[Ored]

Hej!

Jag har en MacBook av modellen (MacBook1,1). Nu har jag den senaste tiden råkat ut för en hel del Kernel Panic vid alla möjliga situationer. Hur tar man därför reda på vad dessa Kernel Panics beror på? Det jag häst gjort är att testa datorn med Apple Hardware Test, Skivkontroll och TechTool Pro men inget av dessa program visar att det är något fel på datorn. Datorns operativsystem är Snow Leopard (Mac OS X 10.6) men tyvärr inte det nyaste eftersom varje gång jag försöker uppdatera till detta så får jag dessa förbannade Kernel Panics. Någon som har förslag på fortsatt felsökning?

/Ored

[fagerja]

Nu är jag inte bekant med OS X, men som POSIX OS borde det logga vad som sker i /var/log/messages. Där borde du hitta orsaken.

[Ored]

Tack så mycket för detta. Ska kollas på studs. Återkommer med resultatet.

[Ored]

Tyvärr hittar jag inte /var/log/message i Mac OS X 10.6. Efter lite sökning på nätet verkar det istället som att det är /var/log/system.log som gäller i Mac OS X. Kan det stämma? I så fall ser denna fil ut som nedan. Kan det stämma och vad är det som är fel?

System.log

Feb 11 00:30:10 Admin-MacBook newsyslog[166]: logfile turned over
Feb 11 00:30:58 Admin-MacBook configd[13]: PMConnection IPConfiguration com.apple.powermanagement.applicationresponse.slowresponse 117 ms
Feb 11 00:30:58 Admin-MacBook loginwindow[29]: loginwindow SleepWakeCallback WILL sleep
Feb 11 00:33:44 Admin-MacBook loginwindow[29]: loginwindow SleepWakeCallback will power on, Currenttime:2/11/2011 12:33:44.005 AM - Waketime:2/11/2011 12:33:44.000 AM = Deltatime:0.004498005
Feb 11 00:33:44 Admin-MacBook Rowmote Helper[110]: Est <AsyncUdpSocket: 0x31f330> (5843)
Feb 11 00:33:47 Admin-MacBook configd[13]: Sleep: Success - BATT 38 - Software Sleep
Feb 11 00:33:47 Admin-MacBook configd[13]: Wake: Success - BATT 38 - EC LID0
Feb 11 00:33:47 Admin-MacBook configd[13]: Hibernate Statistics
Feb 11 00:33:47 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:33:47 Admin-MacBook configd[13]: PMConnection AirPort configd plug-in com.apple.powermanagement.applicationresponse.slowresponse 3351 ms
Feb 11 00:33:47 Admin-MacBook configd[13]: PMConnection IPConfiguration com.apple.powermanagement.applicationresponse.slowresponse 3353 ms
Feb 11 00:33:48 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:33:49 Admin-MacBook airportd[175]: failed to snag beacon
Feb 11 00:33:49 Admin-MacBook Rowmote Helper[110]: Est <AsyncUdpSocket: 0x31f330> (5843)
Feb 11 00:35:45 localhost com.apple.launchd[1]: *** launchd[1] has started up. ***
Feb 11 00:35:53 localhost DirectoryService[15]: Improper shutdown detected
Feb 11 00:35:55 localhost bootlog[40]: BOOT_TIME: 1297380941 0
Feb 11 00:35:58 localhost blued[17]: Apple Bluetooth daemon started
Feb 11 00:36:03 localhost mDNSResponder[28]: mDNSResponder mDNSResponder-214.3.2 (May 14 2010 15:29:49) starting
Feb 11 00:36:05 localhost /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[29]: Login Window Application Started
Feb 11 00:36:05 Admin-MacBook configd[13]: setting hostname to "Admin-MacBook.local"
Feb 11 00:36:05 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:36:06: --- last message repeated 1 time ---
Feb 11 00:36:06 Admin-MacBook com.apple.usbmuxd[21]: usbmuxd-201 built for iTunesTen on Aug 12 2010 at 17:33:03, running 32 bit
Feb 11 00:36:08 Admin-MacBook airportd[53]: failed to snag beacon
Feb 11 00:36:12 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:36:56 localhost com.apple.launchd[1]: *** launchd[1] has started up. ***
Feb 11 00:37:04 localhost DirectoryService[15]: Improper shutdown detected
Feb 11 00:37:06 localhost bootlog[40]: BOOT_TIME: 1297381010 0
Feb 11 00:37:09 localhost blued[17]: Apple Bluetooth daemon started
Feb 11 00:37:14 localhost mDNSResponder[28]: mDNSResponder mDNSResponder-214.3.2 (May 14 2010 15:29:49) starting
Feb 11 00:37:15 localhost /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[29]: Login Window Application Started
Feb 11 00:37:15 localhost configd[13]: network configuration changed.
Feb 11 00:37:15 Admin-MacBook configd[13]: setting hostname to "Admin-MacBook.local"
Feb 11 00:37:16 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:37:17 Admin-MacBook com.apple.usbmuxd[21]: usbmuxd-201 built for iTunesTen on Aug 12 2010 at 17:33:03, running 32 bit
Feb 11 00:37:19 Admin-MacBook airportd[53]: failed to snag beacon
Feb 11 00:37:22 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:37:26 Admin-MacBook com.apple.launchctl.Background[65]: launchctl: Dubious permissions on file (skipping): /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
Feb 11 00:37:27 Admin-MacBook com.apple.launchctl.LoginWindow[68]: launchctl: Dubious permissions on file (skipping): /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
Feb 11 00:37:29 Admin-MacBook loginwindow[29]: Login Window Started Security Agent
Feb 11 00:37:30 Admin-MacBook loginwindow[29]: Login Window - Returned from Security Agent
Feb 11 00:37:31 Admin-MacBook loginwindow[29]: USER_PROCESS: 29 console
Feb 11 00:37:31 Admin-MacBook com.apple.launchctl.Background[78]: launchctl: Dubious permissions on file (skipping): /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
Feb 11 00:37:31 Admin-MacBook com.apple.launchctl.Aqua[79]: launchctl: Dubious permissions on file (skipping): /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
Feb 11 00:37:31 Admin-MacBook com.apple.launchd.peruser.501[77] (com.apple.ReportCrash): Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self
Feb 11 00:37:40 Admin-MacBook com.apple.launchd.peruser.501[77] (com.apple.Kerberos.renew.plist[96]): Exited with exit code: 1
Feb 11 00:37:42 Admin-MacBook WindowServer[55]: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
Feb 11 00:37:42 Admin-MacBook com.apple.WindowServer[55]: Fri Feb 11 00:37:42 Admin-MacBook.local WindowServer[55] <Error>: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
Feb 11 00:37:42 Admin-MacBook Rowmote Helper[106]: Est <AsyncUdpSocket: 0x3174c0> (5843)

[fagerja]

Ored, den 11 feb 2011, 01:22, sa:

Tyvärr hittar jag inte /var/log/message i Mac OS X 10.6. Efter lite sökning på nätet verkar det istället som att det är /var/log/system.log som gäller i Mac OS X. Kan det stämma? I så fall ser denna fil ut som nedan. Kan det stämma och vad är det som är fel?

System.log

Feb 11 00:30:10 Admin-MacBook newsyslog[166]: logfile turned over
Feb 11 00:30:58 Admin-MacBook configd[13]: PMConnection IPConfiguration com.apple.powermanagement.applicationresponse.slowresponse 117 ms
Feb 11 00:30:58 Admin-MacBook loginwindow[29]: loginwindow SleepWakeCallback WILL sleep
Feb 11 00:33:44 Admin-MacBook loginwindow[29]: loginwindow SleepWakeCallback will power on, Currenttime:2/11/2011 12:33:44.005 AM - Waketime:2/11/2011 12:33:44.000 AM = Deltatime:0.004498005
Feb 11 00:33:44 Admin-MacBook Rowmote Helper[110]: Est <AsyncUdpSocket: 0x31f330> (5843)
Feb 11 00:33:47 Admin-MacBook configd[13]: Sleep: Success - BATT 38 - Software Sleep
Feb 11 00:33:47 Admin-MacBook configd[13]: Wake: Success - BATT 38 - EC LID0
Feb 11 00:33:47 Admin-MacBook configd[13]: Hibernate Statistics
Feb 11 00:33:47 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:33:47 Admin-MacBook configd[13]: PMConnection AirPort configd plug-in com.apple.powermanagement.applicationresponse.slowresponse 3351 ms
Feb 11 00:33:47 Admin-MacBook configd[13]: PMConnection IPConfiguration com.apple.powermanagement.applicationresponse.slowresponse 3353 ms
Feb 11 00:33:48 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:33:49 Admin-MacBook airportd[175]: failed to snag beacon
Feb 11 00:33:49 Admin-MacBook Rowmote Helper[110]: Est <AsyncUdpSocket: 0x31f330> (5843)
Feb 11 00:35:45 localhost com.apple.launchd[1]: *** launchd[1] has started up. ***
Feb 11 00:35:53 localhost DirectoryService[15]: Improper shutdown detected
Feb 11 00:35:55 localhost bootlog[40]: BOOT_TIME: 1297380941 0
Feb 11 00:35:58 localhost blued[17]: Apple Bluetooth daemon started
Feb 11 00:36:03 localhost mDNSResponder[28]: mDNSResponder mDNSResponder-214.3.2 (May 14 2010 15:29:49) starting
Feb 11 00:36:05 localhost /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[29]: Login Window Application Started
Feb 11 00:36:05 Admin-MacBook configd[13]: setting hostname to "Admin-MacBook.local"
Feb 11 00:36:05 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:36:06: --- last message repeated 1 time ---
Feb 11 00:36:06 Admin-MacBook com.apple.usbmuxd[21]: usbmuxd-201 built for iTunesTen on Aug 12 2010 at 17:33:03, running 32 bit
Feb 11 00:36:08 Admin-MacBook airportd[53]: failed to snag beacon
Feb 11 00:36:12 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:36:56 localhost com.apple.launchd[1]: *** launchd[1] has started up. ***
Feb 11 00:37:04 localhost DirectoryService[15]: Improper shutdown detected
Feb 11 00:37:06 localhost bootlog[40]: BOOT_TIME: 1297381010 0
Feb 11 00:37:09 localhost blued[17]: Apple Bluetooth daemon started
Feb 11 00:37:14 localhost mDNSResponder[28]: mDNSResponder mDNSResponder-214.3.2 (May 14 2010 15:29:49) starting
Feb 11 00:37:15 localhost /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[29]: Login Window Application Started
Feb 11 00:37:15 localhost configd[13]: network configuration changed.
Feb 11 00:37:15 Admin-MacBook configd[13]: setting hostname to "Admin-MacBook.local"
Feb 11 00:37:16 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:37:17 Admin-MacBook com.apple.usbmuxd[21]: usbmuxd-201 built for iTunesTen on Aug 12 2010 at 17:33:03, running 32 bit
Feb 11 00:37:19 Admin-MacBook airportd[53]: failed to snag beacon
Feb 11 00:37:22 Admin-MacBook configd[13]: network configuration changed.
Feb 11 00:37:26 Admin-MacBook com.apple.launchctl.Background[65]: launchctl: Dubious permissions on file (skipping): /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
Feb 11 00:37:27 Admin-MacBook com.apple.launchctl.LoginWindow[68]: launchctl: Dubious permissions on file (skipping): /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
Feb 11 00:37:29 Admin-MacBook loginwindow[29]: Login Window Started Security Agent
Feb 11 00:37:30 Admin-MacBook loginwindow[29]: Login Window - Returned from Security Agent
Feb 11 00:37:31 Admin-MacBook loginwindow[29]: USER_PROCESS: 29 console
Feb 11 00:37:31 Admin-MacBook com.apple.launchctl.Background[78]: launchctl: Dubious permissions on file (skipping): /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
Feb 11 00:37:31 Admin-MacBook com.apple.launchctl.Aqua[79]: launchctl: Dubious permissions on file (skipping): /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
Feb 11 00:37:31 Admin-MacBook com.apple.launchd.peruser.501[77] (com.apple.ReportCrash): Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self
Feb 11 00:37:40 Admin-MacBook com.apple.launchd.peruser.501[77] (com.apple.Kerberos.renew.plist[96]): Exited with exit code: 1
Feb 11 00:37:42 Admin-MacBook WindowServer[55]: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
Feb 11 00:37:42 Admin-MacBook com.apple.WindowServer[55]: Fri Feb 11 00:37:42 Admin-MacBook.local WindowServer[55] <Error>: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
Feb 11 00:37:42 Admin-MacBook Rowmote Helper[106]: Est <AsyncUdpSocket: 0x3174c0> (5843)

Verkar vara rätt logg.
Har markerat med rött de rader i loggen som handlar om fel. Den första rödmarkerade raden visar att datorn stängts av felaktigt. Det kan ha förorsakat skador på filsystemet. De andra felen kan bero på fel i filsystemet.

Den blåmarkerade raden visar att nätverksinställningarna ändrats. Om du inte gjort det så kan det tyda på malware eller intrång. Men kan även bero på skadat filsystem.

Det du bör göra först är att kontrollera filsystemets integritet.

[Ored]

Hej igen!

Hittade även en annan Karnel Panic report i datorn som kanske kan ge andra ledtrådar? Säger den något mer?

Fri Feb 11 00:37:07 2011
panic(cpu 0 caller 0x2a8ab2): Kernel trap at 0x002926fc, type 6=invalid opcode, registers:
CR0: 0x80010033, CR2: 0xa05b7468, CR3: 0x00101000, CR4: 0x000006e0
EAX: 0x00000000, EBX: 0x166bd007, ECX: 0x00000000, EDX: 0x00000000
CR2: 0x2263bbec, EBP: 0x2263bd88, ESI: 0x00000000, EDI: 0x01bc3db8
EFL: 0x00010246, EIP: 0x002926fc, CS: 0x00000008, DS: 0x00000010
Error code: 0x00000000

Backtrace (CPU 0), Frame : Return Address (4 potential args on stack)
0x2263ba68 : 0x21b455 (0x5cf328 0x2263ba9c 0x2238b1 0x0)
0x2263bab8 : 0x2a8ab2 (0x591664 0x2926fc 0x6 0x5917af)
0x2263bb98 : 0x29e9a8 (0x2263bbb8 0x10 0x0 0x0)
0x2263bbb0 : 0x2926fc (0xe 0x48 0x4b80010 0x10)
0x2263bd88 : 0x254d4b (0x3e5e740 0xa05b7000 0x0 0x166bd)
0x2263bdf8 : 0x257d1f (0x287dc80 0x3e5e740 0xa05b7000 0x0)
0x2263bf38 : 0x2a838c (0x3e768f8 0xa05b7000 0x0 0x3)
0x2263bfc8 : 0x29e80a (0x3ff7fb4 0x29e7fc 0x8 0x246)
No mapping exists for frame pointer
Backtrace terminated-invalid frame pointer 0xbfffcd58

BSD process name corresponding to current thread: UserNotification

Mac OS version:
10F569

Kernel version:
Darwin Kernel Version 10.4.0: Fri Apr 23 18:28:53 PDT 2010; root:xnu-1504.7.4~1/RELEASE_I386
System model name: MacBook1,1 (Mac-F4208CC8)

System uptime in nanoseconds: 50423303255
unloaded kexts:
(none)
loaded kexts:
com.apple.driver.AppleTyMCEDriver 1.0.1d8 - last loaded 25374599902
com.apple.filesystems.autofs 2.1.0
com.apple.driver.AppleHDA 1.8.7f1
com.apple.driver.AppleLPC 1.4.12
com.apple.driver.AppleIntelGMA950 6.1.6
com.apple.driver.AppleIntelIntegratedFramebuffer 6.1.6
com.apple.driver.SMCMotionSensor 3.0.0d4
com.apple.driver.AudioAUUC 1.4
com.apple.driver.InternalModemSupport 2.6.2
com.apple.driver.AirPort.Atheros 423.19.10
com.apple.Dont_Steal_Mac_OS_X 7.0.0
com.apple.driver.AudioIPCDriver 1.1.2
com.apple.driver.AppleIntelYonahProfile 14
com.apple.driver.AppleIntelPenrynProfile 17
com.apple.driver.AppleIntelNehalemProfile 11
com.apple.driver.AppleIntelMeromProfile 19
com.apple.driver.ACPI_SMC_PlatformPlugin 4.1.2b1
com.apple.driver.AppleUpstreamUserClient 3.3.2
com.apple.driver.AppleGraphicsControl 2.8.63
com.apple.driver.AppleBacklight 170.0.24
com.apple.driver.AppleIRController 303.8
com.apple.driver.AppleUSBTrackpad 1.8.1b1
com.apple.driver.AppleUSBTCKeyEventDriver 1.8.1b1
com.apple.driver.CSRHIDTransitionDriver 2.3.3f8
com.apple.driver.AppleUSBTCKeyboard 1.8.1b1
com.apple.iokit.IOAHCIBlockStorage 1.6.2
com.apple.iokit.SCSITaskUserClient 2.6.5
com.apple.driver.USBCameraFirmwareLoader 1.1.0
com.apple.BootCache 31
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0d1
com.apple.driver.AppleIntelPIIXATA 2.5.1
com.apple.driver.AppleFWOHCI 4.7.1
com.apple.driver.AppleAHCIPort 2.1.2
com.apple.driver.AppleUSBHub 4.0.0
com.apple.driver.AppleUSBEHCI 4.0.2
com.apple.driver.AppleUSBUHCI 4.0.2
com.apple.iokit.AppleYukon2 3.1.14b1
com.apple.driver.AppleEFINVRAM 1.3.0
com.apple.driver.AppleRTC 1.3.1
com.apple.driver.AppleHPET 1.5
com.apple.driver.AppleSmartBatteryManager 160.0.0
com.apple.driver.AppleACPIButtons 1.3.2
com.apple.driver.AppleSMBIOS 1.6
com.apple.driver.AppleACPIEC 1.3.2
com.apple.driver.AppleAPIC 1.4
com.apple.driver.AppleIntelCPUPowerManagementClient 105.10.0
com.apple.security.sandbox 0
com.apple.security.quarantine 0
com.apple.nke.applicationfirewall 2.1.11
com.apple.driver.AppleIntelCPUPowerManagement 105.10.0
com.apple.driver.AppleHDAPlatformDriver 1.8.7f1
com.apple.driver.AppleHDAHardwareConfigDriver 1.8.7f1
com.apple.driver.DspFuncLib 1.8.7f1
com.apple.driver.AppleProfileReadCounterAction 17
com.apple.driver.AppleProfileTimestampAction 10
com.apple.driver.AppleProfileThreadInfoAction 14
com.apple.driver.AppleProfileRegisterStateAction 10
com.apple.driver.AppleProfileKEventAction 10
com.apple.driver.AppleProfileCallstackAction 20
com.apple.iokit.IOFireWireIP 2.0.3
com.apple.iokit.IO80211Family 311.1
com.apple.iokit.IOSurface 74.0
com.apple.iokit.IOBluetoothSerialManager 2.3.3f8
com.apple.iokit.IOSerialFamily 10.0.3
com.apple.iokit.IOAudioFamily 1.7.6fc2
com.apple.kext.OSvKernDSPLib 1.3
com.apple.driver.AppleHDAController 1.8.7f1
com.apple.iokit.IOHDAFamily 1.8.7f1
com.apple.iokit.AppleProfileFamily 41
com.apple.driver.IOPlatformPluginFamily 4.1.2b1
com.apple.driver.AppleSMC 3.0.1d2
com.apple.iokit.IONDRVSupport 2.1
com.apple.iokit.IOGraphicsFamily 2.1
com.apple.driver.CSRUSBBluetoothHCIController 2.3.3f8
com.apple.driver.AppleUSBBluetoothHCIController 2.3.3f8
com.apple.iokit.IOBluetoothFamily 2.3.3f8
com.apple.driver.AppleUSBMergeNub 4.0.0
com.apple.iokit.IOUSBHIDDriver 4.0.2
com.apple.driver.XsanFilter 402.1
com.apple.driver.AppleUSBComposite 3.9.0
com.apple.iokit.IOSCSIMultimediaCommandsDevice 2.6.5
com.apple.iokit.IOBDStorageFamily 1.6
com.apple.iokit.IODVDStorageFamily 1.6
com.apple.iokit.IOCDStorageFamily 1.6
com.apple.iokit.IOATAPIProtocolTransport 2.5.1
com.apple.iokit.IOSCSIArchitectureModelFamily 2.6.5
com.apple.driver.AppleFileSystemDriver 2.0
com.apple.iokit.IOATAFamily 2.5.1
com.apple.iokit.IOFireWireFamily 4.2.6
com.apple.iokit.IOAHCIFamily 2.0.4
com.apple.iokit.IOUSBUserClient 4.0.0
com.apple.iokit.IOUSBFamily 4.0.2
com.apple.iokit.IONetworkingFamily 1.9
com.apple.driver.AppleEFIRuntime 1.3.0
com.apple.iokit.IOHIDFamily 1.6.4
com.apple.iokit.IOSMBusFamily 1.1
com.apple.kext.AppleMatch 1.0.0d1
com.apple.security.TMSafetyNet 6
com.apple.driver.DiskImages 283
com.apple.iokit.IOStorageFamily 1.6.1
com.apple.driver.AppleACPIPlatform 1.3.2
com.apple.iokit.IOACPIFamily 1.3.0
com.apple.iokit.IOPCIFamily 2.6

[Ored]

Har också startat Macen i Singel-User mode och kört kommandot /sbin/fsck -fy för att testa filsystemet och då får jag fram följande.

** /dev/rdisk0s2
** Root File system
Executing fsck_hfs (version diskdev_cmds-491.2~2).
** Checking Journaled HFS Plus volume.
** Checking extents overflow file.
** Checking catalog file.
** Checking multi-linked files.
** Checking catalog hierarchy
** Checking extended attributes file.
** Checking volume bitmap.
** Checking volume information.
** The volume Macintosh HD appears to be OK.

Något mer test man kan göra för att undersöka filsystemet?

/Ored

[fagerja]

Något mer för att undersöka filsystemet behövs inte. Eventuella fel har korrigerats av fsck. Du bör kontrollera rättigheterna på de filer som nämns i de rödmarkerade. Felet verkar ligga i kerberos (lösenordshanterare).