Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

el capitain crashes at startup, reloads, creates a crash report, and continues without crashing

I am experiencing some strange behavior of my MAC. For about five days, every time I turned it "ON" it would crash a few seconds after logging in, and it would create a crash report, ask permission to send it to Apple (I always sent it), and the iMAC would continue to work until I shut it down. The next day it would do the same thing.


Here is an example crash report:


Anonymous UUID: B5854D05-3436-12A8-2222-FA2F4B07A8A7


Tue Mar 8 14:59:56 2016


*** Panic Report ***

panic(cpu 0 caller 0xffffff80049f076b): "soclose: NOFDREF"@/Library/Caches/com.apple.xbs/Sources/xnu/xnu-3248.30.4/bsd/kern/uipc_ socket.c:1263

Backtrace (CPU 0), Frame : Return Address

0xffffff83ab66b970 : 0xffffff80044df792

0xffffff83ab66b9f0 : 0xffffff80049f076b

0xffffff83ab66ba40 : 0xffffff8004a17664

0xffffff83ab66ba60 : 0xffffff7f87f0e36c

0xffffff83ab66bb50 : 0xffffff7f87f0aeed

0xffffff83ab66bc80 : 0xffffff800499600b

0xffffff83ab66bcc0 : 0xffffff80049f27bc

0xffffff83ab66be30 : 0xffffff80049cfcb6

0xffffff83ab66be60 : 0xffffff80049c9787

0xffffff83ab66bf00 : 0xffffff80049c95be

0xffffff83ab66bf60 : 0xffffff8004a2a731

0xffffff83ab66bfb0 : 0xffffff80045f0a36

Kernel Extensions in backtrace:
com.apple.nke.applicationfirewall(163.0)[113F310F-1904-3F41-A206-1D275BF7A397]@0 xffffff7f87f09000->0xffffff7f87f10fff


BSD process name corresponding to current thread: socketfilterfw


Mac OS version:

15D21


Kernel version:

Darwin Kernel Version 15.3.0: Thu Dec 10 18:40:58 PST 2015; root:xnu-3248.30.4~1/RELEASE_X86_64

Kernel UUID: DECC9F02-27D7-31F0-9599-A9EF2873902C

Kernel slide:0x0000000004200000

Kernel text base: 0xffffff8004400000

__HIB text base: 0xffffff8004300000

System model name: iMac15,1 (Mac-FA842E06C61E91C5)


System uptime in nanoseconds: 83758637350

last loaded kext at 17318211492: com.apple.driver.AppleBluetoothHIDKeyboard 181 (addr 0xffffff7f86b18000, size 16384)

loaded kexts:

com.parallels.virtualhid 1.0.3 3

com.paragon-software.filesystems.ntfs 187.1.14

com.parallels.virtualsound 1.0.36 36

com.apple.driver.AudioAUUC 1.70

com.apple.filesystems.autofs 3.0

com.apple.driver.ApplePlatformEnabler 2.6.0d0

com.apple.driver.AGPM 110.20.22

com.apple.driver.X86PlatformShim 1.0.0

com.apple.driver.AppleOSXWatchdog 1

com.apple.driver.AppleMikeyHIDDriver 124

com.apple.driver.AppleMikeyDriver 272.51.3

com.apple.driver.AppleHDAHardwareConfigDriver 272.51.3

com.apple.driver.AppleHDA 272.51.3

com.apple.driver.AppleGraphicsDevicePolicy 3.7.7

com.apple.driver.AppleUpstreamUserClient 3.6.1

com.apple.kext.AMDFramebuffer 1.4.0

com.apple.driver.pmtelemetry 1

com.apple.iokit.IOUserEthernet 1.0.1

com.apple.iokit.IOBluetoothSerialManager 4.4.3f4

com.apple.driver.AppleMuxControl 3.12.6

com.apple.driver.AppleIntelHD5000Graphics 10.1.2

com.apple.Dont_Steal_Mac_OS_X 7.0.0

com.apple.driver.ACPI_SMC_PlatformPlugin 1.0.0

com.apple.AMDRadeonX4000 1.4.0

com.apple.driver.AppleBacklight 170.8.8

com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 4.4.3f4

com.apple.driver.AppleHV 1

com.apple.driver.AppleLPC 3.1

com.apple.driver.AppleSMCLMU 208

com.apple.kext.AMD9000Controller 1.4.0

com.apple.driver.AppleMCCSControl 1.2.13

com.apple.driver.AppleIntelFramebufferAzul 10.1.2

com.apple.driver.AppleIntelSlowAdaptiveClocking 4.0.0

com.apple.driver.AppleFIVRDriver 4.1.0

com.apple.driver.AppleThunderboltIP 3.0.8

com.apple.iokit.IOBluetoothUSBDFU 4.4.3f4

com.apple.iokit.SCSITaskUserClient 3.7.7

com.apple.driver.AppleUSBODD 3.7.1

com.apple.driver.AppleUSBStorageCoexistentDriver 3.7.1

com.apple.driver.CoreStorageFsck 517.20.1

com.apple.driver.AppleFileSystemDriver 3.0.1

com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1

com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0

com.apple.BootCache 38

com.apple.iokit.IOAHCIBlockStorage 2.8.5

com.apple.driver.AppleSDXC 1.7.0

com.apple.iokit.AppleBCM5701Ethernet 10.1.12

com.apple.driver.AirPort.Brcm4360 1020.17.1a1

com.apple.driver.AppleAHCIPort 3.1.8

com.apple.driver.AppleACPIButtons 4.0

com.apple.driver.AppleRTC 2.0

com.apple.driver.AppleHPET 1.8

com.apple.driver.AppleSMBIOS 2.1

com.apple.driver.AppleACPIEC 4.0

com.apple.driver.AppleAPIC 1.7

com.apple.nke.applicationfirewall 163

com.apple.security.quarantine 3

com.apple.security.TMSafetyNet 8

com.apple.driver.AppleBluetoothHIDKeyboard 181

com.apple.driver.IOBluetoothHIDDriver 4.4.3f4

com.apple.driver.AppleHIDKeyboard 181

com.apple.kext.triggers 1.0

com.apple.driver.DspFuncLib 272.51.3

com.apple.kext.OSvKernDSPLib 525

com.apple.iokit.IOSerialFamily 11

com.apple.driver.AppleGraphicsControl 3.12.6

com.apple.iokit.IOSurface 108.0.1

com.apple.driver.IOPlatformPluginLegacy 1.0.0

com.apple.driver.AppleSMBusPCI 1.0.14d1

com.apple.driver.AppleBacklightExpert 1.1.0

com.apple.iokit.IONDRVSupport 2.4.1

com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.4.3f4

com.apple.iokit.IOBluetoothFamily 4.4.3f4

com.apple.driver.CoreCaptureResponder 1

com.apple.driver.AppleHDAController 272.51.3

com.apple.iokit.IOHDAFamily 272.51.3

com.apple.iokit.IOAudioFamily 204.3

com.apple.vecLib.kext 1.2.0

com.apple.kext.AMDSupport 1.4.0

com.apple.driver.AppleSMBusController 1.0.14d1

com.apple.AppleGraphicsDeviceControl 3.12.6

com.apple.iokit.IOAcceleratorFamily2 205.1

com.apple.iokit.IOGraphicsFamily 2.4.1

com.apple.driver.X86PlatformPlugin 1.0.0

com.apple.driver.AppleSMC 3.1.9

com.apple.driver.IOPlatformPluginFamily 6.0.0d7

com.apple.iokit.IOSlowAdaptiveClockingFamily 1.0.0

com.apple.driver.AppleThunderboltEDMSink 4.1.1

com.apple.driver.usb.IOUSBHostHIDDevice 1.0.1

com.apple.driver.usb.AppleUSBHub 1.0.1

com.apple.iokit.IOSCSIMultimediaCommandsDevice 3.7.7

com.apple.iokit.IOBDStorageFamily 1.8

com.apple.iokit.IODVDStorageFamily 1.8

com.apple.iokit.IOCDStorageFamily 1.8

com.apple.iokit.IOSCSIBlockCommandsDevice 3.7.7

com.apple.iokit.IOUSBMassStorageClass 4.0.2

com.apple.iokit.IOUSBMassStorageDriver 1.0.0

com.apple.iokit.IOSCSIArchitectureModelFamily 3.7.7

com.apple.driver.usb.AppleUSBHostCompositeDevice 1.0.1

com.apple.driver.CoreStorage 517.20.1

com.apple.driver.AppleUSBMergeNub 900.4.1

com.apple.driver.AppleThunderboltDPInAdapter 4.1.3

com.apple.driver.AppleThunderboltDPOutAdapter 4.1.3

com.apple.driver.AppleThunderboltDPAdapterFamily 4.1.3

com.apple.driver.AppleThunderboltPCIDownAdapter 2.0.2

com.apple.driver.AppleXsanScheme 3

com.apple.driver.AppleThunderboltNHI 4.0.4

com.apple.iokit.IOThunderboltFamily 5.1.0

com.apple.iokit.IOEthernetAVBController 1.0.3b3

com.apple.iokit.IO80211Family 1110.26

com.apple.driver.mDNSOffloadUserClient 1.0.1b8

com.apple.iokit.IONetworkingFamily 3.2

com.apple.driver.corecapture 1.0.4

com.apple.iokit.IOAHCIFamily 2.8.1

com.apple.driver.usb.AppleUSBXHCIPCI 1.0.1

com.apple.driver.usb.AppleUSBXHCI 1.0.1

com.apple.iokit.IOUSBFamily 900.4.1

com.apple.iokit.IOUSBHostFamily 1.0.1

com.apple.driver.AppleUSBHostMergeProperties 1.0.1

com.apple.driver.AppleEFINVRAM 2.0

com.apple.iokit.IOHIDFamily 2.0.0

com.apple.driver.AppleEFIRuntime 2.0

com.apple.iokit.IOSMBusFamily 1.1

com.apple.security.sandbox 300.0

com.apple.kext.AppleMatch 1.0.0d1

com.apple.driver.AppleKeyStore 2

com.apple.driver.AppleMobileFileIntegrity 1.0.5

com.apple.driver.AppleCredentialManager 1.0

com.apple.driver.DiskImages 417.2

com.apple.iokit.IOStorageFamily 2.1

com.apple.iokit.IOReportFamily 31

com.apple.driver.AppleFDEKeyStore 28.30

com.apple.driver.AppleACPIPlatform 4.0

com.apple.iokit.IOPCIFamily 2.9

com.apple.iokit.IOACPIFamily 1.4

com.apple.kec.Libm 1

com.apple.kec.pthread 1

com.apple.kec.corecrypto 1.0

Model: iMac15,1, BootROM IM151.0207.B05, 4 processors, Intel Core i7, 4 GHz, 32 GB, SMC 2.23f11

Graphics: AMD Radeon R9 M295X, AMD Radeon R9 M295X, PCIe, 4096 MB

Memory Module: BANK 0/DIMM0, 8 GB, DDR3, 1600 MHz, 0x0198, 0x393955353432382D3031382E4130304C4620

Memory Module: BANK 1/DIMM0, 8 GB, DDR3, 1600 MHz, 0x0198, 0x393930353432382D3038372E4130304C4620

Memory Module: BANK 0/DIMM1, 8 GB, DDR3, 1600 MHz, 0x0198, 0x393955353432382D3031382E4130304C4620

Memory Module: BANK 1/DIMM1, 8 GB, DDR3, 1600 MHz, 0x0198, 0x393955353432382D3031382E4130304C4620

AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x142), Broadcom BCM43xx 1.0 (7.21.94.136.1a1)

Bluetooth: Version 4.4.3f4 16616, 3 services, 27 devices, 1 incoming serial ports

Network Service: Ethernet, Ethernet, en0

Serial ATA Device: APPLE SSD SM1024F, 1 TB

USB Device: USB 3.0 Bus

USB Device: BRCM20702 Hub

USB Device: Bluetooth USB Host Controller

USB Device: FaceTime HD Camera (Built-in)

USB Device: HP LaserJet 1200

USB Device: Microsoft Wireless Optical Mouse® 1.00

USB Device: Apple USB SuperDrive

Thunderbolt Bus: iMac, Apple Inc., 26.1


Apple never contacted me.


I never installed any updates.


I disconnected the Optical Mouse and reconnected the Apple one, removed the superdrive and the other non-apple USB devices with the exception of my HP printer. It has not occurred again...


1. What is the best way to troubleshoot this kind of problem?


2. What is the process to open a problem with Apple Support, and does one have to pay Apple to investigate it?


3. Does Apple staff answer questions here in this support group?


4. Is there an Apple Support site, where they answer support questions which customers can search for answers?


Thanks for your guidance.

iMac with Retina 5K display, OS X El Capitan (10.11.3)

Posted on Mar 13, 2016 5:45 PM

Reply
11 replies

Mar 14, 2016 11:08 AM in response to Linc Davis

thank you for the reply. The problem had gone away for a few days after I disconnected the USB devices I could do without, and I thought they may have been the cause. But without the usb devices, it crashed again when I turned the system on today: Here is the crash report:


Anonymous UUID: B5854D05-3436-12A8-2222-FA2F4B07A8A7


Mon Mar 14 13:47:17 2016


*** Panic Report ***

panic(cpu 0 caller 0xffffff8002df076b): "soclose: NOFDREF"@/Library/Caches/com.apple.xbs/Sources/xnu/xnu-3248.30.4/bsd/kern/uipc_ socket.c:1263

Backtrace (CPU 0), Frame : Return Address

0xffffff83ad673970 : 0xffffff80028df792

0xffffff83ad6739f0 : 0xffffff8002df076b

0xffffff83ad673a40 : 0xffffff8002e17664

0xffffff83ad673a60 : 0xffffff7f8630e36c

0xffffff83ad673b50 : 0xffffff7f8630aeed

0xffffff83ad673c80 : 0xffffff8002d9600b

0xffffff83ad673cc0 : 0xffffff8002df27bc

0xffffff83ad673e30 : 0xffffff8002dcfcb6

0xffffff83ad673e60 : 0xffffff8002dc9787

0xffffff83ad673f00 : 0xffffff8002dc95be

0xffffff83ad673f60 : 0xffffff8002e2a731

0xffffff83ad673fb0 : 0xffffff80029f0a36


Kernel Extensions in backtrace:
com.apple.nke.applicationfirewall(163.0)[113F310F-1904-3F41-A206-1D275BF7A397]@0 xffffff7f86309000->0xffffff7f86310fff


BSD process name corresponding to current thread: socketfilterfw


Mac OS version:

15D21


Kernel version:

Darwin Kernel Version 15.3.0: Thu Dec 10 18:40:58 PST 2015; root:xnu-3248.30.4~1/RELEASE_X86_64

Kernel UUID: DECC9F02-27D7-31F0-9599-A9EF2873902C

Kernel slide: 0x0000000002600000

Kernel text base: 0xffffff8002800000

__HIB text base: 0xffffff8002700000

System model name: iMac15,1 (Mac-FA842E06C61E91C5)


System uptime in nanoseconds: 84005855038

last loaded kext at 6197833658: com.apple.driver.AppleBluetoothHIDKeyboard 181 (addr 0xffffff7f84f18000, size 16384)

loaded kexts:

com.parallels.virtualhid 1.0.3 3

com.paragon-software.filesystems.ntfs 187.1.14

com.parallels.virtualsound 1.0.36 36

com.apple.driver.AudioAUUC 1.70

com.apple.driver.AppleBluetoothMultitouch 90.3

com.apple.filesystems.autofs 3.0

com.apple.driver.ApplePlatformEnabler 2.6.0d0

com.apple.driver.AGPM 110.20.22

com.apple.driver.X86PlatformShim 1.0.0

com.apple.driver.AppleOSXWatchdog 1

com.apple.driver.AppleMikeyHIDDriver 124

com.apple.driver.AppleMikeyDriver 272.51.3

com.apple.driver.AppleHDAHardwareConfigDriver 272.51.3

com.apple.driver.AppleHDA 272.51.3

com.apple.driver.AppleGraphicsDevicePolicy 3.7.7

com.apple.driver.AppleUpstreamUserClient 3.6.1

com.apple.kext.AMDFramebuffer 1.4.0

com.apple.driver.pmtelemetry 1

com.apple.iokit.IOUserEthernet 1.0.1

com.apple.driver.AppleThunderboltIP 3.0.8

com.apple.driver.AppleMuxControl 3.12.6

com.apple.AMDRadeonX4000 1.4.0

com.apple.driver.ACPI_SMC_PlatformPlugin 1.0.0

com.apple.iokit.IOBluetoothSerialManager 4.4.3f4

com.apple.Dont_Steal_Mac_OS_X 7.0.0

com.apple.driver.AppleFIVRDriver 4.1.0

com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 4.4.3f4

com.apple.driver.AppleBacklight 170.8.8

com.apple.driver.AppleLPC 3.1

com.apple.driver.AppleSMCLMU 208

com.apple.kext.AMD9000Controller 1.4.0

com.apple.driver.AppleHV 1

com.apple.driver.AppleIntelSlowAdaptiveClocking 4.0.0

com.apple.driver.AppleIntelHD5000Graphics 10.1.2

com.apple.driver.AppleIntelFramebufferAzul 10.1.2

com.apple.driver.AppleMCCSControl 1.2.13

com.apple.iokit.IOBluetoothUSBDFU 4.4.3f4

com.apple.driver.CoreStorageFsck 517.20.1

com.apple.driver.AppleFileSystemDriver 3.0.1

com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1

com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0

com.apple.BootCache 38

com.apple.iokit.IOAHCIBlockStorage 2.8.5

com.apple.driver.AppleSDXC 1.7.0

com.apple.iokit.AppleBCM5701Ethernet 10.1.12

com.apple.driver.AirPort.Brcm4360 1020.17.1a1

com.apple.driver.AppleAHCIPort 3.1.8

com.apple.driver.AppleACPIButtons 4.0

com.apple.driver.AppleRTC 2.0

com.apple.driver.AppleHPET 1.8

com.apple.driver.AppleSMBIOS 2.1

com.apple.driver.AppleACPIEC 4.0

com.apple.driver.AppleAPIC 1.7

com.apple.nke.applicationfirewall 163

com.apple.security.quarantine 3

com.apple.security.TMSafetyNet 8

com.apple.driver.AppleBluetoothHIDKeyboard 181

com.apple.driver.AppleHIDKeyboard 181

com.apple.driver.IOBluetoothHIDDriver 4.4.3f4

com.apple.driver.AppleMultitouchDriver 304.10

com.apple.driver.AppleHIDTransport 5

com.apple.kext.triggers 1.0

com.apple.driver.DspFuncLib 272.51.3

com.apple.kext.OSvKernDSPLib 525

com.apple.driver.AppleGraphicsControl 3.12.6

com.apple.driver.IOPlatformPluginLegacy 1.0.0

com.apple.iokit.IOSerialFamily 11

com.apple.driver.CoreCaptureResponder 1

com.apple.driver.X86PlatformPlugin 1.0.0

com.apple.driver.AppleThunderboltEDMSink 4.1.1

com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.4.3f4

com.apple.iokit.IOBluetoothFamily 4.4.3f4

com.apple.driver.AppleBacklightExpert 1.1.0

com.apple.driver.AppleHDAController 272.51.3

com.apple.iokit.IOHDAFamily 272.51.3

com.apple.iokit.IOAudioFamily 204.3

com.apple.vecLib.kext 1.2.0

com.apple.driver.AppleSMBusPCI 1.0.14d1

com.apple.driver.IOPlatformPluginFamily 6.0.0d7

com.apple.kext.AMDSupport 1.4.0

com.apple.iokit.IOSlowAdaptiveClockingFamily 1.0.0

com.apple.iokit.IOSurface 108.0.1

com.apple.iokit.IONDRVSupport 2.4.1

com.apple.AppleGraphicsDeviceControl 3.12.6

com.apple.iokit.IOAcceleratorFamily2 205.1

com.apple.driver.AppleSMC 3.1.9

com.apple.driver.AppleSMBusController 1.0.14d1

com.apple.iokit.IOGraphicsFamily 2.4.1

com.apple.iokit.IOSCSIArchitectureModelFamily 3.7.7

com.apple.driver.usb.IOUSBHostHIDDevice 1.0.1

com.apple.driver.usb.AppleUSBHub 1.0.1

com.apple.driver.usb.AppleUSBHostCompositeDevice 1.0.1

com.apple.driver.CoreStorage 517.20.1

com.apple.driver.AppleUSBMergeNub 900.4.1

com.apple.driver.AppleThunderboltDPInAdapter 4.1.3

com.apple.driver.AppleThunderboltDPOutAdapter 4.1.3

com.apple.driver.AppleThunderboltDPAdapterFamily 4.1.3

com.apple.driver.AppleThunderboltPCIDownAdapter 2.0.2

com.apple.driver.AppleXsanScheme 3

com.apple.driver.AppleThunderboltNHI 4.0.4

com.apple.iokit.IOThunderboltFamily 5.1.0

com.apple.iokit.IOEthernetAVBController 1.0.3b3

com.apple.iokit.IO80211Family 1110.26

com.apple.driver.mDNSOffloadUserClient 1.0.1b8

com.apple.iokit.IONetworkingFamily 3.2

com.apple.driver.corecapture 1.0.4

com.apple.iokit.IOAHCIFamily 2.8.1

com.apple.driver.usb.AppleUSBXHCIPCI 1.0.1

com.apple.driver.usb.AppleUSBXHCI 1.0.1

com.apple.iokit.IOUSBFamily 900.4.1

com.apple.iokit.IOUSBHostFamily 1.0.1

com.apple.driver.AppleUSBHostMergeProperties 1.0.1

com.apple.driver.AppleEFINVRAM 2.0

com.apple.driver.AppleEFIRuntime 2.0

com.apple.iokit.IOHIDFamily 2.0.0

com.apple.iokit.IOSMBusFamily 1.1

com.apple.security.sandbox 300.0

com.apple.kext.AppleMatch 1.0.0d1

com.apple.driver.AppleKeyStore 2

com.apple.driver.AppleMobileFileIntegrity 1.0.5

com.apple.driver.AppleCredentialManager 1.0

com.apple.driver.DiskImages 417.2

com.apple.iokit.IOStorageFamily 2.1

com.apple.iokit.IOReportFamily 31

com.apple.driver.AppleFDEKeyStore 28.30

com.apple.driver.AppleACPIPlatform 4.0

com.apple.iokit.IOPCIFamily 2.9

com.apple.iokit.IOACPIFamily 1.4

com.apple.kec.Libm 1

com.apple.kec.pthread 1

com.apple.kec.corecrypto 1.0

Model: iMac15,1, BootROM IM151.0207.B05, 4 processors, Intel Core i7, 4 GHz, 32 GB, SMC 2.23f11

Graphics: AMD Radeon R9 M295X, AMD Radeon R9 M295X, PCIe, 4096 MB

Memory Module: BANK 0/DIMM0, 8 GB, DDR3, 1600 MHz, 0x0198, 0x393955353432382D3031382E4130304C4620

Memory Module: BANK 1/DIMM0, 8 GB, DDR3, 1600 MHz, 0x0198, 0x393930353432382D3038372E4130304C4620

Memory Module: BANK 0/DIMM1, 8 GB, DDR3, 1600 MHz, 0x0198, 0x393955353432382D3031382E4130304C4620

Memory Module: BANK 1/DIMM1, 8 GB, DDR3, 1600 MHz, 0x0198, 0x393955353432382D3031382E4130304C4620

AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x142), Broadcom BCM43xx 1.0 (7.21.94.136.1a1)

Bluetooth: Version 4.4.3f4 16616, 3 services, 27 devices, 1 incoming serial ports

Network Service: Ethernet, Ethernet, en0

Serial ATA Device: APPLE SSD SM1024F, 1 TB

USB Device: USB 3.0 Bus

USB Device: BRCM20702 Hub

USB Device: Bluetooth USB Host Controller

USB Device: FaceTime HD Camera (Built-in)

USB Device: HP LaserJet 1200

Thunderbolt Bus: iMac, Apple Inc., 26.1


------------------------


I can try what you suggest, but would not want to run for long without the firewall... I'll try to reboot a few times now without the net connected. I'll give you an update...

Mar 14, 2016 11:29 AM in response to Smile4yourself

This is a comment on why you might, or might not, want to use the built-in Application Firewall.

The firewall blocks incoming network traffic, regardless of origin, on a per-application basis. By default it's off, and when turned on, it allows applications digitally signed by Apple, and only those applications, to listen on the network. It does not block outgoing traffic, nor can it distinguish between different sources of incoming traffic, nor does it filter traffic by content.

No matter how it's configured, the firewall is not, as some imagine, a malware or privacy filter. If that's what you expect it to do, forget it. All it will do is bombard you with pointless alerts.

Consider some scenarios in which you may expect the firewall to be useful.

1. You enable file sharing, and you allow guest access to certain folders. That means you want people on your local network, but not outsiders, to be able to access those shared folders without having to enter a password. In the default configuration, the firewall will allow that to happen. The router prevents outsiders from accessing the shares, whether the application firewall is on or off. But if your computer is portable and you connect it to an untrusted network such as a public hotspot, the firewall will still allow access to anyone, which is not what you want. It does not protect you in this scenario.

2. You unknowingly install a trojan that steals your data and uploads it to a remote server. The firewall, no matter how it's configured, will not block that outgoing traffic. It does nothing to protect you from that threat.

3. A more likely scenario: The web browser or the router is compromised by an attacker. The attack redirects all web traffic to a bogus server. The firewall does not protect you from this threat.

4. You're running a public web server. Your router forwards TCP connection requests on port 80 to your Mac, and the connections are accepted by the built-in web server, which is codesigned by Apple. The application firewall, still configured as above, allows this to happen. An attacker hacks into the system and tries to hijack port 80 and replace the built-in web server with one that he controls. The good news here is that the firewall does protect you; it blocks incoming connections to the malicious server and alerts you. But the bad news is that you've been rooted. The attacker who can do all this can just as easily turn off the firewall, in which case it doesn't protect you after all.

5. You're running a Minecraft server on the local network. It listens on a high-numbered port. You, as administrator, have reconfigured the firewall to pass this traffic. An attacker is able to log in to a standard account on the server. He figures out how to crash Minecraft, or he just waits for you to quit it, and then he binds his own, malicious, Minecraft server to the same port. The firewall blocks his server, and because he's not an administrator, he can't do anything about it. In this scenario, the security is genuine.

6. Here is a more realistic scenario in which you might have reason to enable the firewall. Your MacBook has sharing services enabled. You want those services to be available to others on a home or office network. When you're on those networks, the firewall should be off. When you move to an untrusted network, you can either turn off all the services, or enable the firewall with a non-default configuration to block them. Blocking is easier: one click instead of several.

Mar 14, 2016 1:33 PM in response to Smile4yourself

Apple never contacted me.


If you elect to send the KP report to Apple they will use it for internal purposes, but doing so will not cause them to initiate contact with you directly.


1. What is the best way to troubleshoot this kind of problem?


You already did that. You can also read OS X: When your computer spontaneously restarts or displays "Your computer restarted because of a problem." - Apple Supp….


2. What is the process to open a problem with Apple Support, and does one have to pay Apple to investigate it?


Please contact Apple using the Contact Us link below. Their fee will be $29, at most, and that assumes you no longer have an AppleCare Protection Plan in effect. Your model iMac is new enough that might still be under its original one year warranty, in which case there will be no fee. Additional statutory warranties may apply in countries other than the US.


3. Does Apple staff answer questions here in this support group?


Only if the question elicits no responses after a day or two, and their response will be limited to broad-based references to support documentation that you can just as easily find on your own.


4. Is there an Apple Support site, where they answer support questions which customers can search for answers?


This is it, but as I mentioned before Apple's authorized participation on this site is very limited.

Mar 14, 2016 2:44 PM in response to Linc Davis

Thank you Linc for the very informative response. Not exactly what I expected to hear though. Since I have an iMAC that does not move into cafe environments, it sounds like turning 'ON' the firewall would not buy me much, and if it is the cause of the system crashes, I conclude that I should just shut it 'OFF'


Is there another firewall I can add that would improve the security of the system, or should I spend time to configure the firewall on my home router?


Is there a data-base of known bugs for 10.11.3 that customers can search, or do I need to be a developer to do this?


Thankyou again for spending the time to discuss this with me.


Donald

Mar 14, 2016 4:42 PM in response to Smile4yourself

Is there another firewall I can add that would improve the security of the system, or should I spend time to configure the firewall on my home router?

No to both.

Is there a data-base of known bugs for 10.11.3 that customers can search, or do I need to be a developer to do this?

Apple's internal bug database is accessible only within Apple. There is something called "Open Radar," but it's very incomplete. My comment is based on my own observations, not on anything I found in a database.

Mar 20, 2016 2:08 PM in response to Smile4yourself

Both of your panics have been in networking code.

The firewall deals with networking activity so Linc Davis' suggestion to turn off the Firewall is good.


Also you have an iMac, which is most likely behind a home router. That home router is going to to block all unsolicited connections. So you do not need the OS X Firewall enabled.


If disabling the Firewall does not stop the system panics, then start to look at your Parallels kernel extensions. Is Parallels up to date and compatible with El Capitan?

Mar 20, 2016 2:08 PM in response to BobHarris

thank you for your kind response. Parallels is up to date for version 9, but they have changed their price structure now, asking for $49 US every year to go ongoing updates. I don't use it that much to pay that right now. started to scan the error logs and found that a product called airserver was causing lots of errors, so I removed this one.


Because it is intermittent, not sure yet if it is fixed. I have not crashed for a few days, so I'll turn the firewall back on and see if it begins again.


cheers

Mar 20, 2016 2:11 PM in response to Smile4yourself

Parallels is up to date for version 9, but they have changed their price structure now, asking for $49 US every year to go ongoing updates. I don't use it that much to pay that right now.

You could look at VirtualBox (free). It does not have as many bells and whistles but if you are rarely activating it, it may do what you want. Just remember to keep it up-to-date when you do OS X updates/upgrades.

Mar 21, 2016 9:30 AM in response to BobHarris

Just to close off this problem, once I turned the OSX firewal back 'on' and turned on the system the next day, it crashed again.


so I conclude that many of you were correct to say it is caused by the apple firewall.


I found this tech note from apple:


OS X: When your computer spontaneously restarts or displays "Your computer restarted because of a problem." - Apple Supp…


Thanks for the feedback everyone!

el capitain crashes at startup, reloads, creates a crash report, and continues without crashing

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.