommon
/Library/Frameworks/SophosGenericsCore.framework
- com.sophos.macendpoint.SophosGenericsCore
Bundles (new)
/Library/Application Support/Sophos/he/Installer.app
- com.sophos.macendpoint.InstallationDeployer
/Library/Application Support/Sophos/he/Sophos Installer Components/savi.bundle
- com.sophos.macinstallpkg.savi
Library paths
/Library/Sophos Anti-Virus/Libraries/libSULObjC.dylib
/Library/Sophos Anti-Virus/Libraries/libcrypto.dylib
/Library/Sophos Anti-Virus/Libraries/libssl.dylib
Installations
CrashPlan: 1/18/15, 8:33 AM
CrashPlan: 1/10/15, 10:38 AM
Elapsed time (sec): 315