PDA

View Full Version : How to read system.log messages !


mdweb
09-17-2008, 08:00 AM
Hy guys! I have a problem. I put to sleep my iMAC at 11.57 a.m. and i went out home. I get back home at 13.40 p.m. and there was my iMAC on! I can not understand why! I hope and I don't think somebody went in my home ! So, I'm trying to read the console application but I'm not a good reader! Could somebody help me reading the console's messages please?! Thanks all 4 your attention. Have a great day. Marco

hayne
09-17-2008, 08:05 AM
Show us the messages from that time period (copy & paste them here) - show us the messages from system.log as well.

mdweb
09-17-2008, 08:09 AM
Thanks so much!

Sep 17 11:47:24 marco-dellomo-s-imac kernel[0]: AirPort: Roam (Beacons Lost)
Sep 17 11:47:54: --- last message repeated 1 time ---
Sep 17 11:48:39 marco-dellomo-s-imac kernel[0]: AirPort: Roam (Beacons Lost)
Sep 17 11:57:56 marco-dellomo-s-imac kernel[0]: AirPort: Link Down on en1
Sep 17 11:57:56 marco-dellomo-s-imac configd[34]: AppleTalk shutdown
Sep 17 13:08:22 marco-dellomo-s-imac kernel[0]: vmnet: bridge-en1: interface en is going DOWN
Sep 17 11:57:56 marco-dellomo-s-imac configd[34]: AppleTalk shutdown complete
Sep 17 13:08:22 marco-dellomo-s-imac kernel[0]: vmnet: bridge-en1: interface en is going DOWN
Sep 17 13:08:18 marco-dellomo-s-imac RealPlayer Downloader Agent[147]: System Configuration Callback!
Sep 17 13:08:22 marco-dellomo-s-imac kernel[0]: vmmon: powerStateDidChange flags=0x4 (state 2)
Sep 17 13:08:18 marco-dellomo-s-imac RealPlayer Downloader Agent[147]: changed keys (\n "State:/Network/Interface/en1/IPv4"\n)
Sep 17 11:57:56 marco-dellomo-s-imac kernel[0]: System Sleep
Sep 17 13:08:22 marco-dellomo-s-imac configd[34]: AppleTalk startup
Sep 17 13:08:18 marco-dellomo-s-imac RealPlayer Downloader Agent[147]: changed dict {\n}
Sep 17 13:08:22 marco-dellomo-s-imac kernel[0]: System Wake
Sep 17 13:08:22 marco-dellomo-s-imac kernel[0]: vmmon: powerStateDidChange flags=0x82 (state 4)
Sep 17 13:08:22 marco-dellomo-s-imac kernel[0]: Previous Sleep Cause: 5
Sep 17 13:08:22 marco-dellomo-s-imac kernel[0]: vmnet: VMNetDisconnect called for port 0x3af8700
Sep 17 13:08:22 marco-dellomo-s-imac kernel[0]: vmnet: bridge-en1: filter detached
Sep 17 13:08:23 marco-dellomo-s-imac kernel[0]: vmnet: bridge-en1: down
Sep 17 13:08:23 marco-dellomo-s-imac kernel[0]: vmnet: bridge-en1: detached
Sep 17 13:08:23 marco-dellomo-s-imac kernel[0]: vmnet: Freeing hub at 0x3b75000.
Sep 17 13:08:23 marco-dellomo-s-imac kernel[0]: WLC_E_COUNTRY_CODE_CHANGED
Sep 17 13:08:23 marco-dellomo-s-imac kernel[0]: en1: 802.11d country code set to 'IT'.
Sep 17 13:08:23 marco-dellomo-s-imac kernel[0]: en1: Supported channels 1 2 3 4 5 6 7 8 9 10 11 12 13 5 6 7 8 9 10 11 12 13 1 2 3 4 5 6 7 8 9 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 40 48 56 64 104 112 120 128 136 36 44 52 60 100
Sep 17 13:08:23 marco-dellomo-s-imac kernel[0]: EIR is supported.
Sep 17 13:08:23 marco-dellomo-s-imac kernel[0]: MAC AUTH succeeded
Sep 17 13:08:23 marco-dellomo-s-imac kernel[0]: AirPort: Link Up on en1
Sep 17 13:08:23 marco-dellomo-s-imac RealPlayer Downloader Agent[147]: System Configuration Callback!
Sep 17 13:08:23 marco-dellomo-s-imac RealPlayer Downloader Agent[147]: changed keys (\n "Setup:"\n)
Sep 17 13:08:23 marco-dellomo-s-imac RealPlayer Downloader Agent[147]: changed dict {\n "Setup:" = {\n CurrentSet = "/Sets/04164907-44B2-4708-80C2-B8DF8305B3A7";\n LastUpdated = 2008-09-17 13:08:23 +0200;\n };\n}
Sep 17 13:08:25 marco-dellomo-s-imac kernel[0]: AppleYukon2: 00000000,00000000 sk98osx_dnet - recovering from missed interrupt
Sep 17 13:08:25 marco-dellomo-s-imac RealPlayer Downloader Agent[147]: System Configuration Callback!
Sep 17 13:08:25 marco-dellomo-s-imac RealPlayer Downloader Agent[147]: changed keys (\n "State:/Network/Interface/en1/IPv4"\n)
Sep 17 13:08:25 marco-dellomo-s-imac RealPlayer Downloader Agent[147]: changed dict {\n "State:/Network/Interface/en1/IPv4" = {\n Addresses = (\n "192.168.1.3"\n );\n BroadcastAddresses = (\n "192.168.1.255"\n );\n SubnetMasks = (\n "255.255.255.0"\n );\n };\n}
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: VNetUserIf_Create: created userIf at 0x3c07200.
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: VMNetConnect: returning port 0x3c07200
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: Hub 0 does not exist, allocating memory.
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: Allocated hub 0x3a34800 for hubNum 0.
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: VMNET_SO_BINDTOHUB: port: paddr 00:50:56:e8:9d:68
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: Hub 0
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: Port 0
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: bridge-en1: got dev 0x33ec604
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: bridge-en1: wireless interface detected.
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: bridge-en1: up
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: bridge-en1: attached
Sep 17 13:08:26 marco-dellomo-s-imac kernel[0]: vmnet: VNetUserIfFree: freeing userIf at 0x3c07200.
Sep 17 13:08:26 marco-dellomo-s-imac mDNSResponder[22]: NOTE: Wide-Area Service Discovery disabled to avoid crashing defective DNS relay 192.168.1.1:53
Sep 17 13:08:28 marco-dellomo-s-imac configd[34]: AppleTalk startup complete
Sep 17 13:08:53 marco-dellomo-s-imac ScreenSaverEngine[257]: Screen saver is running in blackout mode.
Sep 17 13:26:54 marco-dellomo-s-imac ntpd[14]: time reset +0.434390 s
Sep 17 13:29:20 marco-dellomo-s-imac [0x0-0x12012].com.skype.skype[146]: Main starting
Sep 17 13:29:21 marco-dellomo-s-imac /System/Library/CoreServices/coreservicesd[45]: SFLSharePointsEntry::CreateDSRecord: dsCreateRecordAndOpen(marco dell'omo 's Public Folder) returned -14135
Sep 17 13:29:51 marco-dellomo-s-imac com.apple.launchd[71] ([0x0-0x13013].com.realnetworks.realplayerdownloaderagent[147]): Stray process with PGID equal to this dead job: PID 249 PPID 1 RPDLAgentHelperD
Sep 17 13:29:52 marco-dellomo-s-imac loginwindow[23]: DEAD_PROCESS: 0 console
Sep 17 13:29:52 marco-dellomo-s-imac ScreenSaverEngine[276]: Can't get screen saver proxy
Sep 17 13:29:52 marco-dellomo-s-imac loginwindow[23]: CGSShutdownServerConnections: Detaching application from window server
Sep 17 13:29:52 marco-dellomo-s-imac Little Snitch UIAgent[109]: CGSShutdownServerConnections: Detaching application from window server
Sep 17 13:29:52 marco-dellomo-s-imac com.apple.loginwindow[23]: Wed Sep 17 13:29:52 marco-dellomo-s-imac.local loginwindow[23] <Warning>: CGSShutdownServerConnections: Detaching application from window server
Sep 17 13:29:52 marco-dellomo-s-imac SecurityAgent[269]: CGSShutdownServerConnections: Detaching application from window server
Sep 17 13:29:52 marco-dellomo-s-imac loginwindow[23]: CGSDisplayServerShutdown: Detaching display subsystem from window server
Sep 17 13:29:52 marco-dellomo-s-imac Little Snitch UIAgent[109]: MIG: server died : CGSReleaseShmem : Cannot release shared memory
Sep 17 13:29:52 marco-dellomo-s-imac SecurityAgent[269]: MIG: server died : CGSReleaseShmem : Cannot release shared memory
Sep 17 13:29:52 marco-dellomo-s-imac Little Snitch UIAgent[109]: MIG: server died : Set a breakpoint at CGErrorBreakpoint() to catch errors as they are returned
Sep 17 13:29:52 marco-dellomo-s-imac SecurityAgent[269]: MIG: server died : Set a breakpoint at CGErrorBreakpoint() to catch errors as they are returned
Sep 17 13:29:52 marco-dellomo-s-imac SecurityAgent[269]: HIToolbox: received notification of WindowServer event port death.
Sep 17 13:29:52 marco-dellomo-s-imac Little Snitch UIAgent[109]: CGSDisplayServerShutdown: Detaching display subsystem from window server
Sep 17 13:29:52 marco-dellomo-s-imac com.apple.loginwindow[23]: Wed Sep 17 13:29:52 marco-dellomo-s-imac.local loginwindow[23] <Warning>: CGSDisplayServerShutdown: Detaching display subsystem from window server
Sep 17 13:29:52 marco-dellomo-s-imac SecurityAgent[269]: CGSDisplayServerShutdown: Detaching display subsystem from window server
Sep 17 13:29:52 marco-dellomo-s-imac SecurityAgent[269]: port matched the WindowServer port created in BindCGSToRunLoop
Sep 17 13:29:52 marco-dellomo-s-imac com.apple.launchd[71] (at.obdev.LittleSnitchUIAgent[109]): Exited: Terminated
Sep 17 13:29:52 marco-dellomo-s-imac com.apple.launchd[71] ([0x0-0x2a02a].com.apple.ScreenSaver.Engine[274]): Exited: Terminated
Sep 17 13:29:52 marco-dellomo-s-imac com.apple.launchd[71] ([0x0-0x16016].com.apple.AppleSpell[159]): Exited: Terminated
Sep 17 13:29:52 marco-dellomo-s-imac com.apple.launchd[71] (com.apple.pboard[122]): Exited: Terminated
Sep 17 13:29:52 marco-dellomo-s-imac com.apple.launchd[71] (com.apple.UserEventAgent-Aqua[115]): Exited: Terminated
Sep 17 13:29:52 marco-dellomo-s-imac com.apple.launchd[71] ([0x0-0x2b02b].com.apple.ScreenSaver.Engine[276]): Exited: Terminated
Sep 17 13:29:52 marco-dellomo-s-imac ScreenSaverEngine[274]: HIToolbox: received notification of WindowServer event port death.
Sep 17 13:29:52 marco-dellomo-s-imac ScreenSaverEngine[274]: port matched the WindowServer port created in BindCGSToRunLoop
Sep 17 13:29:52 marco-dellomo-s-imac ScreenSaverEngine[276]: HIToolbox: received notification of WindowServer event port death.
Sep 17 13:29:52 marco-dellomo-s-imac ScreenSaverEngine[276]: port matched the WindowServer port created in BindCGSToRunLoop
Sep 17 13:29:52 marco-dellomo-s-imac Little Snitch UIAgent[109]: HIToolbox: received notification of WindowServer event port death.
Sep 17 13:29:52 marco-dellomo-s-imac Little Snitch UIAgent[109]: port matched the WindowServer port created in BindCGSToRunLoop
Sep 17 13:29:52 marco-dellomo-s-imac /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[281]: Login Window Application Started
Sep 17 13:29:53 marco-dellomo-s-imac loginwindow[281]: Login Window Started Security Agent
Sep 17 13:29:53 marco-dellomo-s-imac kernel[0]: AppleYukon2: 00000000,00000000 sk98osx_dnet - recovering from missed interrupt

hayne
09-17-2008, 08:24 AM
1) It seems quite strange that your logs have messages with different times interspersed (look at the beginning where there are some messages from 11-ish after those from 13-ish)

2) There is mention of a process "RealPlayer Downloader Agent" being active around 13:08 - so if you have processes active, then your Mac wasn't really asleep. Do you know what this process is and why is was active? Are you using RealPlayer for something?

mdweb
09-17-2008, 08:43 AM
Thanks very much 4 your great answers Hayne! I downloaded "RealPlayer Downloader Agent" some days ago because i was trying to see a video from an university internet page! Do you suggest me to delete it?! I have seen that sometimes it opens itself and it says for example: porn.xoxo.it or cinema.rere.com , all unwanted sites are trying to download theyself on my iMAC! Anyway nobody has turned on mi iMAC isn't it?! Once again thanks so much!

Hamo
09-21-2008, 05:11 AM
Real Player Downloader Agent is part of Real Player 11.x
It is a very strange addition to the Real Player.app since it has nothing to do with .rm videos.

It is basically a Flash video ripper (for saving YouTube movies).
It adds itself to the login items and then watches your web browser for flash videos that it can download.
Try removing it from your login items in System Preferences and also disable it from RealPlayer by doing the following:
1. Launch RealPlayer from your Applications folder
2. Go to the Window menu in RealPlayer and select 'Open RealPlayer Downloader'
3. From the RealPlayer Downloader menu select Preferences
4. UNcheck the option 'Add RealPlayer Downloade Agent to Login items"