Page 1 of 1

LittleSnitch 2.5.4 - Kernel panic 10.8.2

Posted: Sun Sep 30, 2012 3:09 pm
by sebinho
Since the upgrade to 10.8.2, my system has suffered kernel panics particularly, but not exclusively, when booting.
I decided to wipe the hard drive and re-install 10.8.2.

All was well until I installed LittleSnitch (LS). After the first boot, I started to get the kernel panics again.
I have tried to proceeded to the un-installation and re-installation of LittleSnitch (LS): when LS is installed the kernel becomes unstable and panics. When LS is removed, the kernel no longer panics. This would seemingly indicate LS is the culprit.

I found these entries in the system logs (although I'm not sure they're related):
30/09/2012 01:41:21.530 Flux[202]: {
Attributes = 69632;
BundlePath = "/Library/Little Snitch/Little Snitch Agent.app";
CFBundleExecutable = "/Library/Little Snitch/Little Snitch Agent.app/Contents/MacOS/Little Snitch Agent";
CFBundleIdentifier = "at.obdev.LittleSnitchAgent";
CFBundleName = "Little Snitch Agent";
CFBundleVersion = 0;
FileCreator = "????";
FileType = APPL;
Flavor = 3;
IsCheckedInAttr = 1;
LSBackgroundOnly = 0;
"LSCheckInTime*" = "2012-09-30 00:41:17 +0000";
LSSystemWillDisplayDeathNotification = 0;
LSUIElement = 1;
LSUIPresentationMode = 0;
PSN = 24582;
pid = 166;
}

30/09/2012 01:41:21.541 Flux[202]: {
Attributes = 69632;
BundlePath = "/Library/Little Snitch/Little Snitch Network Monitor.app";
CFBundleExecutable = "/Library/Little Snitch/Little Snitch Network Monitor.app/Contents/MacOS/Little Snitch Network Monitor";
CFBundleIdentifier = "at.obdev.LittleSnitchNetworkMonitor";
CFBundleName = "Little Snitch Network Monitor";
CFBundleVersion = 0;
FileCreator = "????";
FileType = APPL;
Flavor = 3;
IsCheckedInAttr = 1;
LSBackgroundOnly = 0;
"LSCheckInTime*" = "2012-09-30 00:41:20 +0000";
LSLaunchTime = "2012-09-30 00:41:20 +0000";
LSSystemWillDisplayDeathNotification = 0;
LSUIElement = 1;
LSUIPresentationMode = 0;
PSN = 65552;
ParentPSN = 24582;
pid = 204;
}

30/09/2012 09:58:44.039 Flux[197]: {
Attributes = 69632;
BundlePath = "/Library/Little Snitch/Little Snitch Network Monitor.app";
CFBundleExecutable = "/Library/Little Snitch/Little Snitch Network Monitor.app/Contents/MacOS/Little Snitch Network Monitor";
CFBundleIdentifier = "at.obdev.LittleSnitchNetworkMonitor";
CFBundleName = "Little Snitch Network Monitor";
CFBundleVersion = 0;
FileCreator = "????";
FileType = APPL;
Flavor = 3;
IsCheckedInAttr = 1;
LSBackgroundOnly = 0;
"LSCheckInTime*" = "2012-09-30 08:58:42 +0000";
LSLaunchTime = "2012-09-30 08:58:42 +0000";
LSSystemWillDisplayDeathNotification = 0;
LSUIElement = 1;
LSUIPresentationMode = 0;
PSN = 90134;
ParentPSN = 16388;
pid = 221;
}

Re: LittleSnitch 2.5.4 / 3.0 - Kernel panic 10.8.2

Posted: Sun Sep 30, 2012 3:11 pm
by sebinho
I also tried the LS 3.0 and have experienced the same issue.

Re: LittleSnitch 2.5.4 - Kernel panic 10.8.2

Posted: Tue Oct 02, 2012 3:52 pm
by manfred
Please contact our support via email and attach the logs. Thanks!

Re: LittleSnitch 2.5.4 - Kernel panic 10.8.2

Posted: Mon Dec 03, 2012 4:13 pm
by sparker
Any updates on this? I"m getting the same thing one or two times a day. I'm running 10.8.2 with Little Snitch 3.0.1, and it's really starting to get annoying. I can email logs (which logs?) if needed, but I don't want to add more data if you're already working on the issue.

Steve

Re: LittleSnitch 2.5.4 - Kernel panic 10.8.2

Posted: Tue Dec 04, 2012 1:34 pm
by Stuart
If you are getting Kernel crashes your logs should also include System Diagnostic logs. These will show the "process" that was executing when the system crashed (near the top) and loads of info below.

There are issues that I believe are unrelated to LS causing crashes on resume from sleep. It is thought that these are related to problems in the Bluetooth driver (sometimes shows as a "kernel_task" crash, sometimes as a "blued" (Bluetooth deamon) crash. If they relate to resume from sleep, I guess there is the possibility of them also happening on startup.

See thread http://forums.obdev.at/viewtopic.php?f=1&t=7287 which discusses these. I cannot say it is the same issue but quite possible. Often the trouble with Kernel crashes is that unrelated changes can cause different effects because the behaviour of "the system" changes. Also might be because of uninitialised data of memory reuse hence the unrelated change making things start/stop working. e.g. for the resume from sleep issue, some people report that removing Sophos security solves the problem whilst others (including myself) find that changing the switch on sequence of bluetooth peripherals around entry/exit from sleep reduces the problems. Another example was a bug in Snow Leopard WiFi drivers (around the WEP2 security part) where a long system ID would cause the driver to crash on system start (both boot and resume from sleep). Fortunately did not crash the system but WiFi switched off. However, once everything was running you could re-enable WiFi card (with the same long id) and it would then work fine. Shorter system id and it always worked fine. Small changes can make a big difference to some "bugs" and removing something does not necessarily mean it is (or is not) the cause.

So check your System Diagnostic Reports (in Console) remembering the info you want is close to the top and Console displays the bit at the bottom when the log is first selected.

Re: LittleSnitch 3.0.1 - Kernel panic 10.8.2

Posted: Tue Dec 04, 2012 5:49 pm
by sparker
Thanks Stuart,

I've read through what you sent, and found another thread on which logs specifically to submit. I've emailed the logs for 4 kernel panics (and all other requested logs) to support.

I'm pretty sure this is Little Snitch 3.01 related, because as soon as I uninstalled it, the system's been running 24x7 with no issues. And since it started shortly after I installed the 3.0.1 upgrade, it seems to me that LS 3.0.1 is the culprit, or it causes conflict with something else... Maybe Virus Barrier 10.6.18 build 220? From the OS perspective, that app is fairly intrusive too. Just thinking out loud here, though. I'm fine now that LS is uninstalled. A little nervous about what various apps may be doing on the net, but at least the Kernel Panics have stopped.

Steve