LittleSnitch 2.5.4 - Kernel panic 10.8.2

General discussions about Little Snitch
Post Reply
sebinho
Posts: 3
Joined: Sun Sep 30, 2012 3:03 pm

LittleSnitch 2.5.4 - Kernel panic 10.8.2

Post by sebinho » Sun Sep 30, 2012 3:09 pm

Since the upgrade to 10.8.2, my system has suffered kernel panics particularly, but not exclusively, when booting.
I decided to wipe the hard drive and re-install 10.8.2.

All was well until I installed LittleSnitch (LS). After the first boot, I started to get the kernel panics again.
I have tried to proceeded to the un-installation and re-installation of LittleSnitch (LS): when LS is installed the kernel becomes unstable and panics. When LS is removed, the kernel no longer panics. This would seemingly indicate LS is the culprit.

I found these entries in the system logs (although I'm not sure they're related):
30/09/2012 01:41:21.530 Flux[202]: {
Attributes = 69632;
BundlePath = "/Library/Little Snitch/Little Snitch Agent.app";
CFBundleExecutable = "/Library/Little Snitch/Little Snitch Agent.app/Contents/MacOS/Little Snitch Agent";
CFBundleIdentifier = "at.obdev.LittleSnitchAgent";
CFBundleName = "Little Snitch Agent";
CFBundleVersion = 0;
FileCreator = "????";
FileType = APPL;
Flavor = 3;
IsCheckedInAttr = 1;
LSBackgroundOnly = 0;
"LSCheckInTime*" = "2012-09-30 00:41:17 +0000";
LSSystemWillDisplayDeathNotification = 0;
LSUIElement = 1;
LSUIPresentationMode = 0;
PSN = 24582;
pid = 166;
}

30/09/2012 01:41:21.541 Flux[202]: {
Attributes = 69632;
BundlePath = "/Library/Little Snitch/Little Snitch Network Monitor.app";
CFBundleExecutable = "/Library/Little Snitch/Little Snitch Network Monitor.app/Contents/MacOS/Little Snitch Network Monitor";
CFBundleIdentifier = "at.obdev.LittleSnitchNetworkMonitor";
CFBundleName = "Little Snitch Network Monitor";
CFBundleVersion = 0;
FileCreator = "????";
FileType = APPL;
Flavor = 3;
IsCheckedInAttr = 1;
LSBackgroundOnly = 0;
"LSCheckInTime*" = "2012-09-30 00:41:20 +0000";
LSLaunchTime = "2012-09-30 00:41:20 +0000";
LSSystemWillDisplayDeathNotification = 0;
LSUIElement = 1;
LSUIPresentationMode = 0;
PSN = 65552;
ParentPSN = 24582;
pid = 204;
}

30/09/2012 09:58:44.039 Flux[197]: {
Attributes = 69632;
BundlePath = "/Library/Little Snitch/Little Snitch Network Monitor.app";
CFBundleExecutable = "/Library/Little Snitch/Little Snitch Network Monitor.app/Contents/MacOS/Little Snitch Network Monitor";
CFBundleIdentifier = "at.obdev.LittleSnitchNetworkMonitor";
CFBundleName = "Little Snitch Network Monitor";
CFBundleVersion = 0;
FileCreator = "????";
FileType = APPL;
Flavor = 3;
IsCheckedInAttr = 1;
LSBackgroundOnly = 0;
"LSCheckInTime*" = "2012-09-30 08:58:42 +0000";
LSLaunchTime = "2012-09-30 08:58:42 +0000";
LSSystemWillDisplayDeathNotification = 0;
LSUIElement = 1;
LSUIPresentationMode = 0;
PSN = 90134;
ParentPSN = 16388;
pid = 221;
}

sebinho
Posts: 3
Joined: Sun Sep 30, 2012 3:03 pm

Re: LittleSnitch 2.5.4 / 3.0 - Kernel panic 10.8.2

Post by sebinho » Sun Sep 30, 2012 3:11 pm

I also tried the LS 3.0 and have experienced the same issue.

manfred
Objective Development
Objective Development
Posts: 561
Joined: Sat Jul 31, 2010 9:47 am
Location: Vienna
Contact:

Re: LittleSnitch 2.5.4 - Kernel panic 10.8.2

Post by manfred » Tue Oct 02, 2012 3:52 pm

Please contact our support via email and attach the logs. Thanks!

sparker
Posts: 4
Joined: Tue Dec 14, 2010 2:22 am

Re: LittleSnitch 2.5.4 - Kernel panic 10.8.2

Post by sparker » Mon Dec 03, 2012 4:13 pm

Any updates on this? I"m getting the same thing one or two times a day. I'm running 10.8.2 with Little Snitch 3.0.1, and it's really starting to get annoying. I can email logs (which logs?) if needed, but I don't want to add more data if you're already working on the issue.

Steve

Stuart
Rank 2
Rank 2
Posts: 40
Joined: Tue Feb 01, 2011 3:02 pm

Re: LittleSnitch 2.5.4 - Kernel panic 10.8.2

Post by Stuart » Tue Dec 04, 2012 1:34 pm

If you are getting Kernel crashes your logs should also include System Diagnostic logs. These will show the "process" that was executing when the system crashed (near the top) and loads of info below.

There are issues that I believe are unrelated to LS causing crashes on resume from sleep. It is thought that these are related to problems in the Bluetooth driver (sometimes shows as a "kernel_task" crash, sometimes as a "blued" (Bluetooth deamon) crash. If they relate to resume from sleep, I guess there is the possibility of them also happening on startup.

See thread http://forums.obdev.at/viewtopic.php?f=1&t=7287 which discusses these. I cannot say it is the same issue but quite possible. Often the trouble with Kernel crashes is that unrelated changes can cause different effects because the behaviour of "the system" changes. Also might be because of uninitialised data of memory reuse hence the unrelated change making things start/stop working. e.g. for the resume from sleep issue, some people report that removing Sophos security solves the problem whilst others (including myself) find that changing the switch on sequence of bluetooth peripherals around entry/exit from sleep reduces the problems. Another example was a bug in Snow Leopard WiFi drivers (around the WEP2 security part) where a long system ID would cause the driver to crash on system start (both boot and resume from sleep). Fortunately did not crash the system but WiFi switched off. However, once everything was running you could re-enable WiFi card (with the same long id) and it would then work fine. Shorter system id and it always worked fine. Small changes can make a big difference to some "bugs" and removing something does not necessarily mean it is (or is not) the cause.

So check your System Diagnostic Reports (in Console) remembering the info you want is close to the top and Console displays the bit at the bottom when the log is first selected.

sparker
Posts: 4
Joined: Tue Dec 14, 2010 2:22 am

Re: LittleSnitch 3.0.1 - Kernel panic 10.8.2

Post by sparker » Tue Dec 04, 2012 5:49 pm

Thanks Stuart,

I've read through what you sent, and found another thread on which logs specifically to submit. I've emailed the logs for 4 kernel panics (and all other requested logs) to support.

I'm pretty sure this is Little Snitch 3.01 related, because as soon as I uninstalled it, the system's been running 24x7 with no issues. And since it started shortly after I installed the 3.0.1 upgrade, it seems to me that LS 3.0.1 is the culprit, or it causes conflict with something else... Maybe Virus Barrier 10.6.18 build 220? From the OS perspective, that app is fairly intrusive too. Just thinking out loud here, though. I'm fine now that LS is uninstalled. A little nervous about what various apps may be doing on the net, but at least the Kernel Panics have stopped.

Steve

Post Reply