Peculiar logs on vanilla installation of Lion on Macbook Pro

jessicaSx

Registered
Hello

I wonder if anyone would mind assisting. I've been going around in circles so many times I'm dizzy....

As above, vanilla install and i'm not sure whether what I am seeing is OK or nefarious activity as I have recently fallen foul of a prankster who enjoys streaming screen shares.

For e.g. (and please if these are normal, put me out of my misery), but why is there a network interface with null as MAC address and what is the p2p interface?

-- End of daily output --
Tue Jan 10 03:17:09 GMT 2012
Removing stale files from /var/rwho:
Removing scratch fax files

Disk status:
Filesystem Size Used Avail Capacity Mounted on
/dev/disk0s3 132Gi 11Gi 121Gi 9% /

Network interface status:
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll
lo0 16384 <Link#1> 387 0 387 0 0
lo0 16384 localhost fe80:1::1 387 - 387 - -
lo0 16384 127 localhost 387 - 387 - -
lo0 16384 localhost ::1 387 - 387 - -
gif0* 1280 <Link#2> 0 0 0 0 0
stf0* 1280 <Link#3> 0 0 0 0 0
en0 1500 <Link#4> 00:25:4b:9c:53:60 0 0 0 0 0
en1 1500 <Link#5> 00:25:00:44:36:26 147335 0 141505 0 0
en1 1500 vanessas-ma fe80:5::225:ff:fe 147335 - 141505 - -
en1 1500 192.168.0 (null) 147335 - 141505 - -
p2p0 2304 <Link#6> 02:25:00:44:36:26 0 0 0 0 0

Local system status:
3:17 up 4:52, 1 user, load averages: 4.14 4.28 4.23

-- End of daily output --

I've also attached a fraction of install log below - why null again? I'm not sure I know which logs are best to provide for assistance, but if you are willing to help and let me know what would be useful, I can update the post.

2011-12-30 19:06:31:560|SyncServer|349|0x10db16e60|Logging|Info| Logging initialized, engine version 673.3 : log level 3
2011-12-30 19:06:34:216|iCalExternalSync|347|0x40010a260|ISyncManager|Info| register client com.apple.iCal from /System/Library/Frameworks/CalendarStore.framework/Resources/iCalExternalSyncConduit.plist (bundleId = (null), bundleRelativePath = (null))
2011-12-30 19:06:34:367|AddressBookSync|348|0x10811b660|Stats|Stats| com.apple.AddressBook: refresh sync com.apple.contacts.ImageTransformationInfo, com.apple.contacts.Related Name, com.apple.contacts.Group, com.apple.contacts.SmartGroup, com.apple.contacts.URL, com.apple.contacts.IM, com.apple.contacts.Street Address, com.apple.contacts.Phone Number, com.apple.contacts.Date, com.apple.contacts.CalendarURI, com.apple.contacts.Contact, com.apple.contacts.Email Address
2011-12-30 19:06:34:368|AddressBookSync|348|0x10811b660|ISyncSession|Info| com.apple.AddressBook: prepare to refresh com.apple.contacts.ImageTransformationInfo,com.apple.contacts.Related Name,com.apple.contacts.Group,com.apple.contacts.SmartGroup,com.apple.contacts.URL,com.apple.contacts.IM,com.apple.contacts.Street Address,com.apple.contacts.Phone Number,com.apple.contacts.Date,com.apple.contacts.CalendarURI,com.apple.contacts.Contact,com.apple.contacts.Email Address


Any assistance would be greatly appreciated.

Kind regards,
Jessica
 
please someone help me. i'm willing to pay a moderate amount for assistance. i'm not a 'user'. i've been using macs for years and run multiple centos boxes for various clients. but i think i may be going doolah.....
btw - you can email me direct at jessica_x@me.com
 
Last edited:
The "p2p*" network interfaces are new in Lion. I believe they are used for AirDrop.

As for the null Mac address, I'm not sure off the top of my head. Where did this output come from? If you run ifconfig from Terminal, what is its output?

On a semi-related note, I highly recommend Little Snitch. It lets you know when applications try to make network connections and allows to block it on a per-app, per-domain, per-port basis.
 
Back
Top