Could Not Connect To The BlockBlock Deamon 2.2.2

[iioniis]

"Could Not Connect To The BlockBlock Deamon
Please ensure that the BlockBlock daemon is currently running."

Yes it's spelled wrong in the first line, no it was not spelled by me. I get this every launch with 2.2.2 on Monterey 12.7.4. I have to manually launch the helper and deselect the icon toggle to make it show up in the menu bar. BlockBlock always has full disk access. I even threw the helper in there to have full disk access and doesn't work.

[objective-see]

Sorry to hear about the issue 🫣

I've fixed the spelling already, but need some more information to help track down the more pressing communication issue.

Can you (please):

1. Check to see if there any crash log/reports (via Console.app) ...maybe the daemon crashed?
2. Run log show --predicate="subsystem='com.objective-see.blockblock'" from the Terminal to see if there are any error messages
3. Run log stream --level debug --predicate="subsystem='com.objective-see.blockblock'" while manually (re)starting the helper to see if there are any error messages.

Thanks

[iioniis]

Ran both of those commands and have attached them here. There wasn't anything in the Console's crash report.

Terminal Saved Output.txt
Terminal Saved Output2.txt

[iCSpotRun]

Do you have Little Snitch installed? Could be realted to this: #33

[iioniis]

I don't but I do have some Eclectic Light Company software installed. Skint, Silent Knight, Systhist and Lockrattler.

Edit: Update

So I went ahead and removed those apps and did a deep clean with Find Any File to finish the job. Did the same with BlockBlock, reinstalled, rebooted and all is well!

[iioniis]

Well, I guess that didn't work as when booting up just now, it's doing the same thing.

[Spl0itable]

Also having the same issue here. This machine is running with JAMF config and Falcon filters. Could that be contributing?

[adamshostack]

Since this is still open, I'd like to encourage @objective-see to add an explanation of how to ensure the daemon is running to the dialog (probably through a link to a web page or a help file.)

[R4GER]

^ I second that. If objective-see themselves could please look into this and fill us in with any information that would be appreciated as I too am having issues

[iioniis]

Yes that would be great.

…

On Mar 3, 2025, at 8:37 AM, Rager ***@***.***> wrote: R4GER left a comment (objective-see/BlockBlock#75) ^ I second that. If objective-see themselves could please look into this and fill us in with any information that would be appreciated as I too am having issues — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread. <#75 (comment)> <https://github.com/notifications/unsubscribe-auth/BGCUMOBBPTGVBAIIKCPEWVD2SRZLNAVCNFSM6AAAAABVO35MQ2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMOJUG44TGMBXGI> R4GER left a comment (objective-see/BlockBlock#75) <#75 (comment)> ^ I second that. If objective-see themselves could please look into this and fill us in with any information that would be appreciated as I too am having issues — Reply to this email directly, view it on GitHub <#75 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BGCUMOBBPTGVBAIIKCPEWVD2SRZLNAVCNFSM6AAAAABVO35MQ2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMOJUG44TGMBXGI>. You are receiving this because you authored the thread.

[Rhys-T]

I'm getting the same error message with 2.2.4, but my system does have a crash report for BlockBlock. Namespace ENDPOINTSECURITY, Code 2 EndpointSecurity client terminated because it failed to respond to a message before its deadline, if that means anything to you. Not sure whether it's the same issue as the original user here or not.

I don't have Little Snitch installed, but I do have LuLu 3.1.4. LuLu was installed after BlockBlock (like Little Snitch originally was in #33). Haven't tried switching them around yet.

Same problem where the menu doesn't appear until I toggle "No Icon Mode" on and back off.

Spelling appears to have been corrected to "Could Not Connect To The BlockBlock Daemon". Putting that here so that searches for that exact phrase will be able to find this issue.

Edit: Forgot to mention, I'm on macOS Sequoia 15.4.

Full crash report

-------------------------------------
Translated Report (Full Report Below)
-------------------------------------

Process:               BlockBlock [264]
Path:                  /Library/Objective-See/*/BlockBlock.app/Contents/MacOS/BlockBlock
Identifier:            com.objective-see.blockblock
Version:               2.2.4 (2.2.4)
Code Type:             X86-64 (Native)
Parent Process:        launchd [1]
User ID:               0

Date/Time:             2025-04-16 07:01:48.0964 -0400
OS Version:            macOS 15.4 (24E248)
Report Version:        12
Anonymous UUID:        9E22C528-24BC-3EAE-5F40-7472BFA42AF2


Time Awake Since Boot: 100 seconds

System Integrity Protection: enabled

Crashed Thread:        0  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_CRASH (SIGKILL)
Exception Codes:       0x0000000000000000, 0x0000000000000000

Termination Reason:    Namespace ENDPOINTSECURITY, Code 2 EndpointSecurity client terminated because it failed to respond to a message before its deadline

Thread 0 Crashed::  Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib        	    0x7ff806f8bb4a mach_msg2_trap + 10
1   libsystem_kernel.dylib        	    0x7ff806f9a677 mach_msg2_internal + 83
2   libsystem_kernel.dylib        	    0x7ff806f92bbe mach_msg_overwrite + 574
3   libsystem_kernel.dylib        	    0x7ff806f8be3e mach_msg + 19
4   CoreFoundation                	    0x7ff8070b6e32 __CFRunLoopServiceMachPort + 145
5   CoreFoundation                	    0x7ff8070b587f __CFRunLoopRun + 1430
6   CoreFoundation                	    0x7ff8070b4cb2 CFRunLoopRunSpecific + 536
7   Foundation                    	    0x7ff808126ff3 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 216
8   Foundation                    	    0x7ff8081a7627 -[NSRunLoop(NSRunLoop) run] + 76
9   BlockBlock                    	       0x10b65d5df 0x10b659000 + 17887
10  dyld                          	    0x7ff806c29530 start + 3056

Thread 1::  Dispatch queue: BBReaderQueue
0   libsystem_kernel.dylib        	    0x7ff806f8d08c __mac_syscall + 0
1   libquarantine.dylib           	    0x7ff8146e7851 __qtn_syscall_responsibility_get + 75
2   libquarantine.dylib           	    0x7ff8146e77f2 responsibility_get_pid_responsible_for_pid + 34
3   BlockBlock                    	       0x10b65bed7 0x10b659000 + 11991
4   BlockBlock                    	       0x10b65b83c 0x10b659000 + 10300
5   BlockBlock                    	       0x10b664a7f 0x10b659000 + 47743
6   BlockBlock                    	       0x10b66d225 0x10b659000 + 82469
7   libEndpointSecurity.dylib     	    0x7ff81d1466da spar::BBReader<ESMessageReaderConfig>::handleItems() + 362
8   libEndpointSecurity.dylib     	    0x7ff81d1464d1 spar::BBReader<ESMessageReaderConfig>::woke(void*) + 17
9   libdispatch.dylib             	    0x7ff806e389fc _dispatch_client_callout + 6
10  libdispatch.dylib             	    0x7ff806e260c3 _dispatch_continuation_pop + 518
11  libdispatch.dylib             	    0x7ff806e357fa _dispatch_source_invoke + 2207
12  libdispatch.dylib             	    0x7ff806e29193 _dispatch_lane_serial_drain + 319
13  libdispatch.dylib             	    0x7ff806e29dad _dispatch_lane_invoke + 382
14  libdispatch.dylib             	    0x7ff806e2ac65 _dispatch_workloop_invoke + 743
15  libdispatch.dylib             	    0x7ff806e32b96 _dispatch_root_queue_drain_deferred_wlh + 275
16  libdispatch.dylib             	    0x7ff806e324e3 _dispatch_workloop_worker_thread + 688
17  libsystem_pthread.dylib       	    0x7ff806fca8ad _pthread_wqthread + 298
18  libsystem_pthread.dylib       	    0x7ff806fc9843 start_wqthread + 15

Thread 2:
0   libsystem_pthread.dylib       	    0x7ff806fc9834 start_wqthread + 0

Thread 3::  Dispatch queue: com.apple.CoreAnalytics::Client
0   libsystem_kernel.dylib        	    0x7ff806f8bb4a mach_msg2_trap + 10
1   libsystem_kernel.dylib        	    0x7ff806f9a677 mach_msg2_internal + 83
2   libsystem_kernel.dylib        	    0x7ff806f92bbe mach_msg_overwrite + 574
3   libsystem_kernel.dylib        	    0x7ff806f8be3e mach_msg + 19
4   libxpc.dylib                  	    0x7ff806cec069 _xpc_pipe_mach_msg + 49
5   libxpc.dylib                  	    0x7ff806ceb8cc _xpc_pipe_routine + 384
6   libxpc.dylib                  	    0x7ff806cc802e _xpc_interface_routine + 173
7   libxpc.dylib                  	    0x7ff806cccd39 _xpc_look_up_endpoint + 231
8   libxpc.dylib                  	    0x7ff806cccbd7 _xpc_connection_bootstrap_look_up_slow + 399
9   libxpc.dylib                  	    0x7ff806ccc4be _xpc_connection_init + 800
10  libxpc.dylib                  	    0x7ff806ccc0f1 _xpc_connection_activate_if_needed + 570
11  CoreAnalytics                 	    0x7ff80fa2bd61 CoreAnalytics::Client::initConnection() + 223
12  CoreAnalytics                 	    0x7ff80fa116af CoreAnalytics::Client::init() + 105
13  libdispatch.dylib             	    0x7ff806e389fc _dispatch_client_callout + 6
14  libdispatch.dylib             	    0x7ff806e2f7e6 _dispatch_lane_barrier_sync_invoke_and_complete + 60
15  CoreAnalytics                 	    0x7ff80fa2ae95 invocation function for block in CoreAnalytics::Client::get() + 86
16  libdispatch.dylib             	    0x7ff806e389fc _dispatch_client_callout + 6
17  libdispatch.dylib             	    0x7ff806e248ed _dispatch_once_callout + 20
18  CoreAnalytics                 	    0x7ff80fa11498 CoreAnalytics::Client::get() + 38
19  CoreAnalytics                 	    0x7ff80fa1686d AnalyticsSendEventInternal(NSString const*, NSDictionary<NSString*, NSObject*>* () block_pointer, XPCMessagePriority, EventPayloadFormat, NSDictionary<NSString*, NSObject*>*) + 107
20  Security                      	    0x7ff809f9ed43 +[SecCoreAnalytics sendEventLazy:builder:] + 190
21  Security                      	    0x7ff80a13b923 __countLegacyAPI_block_invoke + 166
22  libdispatch.dylib             	    0x7ff806e389fc _dispatch_client_callout + 6
23  libdispatch.dylib             	    0x7ff806e248ed _dispatch_once_callout + 20
24  Security                      	    0x7ff80a13b87b countLegacyAPI + 234
25  Security                      	    0x7ff80a1b564c SecTrustSetKeychains + 33
26  Security                      	    0x7ff80a0cb4aa CERT_VerifyCert + 234
27  Security                      	    0x7ff80a0d42cc SecCmsSignedDataVerifySignerInfo_internal + 1251
28  Security                      	    0x7ff80a0d2266 decodeTimeStampTokenWithPolicy + 1630
29  Security                      	    0x7ff80a0cc05c SecCmsSignerInfoVerifyUnAuthAttrsWithPolicy + 94
30  Security                      	    0x7ff80a0d40a2 SecCmsSignedDataVerifySignerInfo_internal + 697
31  Security                      	    0x7ff80a0d4a69 CMSDecoderCopySignerStatus + 173
32  Security                      	    0x7ff80a0ea703 Security::CodeSigning::SecStaticCode::validateDirectory() + 1079
33  Security                      	    0x7ff80a0edb33 Security::CodeSigning::SecStaticCode::validateNonResourceComponents() + 15
34  Security                      	    0x7ff80a0d93cf Security::CodeSigning::SecCode::checkValidity(unsigned int) + 225
35  Security                      	    0x7ff80a0e2410 SecCodeCheckValidityWithErrors + 83
36  XPCSupport                    	    0x7ffd0fa7736e xpc_support_check_token + 433
37  libxpc.dylib                  	    0x7ff806ce167a _xpc_connection_check_peer_requirement + 623
38  libxpc.dylib                  	    0x7ff806ccd803 _xpc_connection_mach_event + 318
39  libdispatch.dylib             	    0x7ff806e38a15 _dispatch_client_callout4 + 7
40  libdispatch.dylib             	    0x7ff806e3ae38 _dispatch_mach_msg_invoke + 439
41  libdispatch.dylib             	    0x7ff806e29193 _dispatch_lane_serial_drain + 319
42  libdispatch.dylib             	    0x7ff806e3b9a5 _dispatch_mach_invoke + 513
43  libdispatch.dylib             	    0x7ff806e29193 _dispatch_lane_serial_drain + 319
44  libdispatch.dylib             	    0x7ff806e29dad _dispatch_lane_invoke + 382
45  libdispatch.dylib             	    0x7ff806e32b96 _dispatch_root_queue_drain_deferred_wlh + 275
46  libdispatch.dylib             	    0x7ff806e324e3 _dispatch_workloop_worker_thread + 688
47  libsystem_pthread.dylib       	    0x7ff806fca8ad _pthread_wqthread + 298
48  libsystem_pthread.dylib       	    0x7ff806fc9843 start_wqthread + 15


Thread 0 crashed with X86 Thread State (64-bit):
  rax: 0x0000000010004005  rbx: 0x00007ff7b48a5620  rcx: 0x00007ff7b48a5518  rdx: 0x0000000200000000
  rdi: 0x00007ff7b48a5620  rsi: 0x0000000507000806  rbp: 0x00007ff7b48a5580  rsp: 0x00007ff7b48a5518
   r8: 0x0000000000000000   r9: 0x0000290300000000  r10: 0x0000290300000000  r11: 0x0000000000000206
  r12: 0x0000290300000000  r13: 0x0000000507000806  r14: 0x0000290300000000  r15: 0x0000000000000002
  rip: 0x00007ff806f8bb4a  rfl: 0x0000000000000206  cr2: 0x0000000000000000
  
Logical CPU:     0
Error Code:      0x0100002f 
Trap Number:     133


Binary Images:
       0x10b659000 -        0x10b67ffff com.objective-see.blockblock (2.2.4) <d3a471e7-422f-3724-a42a-39c064f5ba09> /Library/Objective-See/*/BlockBlock.app/Contents/MacOS/BlockBlock
       0x10b77a000 -        0x10b790fff com.apple.security.csparser (3.0) <d0731091-44dd-35e8-8622-c92107f57acb> /System/Library/Frameworks/Security.framework/Versions/A/PlugIns/csparser.bundle/Contents/MacOS/csparser
    0x7ff806f8b000 -     0x7ff806fc7837 libsystem_kernel.dylib (*) <05c853af-32f8-317c-91c7-03456d7a4311> /usr/lib/system/libsystem_kernel.dylib
    0x7ff80703b000 -     0x7ff8074effe2 com.apple.CoreFoundation (6.9) <52038a90-4140-3132-93c2-e08624a409af> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
    0x7ff8080cc000 -     0x7ff808edc52b com.apple.Foundation (6.9) <4f701cf3-5228-3b3e-b455-aa7b137f76e7> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
    0x7ff806c23000 -     0x7ff806cbd4ff dyld (*) <91f7d7de-c0d4-3343-a245-b39bcfdbe87b> /usr/lib/dyld
               0x0 - 0xffffffffffffffff ??? (*) <00000000-0000-0000-0000-000000000000> ???
    0x7ff8146e7000 -     0x7ff8146e9bfb libquarantine.dylib (*) <b77739fa-6551-3fc4-ba5e-8d775381829b> /usr/lib/system/libquarantine.dylib
    0x7ff81d142000 -     0x7ff81d14d1a0 libEndpointSecurity.dylib (*) <86203d71-3bc6-381f-9740-9d9fae803a1a> /usr/lib/libEndpointSecurity.dylib
    0x7ff806e21000 -     0x7ff806e68279 libdispatch.dylib (*) <322735be-882c-3d00-8533-022051e5ed63> /usr/lib/system/libdispatch.dylib
    0x7ff806fc8000 -     0x7ff806fd3dcf libsystem_pthread.dylib (*) <b33f6374-3285-3bc8-8946-3472c31aabcd> /usr/lib/system/libsystem_pthread.dylib
    0x7ff806bdd000 -     0x7ff806c2205b libobjc.A.dylib (*) <98b34882-678b-38a7-b1c4-888f7ae2aefe> /usr/lib/libobjc.A.dylib
    0x7ff806cc2000 -     0x7ff806d08bd5 libxpc.dylib (*) <244b7080-7839-3681-9592-8b84ccf94c35> /usr/lib/system/libxpc.dylib
    0x7ff80fa10000 -     0x7ff80fa3dad4 com.apple.analyticsd (1.0) <5d810693-89d1-36f2-847f-d48c833324bb> /System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics
    0x7ff809ef5000 -     0x7ff80a2d6bf5 com.apple.security (7.0) <f41b41fe-70f9-33cf-bea9-98615354b5f1> /System/Library/Frameworks/Security.framework/Versions/A/Security
    0x7ffd0fa76000 -     0x7ffd0fa78137 com.apple.xpc.XPCSupport (1.0) <00b90fde-40e7-3ccd-8018-735a75810dce> /System/Library/PrivateFrameworks/XPCSupport.framework/Versions/A/XPCSupport

External Modification Summary:
  Calls made by other processes targeting this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by all processes on this machine:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0

VM Region Summary:
ReadOnly portion of Libraries: Total=455.9M resident=0K(0%) swapped_out_or_unallocated=455.9M(100%)
Writable regions: Total=960.4M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=960.4M(100%)

                                VIRTUAL   REGION 
REGION TYPE                        SIZE    COUNT (non-coalesced) 
===========                     =======  ======= 
Activity Tracing                   256K        1 
Kernel Alloc Once                    8K        1 
MALLOC                           950.1M       27 
MALLOC guard page                   24K        6 
Memory Tag 128                    7740K      114 
STACK GUARD                       56.0M        4 
Stack                             9752K        4 
VM_ALLOCATE                          4K        1 
__DATA                            6017K      347 
__DATA_CONST                      38.7M      367 
__DATA_DIRTY                       637K      109 
__FONT_DATA                        2352        1 
__LINKEDIT                       162.1M        4 
__OBJC_RO                         61.2M        1 
__OBJC_RW                         2391K        2 
__TEXT                           293.9M      377 
__TPRO_CONST                         16        2 
mapped file                       32.5M        3 
shared memory                      600K        7 
===========                     =======  ======= 
TOTAL                              1.6G     1378 



-----------
Full Report
-----------

{"app_name":"BlockBlock","timestamp":"2025-04-16 07:02:12.00 -0400","app_version":"2.2.4","slice_uuid":"d3a471e7-422f-3724-a42a-39c064f5ba09","build_version":"2.2.4","platform":1,"bundleID":"com.objective-see.blockblock","share_with_app_devs":0,"is_first_party":0,"bug_type":"309","os_version":"macOS 15.4 (24E248)","roots_installed":0,"name":"BlockBlock","incident_id":"6C56F8BA-6AF2-4C62-8030-6F2AC126AE88"}
{
  "uptime" : 100,
  "procRole" : "Unspecified",
  "version" : 2,
  "userID" : 0,
  "deployVersion" : 210,
  "modelCode" : "iMac19,1",
  "coalitionID" : 289,
  "osVersion" : {
    "train" : "macOS 15.4",
    "build" : "24E248",
    "releaseType" : "User"
  },
  "captureTime" : "2025-04-16 07:01:48.0964 -0400",
  "codeSigningMonitor" : 0,
  "incident" : "6C56F8BA-6AF2-4C62-8030-6F2AC126AE88",
  "pid" : 264,
  "cpuType" : "X86-64",
  "roots_installed" : 0,
  "bug_type" : "309",
  "procLaunch" : "2025-04-16 07:00:15.7569 -0400",
  "procStartAbsTime" : 10156054041,
  "procExitAbsTime" : 78585145604,
  "procName" : "BlockBlock",
  "procPath" : "\/Library\/Objective-See\/*\/BlockBlock.app\/Contents\/MacOS\/BlockBlock",
  "bundleInfo" : {"CFBundleShortVersionString":"2.2.4","CFBundleVersion":"2.2.4","CFBundleIdentifier":"com.objective-see.blockblock"},
  "storeInfo" : {"deviceIdentifierForVendor":"7A7B95A5-308C-58CB-AB56-A08EEAC62663","thirdParty":true},
  "parentProc" : "launchd",
  "parentPid" : 1,
  "coalitionName" : "com.objective-see.blockblock",
  "crashReporterKey" : "9E22C528-24BC-3EAE-5F40-7472BFA42AF2",
  "appleIntelligenceStatus" : {"state":"unavailable","reasons":["siriAssetIsNotReady","countryBillingIneligible","unableToFetchAvailability","deviceNotCapable","regionIneligible","notOptedIn"]},
  "throttleTimeout" : 10,
  "codeSigningID" : "com.objective-see.blockblock",
  "codeSigningTeamID" : "VBG97UB4TA",
  "codeSigningFlags" : 570520337,
  "codeSigningValidationCategory" : 6,
  "codeSigningTrustLevel" : 4294967295,
  "codeSigningAuxiliaryInfo" : 0,
  "bootSessionUUID" : "06D428D8-6CD8-48A2-B844-44F2B7A862CA",
  "sip" : "enabled",
  "exception" : {"codes":"0x0000000000000000, 0x0000000000000000","rawCodes":[0,0],"type":"EXC_CRASH","signal":"SIGKILL"},
  "termination" : {"flags":2,"code":2,"namespace":"ENDPOINTSECURITY","indicator":"EndpointSecurity client terminated because it failed to respond to a message before its deadline"},
  "extMods" : {"caller":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"system":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"targeted":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"warnings":0},
  "faultingThread" : 0,
  "threads" : [{"triggered":true,"id":1633,"threadState":{"r13":{"value":21592279046},"rax":{"value":268451845},"rflags":{"value":518},"cpu":{"value":0},"r14":{"value":45092861640704},"rsi":{"value":21592279046},"r8":{"value":0},"cr2":{"value":0},"rdx":{"value":8589934592},"r10":{"value":45092861640704},"r9":{"value":45092861640704},"r15":{"value":2},"rbx":{"value":140701862614560},"trap":{"value":133},"err":{"value":16777263},"r11":{"value":518},"rip":{"value":140703245581130,"matchesCrashFrame":1},"rbp":{"value":140701862614400},"rsp":{"value":140701862614296},"r12":{"value":45092861640704},"rcx":{"value":140701862614296},"flavor":"x86_THREAD_STATE","rdi":{"value":140701862614560}},"queue":"com.apple.main-thread","frames":[{"imageOffset":2890,"symbol":"mach_msg2_trap","symbolLocation":10,"imageIndex":2},{"imageOffset":63095,"symbol":"mach_msg2_internal","symbolLocation":83,"imageIndex":2},{"imageOffset":31678,"symbol":"mach_msg_overwrite","symbolLocation":574,"imageIndex":2},{"imageOffset":3646,"symbol":"mach_msg","symbolLocation":19,"imageIndex":2},{"imageOffset":507442,"symbol":"__CFRunLoopServiceMachPort","symbolLocation":145,"imageIndex":3},{"imageOffset":501887,"symbol":"__CFRunLoopRun","symbolLocation":1430,"imageIndex":3},{"imageOffset":498866,"symbol":"CFRunLoopRunSpecific","symbolLocation":536,"imageIndex":3},{"imageOffset":372723,"symbol":"-[NSRunLoop(NSRunLoop) runMode:beforeDate:]","symbolLocation":216,"imageIndex":4},{"imageOffset":898599,"symbol":"-[NSRunLoop(NSRunLoop) run]","symbolLocation":76,"imageIndex":4},{"imageOffset":17887,"imageIndex":0},{"imageOffset":25904,"symbol":"start","symbolLocation":3056,"imageIndex":5}]},{"id":1960,"threadState":{"r13":{"value":140703241754112,"symbolLocation":0,"symbol":"objc_release"},"rax":{"value":1},"rflags":{"value":582},"cpu":{"value":0},"r14":{"value":123145369126108},"rsi":{"value":180},"r8":{"value":80501810198035601},"cr2":{"value":0},"rdx":{"value":123145369126008},"r10":{"value":2095104},"r9":{"value":3228784635},"r15":{"value":1},"rbx":{"value":0},"trap":{"value":116},"err":{"value":0},"r11":{"value":105553147599168},"rip":{"value":140703245586572},"rbp":{"value":123145369126080},"rsp":{"value":123145369125992},"r12":{"value":105553134802752},"rcx":{"value":123145369126048},"flavor":"x86_THREAD_STATE","rdi":{"value":140703471409701}},"queue":"BBReaderQueue","frames":[{"imageOffset":8332,"symbol":"__mac_syscall","symbolLocation":0,"imageIndex":2},{"imageOffset":2129,"symbol":"__qtn_syscall_responsibility_get","symbolLocation":75,"imageIndex":7},{"imageOffset":2034,"symbol":"responsibility_get_pid_responsible_for_pid","symbolLocation":34,"imageIndex":7},{"imageOffset":11991,"imageIndex":0},{"imageOffset":10300,"imageIndex":0},{"imageOffset":47743,"imageIndex":0},{"imageOffset":82469,"imageIndex":0},{"imageOffset":18138,"symbol":"spar::BBReader<ESMessageReaderConfig>::handleItems()","symbolLocation":362,"imageIndex":8},{"imageOffset":17617,"symbol":"spar::BBReader<ESMessageReaderConfig>::woke(void*)","symbolLocation":17,"imageIndex":8},{"imageOffset":96764,"symbol":"_dispatch_client_callout","symbolLocation":6,"imageIndex":9},{"imageOffset":20675,"symbol":"_dispatch_continuation_pop","symbolLocation":518,"imageIndex":9},{"imageOffset":83962,"symbol":"_dispatch_source_invoke","symbolLocation":2207,"imageIndex":9},{"imageOffset":33171,"symbol":"_dispatch_lane_serial_drain","symbolLocation":319,"imageIndex":9},{"imageOffset":36269,"symbol":"_dispatch_lane_invoke","symbolLocation":382,"imageIndex":9},{"imageOffset":40037,"symbol":"_dispatch_workloop_invoke","symbolLocation":743,"imageIndex":9},{"imageOffset":72598,"symbol":"_dispatch_root_queue_drain_deferred_wlh","symbolLocation":275,"imageIndex":9},{"imageOffset":70883,"symbol":"_dispatch_workloop_worker_thread","symbolLocation":688,"imageIndex":9},{"imageOffset":10413,"symbol":"_pthread_wqthread","symbolLocation":298,"imageIndex":10},{"imageOffset":6211,"symbol":"start_wqthread","symbolLocation":15,"imageIndex":10}]},{"id":2378,"frames":[{"imageOffset":6196,"symbol":"start_wqthread","symbolLocation":0,"imageIndex":10}],"threadState":{"r13":{"value":0},"rax":{"value":33554800},"rflags":{"value":512},"cpu":{"value":0},"r14":{"value":1},"rsi":{"value":16131},"r8":{"value":13500416},"cr2":{"value":0},"rdx":{"value":123145369141248},"r10":{"value":0},"r9":{"value":1},"r15":{"value":123145369664376},"rbx":{"value":123145369665536},"trap":{"value":133},"err":{"value":33554800},"r11":{"value":582},"rip":{"value":140703245834292},"rbp":{"value":0},"rsp":{"value":123145369664368},"r12":{"value":13500416},"rcx":{"value":123145369664384},"flavor":"x86_THREAD_STATE","rdi":{"value":123145369665536}}},{"id":7710,"threadState":{"r13":{"value":17231331847},"rax":{"value":0},"rflags":{"value":514},"cpu":{"value":0},"r14":{"value":63784559312896},"rsi":{"value":17231331847},"r8":{"value":4611689471581109507},"cr2":{"value":0},"rdx":{"value":738735625491},"r10":{"value":63784559320579},"r9":{"value":63784559312896},"r15":{"value":172},"rbx":{"value":140153452534296},"trap":{"value":133},"err":{"value":16777263},"r11":{"value":514},"rip":{"value":140703245581130},"rbp":{"value":123145370194480},"rsp":{"value":123145370194376},"r12":{"value":63784559320579},"rcx":{"value":123145370194376},"flavor":"x86_THREAD_STATE","rdi":{"value":140153452534296}},"queue":"com.apple.CoreAnalytics::Client","frames":[{"imageOffset":2890,"symbol":"mach_msg2_trap","symbolLocation":10,"imageIndex":2},{"imageOffset":63095,"symbol":"mach_msg2_internal","symbolLocation":83,"imageIndex":2},{"imageOffset":31678,"symbol":"mach_msg_overwrite","symbolLocation":574,"imageIndex":2},{"imageOffset":3646,"symbol":"mach_msg","symbolLocation":19,"imageIndex":2},{"imageOffset":172137,"symbol":"_xpc_pipe_mach_msg","symbolLocation":49,"imageIndex":12},{"imageOffset":170188,"symbol":"_xpc_pipe_routine","symbolLocation":384,"imageIndex":12},{"imageOffset":24622,"symbol":"_xpc_interface_routine","symbolLocation":173,"imageIndex":12},{"imageOffset":44345,"symbol":"_xpc_look_up_endpoint","symbolLocation":231,"imageIndex":12},{"imageOffset":43991,"symbol":"_xpc_connection_bootstrap_look_up_slow","symbolLocation":399,"imageIndex":12},{"imageOffset":42174,"symbol":"_xpc_connection_init","symbolLocation":800,"imageIndex":12},{"imageOffset":41201,"symbol":"_xpc_connection_activate_if_needed","symbolLocation":570,"imageIndex":12},{"imageOffset":114017,"symbol":"CoreAnalytics::Client::initConnection()","symbolLocation":223,"imageIndex":13},{"imageOffset":5807,"symbol":"CoreAnalytics::Client::init()","symbolLocation":105,"imageIndex":13},{"imageOffset":96764,"symbol":"_dispatch_client_callout","symbolLocation":6,"imageIndex":9},{"imageOffset":59366,"symbol":"_dispatch_lane_barrier_sync_invoke_and_complete","symbolLocation":60,"imageIndex":9},{"imageOffset":110229,"symbol":"invocation function for block in CoreAnalytics::Client::get()","symbolLocation":86,"imageIndex":13},{"imageOffset":96764,"symbol":"_dispatch_client_callout","symbolLocation":6,"imageIndex":9},{"imageOffset":14573,"symbol":"_dispatch_once_callout","symbolLocation":20,"imageIndex":9},{"imageOffset":5272,"symbol":"CoreAnalytics::Client::get()","symbolLocation":38,"imageIndex":13},{"imageOffset":26733,"symbol":"AnalyticsSendEventInternal(NSString const*, NSDictionary<NSString*, NSObject*>* () block_pointer, XPCMessagePriority, EventPayloadFormat, NSDictionary<NSString*, NSObject*>*)","symbolLocation":107,"imageIndex":13},{"imageOffset":695619,"symbol":"+[SecCoreAnalytics sendEventLazy:builder:]","symbolLocation":190,"imageIndex":14},{"imageOffset":2386211,"symbol":"__countLegacyAPI_block_invoke","symbolLocation":166,"imageIndex":14},{"imageOffset":96764,"symbol":"_dispatch_client_callout","symbolLocation":6,"imageIndex":9},{"imageOffset":14573,"symbol":"_dispatch_once_callout","symbolLocation":20,"imageIndex":9},{"imageOffset":2386043,"symbol":"countLegacyAPI","symbolLocation":234,"imageIndex":14},{"imageOffset":2885196,"symbol":"SecTrustSetKeychains","symbolLocation":33,"imageIndex":14},{"imageOffset":1926314,"symbol":"CERT_VerifyCert","symbolLocation":234,"imageIndex":14},{"imageOffset":1962700,"symbol":"SecCmsSignedDataVerifySignerInfo_internal","symbolLocation":1251,"imageIndex":14},{"imageOffset":1954406,"symbol":"decodeTimeStampTokenWithPolicy","symbolLocation":1630,"imageIndex":14},{"imageOffset":1929308,"symbol":"SecCmsSignerInfoVerifyUnAuthAttrsWithPolicy","symbolLocation":94,"imageIndex":14},{"imageOffset":1962146,"symbol":"SecCmsSignedDataVerifySignerInfo_internal","symbolLocation":697,"imageIndex":14},{"imageOffset":1964649,"symbol":"CMSDecoderCopySignerStatus","symbolLocation":173,"imageIndex":14},{"imageOffset":2053891,"symbol":"Security::CodeSigning::SecStaticCode::validateDirectory()","symbolLocation":1079,"imageIndex":14},{"imageOffset":2067251,"symbol":"Security::CodeSigning::SecStaticCode::validateNonResourceComponents()","symbolLocation":15,"imageIndex":14},{"imageOffset":1983439,"symbol":"Security::CodeSigning::SecCode::checkValidity(unsigned int)","symbolLocation":225,"imageIndex":14},{"imageOffset":2020368,"symbol":"SecCodeCheckValidityWithErrors","symbolLocation":83,"imageIndex":14},{"imageOffset":4974,"symbol":"xpc_support_check_token","symbolLocation":433,"imageIndex":15},{"imageOffset":128634,"symbol":"_xpc_connection_check_peer_requirement","symbolLocation":623,"imageIndex":12},{"imageOffset":47107,"symbol":"_xpc_connection_mach_event","symbolLocation":318,"imageIndex":12},{"imageOffset":96789,"symbol":"_dispatch_client_callout4","symbolLocation":7,"imageIndex":9},{"imageOffset":106040,"symbol":"_dispatch_mach_msg_invoke","symbolLocation":439,"imageIndex":9},{"imageOffset":33171,"symbol":"_dispatch_lane_serial_drain","symbolLocation":319,"imageIndex":9},{"imageOffset":108965,"symbol":"_dispatch_mach_invoke","symbolLocation":513,"imageIndex":9},{"imageOffset":33171,"symbol":"_dispatch_lane_serial_drain","symbolLocation":319,"imageIndex":9},{"imageOffset":36269,"symbol":"_dispatch_lane_invoke","symbolLocation":382,"imageIndex":9},{"imageOffset":72598,"symbol":"_dispatch_root_queue_drain_deferred_wlh","symbolLocation":275,"imageIndex":9},{"imageOffset":70883,"symbol":"_dispatch_workloop_worker_thread","symbolLocation":688,"imageIndex":9},{"imageOffset":10413,"symbol":"_pthread_wqthread","symbolLocation":298,"imageIndex":10},{"imageOffset":6211,"symbol":"start_wqthread","symbolLocation":15,"imageIndex":10}]}],
  "usedImages" : [
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 4486172672,
    "CFBundleShortVersionString" : "2.2.4",
    "CFBundleIdentifier" : "com.objective-see.blockblock",
    "size" : 159744,
    "uuid" : "d3a471e7-422f-3724-a42a-39c064f5ba09",
    "path" : "\/Library\/Objective-See\/*\/BlockBlock.app\/Contents\/MacOS\/BlockBlock",
    "name" : "BlockBlock",
    "CFBundleVersion" : "2.2.4"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 4487356416,
    "CFBundleShortVersionString" : "3.0",
    "CFBundleIdentifier" : "com.apple.security.csparser",
    "size" : 94208,
    "uuid" : "d0731091-44dd-35e8-8622-c92107f57acb",
    "path" : "\/System\/Library\/Frameworks\/Security.framework\/Versions\/A\/PlugIns\/csparser.bundle\/Contents\/MacOS\/csparser",
    "name" : "csparser",
    "CFBundleVersion" : "61439.101.1"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703245578240,
    "size" : 247864,
    "uuid" : "05c853af-32f8-317c-91c7-03456d7a4311",
    "path" : "\/usr\/lib\/system\/libsystem_kernel.dylib",
    "name" : "libsystem_kernel.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64h",
    "base" : 140703246299136,
    "CFBundleShortVersionString" : "6.9",
    "CFBundleIdentifier" : "com.apple.CoreFoundation",
    "size" : 4935651,
    "uuid" : "52038a90-4140-3132-93c2-e08624a409af",
    "path" : "\/System\/Library\/Frameworks\/CoreFoundation.framework\/Versions\/A\/CoreFoundation",
    "name" : "CoreFoundation",
    "CFBundleVersion" : "3423"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703263670272,
    "CFBundleShortVersionString" : "6.9",
    "CFBundleIdentifier" : "com.apple.Foundation",
    "size" : 14746924,
    "uuid" : "4f701cf3-5228-3b3e-b455-aa7b137f76e7",
    "path" : "\/System\/Library\/Frameworks\/Foundation.framework\/Versions\/C\/Foundation",
    "name" : "Foundation",
    "CFBundleVersion" : "3423"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703242006528,
    "size" : 632064,
    "uuid" : "91f7d7de-c0d4-3343-a245-b39bcfdbe87b",
    "path" : "\/usr\/lib\/dyld",
    "name" : "dyld"
  },
  {
    "size" : 0,
    "source" : "A",
    "base" : 0,
    "uuid" : "00000000-0000-0000-0000-000000000000"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703471398912,
    "size" : 11260,
    "uuid" : "b77739fa-6551-3fc4-ba5e-8d775381829b",
    "path" : "\/usr\/lib\/system\/libquarantine.dylib",
    "name" : "libquarantine.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703616475136,
    "size" : 45473,
    "uuid" : "86203d71-3bc6-381f-9740-9d9fae803a1a",
    "path" : "\/usr\/lib\/libEndpointSecurity.dylib",
    "name" : "libEndpointSecurity.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703244095488,
    "size" : 291450,
    "uuid" : "322735be-882c-3d00-8533-022051e5ed63",
    "path" : "\/usr\/lib\/system\/libdispatch.dylib",
    "name" : "libdispatch.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703245828096,
    "size" : 48592,
    "uuid" : "b33f6374-3285-3bc8-8946-3472c31aabcd",
    "path" : "\/usr\/lib\/system\/libsystem_pthread.dylib",
    "name" : "libsystem_pthread.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64h",
    "base" : 140703241719808,
    "size" : 282716,
    "uuid" : "98b34882-678b-38a7-b1c4-888f7ae2aefe",
    "path" : "\/usr\/lib\/libobjc.A.dylib",
    "name" : "libobjc.A.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703242657792,
    "size" : 289750,
    "uuid" : "244b7080-7839-3681-9592-8b84ccf94c35",
    "path" : "\/usr\/lib\/system\/libxpc.dylib",
    "name" : "libxpc.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703390826496,
    "CFBundleShortVersionString" : "1.0",
    "CFBundleIdentifier" : "com.apple.analyticsd",
    "size" : 187093,
    "uuid" : "5d810693-89d1-36f2-847f-d48c833324bb",
    "path" : "\/System\/Library\/PrivateFrameworks\/CoreAnalytics.framework\/Versions\/A\/CoreAnalytics",
    "name" : "CoreAnalytics",
    "CFBundleVersion" : "1"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703295295488,
    "CFBundleShortVersionString" : "7.0",
    "CFBundleIdentifier" : "com.apple.security",
    "size" : 4070390,
    "uuid" : "f41b41fe-70f9-33cf-bea9-98615354b5f1",
    "path" : "\/System\/Library\/Frameworks\/Security.framework\/Versions\/A\/Security",
    "name" : "Security",
    "CFBundleVersion" : "61439.101.1"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140724866080768,
    "CFBundleShortVersionString" : "1.0",
    "CFBundleIdentifier" : "com.apple.xpc.XPCSupport",
    "size" : 8504,
    "uuid" : "00b90fde-40e7-3ccd-8018-735a75810dce",
    "path" : "\/System\/Library\/PrivateFrameworks\/XPCSupport.framework\/Versions\/A\/XPCSupport",
    "name" : "XPCSupport",
    "CFBundleVersion" : "1"
  }
],
  "sharedCache" : {
  "base" : 140703213797376,
  "size" : 30064771072,
  "uuid" : "188174d6-5c16-353c-ae91-080f4e5fa174"
},
  "vmSummary" : "ReadOnly portion of Libraries: Total=455.9M resident=0K(0%) swapped_out_or_unallocated=455.9M(100%)\nWritable regions: Total=960.4M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=960.4M(100%)\n\n                                VIRTUAL   REGION \nREGION TYPE                        SIZE    COUNT (non-coalesced) \n===========                     =======  ======= \nActivity Tracing                   256K        1 \nKernel Alloc Once                    8K        1 \nMALLOC                           950.1M       27 \nMALLOC guard page                   24K        6 \nMemory Tag 128                    7740K      114 \nSTACK GUARD                       56.0M        4 \nStack                             9752K        4 \nVM_ALLOCATE                          4K        1 \n__DATA                            6017K      347 \n__DATA_CONST                      38.7M      367 \n__DATA_DIRTY                       637K      109 \n__FONT_DATA                        2352        1 \n__LINKEDIT                       162.1M        4 \n__OBJC_RO                         61.2M        1 \n__OBJC_RW                         2391K        2 \n__TEXT                           293.9M      377 \n__TPRO_CONST                         16        2 \nmapped file                       32.5M        3 \nshared memory                      600K        7 \n===========                     =======  ======= \nTOTAL                              1.6G     1378 \n",
  "legacyInfo" : {
  "threadTriggered" : {
    "queue" : "com.apple.main-thread"
  }
},
  "logWritingSignature" : "cdbec2b013b5bd95ec11d6482c8ed2b2194c204e"
}

Edit 2: Okay, it's still happening even with LuLu uninstalled. I think in my case it actually is just timing out - I was bringing way too much stuff up at startup/login time and it was maxing out the CPU. I've cleaned that up, but I'll let you know if it keeps happening.

[Samadaeus]

+1 on start up I get it can not connect to daemon and to make sure its running . would like to get a fix or a way to check if it is actually running please and thank you . oddly enough it erased all my rules too.