PDA

View Full Version : Suspected Sniffer - Programmers Please Analyze Packet Log




Antifragile
Aug 12, 2013, 06:43 PM
Over the last week I've had a guest staying in my home. Due to suspicious activity on my i-phone and i-pad mini I decided to run a packet logger through one of the evenings he or she stayed. I can also add that this particular guest has access to extremely sophisticated software as well as the implementation know-how. I have may other details - including i-phone logs when I was suspicions of my phones activity - but before we get into all of that I'm hoping to get some feedback on this topic first.

Included in this post is just a simple screenshot - is there something in the packet logger file I would want to search for in particular to give me details as to whom it could have been.

If there is more information I may provide please let me know.

Thanks so much for your time and analysis.

This is my first post on the MR forum - admins if I have posted in the incorrect place I apologize in advance.

-Antifragile



MacModMachine
Aug 12, 2013, 06:48 PM
Over the last week I've had a guest staying in my home. Due to suspicious activity on my i-phone and i-pad mini I decided to run a packet logger through one of the evenings he or she stayed. I can also add that this particular guest has access to extremely sophisticated software as well as the implementation know-how. I have may other details - including i-phone logs when I was suspicions of my phones activity - but before we get into all of that I'm hoping to get some feedback on this topic first.

Included in this post is just a simple screenshot - is there something in the packet logger file I would want to search for in particular to give me details as to whom it could have been.

If there is more information I may provide please let me know.

Thanks so much for your time and analysis.

This is my first post on the MR forum - admins if I have posted in the incorrect place I apologize in advance.

-Antifragile

most of that is the HCI bluetooth controller, looks like a possible BT sniffer.

anymore screen shots?

Antifragile
Aug 12, 2013, 07:03 PM
most of that is the HCI bluetooth controller, looks like a possible BT sniffer.

anymore screen shots?

Would it be safe to post the .pklg file?

Antifragile
Aug 12, 2013, 07:27 PM
Would it be safe to post the .pklg file?

More images for analysis until further recommendation...

Thanks

Edit Test

Antifragile
Aug 13, 2013, 08:48 PM
Anyone else care to add their thoughts? Thanks

Intell
Aug 13, 2013, 08:52 PM
That's all Bluetooth. Hardly something to fret over.

Antifragile
Aug 13, 2013, 09:23 PM
That's all Bluetooth. Hardly something to fret over.

I must disagree - what sort of background do you have in tech? Thanks :)

Intell
Aug 13, 2013, 10:07 PM
I must disagree - what sort of background do you have in tech? Thanks :)

A few college degrees, various technical certificates, many years of experience. I wonder, do you disagree with your doctor if he/she points to your oddly bend arm and says "It's broken" and you respond "No it isn't". You came here asking for advise, then question the advise given to you.

Antifragile
Aug 13, 2013, 10:20 PM
A few college degrees, various technical certificates, many years of experience. I wonder, do you disagree with your doctor if he/she points to your oddly bend arm and says "It's broken" and you respond "No it isn't". You came here asking for advise, then question the advise given to you.

I was not attempting to be a jerk AT ALL! Much respect - and I appreciate your advice - but what is your take on where it actually says - Mode Change - Sniff Mode - ?

I also have Peer-to-Peer Logs from iphone that make me suspicious...

laurihoefs
Aug 14, 2013, 03:04 AM
I was not attempting to be a jerk AT ALL! Much respect - and I appreciate your advice - but what is your take on where it actually says - Mode Change - Sniff Mode - ?

I also have Peer-to-Peer Logs from iphone that make me suspicious...

Sniff Mode (among other BT modes) is explained here: Bluetooth Sleep Modes (http://www.althos.com/tutorial/Bluetooth-tutorial-sleep-modes.html)

Could you elaborate what you think is suspicious in the logs? Do you have BT devices connected? If so, then that's pretty much what your log should look like.

benwiggy
Aug 14, 2013, 07:02 AM
Due to suspicious activity on my i-phone and i-pad mini
What was the "suspicious" activity?

this particular guest has access to extremely sophisticated software as well as the implementation know-how.
In that case, your best bet might be to use social engineering:
"Dave, have you been messing with my stuff?"

MacModMachine
Aug 14, 2013, 07:25 AM
That's all Bluetooth. Hardly something to fret over.

there are some pretty good Hardware BT sniffers, this to me looks like a large amount of BT traffic but not knowing what possible devices are around it could be anything.

although i highly doubt one is trying to hack your phone/ipad/computer via bluetooth unless you have some nuclear launch codes or something.

Intell
Aug 14, 2013, 08:45 AM
there are some pretty good Hardware BT sniffers, this to me looks like a large amount of BT traffic but not knowing what possible devices are around it could be anything.

although i highly doubt one is trying to hack your phone/ipad/computer via bluetooth unless you have some nuclear launch codes or something.

That's Mac OS X's buled. The traffic shown is generated and sourced from it. Unless the OP has a sniffer running in that machine in a unusual configuration, that's all normal.

Antifragile
Aug 15, 2013, 05:46 PM
[QUOTE=benwiggy;17731877]What was the "suspicious" activity?

Random iPhone activity - all of the presets on my vechcles SAT NAV system were suddenly reset to to one frequency - this person was in the vehicle with me (constantly on there blackberry bold) and suddenly the audio quality of a .WAV format CD began to sound like a 56kbps quality audio file. I believe that the individual has been using my phone to record logs in an encrypted format that shows as (other) on my phone - then when on a BT network or a WIFI network (both of which said person has had access to) the data is either unpacked and transmitted via my GPS system. Also some of the functions such as "next song" were sudenly not working for a few seconds while the person to frantically pressed commands on their BB.

Other random notes:

noted termination of WARNING: Peer to Peer connection stopped

phone would randomly vibrate one quick time (as if I was receiving an e-mail) with no new e-mail as soon as this person would stop using there phone (while on a LTE network)

random text message notifications saying new text message - when opened no such text even existed

(on my Mac book pro) e-mails from this person will show up in google notifier with just a link (which i did not open - the e-mail or the link) google notifier will sometimes display just this message and not continue to scroll through the other e-mails as it normally would

Mac Pro Tower would randomly start up HD's at random times without waking the monitor

Mac Pro and Mac Book Pro's were shared through my gmail account - I didnt set that up - only ever shared on my own network

I also suspect that the individual is capable of running a parallell version of my phone as well as have access to additional applications "hidden" on my phone

some of the file logs from my i-phone while acting suspicious are below

LOG 1 from iPhone 5

Fri Aug 9 16:08:12 2013 backboardd com.apple.backboardd[26] <Warning>:Chrome[114]: Could not stat /private/var/mobile/Applications/BAA85E70-4523-40DA-8C6E-B93CD5E7FA1C/tmp/etilqs_VryVwqx2udbc1wm: No such file or directory
Fri Aug 9 16:09:03 2013 backboardd com.apple.backboardd[26] <Warning>:Chrome[114]: Could not stat /private/var/mobile/Applications/BAA85E70-4523-40DA-8C6E-B93CD5E7FA1C/tmp/etilqs_VryVwqx2udbc1wm: No such file or directory
Fri Aug 9 16:09:05 2013 Facebook com.facebook.Facebook[127] <Warning>:Unbalanced calls to begin/end appearance transitions for <UIViewController: 0x20022030>.
Fri Aug 9 16:11:08 2013 iaptransportd com.apple.iaptransportd[22] <Warning>:Interface device serial number: 165842799381587
Fri Aug 9 16:11:08 2013 iaptransportd com.apple.iaptransportd[22] <Warning>:Interface module serial number: F112345GJTVF5V9AB
Fri Aug 9 16:11:08 2013 iaptransportd com.apple.iaptransportd[22] <Warning>:Accessory serial number: F0Q23775J6SF7C0A1
Fri Aug 9 16:11:10 2013 iapd com.apple.iapd[139] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager attachAccessory:forTransport:]-445 app jp.co.alpine.apn.iw.fy2012.SmartFitApp found in client list
Fri Aug 9 16:11:10 2013 iapd com.apple.iapd[139] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager _takeClientAssertionsForAccessoryConnection]-1540 client jp.co.alpine.apn.iw.fy2012.SmartFitApp
Fri Aug 9 16:11:10 2013 iapd com.apple.iapd[139] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager _takeClientAssertionsForAccessoryConnection]-1540 client (null)
Fri Aug 9 16:11:13 2013 mediaserverd com.apple.mediaserverd[38] <Warning>:16:11:13.174 <com.apple.coremedia.playerserver/AudioControl> AcquireLock -- the mutex was already locked
Fri Aug 9 16:11:13 2013 mediaserverd com.apple.mediaserverd[38] <Warning>:16:11:13.175 <com.apple.coremedia.playerserver/AudioControl> AcquireLock -- the mutex was already locked
Fri Aug 9 16:11:15 2013 Music~iphone com.apple.mobileipod[141] <Warning>:[StoreBookkeeper] enabling...
Fri Aug 9 16:11:55 2013 iapd com.apple.iapd[139] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 69 no transport found for portNumber 1
Fri Aug 9 16:11:55 2013 iapd com.apple.iapd[139] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 44 no transport found for portNumber 1
Fri Aug 9 16:11:55 2013 iapd com.apple.iapd[139] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 69 no transport found for portNumber 1
Fri Aug 9 16:11:55 2013 iapd com.apple.iapd[139] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 44 no transport found for portNumber 1
Fri Aug 9 16:11:56 2013 iapd com.apple.iapd[139] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 69 no transport found for portNumber 1
Fri Aug 9 16:11:57 2013 iapd com.apple.iapd[139] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager attachAccessory:forTransport:]-445 app jp.co.alpine.apn.iw.fy2012.SmartFitApp found in client list
Fri Aug 9 16:11:57 2013 iapd com.apple.iapd[139] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager _takeClientAssertionsForAccessoryConnection]-1540 client jp.co.alpine.apn.iw.fy2012.SmartFitApp
Fri Aug 9 16:11:57 2013 iapd com.apple.iapd[139] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager _takeClientAssertionsForAccessoryConnection]-1540 client (null)
Fri Aug 9 16:12:05 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[127]: Could not stat /private/var/mobile/Applications/8AAFAA99-A1A5-4F0E-B4E7-7F45A6BAAAB4/tmp/etilqs_jnysQOGeXcFEhay: No such file or directory
Fri Aug 9 16:12:05 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[127]: Could not stat /private/var/mobile/Applications/8AAFAA99-A1A5-4F0E-B4E7-7F45A6BAAAB4/tmp/etilqs_8BYQ606P9rdZLWu: No such file or directory
Fri Aug 9 16:12:05 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[127]: Could not stat /private/var/mobile/Applications/8AAFAA99-A1A5-4F0E-B4E7-7F45A6BAAAB4/tmp/etilqs_KFejiEqND23CBrZ: No such file or directory
Fri Aug 9 16:12:05 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[127]: Could not stat /private/var/mobile/Applications/8AAFAA99-A1A5-4F0E-B4E7-7F45A6BAAAB4/tmp/etilqs_8Hd5phWjMDs0hZ6: No such file or directory

----------

Log 2

Fri Aug 9 17:28:01 2013 backboardd com.apple.backboardd[26] <Warning>:Chrome[114]: Could not stat /private/var/mobile/Applications/BAA85E70-4523-40DA-8C6E-B93CD5E7FA1C/tmp/etilqs_VryVwqx2udbc1wm: No such file or directory
Fri Aug 9 17:31:50 2013 MobileSafari com.apple.mobilesafari[305] <Warning>:Warning: Attempt to dismiss from view controller <BrowserRootViewController: 0x1c576a90> while a presentation or dismiss is in progress!
Fri Aug 9 17:31:58 2013 MobileSafari com.apple.mobilesafari[305] <Warning>:Could not archive: <TabDocumentWebBrowserView: 0x1cb2e400; baseClass = UIWebBrowserView; frame = (0 60; 0 0); text = ''; gestureRecognizers = <NSArray: 0x1d056500>; layer = <UIWebLayer: 0x1c598750>> to path: /var/mobile/Library/Caches/com.apple.mobilesafari/ReadingListArchives/E15E11C5-882E-4E59-A106-FD209BF07BB7/Page.webarchive ((null))
Fri Aug 9 17:37:53 2013 backboardd com.apple.backboardd[26] <Warning>:Chrome[114]: Could not stat /private/var/mobile/Applications/BAA85E70-4523-40DA-8C6E-B93CD5E7FA1C/tmp/etilqs_VryVwqx2udbc1wm: No such file or directory
Fri Aug 9 17:38:06 2013 MobileSlideShow com.apple.mobileslideshow[325] <Warning>:Warning: Attempt to dismiss from view controller <TabbedLibraryViewController: 0x21041d40> while a presentation or dismiss is in progress!
Fri Aug 9 17:38:27 2013 MobileSlideShow com.apple.mobileslideshow[325] <Warning>:Attempt to set background of a hidden status bar.
Fri Aug 9 17:38:27 2013 MobileSlideShow com.apple.mobileslideshow[325] <Warning>:Attempt to get topCorners for unknown or hidden status bar style: 120
Fri Aug 9 17:45:57 2013 backboardd com.apple.backboardd[26] <Warning>:Chrome[114]: Could not stat /private/var/mobile/Applications/BAA85E70-4523-40DA-8C6E-B93CD5E7FA1C/tmp/etilqs_VryVwqx2udbc1wm: No such file or directory
Fri Aug 9 17:45:58 2013 searchd com.apple.Search.framework[378] <Warning>:Finished getting 77 applications, took 0.066128 seconds
Fri Aug 9 17:46:24 2013 Preferences com.apple.Preferences[170] <Warning>:EntityClassUnknown:
com.apple.locationd.executable-/usr/sbin/aosnotifyd
{
Executable = "/usr/sbin/aosnotifyd";
LocationTimeStopped = "316655762.855985";
}
Fri Aug 9 17:46:24 2013 Preferences com.apple.Preferences[170] <Warning>:EntityClassUnknown:
com.apple.locationd.executable-/usr/libexec/adlibd
{
Executable = "/usr/libexec/adlibd";
LocationTimeStopped = "333059290.15163";
}
Fri Aug 9 17:46:24 2013 Preferences com.apple.Preferences[170] <Warning>:EntityClassUnknown:
com.apple.locationd.executable-/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter
{
Executable = "/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter";
LocationTimeStopped = "340550385.130072";
}
Fri Aug 9 17:46:36 2013 Preferences com.apple.Preferences[170] <Warning>:EntityClassUnknown:
com.apple.locationd.executable-/usr/sbin/aosnotifyd
{
Executable = "/usr/sbin/aosnotifyd";
LocationTimeStopped = "316655762.855985";
}
Fri Aug 9 17:46:36 2013 Preferences com.apple.Preferences[170] <Warning>:EntityClassUnknown:
com.apple.locationd.executable-/usr/libexec/adlibd
{
Executable = "/usr/libexec/adlibd";
LocationTimeStopped = "333059290.15163";
}
Fri Aug 9 17:46:36 2013 Preferences com.apple.Preferences[170] <Warning>:EntityClassUnknown:
com.apple.locationd.executable-/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter
{
Executable = "/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter";
LocationTimeStopped = "340550385.130072";
}
Fri Aug 9 17:46:50 2013 Preferences com.apple.Preferences[170] <Warning>:EntityClassUnknown:
com.apple.locationd.executable-/usr/sbin/aosnotifyd
{
Executable = "/usr/sbin/aosnotifyd";
LocationTimeStopped = "316655762.855985";
}
Fri Aug 9 17:46:50 2013 Preferences com.apple.Preferences[170] <Warning>:EntityClassUnknown:
com.apple.locationd.executable-/usr/libexec/adlibd
{
Executable = "/usr/libexec/adlibd";
LocationTimeStopped = "333059290.15163";
}
Fri Aug 9 17:46:50 2013 Preferences com.apple.Preferences[170] <Warning>:EntityClassUnknown:
com.apple.locationd.executable-/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter
{
Executable = "/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter";
LocationTimeStopped = "340550385.130072";
}
Fri Aug 9 17:47:59 2013 lsd com.apple.console[82] <Warning>:Launch Services: For app identifier com.apple.videos, corrected resources URL from file://localhost/Applications/Videos.app/ to file://localhost/Applications/Videos.app
Fri Aug 9 17:50:57 2013 searchd com.apple.Search.framework[393] <Warning>:Finished getting 77 applications, took 0.083788 seconds

----------

Log 3

Fri Aug 9 15:54:35 2013 Preferences com.apple.Preferences[1192] <Warning>:WiFi: Joined Belkin_Enhanced_Wireless_7384EB
Fri Aug 9 15:54:35 2013 Preferences com.apple.Preferences[1192] <Warning>:-[VPNConnectionStore reloadVPN]: The active VPN configuration has changed from to (null)
Fri Aug 9 15:54:35 2013 Preferences com.apple.Preferences[1192] <Warning>:-[VPNBundleController _vpnConfigurationChanged:] (0x1f541d00:<VPNBundleController: 0x1f541d00>): _serviceCount(0), serviceCount(0), toggleInRootMenu(0), RootMenuItem(1)
Fri Aug 9 15:54:38 2013 Preferences com.apple.Preferences[1192] <Warning>:-[WiFiManager(Private) _scanCompletedWithResults:]: Had to add our current network(Belkin_Enhanced_Wireless_7384EB) back into our network cache
Fri Aug 9 15:54:50 2013 Preferences com.apple.Preferences[1192] <Warning>:-[WiFiManager(Private) _scanCompletedWithResults:]: Had to add our current network(Belkin_Enhanced_Wireless_7384EB) back into our network cache
Fri Aug 9 15:54:57 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 69 no transport found for portNumber 1
Fri Aug 9 15:54:57 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 44 no transport found for portNumber 1
Fri Aug 9 15:54:57 2013 Preferences com.apple.Preferences[1192] <Warning>:accessory disconnect failed because accessory with connectionID 514634752 (0x1eacb400) was not found
Fri Aug 9 15:55:02 2013 Preferences com.apple.Preferences[1192] <Warning>:-[WiFiManager(Private) _scanCompletedWithResults:]: Had to add our current network(Belkin_Enhanced_Wireless_7384EB) back into our network cache
Fri Aug 9 15:55:07 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 69 no transport found for portNumber 1
Fri Aug 9 15:55:07 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 44 no transport found for portNumber 1
Fri Aug 9 15:55:08 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 69 no transport found for portNumber 1
Fri Aug 9 15:55:08 2013 iapd com.apple.iapd[1327] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager _takeClientAssertionsForAccessoryConnection]-1540 client com.apple.springboard
Fri Aug 9 15:55:08 2013 iapd com.apple.iapd[1327] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager _takeClientAssertionsForAccessoryConnection]-1540 client com.apple.Preferences
Fri Aug 9 15:55:08 2013 iapd com.apple.iapd[1327] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager _takeClientAssertionsForAccessoryConnection]-1540 client com.apple.locationd
Fri Aug 9 15:55:15 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 69 no transport found for portNumber 1
Fri Aug 9 15:55:15 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 44 no transport found for portNumber 1
Fri Aug 9 15:55:18 2013 iaptransportd com.apple.iaptransportd[23] <Warning>:Interface device serial number: 165842799381587
Fri Aug 9 15:55:18 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 69 no transport found for portNumber 1
Fri Aug 9 15:55:18 2013 iaptransportd com.apple.iaptransportd[23] <Warning>:Interface module serial number: F112345GJTVF5V9AB
Fri Aug 9 15:55:18 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 44 no transport found for portNumber 1
Fri Aug 9 15:55:18 2013 iaptransportd com.apple.iaptransportd[23] <Warning>:Accessory serial number: F0Q23775J6SF7C0A1
Fri Aug 9 15:55:19 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 69 no transport found for portNumber 1
Fri Aug 9 15:55:20 2013 iapd com.apple.iapd[1327] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager _takeClientAssertionsForAccessoryConnection]-1540 client com.apple.springboard
Fri Aug 9 15:55:20 2013 iapd com.apple.iapd[1327] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager _takeClientAssertionsForAccessoryConnection]-1540 client com.apple.Preferences
Fri Aug 9 15:55:20 2013 iapd com.apple.iapd[1327] <Warning>:/SourceCache/iapd/iapd-1065.38/iapd/EAManager.mm:-[EAManager _takeClientAssertionsForAccessoryConnection]-1540 client com.apple.locationd
Fri Aug 9 15:55:38 2013 Music~ipad com.apple.Music[1288] <Warning>:Took background task assertion (12) for playback stall
Fri Aug 9 15:55:40 2013 Music~ipad com.apple.Music[1288] <Warning>:Ending background task assertion (12) for playback stall
Fri Aug 9 15:55:59 2013 searchd com.apple.Search.framework[1353] <Warning>:Finished getting 59 applications, took 0.224560 seconds
Fri Aug 9 15:56:06 2013 AppStore com.apple.AppStore[129] <Warning>:JS: its.sf6.Bootstrap.init: Initialize
Fri Aug 9 15:56:07 2013 AppStore com.apple.AppStore[129] <Warning>:JS: its.defer.Bootstrap._renderPageComponent: Render Complete
Fri Aug 9 15:56:07 2013 AppStore com.apple.AppStore[129] <Warning>:JS: [397770967.65], its.image.util: Pending Images Complete
Fri Aug 9 15:56:10 2013 AppStore com.apple.AppStore[129] <Warning>:JS: [397770970.88], its.image.util: Pending Images Complete
Fri Aug 9 15:56:36 2013 backboardd com.apple.backboardd[27] <Warning>:Application 'UIKitApplication:com.groupon.ipad[0x8aa5]' exited abnormally with signal 9: Killed: 9
Fri Aug 9 15:57:11 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 69 no transport found for portNumber 1
Fri Aug 9 15:57:11 2013 iapd com.apple.iapd[1327] <Warning>:ERROR - /SourceCache/iapd/iapd-1065.38/iapd/IAPPortManager.mm:__accessoryPortManagerInterest - 44 no transport found for portNumber 1
Fri Aug 9 16:02:06 2013 assetsd com.apple.assetsd[87] <Warning>:Unable to open file to save extended attributes (No such file or directory).
Fri Aug 9 16:02:43 2013 SpringBoard com.apple.springboard[67] <Warning>:+[CATransaction synchronize] called within transaction
Fri Aug 9 16:04:23 2013 lsd com.apple.console[76] <Warning>:updating identifier store
Fri Aug 9 16:04:23 2013 lsd com.apple.console[76] <Warning>:Attempting to store identifiers file

Intell
Aug 15, 2013, 05:46 PM
Those logs from the iPhone are normal. I get those very often on mine. Nothing unusual there.

Antifragile
Aug 15, 2013, 05:50 PM
Log 5

Wed Aug 14 12:10:53 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_ginIpDH123eW1zb: No such file or directory
Wed Aug 14 12:10:53 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_vYKI0J3ZcLMNesX: No such file or directory
Wed Aug 14 12:10:53 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_nmpWQpmiDABGge3: No such file or directory
Wed Aug 14 12:10:53 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_cfRamaVrMjhAgQe: No such file or directory
Wed Aug 14 12:13:42 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_ginIpDH123eW1zb: No such file or directory
Wed Aug 14 12:13:42 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_vYKI0J3ZcLMNesX: No such file or directory
Wed Aug 14 12:13:42 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_nmpWQpmiDABGge3: No such file or directory
Wed Aug 14 12:13:42 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_cfRamaVrMjhAgQe: No such file or directory
Wed Aug 14 12:28:42 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_ginIpDH123eW1zb: No such file or directory
Wed Aug 14 12:28:42 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_vYKI0J3ZcLMNesX: No such file or directory
Wed Aug 14 12:28:42 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_nmpWQpmiDABGge3: No such file or directory
Wed Aug 14 12:28:42 2013 backboardd com.apple.backboardd[26] <Warning>:Facebook[773]: Could not stat /private/var/mobile/Applications/CAF61834-294E-4087-8F7F-BE4831E50210/tmp/etilqs_cfRamaVrMjhAgQe: No such file or directory

----------

Those logs from the iPhone are normal. I get those very often on mine. Nothing unusual there.

I appreciate that very much - any explanation as to why all of my stuff seems to be acting so strange? Like why on earth my SAT NAV stereo would reset presets and keep all other info the same?

Antifragile
Aug 15, 2013, 06:38 PM
na