BlockBlock
BlockBlock copied to clipboard
Published
20 hours ago •
objective-see
objective-see
Could Not Connect To The BlockBlock Deamon 2.2.2
"Could Not Connect To The BlockBlock Deamon Please ensure that the BlockBlock daemon is currently running."
Yes it's spelled wrong in the first line, no it was not spelled by me. I get this every launch with 2.2.2 on Monterey 12.7.4. I have to manually launch the helper and deselect the icon toggle to make it show up in the menu bar. BlockBlock always has full disk access. I even threw the helper in there to have full disk access and doesn't work.
Sorry to hear about the issue 🫣
I've fixed the spelling already, but need some more information to help track down the more pressing communication issue.
Can you (please):
- Check to see if there any crash log/reports (via Console.app) ...maybe the daemon crashed?
- Run
log show --predicate="subsystem='com.objective-see.blockblock'"from the Terminal to see if there are any error messages - Run
log stream --level debug --predicate="subsystem='com.objective-see.blockblock'"while manually (re)starting the helper to see if there are any error messages.
Thanks
Ran both of those commands and have attached them here. There wasn't anything in the Console's crash report.
Terminal Saved Output.txt Terminal Saved Output2.txt
Do you have Little Snitch installed? Could be realted to this: https://github.com/objective-see/BlockBlock/issues/33
I don't but I do have some Eclectic Light Company software installed. Skint, Silent Knight, Systhist and Lockrattler.
Edit: Update
So I went ahead and removed those apps and did a deep clean with Find Any File to finish the job. Did the same with BlockBlock, reinstalled, rebooted and all is well!
Well, I guess that didn't work as when booting up just now, it's doing the same thing.
Also having the same issue here. This machine is running with JAMF config and Falcon filters. Could that be contributing?
Since this is still open, I'd like to encourage @objective-see to add an explanation of how to ensure the daemon is running to the dialog (probably through a link to a web page or a help file.)
^ I second that. If objective-see themselves could please look into this and fill us in with any information that would be appreciated as I too am having issues
Yes that would be great.
On Mar 3, 2025, at 8:37 AM, Rager @.***> wrote:
R4GER left a comment (objective-see/BlockBlock#75) ^ I second that. If objective-see themselves could please look into this and fill us in with any information that would be appreciated as I too am having issues
— Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.
https://github.com/objective-see/BlockBlock/issues/75#issuecomment-2694793072 https://github.com/notifications/unsubscribe-auth/BGCUMOBBPTGVBAIIKCPEWVD2SRZLNAVCNFSM6AAAAABVO35MQ2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMOJUG44TGMBXGI
R4GER left a comment (objective-see/BlockBlock#75) https://github.com/objective-see/BlockBlock/issues/75#issuecomment-2694793072 ^ I second that. If objective-see themselves could please look into this and fill us in with any information that would be appreciated as I too am having issues
— Reply to this email directly, view it on GitHub https://github.com/objective-see/BlockBlock/issues/75#issuecomment-2694793072, or unsubscribe https://github.com/notifications/unsubscribe-auth/BGCUMOBBPTGVBAIIKCPEWVD2SRZLNAVCNFSM6AAAAABVO35MQ2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMOJUG44TGMBXGI. You are receiving this because you authored the thread.
I'm getting the same error message with 2.2.4, but my system does have a crash report for BlockBlock. Namespace ENDPOINTSECURITY, Code 2 EndpointSecurity client terminated because it failed to respond to a message before its deadline, if that means anything to you. Not sure whether it's the same issue as the original user here or not.
I don't have Little Snitch installed, but I do have LuLu 3.1.4. LuLu was installed after BlockBlock (like Little Snitch originally was in #33). Haven't tried switching them around yet.
Same problem where the menu doesn't appear until I toggle "No Icon Mode" on and back off.
Spelling appears to have been corrected to "Could Not Connect To The BlockBlock Daemon". Putting that here so that searches for that exact phrase will be able to find this issue.
Edit: Forgot to mention, I'm on macOS Sequoia 15.4.
Full crash report
-------------------------------------
Translated Report (Full Report Below)
-------------------------------------
Process: BlockBlock [264]
Path: /Library/Objective-See/*/BlockBlock.app/Contents/MacOS/BlockBlock
Identifier: com.objective-see.blockblock
Version: 2.2.4 (2.2.4)
Code Type: X86-64 (Native)
Parent Process: launchd [1]
User ID: 0
Date/Time: 2025-04-16 07:01:48.0964 -0400
OS Version: macOS 15.4 (24E248)
Report Version: 12
Anonymous UUID: 9E22C528-24BC-3EAE-5F40-7472BFA42AF2
Time Awake Since Boot: 100 seconds
System Integrity Protection: enabled
Crashed Thread: 0 Dispatch queue: com.apple.main-thread
Exception Type: EXC_CRASH (SIGKILL)
Exception Codes: 0x0000000000000000, 0x0000000000000000
Termination Reason: Namespace ENDPOINTSECURITY, Code 2 EndpointSecurity client terminated because it failed to respond to a message before its deadline
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0 libsystem_kernel.dylib 0x7ff806f8bb4a mach_msg2_trap + 10
1 libsystem_kernel.dylib 0x7ff806f9a677 mach_msg2_internal + 83
2 libsystem_kernel.dylib 0x7ff806f92bbe mach_msg_overwrite + 574
3 libsystem_kernel.dylib 0x7ff806f8be3e mach_msg + 19
4 CoreFoundation 0x7ff8070b6e32 __CFRunLoopServiceMachPort + 145
5 CoreFoundation 0x7ff8070b587f __CFRunLoopRun + 1430
6 CoreFoundation 0x7ff8070b4cb2 CFRunLoopRunSpecific + 536
7 Foundation 0x7ff808126ff3 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 216
8 Foundation 0x7ff8081a7627 -[NSRunLoop(NSRunLoop) run] + 76
9 BlockBlock 0x10b65d5df 0x10b659000 + 17887
10 dyld 0x7ff806c29530 start + 3056
Thread 1:: Dispatch queue: BBReaderQueue
0 libsystem_kernel.dylib 0x7ff806f8d08c __mac_syscall + 0
1 libquarantine.dylib 0x7ff8146e7851 __qtn_syscall_responsibility_get + 75
2 libquarantine.dylib 0x7ff8146e77f2 responsibility_get_pid_responsible_for_pid + 34
3 BlockBlock 0x10b65bed7 0x10b659000 + 11991
4 BlockBlock 0x10b65b83c 0x10b659000 + 10300
5 BlockBlock 0x10b664a7f 0x10b659000 + 47743
6 BlockBlock 0x10b66d225 0x10b659000 + 82469
7 libEndpointSecurity.dylib 0x7ff81d1466da spar::BBReader<ESMessageReaderConfig>::handleItems() + 362
8 libEndpointSecurity.dylib 0x7ff81d1464d1 spar::BBReader<ESMessageReaderConfig>::woke(void*) + 17
9 libdispatch.dylib 0x7ff806e389fc _dispatch_client_callout + 6
10 libdispatch.dylib 0x7ff806e260c3 _dispatch_continuation_pop + 518
11 libdispatch.dylib 0x7ff806e357fa _dispatch_source_invoke + 2207
12 libdispatch.dylib 0x7ff806e29193 _dispatch_lane_serial_drain + 319
13 libdispatch.dylib 0x7ff806e29dad _dispatch_lane_invoke + 382
14 libdispatch.dylib 0x7ff806e2ac65 _dispatch_workloop_invoke + 743
15 libdispatch.dylib 0x7ff806e32b96 _dispatch_root_queue_drain_deferred_wlh + 275
16 libdispatch.dylib 0x7ff806e324e3 _dispatch_workloop_worker_thread + 688
17 libsystem_pthread.dylib 0x7ff806fca8ad _pthread_wqthread + 298
18 libsystem_pthread.dylib 0x7ff806fc9843 start_wqthread + 15
Thread 2:
0 libsystem_pthread.dylib 0x7ff806fc9834 start_wqthread + 0
Thread 3:: Dispatch queue: com.apple.CoreAnalytics::Client
0 libsystem_kernel.dylib 0x7ff806f8bb4a mach_msg2_trap + 10
1 libsystem_kernel.dylib 0x7ff806f9a677 mach_msg2_internal + 83
2 libsystem_kernel.dylib 0x7ff806f92bbe mach_msg_overwrite + 574
3 libsystem_kernel.dylib 0x7ff806f8be3e mach_msg + 19
4 libxpc.dylib 0x7ff806cec069 _xpc_pipe_mach_msg + 49
5 libxpc.dylib 0x7ff806ceb8cc _xpc_pipe_routine + 384
6 libxpc.dylib 0x7ff806cc802e _xpc_interface_routine + 173
7 libxpc.dylib 0x7ff806cccd39 _xpc_look_up_endpoint + 231
8 libxpc.dylib 0x7ff806cccbd7 _xpc_connection_bootstrap_look_up_slow + 399
9 libxpc.dylib 0x7ff806ccc4be _xpc_connection_init + 800
10 libxpc.dylib 0x7ff806ccc0f1 _xpc_connection_activate_if_needed + 570
11 CoreAnalytics 0x7ff80fa2bd61 CoreAnalytics::Client::initConnection() + 223
12 CoreAnalytics 0x7ff80fa116af CoreAnalytics::Client::init() + 105
13 libdispatch.dylib 0x7ff806e389fc _dispatch_client_callout + 6
14 libdispatch.dylib 0x7ff806e2f7e6 _dispatch_lane_barrier_sync_invoke_and_complete + 60
15 CoreAnalytics 0x7ff80fa2ae95 invocation function for block in CoreAnalytics::Client::get() + 86
16 libdispatch.dylib 0x7ff806e389fc _dispatch_client_callout + 6
17 libdispatch.dylib 0x7ff806e248ed _dispatch_once_callout + 20
18 CoreAnalytics 0x7ff80fa11498 CoreAnalytics::Client::get() + 38
19 CoreAnalytics 0x7ff80fa1686d AnalyticsSendEventInternal(NSString const*, NSDictionary<NSString*, NSObject*>* () block_pointer, XPCMessagePriority, EventPayloadFormat, NSDictionary<NSString*, NSObject*>*) + 107
20 Security 0x7ff809f9ed43 +[SecCoreAnalytics sendEventLazy:builder:] + 190
21 Security 0x7ff80a13b923 __countLegacyAPI_block_invoke + 166
22 libdispatch.dylib 0x7ff806e389fc _dispatch_client_callout + 6
23 libdispatch.dylib 0x7ff806e248ed _dispatch_once_callout + 20
24 Security 0x7ff80a13b87b countLegacyAPI + 234
25 Security 0x7ff80a1b564c SecTrustSetKeychains + 33
26 Security 0x7ff80a0cb4aa CERT_VerifyCert + 234
27 Security 0x7ff80a0d42cc SecCmsSignedDataVerifySignerInfo_internal + 1251
28 Security 0x7ff80a0d2266 decodeTimeStampTokenWithPolicy + 1630
29 Security 0x7ff80a0cc05c SecCmsSignerInfoVerifyUnAuthAttrsWithPolicy + 94
30 Security 0x7ff80a0d40a2 SecCmsSignedDataVerifySignerInfo_internal + 697
31 Security 0x7ff80a0d4a69 CMSDecoderCopySignerStatus + 173
32 Security 0x7ff80a0ea703 Security::CodeSigning::SecStaticCode::validateDirectory() + 1079
33 Security 0x7ff80a0edb33 Security::CodeSigning::SecStaticCode::validateNonResourceComponents() + 15
34 Security 0x7ff80a0d93cf Security::CodeSigning::SecCode::checkValidity(unsigned int) + 225
35 Security 0x7ff80a0e2410 SecCodeCheckValidityWithErrors + 83
36 XPCSupport 0x7ffd0fa7736e xpc_support_check_token + 433
37 libxpc.dylib 0x7ff806ce167a _xpc_connection_check_peer_requirement + 623
38 libxpc.dylib 0x7ff806ccd803 _xpc_connection_mach_event + 318
39 libdispatch.dylib 0x7ff806e38a15 _dispatch_client_callout4 + 7
40 libdispatch.dylib 0x7ff806e3ae38 _dispatch_mach_msg_invoke + 439
41 libdispatch.dylib 0x7ff806e29193 _dispatch_lane_serial_drain + 319
42 libdispatch.dylib 0x7ff806e3b9a5 _dispatch_mach_invoke + 513
43 libdispatch.dylib 0x7ff806e29193 _dispatch_lane_serial_drain + 319
44 libdispatch.dylib 0x7ff806e29dad _dispatch_lane_invoke + 382
45 libdispatch.dylib 0x7ff806e32b96 _dispatch_root_queue_drain_deferred_wlh + 275
46 libdispatch.dylib 0x7ff806e324e3 _dispatch_workloop_worker_thread + 688
47 libsystem_pthread.dylib 0x7ff806fca8ad _pthread_wqthread + 298
48 libsystem_pthread.dylib 0x7ff806fc9843 start_wqthread + 15
Thread 0 crashed with X86 Thread State (64-bit):
rax: 0x0000000010004005 rbx: 0x00007ff7b48a5620 rcx: 0x00007ff7b48a5518 rdx: 0x0000000200000000
rdi: 0x00007ff7b48a5620 rsi: 0x0000000507000806 rbp: 0x00007ff7b48a5580 rsp: 0x00007ff7b48a5518
r8: 0x0000000000000000 r9: 0x0000290300000000 r10: 0x0000290300000000 r11: 0x0000000000000206
r12: 0x0000290300000000 r13: 0x0000000507000806 r14: 0x0000290300000000 r15: 0x0000000000000002
rip: 0x00007ff806f8bb4a rfl: 0x0000000000000206 cr2: 0x0000000000000000
Logical CPU: 0
Error Code: 0x0100002f
Trap Number: 133
Binary Images:
0x10b659000 - 0x10b67ffff com.objective-see.blockblock (2.2.4) <d3a471e7-422f-3724-a42a-39c064f5ba09> /Library/Objective-See/*/BlockBlock.app/Contents/MacOS/BlockBlock
0x10b77a000 - 0x10b790fff com.apple.security.csparser (3.0) <d0731091-44dd-35e8-8622-c92107f57acb> /System/Library/Frameworks/Security.framework/Versions/A/PlugIns/csparser.bundle/Contents/MacOS/csparser
0x7ff806f8b000 - 0x7ff806fc7837 libsystem_kernel.dylib (*) <05c853af-32f8-317c-91c7-03456d7a4311> /usr/lib/system/libsystem_kernel.dylib
0x7ff80703b000 - 0x7ff8074effe2 com.apple.CoreFoundation (6.9) <52038a90-4140-3132-93c2-e08624a409af> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x7ff8080cc000 - 0x7ff808edc52b com.apple.Foundation (6.9) <4f701cf3-5228-3b3e-b455-aa7b137f76e7> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x7ff806c23000 - 0x7ff806cbd4ff dyld (*) <91f7d7de-c0d4-3343-a245-b39bcfdbe87b> /usr/lib/dyld
0x0 - 0xffffffffffffffff ??? (*) <00000000-0000-0000-0000-000000000000> ???
0x7ff8146e7000 - 0x7ff8146e9bfb libquarantine.dylib (*) <b77739fa-6551-3fc4-ba5e-8d775381829b> /usr/lib/system/libquarantine.dylib
0x7ff81d142000 - 0x7ff81d14d1a0 libEndpointSecurity.dylib (*) <86203d71-3bc6-381f-9740-9d9fae803a1a> /usr/lib/libEndpointSecurity.dylib
0x7ff806e21000 - 0x7ff806e68279 libdispatch.dylib (*) <322735be-882c-3d00-8533-022051e5ed63> /usr/lib/system/libdispatch.dylib
0x7ff806fc8000 - 0x7ff806fd3dcf libsystem_pthread.dylib (*) <b33f6374-3285-3bc8-8946-3472c31aabcd> /usr/lib/system/libsystem_pthread.dylib
0x7ff806bdd000 - 0x7ff806c2205b libobjc.A.dylib (*) <98b34882-678b-38a7-b1c4-888f7ae2aefe> /usr/lib/libobjc.A.dylib
0x7ff806cc2000 - 0x7ff806d08bd5 libxpc.dylib (*) <244b7080-7839-3681-9592-8b84ccf94c35> /usr/lib/system/libxpc.dylib
0x7ff80fa10000 - 0x7ff80fa3dad4 com.apple.analyticsd (1.0) <5d810693-89d1-36f2-847f-d48c833324bb> /System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics
0x7ff809ef5000 - 0x7ff80a2d6bf5 com.apple.security (7.0) <f41b41fe-70f9-33cf-bea9-98615354b5f1> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x7ffd0fa76000 - 0x7ffd0fa78137 com.apple.xpc.XPCSupport (1.0) <00b90fde-40e7-3ccd-8018-735a75810dce> /System/Library/PrivateFrameworks/XPCSupport.framework/Versions/A/XPCSupport
External Modification Summary:
Calls made by other processes targeting this process:
task_for_pid: 0
thread_create: 0
thread_set_state: 0
Calls made by this process:
task_for_pid: 0
thread_create: 0
thread_set_state: 0
Calls made by all processes on this machine:
task_for_pid: 0
thread_create: 0
thread_set_state: 0
VM Region Summary:
ReadOnly portion of Libraries: Total=455.9M resident=0K(0%) swapped_out_or_unallocated=455.9M(100%)
Writable regions: Total=960.4M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=960.4M(100%)
VIRTUAL REGION
REGION TYPE SIZE COUNT (non-coalesced)
=========== ======= =======
Activity Tracing 256K 1
Kernel Alloc Once 8K 1
MALLOC 950.1M 27
MALLOC guard page 24K 6
Memory Tag 128 7740K 114
STACK GUARD 56.0M 4
Stack 9752K 4
VM_ALLOCATE 4K 1
__DATA 6017K 347
__DATA_CONST 38.7M 367
__DATA_DIRTY 637K 109
__FONT_DATA 2352 1
__LINKEDIT 162.1M 4
__OBJC_RO 61.2M 1
__OBJC_RW 2391K 2
__TEXT 293.9M 377
__TPRO_CONST 16 2
mapped file 32.5M 3
shared memory 600K 7
=========== ======= =======
TOTAL 1.6G 1378
-----------
Full Report
-----------
{"app_name":"BlockBlock","timestamp":"2025-04-16 07:02:12.00 -0400","app_version":"2.2.4","slice_uuid":"d3a471e7-422f-3724-a42a-39c064f5ba09","build_version":"2.2.4","platform":1,"bundleID":"com.objective-see.blockblock","share_with_app_devs":0,"is_first_party":0,"bug_type":"309","os_version":"macOS 15.4 (24E248)","roots_installed":0,"name":"BlockBlock","incident_id":"6C56F8BA-6AF2-4C62-8030-6F2AC126AE88"}
{
"uptime" : 100,
"procRole" : "Unspecified",
"version" : 2,
"userID" : 0,
"deployVersion" : 210,
"modelCode" : "iMac19,1",
"coalitionID" : 289,
"osVersion" : {
"train" : "macOS 15.4",
"build" : "24E248",
"releaseType" : "User"
},
"captureTime" : "2025-04-16 07:01:48.0964 -0400",
"codeSigningMonitor" : 0,
"incident" : "6C56F8BA-6AF2-4C62-8030-6F2AC126AE88",
"pid" : 264,
"cpuType" : "X86-64",
"roots_installed" : 0,
"bug_type" : "309",
"procLaunch" : "2025-04-16 07:00:15.7569 -0400",
"procStartAbsTime" : 10156054041,
"procExitAbsTime" : 78585145604,
"procName" : "BlockBlock",
"procPath" : "\/Library\/Objective-See\/*\/BlockBlock.app\/Contents\/MacOS\/BlockBlock",
"bundleInfo" : {"CFBundleShortVersionString":"2.2.4","CFBundleVersion":"2.2.4","CFBundleIdentifier":"com.objective-see.blockblock"},
"storeInfo" : {"deviceIdentifierForVendor":"7A7B95A5-308C-58CB-AB56-A08EEAC62663","thirdParty":true},
"parentProc" : "launchd",
"parentPid" : 1,
"coalitionName" : "com.objective-see.blockblock",
"crashReporterKey" : "9E22C528-24BC-3EAE-5F40-7472BFA42AF2",
"appleIntelligenceStatus" : {"state":"unavailable","reasons":["siriAssetIsNotReady","countryBillingIneligible","unableToFetchAvailability","deviceNotCapable","regionIneligible","notOptedIn"]},
"throttleTimeout" : 10,
"codeSigningID" : "com.objective-see.blockblock",
"codeSigningTeamID" : "VBG97UB4TA",
"codeSigningFlags" : 570520337,
"codeSigningValidationCategory" : 6,
"codeSigningTrustLevel" : 4294967295,
"codeSigningAuxiliaryInfo" : 0,
"bootSessionUUID" : "06D428D8-6CD8-48A2-B844-44F2B7A862CA",
"sip" : "enabled",
"exception" : {"codes":"0x0000000000000000, 0x0000000000000000","rawCodes":[0,0],"type":"EXC_CRASH","signal":"SIGKILL"},
"termination" : {"flags":2,"code":2,"namespace":"ENDPOINTSECURITY","indicator":"EndpointSecurity client terminated because it failed to respond to a message before its deadline"},
"extMods" : {"caller":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"system":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"targeted":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"warnings":0},
"faultingThread" : 0,
"threads" : [{"triggered":true,"id":1633,"threadState":{"r13":{"value":21592279046},"rax":{"value":268451845},"rflags":{"value":518},"cpu":{"value":0},"r14":{"value":45092861640704},"rsi":{"value":21592279046},"r8":{"value":0},"cr2":{"value":0},"rdx":{"value":8589934592},"r10":{"value":45092861640704},"r9":{"value":45092861640704},"r15":{"value":2},"rbx":{"value":140701862614560},"trap":{"value":133},"err":{"value":16777263},"r11":{"value":518},"rip":{"value":140703245581130,"matchesCrashFrame":1},"rbp":{"value":140701862614400},"rsp":{"value":140701862614296},"r12":{"value":45092861640704},"rcx":{"value":140701862614296},"flavor":"x86_THREAD_STATE","rdi":{"value":140701862614560}},"queue":"com.apple.main-thread","frames":[{"imageOffset":2890,"symbol":"mach_msg2_trap","symbolLocation":10,"imageIndex":2},{"imageOffset":63095,"symbol":"mach_msg2_internal","symbolLocation":83,"imageIndex":2},{"imageOffset":31678,"symbol":"mach_msg_overwrite","symbolLocation":574,"imageIndex":2},{"imageOffset":3646,"symbol":"mach_msg","symbolLocation":19,"imageIndex":2},{"imageOffset":507442,"symbol":"__CFRunLoopServiceMachPort","symbolLocation":145,"imageIndex":3},{"imageOffset":501887,"symbol":"__CFRunLoopRun","symbolLocation":1430,"imageIndex":3},{"imageOffset":498866,"symbol":"CFRunLoopRunSpecific","symbolLocation":536,"imageIndex":3},{"imageOffset":372723,"symbol":"-[NSRunLoop(NSRunLoop) runMode:beforeDate:]","symbolLocation":216,"imageIndex":4},{"imageOffset":898599,"symbol":"-[NSRunLoop(NSRunLoop) run]","symbolLocation":76,"imageIndex":4},{"imageOffset":17887,"imageIndex":0},{"imageOffset":25904,"symbol":"start","symbolLocation":3056,"imageIndex":5}]},{"id":1960,"threadState":{"r13":{"value":140703241754112,"symbolLocation":0,"symbol":"objc_release"},"rax":{"value":1},"rflags":{"value":582},"cpu":{"value":0},"r14":{"value":123145369126108},"rsi":{"value":180},"r8":{"value":80501810198035601},"cr2":{"value":0},"rdx":{"value":123145369126008},"r10":{"value":2095104},"r9":{"value":3228784635},"r15":{"value":1},"rbx":{"value":0},"trap":{"value":116},"err":{"value":0},"r11":{"value":105553147599168},"rip":{"value":140703245586572},"rbp":{"value":123145369126080},"rsp":{"value":123145369125992},"r12":{"value":105553134802752},"rcx":{"value":123145369126048},"flavor":"x86_THREAD_STATE","rdi":{"value":140703471409701}},"queue":"BBReaderQueue","frames":[{"imageOffset":8332,"symbol":"__mac_syscall","symbolLocation":0,"imageIndex":2},{"imageOffset":2129,"symbol":"__qtn_syscall_responsibility_get","symbolLocation":75,"imageIndex":7},{"imageOffset":2034,"symbol":"responsibility_get_pid_responsible_for_pid","symbolLocation":34,"imageIndex":7},{"imageOffset":11991,"imageIndex":0},{"imageOffset":10300,"imageIndex":0},{"imageOffset":47743,"imageIndex":0},{"imageOffset":82469,"imageIndex":0},{"imageOffset":18138,"symbol":"spar::BBReader<ESMessageReaderConfig>::handleItems()","symbolLocation":362,"imageIndex":8},{"imageOffset":17617,"symbol":"spar::BBReader<ESMessageReaderConfig>::woke(void*)","symbolLocation":17,"imageIndex":8},{"imageOffset":96764,"symbol":"_dispatch_client_callout","symbolLocation":6,"imageIndex":9},{"imageOffset":20675,"symbol":"_dispatch_continuation_pop","symbolLocation":518,"imageIndex":9},{"imageOffset":83962,"symbol":"_dispatch_source_invoke","symbolLocation":2207,"imageIndex":9},{"imageOffset":33171,"symbol":"_dispatch_lane_serial_drain","symbolLocation":319,"imageIndex":9},{"imageOffset":36269,"symbol":"_dispatch_lane_invoke","symbolLocation":382,"imageIndex":9},{"imageOffset":40037,"symbol":"_dispatch_workloop_invoke","symbolLocation":743,"imageIndex":9},{"imageOffset":72598,"symbol":"_dispatch_root_queue_drain_deferred_wlh","symbolLocation":275,"imageIndex":9},{"imageOffset":70883,"symbol":"_dispatch_workloop_worker_thread","symbolLocation":688,"imageIndex":9},{"imageOffset":10413,"symbol":"_pthread_wqthread","symbolLocation":298,"imageIndex":10},{"imageOffset":6211,"symbol":"start_wqthread","symbolLocation":15,"imageIndex":10}]},{"id":2378,"frames":[{"imageOffset":6196,"symbol":"start_wqthread","symbolLocation":0,"imageIndex":10}],"threadState":{"r13":{"value":0},"rax":{"value":33554800},"rflags":{"value":512},"cpu":{"value":0},"r14":{"value":1},"rsi":{"value":16131},"r8":{"value":13500416},"cr2":{"value":0},"rdx":{"value":123145369141248},"r10":{"value":0},"r9":{"value":1},"r15":{"value":123145369664376},"rbx":{"value":123145369665536},"trap":{"value":133},"err":{"value":33554800},"r11":{"value":582},"rip":{"value":140703245834292},"rbp":{"value":0},"rsp":{"value":123145369664368},"r12":{"value":13500416},"rcx":{"value":123145369664384},"flavor":"x86_THREAD_STATE","rdi":{"value":123145369665536}}},{"id":7710,"threadState":{"r13":{"value":17231331847},"rax":{"value":0},"rflags":{"value":514},"cpu":{"value":0},"r14":{"value":63784559312896},"rsi":{"value":17231331847},"r8":{"value":4611689471581109507},"cr2":{"value":0},"rdx":{"value":738735625491},"r10":{"value":63784559320579},"r9":{"value":63784559312896},"r15":{"value":172},"rbx":{"value":140153452534296},"trap":{"value":133},"err":{"value":16777263},"r11":{"value":514},"rip":{"value":140703245581130},"rbp":{"value":123145370194480},"rsp":{"value":123145370194376},"r12":{"value":63784559320579},"rcx":{"value":123145370194376},"flavor":"x86_THREAD_STATE","rdi":{"value":140153452534296}},"queue":"com.apple.CoreAnalytics::Client","frames":[{"imageOffset":2890,"symbol":"mach_msg2_trap","symbolLocation":10,"imageIndex":2},{"imageOffset":63095,"symbol":"mach_msg2_internal","symbolLocation":83,"imageIndex":2},{"imageOffset":31678,"symbol":"mach_msg_overwrite","symbolLocation":574,"imageIndex":2},{"imageOffset":3646,"symbol":"mach_msg","symbolLocation":19,"imageIndex":2},{"imageOffset":172137,"symbol":"_xpc_pipe_mach_msg","symbolLocation":49,"imageIndex":12},{"imageOffset":170188,"symbol":"_xpc_pipe_routine","symbolLocation":384,"imageIndex":12},{"imageOffset":24622,"symbol":"_xpc_interface_routine","symbolLocation":173,"imageIndex":12},{"imageOffset":44345,"symbol":"_xpc_look_up_endpoint","symbolLocation":231,"imageIndex":12},{"imageOffset":43991,"symbol":"_xpc_connection_bootstrap_look_up_slow","symbolLocation":399,"imageIndex":12},{"imageOffset":42174,"symbol":"_xpc_connection_init","symbolLocation":800,"imageIndex":12},{"imageOffset":41201,"symbol":"_xpc_connection_activate_if_needed","symbolLocation":570,"imageIndex":12},{"imageOffset":114017,"symbol":"CoreAnalytics::Client::initConnection()","symbolLocation":223,"imageIndex":13},{"imageOffset":5807,"symbol":"CoreAnalytics::Client::init()","symbolLocation":105,"imageIndex":13},{"imageOffset":96764,"symbol":"_dispatch_client_callout","symbolLocation":6,"imageIndex":9},{"imageOffset":59366,"symbol":"_dispatch_lane_barrier_sync_invoke_and_complete","symbolLocation":60,"imageIndex":9},{"imageOffset":110229,"symbol":"invocation function for block in CoreAnalytics::Client::get()","symbolLocation":86,"imageIndex":13},{"imageOffset":96764,"symbol":"_dispatch_client_callout","symbolLocation":6,"imageIndex":9},{"imageOffset":14573,"symbol":"_dispatch_once_callout","symbolLocation":20,"imageIndex":9},{"imageOffset":5272,"symbol":"CoreAnalytics::Client::get()","symbolLocation":38,"imageIndex":13},{"imageOffset":26733,"symbol":"AnalyticsSendEventInternal(NSString const*, NSDictionary<NSString*, NSObject*>* () block_pointer, XPCMessagePriority, EventPayloadFormat, NSDictionary<NSString*, NSObject*>*)","symbolLocation":107,"imageIndex":13},{"imageOffset":695619,"symbol":"+[SecCoreAnalytics sendEventLazy:builder:]","symbolLocation":190,"imageIndex":14},{"imageOffset":2386211,"symbol":"__countLegacyAPI_block_invoke","symbolLocation":166,"imageIndex":14},{"imageOffset":96764,"symbol":"_dispatch_client_callout","symbolLocation":6,"imageIndex":9},{"imageOffset":14573,"symbol":"_dispatch_once_callout","symbolLocation":20,"imageIndex":9},{"imageOffset":2386043,"symbol":"countLegacyAPI","symbolLocation":234,"imageIndex":14},{"imageOffset":2885196,"symbol":"SecTrustSetKeychains","symbolLocation":33,"imageIndex":14},{"imageOffset":1926314,"symbol":"CERT_VerifyCert","symbolLocation":234,"imageIndex":14},{"imageOffset":1962700,"symbol":"SecCmsSignedDataVerifySignerInfo_internal","symbolLocation":1251,"imageIndex":14},{"imageOffset":1954406,"symbol":"decodeTimeStampTokenWithPolicy","symbolLocation":1630,"imageIndex":14},{"imageOffset":1929308,"symbol":"SecCmsSignerInfoVerifyUnAuthAttrsWithPolicy","symbolLocation":94,"imageIndex":14},{"imageOffset":1962146,"symbol":"SecCmsSignedDataVerifySignerInfo_internal","symbolLocation":697,"imageIndex":14},{"imageOffset":1964649,"symbol":"CMSDecoderCopySignerStatus","symbolLocation":173,"imageIndex":14},{"imageOffset":2053891,"symbol":"Security::CodeSigning::SecStaticCode::validateDirectory()","symbolLocation":1079,"imageIndex":14},{"imageOffset":2067251,"symbol":"Security::CodeSigning::SecStaticCode::validateNonResourceComponents()","symbolLocation":15,"imageIndex":14},{"imageOffset":1983439,"symbol":"Security::CodeSigning::SecCode::checkValidity(unsigned int)","symbolLocation":225,"imageIndex":14},{"imageOffset":2020368,"symbol":"SecCodeCheckValidityWithErrors","symbolLocation":83,"imageIndex":14},{"imageOffset":4974,"symbol":"xpc_support_check_token","symbolLocation":433,"imageIndex":15},{"imageOffset":128634,"symbol":"_xpc_connection_check_peer_requirement","symbolLocation":623,"imageIndex":12},{"imageOffset":47107,"symbol":"_xpc_connection_mach_event","symbolLocation":318,"imageIndex":12},{"imageOffset":96789,"symbol":"_dispatch_client_callout4","symbolLocation":7,"imageIndex":9},{"imageOffset":106040,"symbol":"_dispatch_mach_msg_invoke","symbolLocation":439,"imageIndex":9},{"imageOffset":33171,"symbol":"_dispatch_lane_serial_drain","symbolLocation":319,"imageIndex":9},{"imageOffset":108965,"symbol":"_dispatch_mach_invoke","symbolLocation":513,"imageIndex":9},{"imageOffset":33171,"symbol":"_dispatch_lane_serial_drain","symbolLocation":319,"imageIndex":9},{"imageOffset":36269,"symbol":"_dispatch_lane_invoke","symbolLocation":382,"imageIndex":9},{"imageOffset":72598,"symbol":"_dispatch_root_queue_drain_deferred_wlh","symbolLocation":275,"imageIndex":9},{"imageOffset":70883,"symbol":"_dispatch_workloop_worker_thread","symbolLocation":688,"imageIndex":9},{"imageOffset":10413,"symbol":"_pthread_wqthread","symbolLocation":298,"imageIndex":10},{"imageOffset":6211,"symbol":"start_wqthread","symbolLocation":15,"imageIndex":10}]}],
"usedImages" : [
{
"source" : "P",
"arch" : "x86_64",
"base" : 4486172672,
"CFBundleShortVersionString" : "2.2.4",
"CFBundleIdentifier" : "com.objective-see.blockblock",
"size" : 159744,
"uuid" : "d3a471e7-422f-3724-a42a-39c064f5ba09",
"path" : "\/Library\/Objective-See\/*\/BlockBlock.app\/Contents\/MacOS\/BlockBlock",
"name" : "BlockBlock",
"CFBundleVersion" : "2.2.4"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 4487356416,
"CFBundleShortVersionString" : "3.0",
"CFBundleIdentifier" : "com.apple.security.csparser",
"size" : 94208,
"uuid" : "d0731091-44dd-35e8-8622-c92107f57acb",
"path" : "\/System\/Library\/Frameworks\/Security.framework\/Versions\/A\/PlugIns\/csparser.bundle\/Contents\/MacOS\/csparser",
"name" : "csparser",
"CFBundleVersion" : "61439.101.1"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140703245578240,
"size" : 247864,
"uuid" : "05c853af-32f8-317c-91c7-03456d7a4311",
"path" : "\/usr\/lib\/system\/libsystem_kernel.dylib",
"name" : "libsystem_kernel.dylib"
},
{
"source" : "P",
"arch" : "x86_64h",
"base" : 140703246299136,
"CFBundleShortVersionString" : "6.9",
"CFBundleIdentifier" : "com.apple.CoreFoundation",
"size" : 4935651,
"uuid" : "52038a90-4140-3132-93c2-e08624a409af",
"path" : "\/System\/Library\/Frameworks\/CoreFoundation.framework\/Versions\/A\/CoreFoundation",
"name" : "CoreFoundation",
"CFBundleVersion" : "3423"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140703263670272,
"CFBundleShortVersionString" : "6.9",
"CFBundleIdentifier" : "com.apple.Foundation",
"size" : 14746924,
"uuid" : "4f701cf3-5228-3b3e-b455-aa7b137f76e7",
"path" : "\/System\/Library\/Frameworks\/Foundation.framework\/Versions\/C\/Foundation",
"name" : "Foundation",
"CFBundleVersion" : "3423"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140703242006528,
"size" : 632064,
"uuid" : "91f7d7de-c0d4-3343-a245-b39bcfdbe87b",
"path" : "\/usr\/lib\/dyld",
"name" : "dyld"
},
{
"size" : 0,
"source" : "A",
"base" : 0,
"uuid" : "00000000-0000-0000-0000-000000000000"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140703471398912,
"size" : 11260,
"uuid" : "b77739fa-6551-3fc4-ba5e-8d775381829b",
"path" : "\/usr\/lib\/system\/libquarantine.dylib",
"name" : "libquarantine.dylib"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140703616475136,
"size" : 45473,
"uuid" : "86203d71-3bc6-381f-9740-9d9fae803a1a",
"path" : "\/usr\/lib\/libEndpointSecurity.dylib",
"name" : "libEndpointSecurity.dylib"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140703244095488,
"size" : 291450,
"uuid" : "322735be-882c-3d00-8533-022051e5ed63",
"path" : "\/usr\/lib\/system\/libdispatch.dylib",
"name" : "libdispatch.dylib"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140703245828096,
"size" : 48592,
"uuid" : "b33f6374-3285-3bc8-8946-3472c31aabcd",
"path" : "\/usr\/lib\/system\/libsystem_pthread.dylib",
"name" : "libsystem_pthread.dylib"
},
{
"source" : "P",
"arch" : "x86_64h",
"base" : 140703241719808,
"size" : 282716,
"uuid" : "98b34882-678b-38a7-b1c4-888f7ae2aefe",
"path" : "\/usr\/lib\/libobjc.A.dylib",
"name" : "libobjc.A.dylib"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140703242657792,
"size" : 289750,
"uuid" : "244b7080-7839-3681-9592-8b84ccf94c35",
"path" : "\/usr\/lib\/system\/libxpc.dylib",
"name" : "libxpc.dylib"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140703390826496,
"CFBundleShortVersionString" : "1.0",
"CFBundleIdentifier" : "com.apple.analyticsd",
"size" : 187093,
"uuid" : "5d810693-89d1-36f2-847f-d48c833324bb",
"path" : "\/System\/Library\/PrivateFrameworks\/CoreAnalytics.framework\/Versions\/A\/CoreAnalytics",
"name" : "CoreAnalytics",
"CFBundleVersion" : "1"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140703295295488,
"CFBundleShortVersionString" : "7.0",
"CFBundleIdentifier" : "com.apple.security",
"size" : 4070390,
"uuid" : "f41b41fe-70f9-33cf-bea9-98615354b5f1",
"path" : "\/System\/Library\/Frameworks\/Security.framework\/Versions\/A\/Security",
"name" : "Security",
"CFBundleVersion" : "61439.101.1"
},
{
"source" : "P",
"arch" : "x86_64",
"base" : 140724866080768,
"CFBundleShortVersionString" : "1.0",
"CFBundleIdentifier" : "com.apple.xpc.XPCSupport",
"size" : 8504,
"uuid" : "00b90fde-40e7-3ccd-8018-735a75810dce",
"path" : "\/System\/Library\/PrivateFrameworks\/XPCSupport.framework\/Versions\/A\/XPCSupport",
"name" : "XPCSupport",
"CFBundleVersion" : "1"
}
],
"sharedCache" : {
"base" : 140703213797376,
"size" : 30064771072,
"uuid" : "188174d6-5c16-353c-ae91-080f4e5fa174"
},
"vmSummary" : "ReadOnly portion of Libraries: Total=455.9M resident=0K(0%) swapped_out_or_unallocated=455.9M(100%)\nWritable regions: Total=960.4M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=960.4M(100%)\n\n VIRTUAL REGION \nREGION TYPE SIZE COUNT (non-coalesced) \n=========== ======= ======= \nActivity Tracing 256K 1 \nKernel Alloc Once 8K 1 \nMALLOC 950.1M 27 \nMALLOC guard page 24K 6 \nMemory Tag 128 7740K 114 \nSTACK GUARD 56.0M 4 \nStack 9752K 4 \nVM_ALLOCATE 4K 1 \n__DATA 6017K 347 \n__DATA_CONST 38.7M 367 \n__DATA_DIRTY 637K 109 \n__FONT_DATA 2352 1 \n__LINKEDIT 162.1M 4 \n__OBJC_RO 61.2M 1 \n__OBJC_RW 2391K 2 \n__TEXT 293.9M 377 \n__TPRO_CONST 16 2 \nmapped file 32.5M 3 \nshared memory 600K 7 \n=========== ======= ======= \nTOTAL 1.6G 1378 \n",
"legacyInfo" : {
"threadTriggered" : {
"queue" : "com.apple.main-thread"
}
},
"logWritingSignature" : "cdbec2b013b5bd95ec11d6482c8ed2b2194c204e"
}
Edit 2: Okay, it's still happening even with LuLu uninstalled. I think in my case it actually is just timing out - I was bringing way too much stuff up at startup/login time and it was maxing out the CPU. I've cleaned that up, but I'll let you know if it keeps happening.
