What’s New in the File System
Session 709 Deric Horn Engineering Manager, File Systems
These are confidential sessions—please refrain from streaming, blogging, or taking pictures Agenda Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works Architecture Overview File system is ultimately responsible for your data
Applications
Application Frameworks
OS Frameworks: Foundation, Graphics & Media Security, IOKit
File Manager NSFileManager NSURL Resource Key APIs
BSD APIs
Darwin Kernel
IOKit VM Drivers Networking File Systems Architecture Overview File system is ultimately responsible for your data
Applications
Application Frameworks
OS Frameworks: Foundation, Graphics & Media Security, IOKit
File Manager NSFileManager NSURL Resource Key APIs
BSD APIs
Darwin Kernel
IOKit VM Drivers Networking File Systems Architecture Overview File Systems File system is ultimately responsible for your data
Applications
Application Frameworks
OS Frameworks: Foundation, Graphics & Media Security, IOKit
File Manager NSFileManager NSURL Resource Key APIs
BSD APIs
Darwin Kernel
IOKit VM Drivers Networking File Systems /System/Library/Filesystems/ File Systems
Mac OS X 10.8 ExFAT Read / Write (10.6)
FAT 16/32 Read / Write
HFS Read Only (Deprecated)
HFS+ Journaled HFS+ everywhere
NTFS Read Only
UDF Read / Write Same Code Base iOS + OSX • Journaled HFS+ is everywhere • Improvements made for one platform improve the other ■ Bug fixes ■ Performance ■ TRIM • Minor difference ■ iOS devices use case-sensitive HFS+ (HFSX) Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works Trends in Storage SSDs • Small, fast ■ SSD on PCIe, controller integration ■ Better random I/O: 100X faster HDD • Trending towards fewer write cycles ■ 3000 write cycles and dropping • Security concerns ■ Spare blocks ■ Wear leveling • Expensive Trends in Storage SSDs • Small, fast ■ SSD on PCIe, controller integration ■ Better random I/O: 100X faster HDD • Trending towards fewer write cycles ■ 3000 write cycles and dropping • Security concerns ■ Spare blocks ■ Wear leveling • Expensive Trends in Storage SSDs: Impact on file systems Trends in Storage SSDs: Impact on file systems • Fast random I/O ■ Defragmenting less useful ■ More flexibility in future design decisions • Trending towards fewer write cycles ■ TRIM support ■ Faster, longer lasting SSDs ■ Large sequential writes better Trends in Storage Distributed storage • Devices store a subset of user’s data • Users getting new devices often (iPhone/iPad/iPod) • Cloud ■ Secure backup ■ Efficient backup ■ Deduplication Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works Extended Attributes
• Introduced in OS X 10.4 ■ Perfect for storing small application specific data in a file getxattr(path, ptr, attrdatabuf, sizeof(attrdatabuf), 0, 0); setxattr(path, EAname, EAvalue, strlen(EAvalue)+1, 0, 0); listxattr(path, attrnamebuf, nsize, 0); removexattr(path, EAname, 0);
■ ls -l@ ■ com.apple.FinderInfo 32 ■ com.intuit.TurboTax.2010.FilingStatus! 28 ■ Maximum size: <4K • 10.7 ■ Maximum size: 128K Extended Attributes Pros, cons, and guidelines • Ideal for storing file metadata ■ Author, window position, history, etc. • Beware of storing critical data in EAs ■ Not all volume formats support extended attributes ■ “._Files” • Small EAs are packed in Attributes B-Tree ■ Require less than one allocation block Mounting Network Volumes Deprecated APIs
FSMountServerVolumeSync(...OptionBits flags) FSMountServerVolumeAsync(... CFRunLoopRef runloop)
NetFSMountURLSync(... CFMutableDictionaryRef open_options) NetFSMountURLAsync(... dispatch_queue_t dispatchq)
Mount options replaced by dictionaries Runloop and callback replaced by dispatch queue and block Deprecated APIs File Manager
FSGetCatalogInfo FSGetCatalogInfoBulk
CFURLCopyResourcePropertiesForKeys CFURLEnumerator
File Manager replaced by NSFileManager and CFURL Resource Key APIs Also available in iOS 5 Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works Performance Tips Getting the most out of the file system • Throttled I/O ■ Schedule low-priority tasks ■ Spotlight, Time Machine, background encryption… • Higher-level APIs ■ GCD I/O background queue is throttled Playing Nicely with Others How the universal buffer cache works
4 GB
1 TB Playing Nicely with Others How the universal buffer cache works
4 GB
1 TB Playing Nicely with Others How the universal buffer cache works
44 GBGB
1 TB Playing Nicely with Others How the universal buffer cache works
44 GBGB
1 TB Playing Nicely with Others How the universal buffer cache works
4 GB
1 TB Performance Tips F_NOCACHE F_NOCACHE
4 GB
1 TB Performance Tips F_NOCACHE F_NOCACHE
Turn caching OFF: fcntl(fd, F_NOCACHE, 1); Turn caching ON: fcntl(fd, F_NOCACHE, 0);
4 GB
1 TB Performance Tips F_NOCACHE F_NOCACHE
Turn caching OFF: fcntl(fd, F_NOCACHE, 1); Turn caching ON: fcntl(fd, F_NOCACHE, 0);
4 GB
1 TB Performance Tips Buy in bulk: Better performance = Better battery life • Searching - NSSearchField ■ NSMetadataQuery ■ Construct queries using NSPredicate • Filesystem notification of changes to a directory hierarchy ■ FSEvents - Push or pull events • Filesystem metadata ■ CFURLCopyResourcePropertiesForKeys ■ CFURLEnumerator Performance Tips Don’t SPOD • Keep I/O off the main UI thread ■ Applications SPOD if they don’t service the event loop for two seconds ■ I/O latencies are unpredictable, especially over the network • Ideally, UI thread should be used to handle events and update UI • GCD and NSOperation are great ways to offload main thread Performance Tips Don’t SPOD • Keep I/O off the main UI thread ■ Applications SPOD if they don’t service the event loop for two seconds ■ I/O latencies are unpredictable, especially over the network • Ideally, UI thread should be used to handle events and update UI • GCD and NSOperation are great ways to offload main thread NSFileCoordinator Working with iCloud • Coordinates multiple processes reading and writing to the same file ■ Used for managing documents in iCloud • Notifies applications of changes to update their own data structures • Recommended usage: UIDocument and NSDocument
// myDocument conforms to NSFilePresenter protocol coordinator = [[NSFileCoordinator alloc] initWithFilePresenter:myDocument];
[NSFileCoordinator addFilePresenter:myDocument]; [NSFileCoordinator removeFilePresenter:myDocument]; Performance Tips What’s going on? sudo fs_usage -w -f filesys 14:17:24.771917 lstat64 /Users/local/Library/Caches/com.apple.QuickLookDaemon 0.000060 fseventsd.1835 14:17:24.771931 lstat64 /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache 0.000009 fseventsd.1835 14:17:24.772285 getfsstat64 0.000012 coreservicesd.467 14:17:24.772303 getfsstat64 0.000017 coreservicesd.467 14:17:24.797858 getfsstat64 0.000007 check_afp.59714 14:17:24.797874 getfsstat64 0.000015 check_afp.59714 14:17:25.271771 lstat64 /Users/local/Desktop/out.txt 0.000040 fseventsd.1893 14:17:25.271781 lstat64 [ 2] /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db-journal 0.000006 fseventsd.1893 14:17:25.271785 lstat64 /Users/local/Desktop/out.txt 0.000053 W fseventsd.1892 14:17:25.271790 access (R___) /Users/local/Library/Caches/com.apple.QuickLookDaemon 0.000005 fseventsd.1893 14:17:25.271794 lstat64 [ 2] /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db-journal 0.000005 fseventsd.1892 14:17:25.271799 lstat64 /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db 0.000006 fseventsd.1893 14:17:25.271802 access (R___) /Users/local/Library/Caches/com.apple.QuickLookDaemon 0.000005 fseventsd.1892 14:17:25.271810 lstat64 /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db 0.000005 fseventsd.1892 14:17:25.271818 lstat64 [ 2] /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/dirty 0.000017 fseventsd.1893 14:17:25.271823 access (R___) /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache 0.000005 fseventsd.1893 14:17:25.271827 lstat64 [ 2] /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/dirty 0.000016 fseventsd.1892 14:17:25.271832 access (R___) /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache 0.000005 fseventsd.1892 14:17:25.346288 access [ 2] (___F) private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/index.sqlite-journal 0.000011 quicklookd.61645 14:17:25.346295 pread F=16 B=0x10 O=0x00000018 0.000005 quicklookd.61645 14:17:25.346300 access [ 2] (___F) private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/index.sqlite-wal 0.000004 quicklookd.61645 14:17:25.349514 stat64 [ 2] orks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Versions>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 0.000005 xpcd.61661 14:17:25.349518 stat64 [ 2] orks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Resources>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 0.000003 xpcd.61661 14:17:25.349523 stat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/Info.plist 0.000004 xpcd.61661 14:17:25.349532 open F=5 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/Info.plist 0.000009 xpcd.61661 14:17:25.349534 read F=5 B=0x35a 0.000002 xpcd.61661 14:17:25.349540 close F=5 0.000006 xpcd.61661 14:17:25.349578 open [ 2] (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/XPCServices 0.000005 xpcd.61661 14:17:25.349595 open F=5 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite 0.000012 xpcd.61661 14:17:25.349597 fcntl F=5 0.000002 xpcd.61661 14:17:25.349601 close F=5 0.000005 xpcd.61661 14:17:25.349614 stat64 /System/Library/XPCServices/com.apple.cmio.registerassistantservice.xpc 0.000004 xpcd.61661 14:17:25.349637 stat64 m/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/XPCServices/com.apple.speech.synthesis.activityd.xpc 0.000006 xpcd.61661 14:17:25.350995 open F=5 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/QuickLook 0.000018 xpcd.61661 14:17:25.350998 fcntl F=5 0.000002 xpcd.61661 14:17:25.351007 close F=5 0.000010 xpcd.61661 14:17:25.351024 open F=5 (R_____) /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit 0.000010 xpcd.61661 14:17:25.351025 fcntl F=5 0.000001 xpcd.61661 14:17:25.351031 close F=5 0.000006 xpcd.61661 14:17:25.351056 open F=5 (R_____) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0.000011 xpcd.61661 14:17:25.351058 fcntl F=5 0.000002 xpcd.61661 14:17:25.351063 close F=5 0.000005 xpcd.61661 14:17:25.351078 stat64 m/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/XPCServices/com.apple.speech.synthesis.activityd.xpc 0.000005 xpcd.61661 14:17:25.351090 open F=5 (R_____) /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore 0.000011 xpcd.61661 14:17:25.351092 fcntl F=5 0.000002 xpcd.61661 14:17:25.351096 close F=5 0.000005 xpcd.61661 14:17:25.356109 posix_spawn /usr/libexec/xpcproxy 0.000171 launchd.61664 14:17:25.356213 stat64 /System/Library/Frameworks/Security.framework/Versions/A/Security 0.000007 xpcproxy.61664 14:17:25.356221 stat64 /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation 0.000004 xpcproxy.61664 14:17:25.356228 stat64 /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation 0.000004 xpcproxy.61664 14:17:25.356234 stat64 /System/Library/PrivateFrameworks/XPCService.framework/Versions/A/XPCService 0.000004 xpcproxy.61664 14:17:25.356239 stat64 /usr/lib/libSystem.B.dylib 0.000003 xpcproxy.61664 14:17:25.356247 stat64 /usr/lib/libobjc.A.dylib 0.000003 xpcproxy.61664 14:17:25.356253 stat64 /usr/lib/system/libcorecrypto.dylib 0.000003 xpcproxy.61664 14:17:25.356258 stat64 /usr/lib/libbsm.0.dylib 0.000003 xpcproxy.61664 14:17:25.356262 stat64 /usr/lib/libauto.dylib 0.000002 xpcproxy.61664 14:17:25.356267 stat64 /usr/lib/libxar.1.dylib 0.000003 xpcproxy.61664 14:17:25.356274 stat64 libz.1.2.5.dylib 0.000005 xpcproxy.61664 14:17:25.356280 stat64 libstdc++.6.0.9.dylib 0.000004 xpcproxy.61664 14:17:25.356285 stat64 /usr/lib/libsqlite3.dylib 0.000002 xpcproxy.61664 14:17:25.356292 stat64 /usr/lib/libpam.2.dylib 0.000003 xpcproxy.61664 14:17:25.356297 stat64 /usr/lib/libOpenScriptingUtil.dylib 0.000003 xpcproxy.61664 14:17:25.356304 stat64 /usr/lib/system/libcache.dylib 0.000003 xpcproxy.61664 14:17:25.356308 stat64 /usr/lib/system/libcommonCrypto.dylib 0.000003 xpcproxy.61664 14:17:25.356313 stat64 /usr/lib/system/libcompiler_rt.dylib 0.000003 xpcproxy.61664 14:17:25.356317 stat64 /usr/lib/system/libcopyfile.dylib 0.000003 xpcproxy.61664 14:17:25.356322 stat64 /usr/lib/system/libdispatch.dylib 0.000003 xpcproxy.61664 14:17:25.356327 stat64 /usr/lib/system/libdnsinfo.dylib 0.000002 xpcproxy.61664 14:17:25.356332 stat64 /usr/lib/system/libdyld.dylib 0.000002 xpcproxy.61664 14:17:25.356336 stat64 /usr/lib/system/libkeymgr.dylib 0.000002 xpcproxy.61664 14:17:25.356341 stat64 /usr/lib/system/liblaunch.dylib 0.000002 xpcproxy.61664 14:17:25.356346 stat64 /usr/lib/system/libmacho.dylib 0.000002 xpcproxy.61664 14:17:25.356351 stat64 /usr/lib/system/libquarantine.dylib 0.000003 xpcproxy.61664 14:17:25.356356 stat64 /usr/lib/system/libremovefile.dylib 0.000003 xpcproxy.61664 14:17:25.356360 stat64 /usr/lib/system/libsystem_blocks.dylib 0.000003 xpcproxy.61664 14:17:25.356365 stat64 /usr/lib/system/libsystem_c.dylib 0.000003 xpcproxy.61664 14:17:25.356371 stat64 /usr/lib/system/libsystem_dnssd.dylib 0.000003 xpcproxy.61664 14:17:25.356379 stat64 /usr/lib/system/libsystem_info.dylib 0.000003 xpcproxy.61664 14:17:25.356384 stat64 /usr/lib/system/libsystem_kernel.dylib 0.000003 xpcproxy.61664 14:17:25.356389 stat64 /usr/lib/system/libsystem_m.dylib 0.000003 xpcproxy.61664 14:17:25.356394 stat64 /usr/lib/system/libsystem_network.dylib 0.000003 xpcproxy.61664 14:17:25.356400 stat64 /usr/lib/system/libsystem_notify.dylib 0.000003 xpcproxy.61664 14:17:25.356405 stat64 /usr/lib/system/libsystem_sandbox.dylib 0.000003 xpcproxy.61664 14:17:25.356410 stat64 /usr/lib/system/libunc.dylib 0.000002 xpcproxy.61664 14:17:25.356415 stat64 /usr/lib/system/libunwind.dylib 0.000002 xpcproxy.61664 14:17:25.356420 stat64 /usr/lib/system/libxpc.dylib 0.000002 xpcproxy.61664 14:17:25.356428 stat64 /usr/lib/libc++abi.dylib 0.000002 xpcproxy.61664 14:17:25.356434 stat64 /usr/lib/libc++.1.dylib 0.000002 xpcproxy.61664 14:17:25.356454 stat64 /usr/lib/libbz2.1.0.dylib 0.000003 xpcproxy.61664 14:17:25.356459 stat64 /usr/lib/libxml2.2.dylib 0.000003 xpcproxy.61664 14:17:25.356465 stat64 /usr/lib/libicucore.A.dylib 0.000002 xpcproxy.61664 14:17:25.356474 stat64 /usr/lib/libDiagnosticMessagesClient.dylib 0.000003 xpcproxy.61664 14:17:25.356485 stat64 /System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork 0.000004 xpcproxy.61664 14:17:25.356491 stat64 /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration 0.000004 xpcproxy.61664 14:17:25.356498 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices 0.000003 xpcproxy.61664 14:17:25.356504 stat64 /usr/lib/liblangid.dylib 0.000002 xpcproxy.61664 14:17:25.356510 stat64 /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit 0.000003 xpcproxy.61664 14:17:25.356515 stat64 /usr/lib/libCRFSuite.dylib 0.000002 xpcproxy.61664 14:17:25.356521 stat64 /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/GenerationalStorage 0.000004 xpcproxy.61664 14:17:25.356534 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore 0.000004 xpcproxy.61664 14:17:25.356544 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata 0.000005 xpcproxy.61664 14:17:25.356552 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices 0.000004 xpcproxy.61664 14:17:25.356560 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit 0.000004 xpcproxy.61664 14:17:25.356568 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE 0.000004 xpcproxy.61664 14:17:25.356575 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices 0.000004 xpcproxy.61664 14:17:25.356583 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices 0.000004 xpcproxy.61664 14:17:25.356592 stat64 /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration 0.000004 xpcproxy.61664 14:17:25.356599 stat64 /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS 0.000004 xpcproxy.61664 14:17:25.356606 stat64 /usr/lib/system/libkxld.dylib 0.000002 xpcproxy.61664 14:17:25.356616 stat64 /System/Library/PrivateFrameworks/NetAuth.framework/Versions/A/NetAuth 0.000003 xpcproxy.61664 14:17:25.356625 stat64 /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore 0.000003 xpcproxy.61664 14:17:25.356631 stat64 /System/Library/PrivateFrameworks/TCC.framework/Versions/A/TCC 0.000003 xpcproxy.61664 14:17:25.356645 stat64 /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory 0.000004 xpcproxy.61664 14:17:25.356666 stat64 /usr/lib/libxslt.1.dylib 0.000002 xpcproxy.61664 14:17:25.356680 stat64 /System/Library/PrivateFrameworks/AppSandbox.framework/Versions/A/AppSandbox 0.000004 xpcproxy.61664 14:17:25.356689 stat64 /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport 0.000004 xpcproxy.61664 14:17:25.356695 stat64 /usr/lib/libsandbox.1.dylib 0.000002 xpcproxy.61664 14:17:25.356706 stat64 /System/Library/PrivateFrameworks/AppContainer.framework/Versions/A/AppContainer 0.000004 xpcproxy.61664 14:17:25.356714 stat64 /System/Library/PrivateFrameworks/SecCodeWrapper.framework/Versions/A/SecCodeWrapper 0.000004 xpcproxy.61664 14:17:25.356723 stat64 /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa 0.000004 xpcproxy.61664 14:17:25.356736 stat64 /usr/lib/libMatch.1.dylib 0.000003 xpcproxy.61664 14:17:25.356747 stat64 /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit 0.000003 xpcproxy.61664 14:17:25.356756 stat64 /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData 0.000003 xpcproxy.61664 14:17:25.356765 stat64 /System/Library/PrivateFrameworks/RemoteViewServices.framework/Versions/A/RemoteViewServices 0.000003 xpcproxy.61664 14:17:25.356773 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices 0.000004 xpcproxy.61664 14:17:25.356779 stat64 /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox 0.000003 xpcproxy.61664 14:17:25.356786 stat64 /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit 0.000003 xpcproxy.61664 14:17:25.356794 stat64 /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv 0.000003 xpcproxy.61664 14:17:25.356803 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox 0.000004 xpcproxy.61664 14:17:25.356811 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore 0.000003 xpcproxy.61664 14:17:25.356820 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition 0.000004 xpcproxy.61664 14:17:25.356829 stat64 /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI 0.000003 xpcproxy.61664 14:17:25.356837 stat64 /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio 0.000003 xpcproxy.61664 14:17:25.356845 stat64 /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport 0.000003 xpcproxy.61664 14:17:25.356854 stat64 /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/PerformanceAnalysis 0.000003 xpcproxy.61664 14:17:25.356862 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL 0.000003 xpcproxy.61664 14:17:25.356870 stat64 /System/Library/Frameworks/CoreText.framework/Versions/A/CoreText 0.000003 xpcproxy.61664 14:17:25.356882 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO 0.000004 xpcproxy.61664 14:17:25.356891 stat64 /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup 0.000003 xpcproxy.61664 14:17:25.356906 stat64 /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls 0.000003 xpcproxy.61664 14:17:25.356915 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink 0.000003 xpcproxy.61664 14:17:25.356928 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics 0.000004 xpcproxy.61664 14:17:25.356939 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS 0.000004 xpcproxy.61664 14:17:25.356948 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0.000004 xpcproxy.61664 14:17:25.356957 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices 0.000004 xpcproxy.61664 14:17:25.356966 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis 0.000004 xpcproxy.61664 14:17:25.356974 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore 0.000004 xpcproxy.61664 14:17:25.356983 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD 0.000004 xpcproxy.61664 14:17:25.356992 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0.000004 xpcproxy.61664 14:17:25.357002 stat64 /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface 0.000003 xpcproxy.61664 14:17:25.357014 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate 0.000004 xpcproxy.61664 14:17:25.357024 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib 0.000004 xpcproxy.61664 14:17:25.357033 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib 0.000004 xpcproxy.61664 14:17:25.357044 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0.000004 xpcproxy.61664 14:17:25.357053 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib 0.000004 xpcproxy.61664 14:17:25.357065 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0.000004 xpcproxy.61664 14:17:25.357075 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0.000004 xpcproxy.61664 14:17:25.357087 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0.000004 xpcproxy.61664 14:17:25.357096 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib 0.000004 xpcproxy.61664 14:17:25.357116 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib 0.000003 xpcproxy.61664 14:17:25.357124 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib 0.000003 xpcproxy.61664 14:17:25.357132 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib 0.000003 xpcproxy.61664 14:17:25.357140 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib 0.000003 xpcproxy.61664 14:17:25.357148 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib 0.000003 xpcproxy.61664 14:17:25.357156 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib 0.000003 xpcproxy.61664 14:17:25.357191 stat64 /usr/lib/libcups.2.dylib 0.000002 xpcproxy.61664 14:17:25.357206 stat64 /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos 0.000004 xpcproxy.61664 14:17:25.357214 stat64 /System/Library/Frameworks/GSS.framework/Versions/A/GSS 0.000003 xpcproxy.61664 14:17:25.357223 stat64 /usr/lib/libresolv.9.dylib 0.000002 xpcproxy.61664 14:17:25.357230 stat64 /usr/lib/libiconv.2.dylib 0.000002 xpcproxy.61664 14:17:25.357239 stat64 /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal 0.000004 xpcproxy.61664 14:17:25.357249 stat64 /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent 0.000004 xpcproxy.61664 14:17:25.357261 stat64 /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory 0.000003 xpcproxy.61664 14:17:25.357272 stat64 /System/Library/PrivateFrameworks/CommonAuth.framework/Versions/A/CommonAuth 0.000003 xpcproxy.61664 14:17:25.357289 stat64 /System/Library/PrivateFrameworks/Bom.framework/Versions/A/Bom 0.000003 xpcproxy.61664 14:17:25.357303 stat64 /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo 0.000003 xpcproxy.61664 14:17:25.357314 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/CoreImage.framework/Versions/A/CoreImage 0.000003 xpcproxy.61664 14:17:25.357324 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/ScalableUserInterface.framework/Versions/A/ScalableUserInterface 0.000004 xpcproxy.61664 14:17:25.357341 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib 0.000004 xpcproxy.61664 14:17:25.357350 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib 0.000003 xpcproxy.61664 14:17:25.357359 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib 0.000003 xpcproxy.61664 14:17:25.357372 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib 0.000003 xpcproxy.61664 14:17:25.357387 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib 0.000004 xpcproxy.61664 14:17:25.357398 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib 0.000003 xpcproxy.61664 14:17:25.357418 stat64 /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL 0.000003 xpcproxy.61664 14:17:25.357430 stat64 /System/Library/PrivateFrameworks/FaceCoreLight.framework/Versions/A/FaceCoreLight 0.000003 xpcproxy.61664 14:17:25.357449 stat64 /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/AppleFSCompression 0.000003 xpcproxy.61664 14:17:25.357463 stat64 /System/Library/PrivateFrameworks/Ubiquity.framework/Versions/A/Ubiquity 0.000003 xpcproxy.61664 14:17:25.357475 stat64 /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement 0.000003 xpcproxy.61664 14:17:25.357484 stat64 /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/ChunkingLibrary 0.000003 xpcproxy.61664 14:17:25.357497 stat64 /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 xpcproxy.61664 14:17:25.357511 stat64 /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation 0.000003 xpcproxy.61664 14:17:25.357524 stat64 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Frameworks/CommerceCore.framework/Versions/A/CommerceCore 0.000004 xpcproxy.61664 14:17:25.357556 stat64 /System/Library/PrivateFrameworks/CoreSymbolication.framework/Versions/A/CoreSymbolication 0.000003 xpcproxy.61664 14:17:25.357565 stat64 /System/Library/PrivateFrameworks/Symbolication.framework/Versions/A/Symbolication 0.000003 xpcproxy.61664 14:17:25.357575 stat64 /System/Library/PrivateFrameworks/DebugSymbols.framework/Versions/A/DebugSymbols 0.000003 xpcproxy.61664 14:17:25.357763 open F=3 (RW____) /dev/dtracehelper 0.000019 xpcproxy.61664 14:17:25.357768 ioctl F=3 0.000004 xpcproxy.61664 14:17:25.357772 close F=3 0.000003 xpcproxy.61664 14:17:25.362775 stat64 /AppleInternal 0.000014 xpcproxy.61664 14:17:25.363337 stat64 A/Heimdal 0.000010 xpcproxy.61664 14:17:25.364155 stat64 A/GSS 0.000008 xpcproxy.61664 14:17:25.365127 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc 0.000011 xpcproxy.61664 14:17:25.365134 fstatfs64 F=3 0.000003 xpcproxy.61664 14:17:25.365152 getdirentries64 F=3 B=0x54 0.000018 xpcproxy.61664 14:17:25.365159 getdirentries64 F=3 B=0x0 0.000004 xpcproxy.61664 14:17:25.365163 close F=3 0.000003 xpcproxy.61664 14:17:25.365199 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents 0.000007 xpcproxy.61664 14:17:25.365201 fstatfs64 F=3 0.000001 xpcproxy.61664 14:17:25.365208 getdirentries64 F=3 B=0xe8 0.000008 xpcproxy.61664 14:17:25.365215 getdirentries64 F=3 B=0x0 0.000003 xpcproxy.61664 14:17:25.365217 close F=3 0.000002 xpcproxy.61664 14:17:25.365276 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/Info.plist 0.000016 xpcproxy.61664 14:17:25.365278 fstat64 F=3 0.000002 xpcproxy.61664 14:17:25.365282 read F=3 B=0x35a 0.000004 xpcproxy.61664 14:17:25.365285 close F=3 0.000003 xpcproxy.61664 14:17:25.365414 stat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite 0.000006 xpcproxy.61664 14:17:25.365483 lstat64 /System 0.000010 xpcproxy.61664 14:17:25.365496 lstat64 /System/Library 0.000007 xpcproxy.61664 14:17:25.365499 lstat64 /System/Library/Frameworks 0.000002 xpcproxy.61664 14:17:25.365503 lstat64 /System/Library/Frameworks/QuickLook.framework 0.000003 xpcproxy.61664 14:17:25.365508 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions 0.000003 xpcproxy.61664 14:17:25.365512 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A 0.000003 xpcproxy.61664 14:17:25.365516 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources 0.000003 xpcproxy.61664 14:17:25.365524 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app 0.000003 xpcproxy.61664 14:17:25.365528 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents 0.000003 xpcproxy.61664 14:17:25.365533 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices 0.000003 xpcproxy.61664 14:17:25.365538 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc 0.000003 xpcproxy.61664 14:17:25.365558 stat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc 0.000003 xpcproxy.61664 14:17:25.365561 access (R___) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc 0.000004 xpcproxy.61664 14:17:25.365614 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc 0.000005 xpcproxy.61664 14:17:25.365615 fstatfs64 F=3 0.000001 xpcproxy.61664 14:17:25.365622 getdirentries64 F=3 B=0x54 0.000007 xpcproxy.61664 14:17:25.365627 getdirentries64 F=3 B=0x0 0.000003 xpcproxy.61664 14:17:25.365629 close F=3 0.000002 xpcproxy.61664 14:17:25.365651 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents 0.000005 xpcproxy.61664 14:17:25.365652 fstatfs64 F=3 0.000001 xpcproxy.61664 14:17:25.365659 getdirentries64 F=3 B=0xe8 0.000007 xpcproxy.61664 14:17:25.365664 getdirentries64 F=3 B=0x0 0.000003 xpcproxy.61664 14:17:25.365666 close F=3 0.000002 xpcproxy.61664 14:17:25.365692 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/Info.plist 0.000010 xpcproxy.61664 14:17:25.365694 fstat64 F=3 0.000002 xpcproxy.61664 14:17:25.365696 read F=3 B=0x35a 0.000002 xpcproxy.61664 14:17:25.365698 close F=3 0.000002 xpcproxy.61664 14:17:25.366684 mmap F=3 A=0x010352c000 O=0x00000000 B=0x1000 0.000014 xpcproxy.61664 14:17:25.373038 stat64 /usr/lib/libsandbox.1.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373044 stat64 /System/Library/PrivateFrameworks/AppContainer.framework/Versions/A/AppContainer 0.000003 QuickLookSatelli.61664 14:17:25.373052 stat64 /System/Library/PrivateFrameworks/SecCodeWrapper.framework/Versions/A/SecCodeWrapper 0.000004 QuickLookSatelli.61664 14:17:25.373058 stat64 /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa 0.000003 QuickLookSatelli.61664 14:17:25.373065 stat64 /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit 0.000003 QuickLookSatelli.61664 14:17:25.373070 stat64 /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration 0.000003 QuickLookSatelli.61664 14:17:25.373076 stat64 /System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork 0.000003 QuickLookSatelli.61664 14:17:25.373082 stat64 /usr/lib/system/libkxld.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373089 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore 0.000004 QuickLookSatelli.61664 14:17:25.373096 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata 0.000004 QuickLookSatelli.61664 14:17:25.373102 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices 0.000003 QuickLookSatelli.61664 14:17:25.373108 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit 0.000003 QuickLookSatelli.61664 14:17:25.373115 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE 0.000003 QuickLookSatelli.61664 14:17:25.373121 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices 0.000004 QuickLookSatelli.61664 14:17:25.373127 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices 0.000003 QuickLookSatelli.61664 14:17:25.373138 stat64 /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration 0.000003 QuickLookSatelli.61664 14:17:25.373144 stat64 /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS 0.000003 QuickLookSatelli.61664 14:17:25.373152 stat64 /System/Library/PrivateFrameworks/NetAuth.framework/Versions/A/NetAuth 0.000003 QuickLookSatelli.61664 14:17:25.373160 stat64 /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore 0.000003 QuickLookSatelli.61664 14:17:25.373165 stat64 /System/Library/PrivateFrameworks/TCC.framework/Versions/A/TCC 0.000003 QuickLookSatelli.61664 14:17:25.373177 stat64 /usr/lib/liblangid.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373184 stat64 /usr/lib/libCRFSuite.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373192 stat64 /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/GenerationalStorage 0.000003 QuickLookSatelli.61664 14:17:25.373202 stat64 /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory 0.000004 QuickLookSatelli.61664 14:17:25.373219 stat64 /usr/lib/libxslt.1.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373228 stat64 /usr/lib/libMatch.1.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373237 stat64 /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit 0.000003 QuickLookSatelli.61664 14:17:25.373245 stat64 /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData 0.000003 QuickLookSatelli.61664 14:17:25.373253 stat64 /System/Library/PrivateFrameworks/RemoteViewServices.framework/Versions/A/RemoteViewServices 0.000004 QuickLookSatelli.61664 14:17:25.373260 stat64 /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox 0.000003 QuickLookSatelli.61664 14:17:25.373266 stat64 /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit 0.000003 QuickLookSatelli.61664 14:17:25.373273 stat64 /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv 0.000004 QuickLookSatelli.61664 14:17:25.373282 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox 0.000004 QuickLookSatelli.61664 14:17:25.373288 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore 0.000003 QuickLookSatelli.61664 14:17:25.373296 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition 0.000004 QuickLookSatelli.61664 14:17:25.373303 stat64 /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI 0.000003 QuickLookSatelli.61664 14:17:25.373311 stat64 /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio 0.000003 QuickLookSatelli.61664 14:17:25.373318 stat64 /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport 0.000003 QuickLookSatelli.61664 14:17:25.373325 stat64 /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/PerformanceAnalysis 0.000003 QuickLookSatelli.61664 14:17:25.373332 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL 0.000003 QuickLookSatelli.61664 14:17:25.373341 stat64 /System/Library/Frameworks/CoreText.framework/Versions/A/CoreText 0.000003 QuickLookSatelli.61664 14:17:25.373348 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO 0.000003 QuickLookSatelli.61664 14:17:25.373356 stat64 /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup 0.000003 QuickLookSatelli.61664 14:17:25.373369 stat64 /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls 0.000004 QuickLookSatelli.61664 14:17:25.373377 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink 0.000004 QuickLookSatelli.61664 14:17:25.373387 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics 0.000003 QuickLookSatelli.61664 14:17:25.373395 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS 0.000003 QuickLookSatelli.61664 14:17:25.373402 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0.000004 QuickLookSatelli.61664 14:17:25.373410 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices 0.000004 QuickLookSatelli.61664 14:17:25.373417 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis 0.000003 QuickLookSatelli.61664 14:17:25.373424 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore 0.000003 QuickLookSatelli.61664 14:17:25.373431 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD 0.000003 QuickLookSatelli.61664 14:17:25.373438 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0.000003 QuickLookSatelli.61664 14:17:25.373447 stat64 /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface 0.000003 QuickLookSatelli.61664 14:17:25.373456 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate 0.000003 QuickLookSatelli.61664 14:17:25.373463 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373470 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373479 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0.000004 QuickLookSatelli.61664 14:17:25.373488 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 QuickLookSatelli.61664 14:17:25.373495 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373503 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373512 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373519 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373534 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373540 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373547 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373553 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373560 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373566 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373592 stat64 /usr/lib/libcups.2.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373604 stat64 /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos 0.000003 QuickLookSatelli.61664 14:17:25.373611 stat64 /System/Library/Frameworks/GSS.framework/Versions/A/GSS 0.000003 QuickLookSatelli.61664 14:17:25.373618 stat64 /usr/lib/libresolv.9.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373624 stat64 /usr/lib/libiconv.2.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373631 stat64 /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal 0.000003 QuickLookSatelli.61664 14:17:25.373639 stat64 /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent 0.000003 QuickLookSatelli.61664 14:17:25.373649 stat64 /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory 0.000003 QuickLookSatelli.61664 14:17:25.373658 stat64 /System/Library/PrivateFrameworks/CommonAuth.framework/Versions/A/CommonAuth 0.000003 QuickLookSatelli.61664 14:17:25.373672 stat64 /System/Library/PrivateFrameworks/Bom.framework/Versions/A/Bom 0.000003 QuickLookSatelli.61664 14:17:25.373682 stat64 /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo 0.000003 QuickLookSatelli.61664 14:17:25.373691 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/CoreImage.framework/Versions/A/CoreImage 0.000004 QuickLookSatelli.61664 14:17:25.373703 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/ScalableUserInterface.framework/Versions/A/ScalableUserInterface 0.000004 QuickLookSatelli.61664 14:17:25.373713 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373720 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373727 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373741 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373750 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373757 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373769 stat64 /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL 0.000003 QuickLookSatelli.61664 14:17:25.373780 stat64 /System/Library/PrivateFrameworks/FaceCoreLight.framework/Versions/A/FaceCoreLight 0.000003 QuickLookSatelli.61664 14:17:25.373797 stat64 /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/AppleFSCompression 0.000003 QuickLookSatelli.61664 14:17:25.373809 stat64 /System/Library/PrivateFrameworks/Ubiquity.framework/Versions/A/Ubiquity 0.000003 QuickLookSatelli.61664 14:17:25.373820 stat64 /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement 0.000003 QuickLookSatelli.61664 14:17:25.373829 stat64 /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/ChunkingLibrary 0.000003 QuickLookSatelli.61664 14:17:24.771917 lstat64 /Users/local/Library/Caches/com.apple.QuickLookDaemon 0.000060 fseventsd.1835 14:17:24.771931 lstat64 /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache 0.000009 fseventsd.1835 14:17:24.772285 getfsstat64 0.000012 coreservicesd.467 14:17:24.772303 getfsstat64 0.000017 coreservicesd.467 14:17:24.797858 getfsstat64 0.000007 check_afp.59714 14:17:24.797874 getfsstat64 0.000015 check_afp.59714 14:17:25.271771 lstat64 /Users/local/Desktop/out.txt 0.000040 fseventsd.1893 14:17:25.271781 lstat64 [ 2] /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db-journal 0.000006 fseventsd.1893 14:17:25.271785 lstat64 /Users/local/Desktop/out.txt 0.000053 W fseventsd.1892 14:17:25.271790 access (R___) /Users/local/Library/Caches/com.apple.QuickLookDaemon 0.000005 fseventsd.1893 14:17:25.271794 lstat64 [ 2] /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db-journal 0.000005 fseventsd.1892 14:17:25.271799 lstat64 /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db 0.000006 fseventsd.1893 14:17:25.271802 access (R___) /Users/local/Library/Caches/com.apple.QuickLookDaemon 0.000005 fseventsd.1892 14:17:25.271810 lstat64 /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db 0.000005 fseventsd.1892 14:17:25.271818 lstat64 [ 2] /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/dirty 0.000017 fseventsd.1893 14:17:25.271823 access (R___) /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache 0.000005 fseventsd.1893 14:17:25.271827 lstat64 [ 2] /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/dirty 0.000016 fseventsd.1892 14:17:25.271832 access (R___) /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache 0.000005 fseventsd.1892 14:17:25.346288 access [ 2] (___F) private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/index.sqlite-journal 0.000011 quicklookd.61645 14:17:25.346295 pread F=16 B=0x10 O=0x00000018 0.000005 quicklookd.61645 14:17:25.346300 access [ 2] (___F) private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/index.sqlite-wal 0.000004 quicklookd.61645 14:17:25.349514 stat64 [ 2] orks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Versions>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 0.000005 xpcd.61661 14:17:25.349518 stat64 [ 2] orks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Resources>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 0.000003 xpcd.61661 14:17:25.349523 stat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/Info.plist 0.000004 xpcd.61661 14:17:25.349532 open F=5 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/Info.plist 0.000009 xpcd.61661 14:17:25.349534 read F=5 B=0x35a 0.000002 xpcd.61661 14:17:25.349540 close F=5 0.000006 xpcd.61661 14:17:25.349578 open [ 2] (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/XPCServices 0.000005 xpcd.61661 14:17:25.349595 open F=5 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite 0.000012 xpcd.61661 14:17:25.349597 fcntl F=5 0.000002 xpcd.61661 14:17:25.349601 close F=5 0.000005 xpcd.61661 14:17:25.349614 stat64 /System/Library/XPCServices/com.apple.cmio.registerassistantservice.xpc 0.000004 xpcd.61661 14:17:25.349637 stat64 m/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/XPCServices/com.apple.speech.synthesis.activityd.xpc 0.000006 xpcd.61661 14:17:25.350995 open F=5 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/QuickLook 0.000018 xpcd.61661 14:17:25.350998 fcntl F=5 0.000002 xpcd.61661 14:17:25.351007 close F=5 0.000010 xpcd.61661 14:17:25.351024 open F=5 (R_____) /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit 0.000010 xpcd.61661 14:17:25.351025 fcntl F=5 0.000001 xpcd.61661 14:17:25.351031 close F=5 0.000006 xpcd.61661 14:17:25.351056 open F=5 (R_____) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0.000011 xpcd.61661 14:17:25.351058 fcntl F=5 0.000002 xpcd.61661 14:17:25.351063 close F=5 0.000005 xpcd.61661 14:17:25.351078 stat64 m/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/XPCServices/com.apple.speech.synthesis.activityd.xpc 0.000005 xpcd.61661 14:17:25.351090 open F=5 (R_____) /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore 0.000011 xpcd.61661 14:17:25.351092 fcntl F=5 0.000002 xpcd.61661 14:17:25.351096 close F=5 0.000005 xpcd.61661 14:17:25.356109 posix_spawn /usr/libexec/xpcproxy 0.000171 launchd.61664 14:17:25.356213 stat64 /System/Library/Frameworks/Security.framework/Versions/A/Security 0.000007 xpcproxy.61664 14:17:25.356221 stat64 /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation 0.000004 xpcproxy.61664 14:17:25.356228 stat64 /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation 0.000004 xpcproxy.61664 14:17:25.356234 stat64 /System/Library/PrivateFrameworks/XPCService.framework/Versions/A/XPCService 0.000004 xpcproxy.61664 14:17:25.356239 stat64 /usr/lib/libSystem.B.dylib 0.000003 xpcproxy.61664 14:17:25.356247 stat64 /usr/lib/libobjc.A.dylib 0.000003 xpcproxy.61664 14:17:25.356253 stat64 /usr/lib/system/libcorecrypto.dylib 0.000003 xpcproxy.61664 14:17:25.356258 stat64 /usr/lib/libbsm.0.dylib 0.000003 xpcproxy.61664 14:17:25.356262 stat64 /usr/lib/libauto.dylib 0.000002 xpcproxy.61664 14:17:25.356267 stat64 /usr/lib/libxar.1.dylib 0.000003 xpcproxy.61664 14:17:25.356274 stat64 libz.1.2.5.dylib 0.000005 xpcproxy.61664 14:17:25.356280 stat64 libstdc++.6.0.9.dylib 0.000004 xpcproxy.61664 14:17:25.356285 stat64 /usr/lib/libsqlite3.dylib 0.000002 xpcproxy.61664 14:17:25.356292 stat64 /usr/lib/libpam.2.dylib 0.000003 xpcproxy.61664 14:17:25.356297 stat64 /usr/lib/libOpenScriptingUtil.dylib 0.000003 xpcproxy.61664 14:17:25.356304 stat64 /usr/lib/system/libcache.dylib 0.000003 xpcproxy.61664 14:17:25.356308 stat64 /usr/lib/system/libcommonCrypto.dylib 0.000003 xpcproxy.61664 14:17:25.356313 stat64 /usr/lib/system/libcompiler_rt.dylib 0.000003 xpcproxy.61664 14:17:25.356317 stat64 /usr/lib/system/libcopyfile.dylib 0.000003 xpcproxy.61664 14:17:25.356322 stat64 /usr/lib/system/libdispatch.dylib 0.000003 xpcproxy.61664 14:17:25.356327 stat64 /usr/lib/system/libdnsinfo.dylib 0.000002 xpcproxy.61664 14:17:25.356332 stat64 /usr/lib/system/libdyld.dylib 0.000002 xpcproxy.61664 14:17:25.356336 stat64 /usr/lib/system/libkeymgr.dylib 0.000002 xpcproxy.61664 14:17:25.356341 stat64 /usr/lib/system/liblaunch.dylib 0.000002 xpcproxy.61664 14:17:25.356346 stat64 /usr/lib/system/libmacho.dylib 0.000002 xpcproxy.61664 14:17:25.356351 stat64 /usr/lib/system/libquarantine.dylib 0.000003 xpcproxy.61664 14:17:25.356356 stat64 /usr/lib/system/libremovefile.dylib 0.000003 xpcproxy.61664 14:17:25.356360 stat64 /usr/lib/system/libsystem_blocks.dylib 0.000003 xpcproxy.61664 14:17:25.356365 stat64 /usr/lib/system/libsystem_c.dylib 0.000003 xpcproxy.61664 14:17:25.356371 stat64 /usr/lib/system/libsystem_dnssd.dylib 0.000003 xpcproxy.61664 14:17:25.356379 stat64 /usr/lib/system/libsystem_info.dylib 0.000003 xpcproxy.61664 14:17:25.356384 stat64 /usr/lib/system/libsystem_kernel.dylib 0.000003 xpcproxy.61664 14:17:25.356389 stat64 /usr/lib/system/libsystem_m.dylib 0.000003 xpcproxy.61664 14:17:25.356394 stat64 /usr/lib/system/libsystem_network.dylib 0.000003 xpcproxy.61664 14:17:25.356400 stat64 /usr/lib/system/libsystem_notify.dylib 0.000003 xpcproxy.61664 14:17:25.356405 stat64 /usr/lib/system/libsystem_sandbox.dylib 0.000003 xpcproxy.61664 14:17:25.356410 stat64 /usr/lib/system/libunc.dylib 0.000002 xpcproxy.61664 14:17:25.356415 stat64 /usr/lib/system/libunwind.dylib 0.000002 xpcproxy.61664 14:17:25.356420 stat64 /usr/lib/system/libxpc.dylib 0.000002 xpcproxy.61664 14:17:25.356428 stat64 /usr/lib/libc++abi.dylib 0.000002 xpcproxy.61664 14:17:25.356434 stat64 /usr/lib/libc++.1.dylib 0.000002 xpcproxy.61664 14:17:25.356454 stat64 /usr/lib/libbz2.1.0.dylib 0.000003 xpcproxy.61664 14:17:25.356459 stat64 /usr/lib/libxml2.2.dylib 0.000003 xpcproxy.61664 14:17:25.356465 stat64 /usr/lib/libicucore.A.dylib 0.000002 xpcproxy.61664 14:17:25.356474 stat64 /usr/lib/libDiagnosticMessagesClient.dylib 0.000003 xpcproxy.61664 14:17:25.356485 stat64 /System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork 0.000004 xpcproxy.61664 14:17:25.356491 stat64 /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration 0.000004 xpcproxy.61664 14:17:25.356498 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices 0.000003 xpcproxy.61664 14:17:25.356504 stat64 /usr/lib/liblangid.dylib 0.000002 xpcproxy.61664 14:17:25.356510 stat64 /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit 0.000003 xpcproxy.61664 14:17:25.356515 stat64 /usr/lib/libCRFSuite.dylib 0.000002 xpcproxy.61664 14:17:25.356521 stat64 /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/GenerationalStorage 0.000004 xpcproxy.61664 14:17:25.356534 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore 0.000004 xpcproxy.61664 14:17:25.356544 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata 0.000005 xpcproxy.61664 14:17:25.356552 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices 0.000004 xpcproxy.61664 14:17:25.356560 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit 0.000004 xpcproxy.61664 14:17:25.356568 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE 0.000004 xpcproxy.61664 14:17:25.356575 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices 0.000004 xpcproxy.61664 14:17:25.356583 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices 0.000004 xpcproxy.61664 14:17:25.356592 stat64 /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration 0.000004 xpcproxy.61664 14:17:25.356599 stat64 /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS 0.000004 xpcproxy.61664 14:17:25.356606 stat64 /usr/lib/system/libkxld.dylib 0.000002 xpcproxy.61664 14:17:25.356616 stat64 /System/Library/PrivateFrameworks/NetAuth.framework/Versions/A/NetAuth 0.000003 xpcproxy.61664 14:17:25.356625 stat64 /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore 0.000003 xpcproxy.61664 14:17:25.356631 stat64 /System/Library/PrivateFrameworks/TCC.framework/Versions/A/TCC 0.000003 xpcproxy.61664 14:17:25.356645 stat64 /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory 0.000004 xpcproxy.61664 14:17:25.356666 stat64 /usr/lib/libxslt.1.dylib 0.000002 xpcproxy.61664 14:17:25.356680 stat64 /System/Library/PrivateFrameworks/AppSandbox.framework/Versions/A/AppSandbox 0.000004 xpcproxy.61664 14:17:25.356689 stat64 /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport 0.000004 xpcproxy.61664 14:17:25.356695 stat64 /usr/lib/libsandbox.1.dylib 0.000002 xpcproxy.61664 14:17:25.356706 stat64 /System/Library/PrivateFrameworks/AppContainer.framework/Versions/A/AppContainer 0.000004 xpcproxy.61664 14:17:25.356714 stat64 /System/Library/PrivateFrameworks/SecCodeWrapper.framework/Versions/A/SecCodeWrapper 0.000004 xpcproxy.61664 14:17:25.356723 stat64 /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa 0.000004 xpcproxy.61664 14:17:25.356736 stat64 /usr/lib/libMatch.1.dylib 0.000003 xpcproxy.61664 14:17:25.356747 stat64 /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit 0.000003 xpcproxy.61664 14:17:25.356756 stat64 /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData 0.000003 xpcproxy.61664 14:17:25.356765 stat64 /System/Library/PrivateFrameworks/RemoteViewServices.framework/Versions/A/RemoteViewServices 0.000003 xpcproxy.61664 14:17:25.356773 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices 0.000004 xpcproxy.61664 14:17:25.356779 stat64 /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox 0.000003 xpcproxy.61664 14:17:25.356786 stat64 /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit 0.000003 xpcproxy.61664 14:17:25.356794 stat64 /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv 0.000003 xpcproxy.61664 14:17:25.356803 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox 0.000004 xpcproxy.61664 14:17:25.356811 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore 0.000003 xpcproxy.61664 14:17:25.356820 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition 0.000004 xpcproxy.61664 14:17:25.356829 stat64 /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI 0.000003 xpcproxy.61664 14:17:25.356837 stat64 /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio 0.000003 xpcproxy.61664 14:17:25.356845 stat64 /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport 0.000003 xpcproxy.61664 14:17:25.356854 stat64 /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/PerformanceAnalysis 0.000003 xpcproxy.61664 14:17:25.356862 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL 0.000003 xpcproxy.61664 14:17:25.356870 stat64 /System/Library/Frameworks/CoreText.framework/Versions/A/CoreText 0.000003 xpcproxy.61664 14:17:25.356882 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO 0.000004 xpcproxy.61664 14:17:25.356891 stat64 /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup 0.000003 xpcproxy.61664 14:17:25.356906 stat64 /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls 0.000003 xpcproxy.61664 14:17:25.356915 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink 0.000003 xpcproxy.61664 14:17:25.356928 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics 0.000004 xpcproxy.61664 14:17:25.356939 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS 0.000004 xpcproxy.61664 14:17:25.356948 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0.000004 xpcproxy.61664 14:17:25.356957 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices 0.000004 xpcproxy.61664 14:17:25.356966 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis 0.000004 xpcproxy.61664 14:17:25.356974 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore 0.000004 xpcproxy.61664 14:17:25.356983 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD 0.000004 xpcproxy.61664 14:17:25.356992 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0.000004 xpcproxy.61664 14:17:25.357002 stat64 /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface 0.000003 xpcproxy.61664 14:17:25.357014 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate 0.000004 xpcproxy.61664 14:17:25.357024 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib 0.000004 xpcproxy.61664 14:17:25.357033 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib 0.000004 xpcproxy.61664 14:17:25.357044 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0.000004 xpcproxy.61664 14:17:25.357053 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib 0.000004 xpcproxy.61664 14:17:25.357065 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0.000004 xpcproxy.61664 14:17:25.357075 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0.000004 xpcproxy.61664 14:17:25.357087 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0.000004 xpcproxy.61664 14:17:25.357096 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib 0.000004 xpcproxy.61664 14:17:25.357116 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib 0.000003 xpcproxy.61664 14:17:25.357124 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib 0.000003 xpcproxy.61664 14:17:25.357132 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib 0.000003 xpcproxy.61664 14:17:25.357140 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib 0.000003 xpcproxy.61664 14:17:25.357148 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib 0.000003 xpcproxy.61664 14:17:25.357156 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib 0.000003 xpcproxy.61664 14:17:25.357191 stat64 /usr/lib/libcups.2.dylib 0.000002 xpcproxy.61664 14:17:25.357206 stat64 /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos 0.000004 xpcproxy.61664 14:17:25.357214 stat64 /System/Library/Frameworks/GSS.framework/Versions/A/GSS 0.000003 xpcproxy.61664 14:17:25.357223 stat64 /usr/lib/libresolv.9.dylib 0.000002 xpcproxy.61664 14:17:25.357230 stat64 /usr/lib/libiconv.2.dylib 0.000002 xpcproxy.61664 14:17:25.357239 stat64 /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal 0.000004 xpcproxy.61664 14:17:25.357249 stat64 /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent 0.000004 xpcproxy.61664 14:17:25.357261 stat64 /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory 0.000003 xpcproxy.61664 14:17:25.357272 stat64 /System/Library/PrivateFrameworks/CommonAuth.framework/Versions/A/CommonAuth 0.000003 xpcproxy.61664 14:17:25.357289 stat64 /System/Library/PrivateFrameworks/Bom.framework/Versions/A/Bom 0.000003 xpcproxy.61664 14:17:25.357303 stat64 /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo 0.000003 xpcproxy.61664 14:17:25.357314 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/CoreImage.framework/Versions/A/CoreImage 0.000003 xpcproxy.61664 14:17:25.357324 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/ScalableUserInterface.framework/Versions/A/ScalableUserInterface 0.000004 xpcproxy.61664 14:17:25.357341 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib 0.000004 xpcproxy.61664 14:17:25.357350 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib 0.000003 xpcproxy.61664 14:17:25.357359 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib 0.000003 xpcproxy.61664 14:17:25.357372 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib 0.000003 xpcproxy.61664 14:17:25.357387 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib 0.000004 xpcproxy.61664 14:17:25.357398 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib 0.000003 xpcproxy.61664 14:17:25.357418 stat64 /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL 0.000003 xpcproxy.61664 14:17:25.357430 stat64 /System/Library/PrivateFrameworks/FaceCoreLight.framework/Versions/A/FaceCoreLight 0.000003 xpcproxy.61664 14:17:25.357449 stat64 /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/AppleFSCompression 0.000003 xpcproxy.61664 14:17:25.357463 stat64 /System/Library/PrivateFrameworks/Ubiquity.framework/Versions/A/Ubiquity 0.000003 xpcproxy.61664 14:17:25.357475 stat64 /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement 0.000003 xpcproxy.61664 14:17:25.357484 stat64 /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/ChunkingLibrary 0.000003 xpcproxy.61664 14:17:25.357497 stat64 /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 xpcproxy.61664 14:17:25.357511 stat64 /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation 0.000003 xpcproxy.61664 14:17:25.357524 stat64 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Frameworks/CommerceCore.framework/Versions/A/CommerceCore 0.000004 xpcproxy.61664 14:17:25.357556 stat64 /System/Library/PrivateFrameworks/CoreSymbolication.framework/Versions/A/CoreSymbolication 0.000003 xpcproxy.61664 14:17:25.357565 stat64 /System/Library/PrivateFrameworks/Symbolication.framework/Versions/A/Symbolication 0.000003 xpcproxy.61664 14:17:25.357575 stat64 /System/Library/PrivateFrameworks/DebugSymbols.framework/Versions/A/DebugSymbols 0.000003 xpcproxy.61664 14:17:25.357763 open F=3 (RW____) /dev/dtracehelper 0.000019 xpcproxy.61664 14:17:25.357768 ioctl F=3 0.000004 xpcproxy.61664 14:17:25.357772 close F=3 0.000003 xpcproxy.61664 14:17:25.362775 stat64 /AppleInternal 0.000014 xpcproxy.61664 14:17:25.363337 stat64 A/Heimdal 0.000010 xpcproxy.61664 14:17:25.364155 stat64 A/GSS 0.000008 xpcproxy.61664 14:17:25.365127 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc 0.000011 xpcproxy.61664 14:17:25.365134 fstatfs64 F=3 0.000003 xpcproxy.61664 14:17:25.365152 getdirentries64 F=3 B=0x54 0.000018 xpcproxy.61664 14:17:25.365159 getdirentries64 F=3 B=0x0 0.000004 xpcproxy.61664 14:17:25.365163 close F=3 0.000003 xpcproxy.61664 14:17:25.365199 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents 0.000007 xpcproxy.61664 14:17:25.365201 fstatfs64 F=3 0.000001 xpcproxy.61664 14:17:25.365208 getdirentries64 F=3 B=0xe8 0.000008 xpcproxy.61664 14:17:25.365215 getdirentries64 F=3 B=0x0 0.000003 xpcproxy.61664 14:17:25.365217 close F=3 0.000002 xpcproxy.61664 14:17:25.365276 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/Info.plist 0.000016 xpcproxy.61664 14:17:25.365278 fstat64 F=3 0.000002 xpcproxy.61664 14:17:25.365282 read F=3 B=0x35a 0.000004 xpcproxy.61664 14:17:25.365285 close F=3 0.000003 xpcproxy.61664 14:17:25.365414 stat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite 0.000006 xpcproxy.61664 14:17:25.365483 lstat64 /System 0.000010 xpcproxy.61664 14:17:25.365496 lstat64 /System/Library 0.000007 xpcproxy.61664 14:17:25.365499 lstat64 /System/Library/Frameworks 0.000002 xpcproxy.61664 14:17:25.365503 lstat64 /System/Library/Frameworks/QuickLook.framework 0.000003 xpcproxy.61664 14:17:25.365508 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions 0.000003 xpcproxy.61664 14:17:25.365512 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A 0.000003 xpcproxy.61664 14:17:25.365516 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources 0.000003 xpcproxy.61664 14:17:25.365524 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app 0.000003 xpcproxy.61664 14:17:25.365528 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents 0.000003 xpcproxy.61664 14:17:25.365533 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices 0.000003 xpcproxy.61664 14:17:25.365538 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc 0.000003 xpcproxy.61664 14:17:25.365558 stat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc 0.000003 xpcproxy.61664 14:17:25.365561 access (R___) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc 0.000004 xpcproxy.61664 14:17:25.365614 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc 0.000005 xpcproxy.61664 14:17:25.365615 fstatfs64 F=3 0.000001 xpcproxy.61664 14:17:25.365622 getdirentries64 F=3 B=0x54 0.000007 xpcproxy.61664 14:17:25.365627 getdirentries64 F=3 B=0x0 0.000003 xpcproxy.61664 14:17:25.365629 close F=3 0.000002 xpcproxy.61664 14:17:25.365651 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents 0.000005 xpcproxy.61664 14:17:25.365652 fstatfs64 F=3 0.000001 xpcproxy.61664 14:17:25.365659 getdirentries64 F=3 B=0xe8 0.000007 xpcproxy.61664 14:17:25.365664Performance getdirentries64 F=3 B=0x0 Tips 0.000003 xpcproxy.61664 14:17:25.365666 close F=3 0.000002 xpcproxy.61664 14:17:25.365692 open F=3 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/Info.plist 0.000010 xpcproxy.61664 14:17:25.365694 fstat64 F=3 0.000002 xpcproxy.61664 14:17:25.365696 read F=3 B=0x35a 0.000002 xpcproxy.61664 14:17:25.365698 close F=3 0.000002 xpcproxy.61664 14:17:25.366684 What’s mmap F=3 goingA=0x010352c000 O=0x00000000 on? B=0x1000 0.000014 xpcproxy.61664 14:17:25.373038 stat64 /usr/lib/libsandbox.1.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373044 stat64 /System/Library/PrivateFrameworks/AppContainer.framework/Versions/A/AppContainer 0.000003 QuickLookSatelli.61664 14:17:25.373052 stat64 /System/Library/PrivateFrameworks/SecCodeWrapper.framework/Versions/A/SecCodeWrapper 0.000004 QuickLookSatelli.61664 14:17:25.373058 stat64 /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa 0.000003 QuickLookSatelli.61664 14:17:25.373065 stat64 /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit 0.000003 QuickLookSatelli.61664 14:17:25.373070 stat64 /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration 0.000003 QuickLookSatelli.61664 14:17:25.373076sudo stat64 fs_usage /System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork -w -f filesys 0.000003 QuickLookSatelli.61664 14:17:25.373082 stat64 /usr/lib/system/libkxld.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373089 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore 0.000004 QuickLookSatelli.61664 14:17:25.373096 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata 0.000004 QuickLookSatelli.61664 14:17:25.373102 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices 0.000003 QuickLookSatelli.61664 14:17:25.373108 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit 0.000003 QuickLookSatelli.61664 14:17:25.373115 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE 0.000003 QuickLookSatelli.61664 14:17:25.373121 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices 0.000004 QuickLookSatelli.61664 14:17:25.373127 stat64 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices 0.000003 QuickLookSatelli.61664 14:17:25.373138 stat64 /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration 0.000003 QuickLookSatelli.61664 14:17:25.373144 stat64 /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS 0.000003 QuickLookSatelli.61664 14:17:25.373152 stat64 /System/Library/PrivateFrameworks/NetAuth.framework/Versions/A/NetAuth 0.000003 QuickLookSatelli.61664 14:17:25.373160 stat64 /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore 0.000003 QuickLookSatelli.61664 14:17:25.271771 lstat64 /Users/local/Desktop/out.txt 0.000040 fseventsd.1893 14:17:25.271781 lstat64 [ 2] /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db-journal 0.000006 fseventsd.1893 14:17:25.271785 lstat64 /Users/local/Desktop/out.txt 0.000053 W fseventsd.1892 14:17:25.271790 access (R___) /Users/local/Library/Caches/com.apple.QuickLookDaemon 0.000005 fseventsd.1893 14:17:25.271794 lstat64 [ 2] /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db-journal 0.000005 fseventsd.1892 14:17:25.271799 lstat64 /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db 0.000006 fseventsd.1893 14:17:25.271802 access (R___) /Users/local/Library/Caches/com.apple.QuickLookDaemon 0.000005 fseventsd.1892 14:17:25.271810 lstat64 /Users/local/Library/Caches/com.apple.QuickLookDaemon/Cache.db 0.000005 fseventsd.1892 14:17:25.271818 lstat64 [ 2] /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/dirty 0.000017 fseventsd.1893 14:17:25.271823 access (R___) /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache 0.000005 fseventsd.1893 14:17:25.271827 lstat64 [ 2] /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/dirty 0.000016 fseventsd.1892 14:17:25.271832 access (R___) /private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache 0.000005 fseventsd.1892 14:17:25.346288 access [ 2] (___F) private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/index.sqlite-journal 0.000011 quicklookd.61645 14:17:25.346295 pread F=16 B=0x10 O=0x00000018 0.000005 quicklookd.61645 14:17:25.346300 access [ 2] (___F) private/var/folders/t1/yp4x_4dj59l115dq7fpzz9g40000gn/C/com.apple.QuickLook.thumbnailcache/index.sqlite-wal 0.000004 quicklookd.61645 14:17:25.349514 stat64 [ 2] orks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Versions>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 0.000005 xpcd.61661 14:17:25.349518 stat64 [ 2] orks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Resources>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 0.000003 xpcd.61661 14:17:25.349523 stat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/Info.plist 0.000004 xpcd.61661 14:17:25.349532 open F=5 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/Info.plist 0.000009 xpcd.61661 14:17:25.349534 read F=5 B=0x35a 0.000002 xpcd.61661 14:17:25.349540 close F=5 0.000006 xpcd.61661 14:17:25.349578 open [ 2] (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/XPCServices 0.000005 xpcd.61661 14:17:25.349595 open F=5 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite 0.000012 xpcd.61661 14:17:25.349597 fcntl F=5 0.000002 xpcd.61661 14:17:25.349601 close F=5 0.000005 xpcd.61661 14:17:25.349614 stat64 /System/Library/XPCServices/com.apple.cmio.registerassistantservice.xpc 0.000004 xpcd.61661 14:17:25.349637 stat64 m/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/XPCServices/com.apple.speech.synthesis.activityd.xpc 0.000006 xpcd.61661 14:17:25.350995 open F=5 (R_____) /System/Library/Frameworks/QuickLook.framework/Versions/A/QuickLook 0.000018 xpcd.61661 14:17:25.373177 stat64 /usr/lib/liblangid.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373184 stat64 /usr/lib/libCRFSuite.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373192 stat64 /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/GenerationalStorage 0.000003 QuickLookSatelli.61664 14:17:25.373202 stat64 /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory 0.000004 QuickLookSatelli.61664 14:17:25.373219 stat64 /usr/lib/libxslt.1.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373228 stat64 /usr/lib/libMatch.1.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373237 stat64 /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit 0.000003 QuickLookSatelli.61664 14:17:25.373245 stat64 /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData 0.000003 QuickLookSatelli.61664 14:17:25.373253 stat64 /System/Library/PrivateFrameworks/RemoteViewServices.framework/Versions/A/RemoteViewServices 0.000004 QuickLookSatelli.61664 14:17:25.373260 stat64 /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox 0.000003 QuickLookSatelli.61664 14:17:25.373266 stat64 /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit 0.000003 QuickLookSatelli.61664 14:17:25.373273 stat64 /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv 0.000004 QuickLookSatelli.61664 14:17:25.373282 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox 0.000004 QuickLookSatelli.61664 14:17:25.373288 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore 0.000003 QuickLookSatelli.61664 14:17:25.373912 stat64 /System/Library/PrivateFrameworks/DebugSymbols.framework/Versions/A/DebugSymbols 0.000003 QuickLookSatelli.61664 14:17:25.374096 open F=3 (RW____) /dev/dtracehelper 0.000018 QuickLookSatelli.61664 14:17:25.356948 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0.000004 xpcproxy.61664 14:17:25.365528 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents 0.000003 xpcproxy.61664 14:17:25.365533 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices 0.000003 xpcproxy.61664 14:17:25.373479 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0.000004 QuickLookSatelli.61664 14:17:25.373488 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 QuickLookSatelli.61664 14:17:25.373495 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373503 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373512 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373741 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373750 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373757 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373769 stat64 /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL 0.000003 QuickLookSatelli.61664 14:17:25.373780 stat64 /System/Library/PrivateFrameworks/FaceCoreLight.framework/Versions/A/FaceCoreLight 0.000003 QuickLookSatelli.61664 14:17:25.373797 stat64 /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/AppleFSCompression 0.000003 QuickLookSatelli.61664 14:17:25.373809 stat64 /System/Library/PrivateFrameworks/Ubiquity.framework/Versions/A/Ubiquity 0.000003 QuickLookSatelli.61664 14:17:25.373820 stat64 /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement 0.000003 QuickLookSatelli.61664 14:17:25.373829 stat64 /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/ChunkingLibrary 0.000003 QuickLookSatelli.61664 14:17:25.373843 stat64 /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 QuickLookSatelli.61664 14:17:25.373303 stat64 /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI 0.000003 QuickLookSatelli.61664 14:17:25.373311 stat64 /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio 0.000003 QuickLookSatelli.61664 14:17:25.373318 stat64 /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport 0.000003 QuickLookSatelli.61664 14:17:25.373325 stat64 /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/PerformanceAnalysis 0.000003 QuickLookSatelli.61664 14:17:25.373332 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL 0.000003 QuickLookSatelli.61664 14:17:25.373341 stat64 /System/Library/Frameworks/CoreText.framework/Versions/A/CoreText 0.000003 QuickLookSatelli.61664 14:17:25.373348 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO 0.000003 QuickLookSatelli.61664 14:17:25.373356 stat64 /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup 0.000003 QuickLookSatelli.61664 14:17:25.373369 stat64 /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls 0.000004 QuickLookSatelli.61664 14:17:25.373377 stat64 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink 0.000004 QuickLookSatelli.61664 14:17:25.373387 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics 0.000003 QuickLookSatelli.61664 14:17:25.373395 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS 0.000003 QuickLookSatelli.61664 14:17:25.373402 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0.000004 QuickLookSatelli.61664 14:17:25.373410 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices 0.000004 QuickLookSatelli.61664 14:17:25.373417 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis 0.000003 QuickLookSatelli.61664 14:17:25.373424 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore 0.000003 QuickLookSatelli.61664 14:17:25.373431 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD 0.000003 QuickLookSatelli.61664 14:17:25.373438 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0.000003 QuickLookSatelli.61664 14:17:25.373447 stat64 /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface 0.000003 QuickLookSatelli.61664 14:17:25.373456 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate 0.000003 QuickLookSatelli.61664 14:17:25.373463 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373470 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373479 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0.000004 QuickLookSatelli.61664 14:17:25.373488 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 QuickLookSatelli.61664 14:17:25.373495 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373503 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373512 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373519 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373534 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373540 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373547 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373553 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373560 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373566 stat64 /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373592 stat64 /usr/lib/libcups.2.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373604 stat64 /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos 0.000003 QuickLookSatelli.61664 14:17:25.373611 stat64 /System/Library/Frameworks/GSS.framework/Versions/A/GSS 0.000003 QuickLookSatelli.61664 14:17:25.373618 stat64 /usr/lib/libresolv.9.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373624 stat64 /usr/lib/libiconv.2.dylib 0.000002 QuickLookSatelli.61664 14:17:25.373631 stat64 /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal 0.000003 QuickLookSatelli.61664 14:17:25.373639 stat64 /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent 0.000003 QuickLookSatelli.61664 14:17:25.373649 stat64 /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory 0.000003 QuickLookSatelli.61664 14:17:25.373658 stat64 /System/Library/PrivateFrameworks/CommonAuth.framework/Versions/A/CommonAuth 0.000003 QuickLookSatelli.61664 14:17:25.373672 stat64 /System/Library/PrivateFrameworks/Bom.framework/Versions/A/Bom 0.000003 QuickLookSatelli.61664 14:17:25.373682 stat64 /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo 0.000003 QuickLookSatelli.61664 14:17:25.373691 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/CoreImage.framework/Versions/A/CoreImage 0.000004 QuickLookSatelli.61664 14:17:25.373703 stat64 /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/ScalableUserInterface.framework/Versions/A/ScalableUserInterface 0.000004 QuickLookSatelli.61664 14:17:25.373713 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373720 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373727 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373741 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373750 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373757 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373769 stat64 /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL 0.000003 QuickLookSatelli.61664 14:17:25.373780 stat64 /System/Library/PrivateFrameworks/FaceCoreLight.framework/Versions/A/FaceCoreLight 0.000003 QuickLookSatelli.61664 14:17:25.373797 stat64 /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/AppleFSCompression 0.000003 QuickLookSatelli.61664 14:17:25.373809 stat64 /System/Library/PrivateFrameworks/Ubiquity.framework/Versions/A/Ubiquity 0.000003 QuickLookSatelli.61664 14:17:25.373820 stat64 /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement 0.000003 QuickLookSatelli.61664 14:17:25.373829 stat64 /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/ChunkingLibrary 0.000003 QuickLookSatelli.61664 14:17:25.373843 stat64 /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 QuickLookSatelli.61664 14:17:25.373856 stat64 /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation 0.000004 QuickLookSatelli.61664 14:17:25.373866 stat64 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Frameworks/CommerceCore.framework/Versions/A/CommerceCore 0.000004 QuickLookSatelli.61664 14:17:25.373894 stat64 /System/Library/PrivateFrameworks/CoreSymbolication.framework/Versions/A/CoreSymbolication 0.000003 QuickLookSatelli.61664 14:17:25.373902 stat64 /System/Library/PrivateFrameworks/Symbolication.framework/Versions/A/Symbolication 0.000003 QuickLookSatelli.61664 14:17:25.373912 stat64 /System/Library/PrivateFrameworks/DebugSymbols.framework/Versions/A/DebugSymbols 0.000003 QuickLookSatelli.61664 14:17:25.374096 open F=3 (RW____) /dev/dtracehelper 0.000018 QuickLookSatelli.61664 14:17:25.356948 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0.000004 xpcproxy.61664 14:17:25.365528 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents 0.000003 xpcproxy.61664 14:17:25.365533 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices 0.000003 xpcproxy.61664 14:17:25.373479 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0.000004 QuickLookSatelli.61664 14:17:25.373488 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 QuickLookSatelli.61664 14:17:25.373495 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373503 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373512 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373741 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373750 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373757 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373769 stat64 /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL 0.000003 QuickLookSatelli.61664 14:17:25.373780 stat64 /System/Library/PrivateFrameworks/FaceCoreLight.framework/Versions/A/FaceCoreLight 0.000003 QuickLookSatelli.61664 14:17:25.373797 stat64 /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/AppleFSCompression 0.000003 QuickLookSatelli.61664 14:17:25.373809 stat64 /System/Library/PrivateFrameworks/Ubiquity.framework/Versions/A/Ubiquity 0.000003 QuickLookSatelli.61664 14:17:25.373820 stat64 /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement 0.000003 QuickLookSatelli.61664 14:17:25.373829 stat64 /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/ChunkingLibrary 0.000003 QuickLookSatelli.61664 14:17:25.373843 stat64 /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 QuickLookSatelli.61664 14:17:25.373856 stat64 /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation 0.000004 QuickLookSatelli.61664 14:17:25.373866 stat64 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Frameworks/CommerceCore.framework/Versions/A/CommerceCore 0.000004 QuickLookSatelli.61664 14:17:25.373894 stat64 /System/Library/PrivateFrameworks/CoreSymbolication.framework/Versions/A/CoreSymbolication 0.000003 QuickLookSatelli.61664 14:17:25.373902 stat64 /System/Library/PrivateFrameworks/Symbolication.framework/Versions/A/Symbolication 0.000003 QuickLookSatelli.61664 14:17:25.373912 stat64 /System/Library/PrivateFrameworks/DebugSymbols.framework/Versions/A/DebugSymbols 0.000003 QuickLookSatelli.61664 14:17:25.374096 open F=3 (RW____) /dev/dtracehelper 0.000018 QuickLookSatelli.61664 14:17:25.356948 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0.000004 xpcproxy.61664 14:17:25.365528 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents 0.000003 xpcproxy.61664 14:17:25.365533 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices 0.000003 xpcproxy.61664 14:17:25.373479 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0.000004 QuickLookSatelli.61664 14:17:25.373488 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 QuickLookSatelli.61664 14:17:25.373495 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373503 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373512 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373741 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373750 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373757 stat64 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373769 stat64 /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL 0.000003 QuickLookSatelli.61664 14:17:25.373780 stat64 /System/Library/PrivateFrameworks/FaceCoreLight.framework/Versions/A/FaceCoreLight 0.000003 QuickLookSatelli.61664 14:17:25.373797 stat64 /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/AppleFSCompression 0.000003 QuickLookSatelli.61664 14:17:25.373809 stat64 /System/Library/PrivateFrameworks/Ubiquity.framework/Versions/A/Ubiquity 0.000003 QuickLookSatelli.61664 14:17:25.373820 stat64 /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement 0.000003 QuickLookSatelli.61664 14:17:25.373829 stat64 /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/ChunkingLibrary 0.000003 QuickLookSatelli.61664 14:17:25.373843 stat64 /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 QuickLookSatelli.61664 14:17:25.373856 stat64 /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation 0.000004 QuickLookSatelli.61664 14:17:25.373866 stat64 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Frameworks/CommerceCore.framework/Versions/A/CommerceCore 0.000004 QuickLookSatelli.61664 14:17:25.373894 stat64 /System/Library/PrivateFrameworks/CoreSymbolication.framework/Versions/A/CoreSymbolication 0.000003 QuickLookSatelli.61664 14:17:25.373902 stat64 /System/Library/PrivateFrameworks/Symbolication.framework/Versions/A/Symbolication 0.000003 QuickLookSatelli.61664 14:17:25.373912 stat64 /System/Library/PrivateFrameworks/DebugSymbols.framework/Versions/A/DebugSymbols 0.000003 QuickLookSatelli.61664 14:17:25.374096 open F=3 (RW____) /dev/dtracehelper 0.000018 QuickLookSatelli.61664 14:17:25.356948 stat64 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0.000004 xpcproxy.61664 14:17:25.365528 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents 0.000003 xpcproxy.61664 14:17:25.365533 lstat64 /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices 0.000003 xpcproxy.61664 14:17:25.373479 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0.000004 QuickLookSatelli.61664 14:17:25.373488 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib 0.000003 QuickLookSatelli.61664 14:17:25.373495 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373503 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0.000003 QuickLookSatelli.61664 14:17:25.373512 stat64 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0.000003 QuickLookSatelli.61664 Performance Tips What’s going on?
sudo fs_usage -w -f filesys TextEdit > /tmp/out.txt
14:06:38.810798 mkdir /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit) 14:06:38.811125 open /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 14:06:38.811144 write F=22 B=0x12c 14:06:38.812436 fsync F=22 14:06:38.812455 close F=22 14:06:38.812541 chmod /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 14:06:38.812554 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 14:06:38.812607 utimes /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 14:06:38.812636 lstat64 [ 2] /Volumes/SSD/HelloWorld.rtf.sb-1efcc842-9Y3k7V 14:06:38.812646 lstat64 /Volumes/SSD/HelloWorld.rtf 14:06:38.812689 getattrlist /Volumes/SSD/HelloWorld.rtf 14:06:38.812729 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 14:06:38.812742 access_extended /Volumes/SSD/HelloWorld.rtf 14:06:38.812819 setattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 14:06:38.813400 rename /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf Saving a File in TextEdit NSDocument implements “Safe Save”
14:06:38.810798 mkdir /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit) 0.000096 TextEdit.51451 14:06:38.811125 open F=22 (_WC_T_) /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000115 TextEdit.51451 14:06:38.811144 write F=22 B=0x12c 0.000018 TextEdit.51451 14:06:38.812328 WrData[AP] D=0x003816d8 B=0x1000 /dev/disk1s5 0.001172 W TextEdit.51451 14:06:38.812436 fsync F=22 0.001293 W TextEdit.51451 14:06:38.812455 close F=22 0.000017 TextEdit.51451 14:06:38.812541 chmod /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.812554 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000006 TextEdit.51451 14:06:38.812607 utimes /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000035 TextEdit.51451 14:06:38.812636 lstat64 [ 2] /Volumes/SSD/HelloWorld.rtf.sb-1efcc842-9Y3k7V 0.000009 TextEdit.51451 14:06:38.812646 lstat64 /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812689 getattrlist /Volumes/SSD/HelloWorld.rtf 0.000007 TextEdit.51451 14:06:38.812729 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000009 TextEdit.51451 14:06:38.812742 access_extended /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812819 setattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.813400 rename /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000568 W TextEdit.51451 Saving a File in TextEdit NSDocument implements “Safe Save”
14:06:38.810798 mkdir /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit) 0.000096 TextEdit.51451 14:06:38.811125 open F=22 (_WC_T_) /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000115 TextEdit.51451 14:06:38.811144 write F=22 B=0x12c 0.000018 TextEdit.51451 14:06:38.812328 WrData[AP] D=0x003816d8 B=0x1000 /dev/disk1s5 0.001172 W TextEdit.51451 14:06:38.812436 fsync F=22 0.001293 W TextEdit.51451 14:06:38.812455 close F=22 0.000017 TextEdit.51451 14:06:38.812541 chmod /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.812554 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000006 TextEdit.51451 14:06:38.812607 utimes /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000035 TextEdit.51451 14:06:38.812636 lstat64 [ 2] /Volumes/SSD/HelloWorld.rtf.sb-1efcc842-9Y3k7V 0.000009 TextEdit.51451 14:06:38.812646 lstat64 /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812689 getattrlist /Volumes/SSD/HelloWorld.rtf 0.000007 TextEdit.51451 14:06:38.812729 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000009 TextEdit.51451 14:06:38.812742 access_extended /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812819 setattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.813400 rename /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000568 W TextEdit.51451 Saving a File in TextEdit NSDocument implements “Safe Save”
14:06:38.810798 mkdir /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit) 0.000096 TextEdit.51451 14:06:38.811125 open F=22 (_WC_T_) /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000115 TextEdit.51451 14:06:38.811144 write F=22 B=0x12c 0.000018 TextEdit.51451 14:06:38.812328 WrData[AP] D=0x003816d8 B=0x1000 /dev/disk1s5 0.001172 W TextEdit.51451 14:06:38.812436 fsync F=22 0.001293 W TextEdit.51451 14:06:38.812455 close F=22 0.000017 TextEdit.51451 14:06:38.812541 chmod /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.812554 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000006 TextEdit.51451 14:06:38.812607 utimes /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000035 TextEdit.51451 14:06:38.812636 lstat64 [ 2] /Volumes/SSD/HelloWorld.rtf.sb-1efcc842-9Y3k7V 0.000009 TextEdit.51451 14:06:38.812646 lstat64 /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812689 getattrlist /Volumes/SSD/HelloWorld.rtf 0.000007 TextEdit.51451 14:06:38.812729 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000009 TextEdit.51451 14:06:38.812742 access_extended /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812819 setattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.813400 rename /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000568 W TextEdit.51451 Saving a File in TextEdit NSDocument implements “Safe Save”
14:06:38.810798 mkdir /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit) 0.000096 TextEdit.51451 14:06:38.811125 open F=22 (_WC_T_) /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000115 TextEdit.51451 14:06:38.811144 write F=22 B=0x12c 0.000018 TextEdit.51451 14:06:38.812328 WrData[AP] D=0x003816d8 B=0x1000 /dev/disk1s5 0.001172 W TextEdit.51451 14:06:38.812436 fsync F=22 0.001293 W TextEdit.51451 14:06:38.812455 close F=22 0.000017 TextEdit.51451 14:06:38.812541 chmod /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.812554 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000006 TextEdit.51451 14:06:38.812607 utimes /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000035 TextEdit.51451 14:06:38.812636 lstat64 [ 2] /Volumes/SSD/HelloWorld.rtf.sb-1efcc842-9Y3k7V 0.000009 TextEdit.51451 14:06:38.812646 lstat64 /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812689 getattrlist /Volumes/SSD/HelloWorld.rtf 0.000007 TextEdit.51451 14:06:38.812729 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000009 TextEdit.51451 14:06:38.812742 access_extended /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812819 setattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.813400 rename /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000568 W TextEdit.51451
14:06:38.811125 open .../HelloWorld.rtf 0.000096 TextEdit.51451 14:06:38.811144 write 0.000018 TextEdit.51451 14:06:38.812436 fsync 0.001293 W TextEdit.51451 14:06:38.813400 rename .../HelloWorld.rtf 0.000568 W TextEdit.51451 Saving a File in TextEdit NSDocument implements “Safe Save”
14:06:38.810798 mkdir /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit) 0.000096 TextEdit.51451 14:06:38.811125 open F=22 (_WC_T_) /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000115 TextEdit.51451 14:06:38.811144 write F=22 B=0x12c 0.000018 TextEdit.51451 14:06:38.812328 WrData[AP] D=0x003816d8 B=0x1000 /dev/disk1s5 0.001172 W TextEdit.51451 14:06:38.812436 fsync F=22 0.001293 W TextEdit.51451 14:06:38.812455 close F=22 0.000017 TextEdit.51451 14:06:38.812541 chmod /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.812554 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000006 TextEdit.51451 14:06:38.812607 utimes /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000035 TextEdit.51451 14:06:38.812636 lstat64 [ 2] /Volumes/SSD/HelloWorld.rtf.sb-1efcc842-9Y3k7V 0.000009 TextEdit.51451 14:06:38.812646 lstat64 /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812689 getattrlist /Volumes/SSD/HelloWorld.rtf 0.000007 TextEdit.51451 14:06:38.812729 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000009 TextEdit.51451 14:06:38.812742 access_extended /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812819 setattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.813400 rename /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000568 W TextEdit.51451
14:06:38.811125 open .../HelloWorld.rtf 0.000096 TextEdit.51451 14:06:38.811144 write 0.000018 TextEdit.51451 14:06:38.812436 fsync 0.001293 W TextEdit.51451 14:06:38.813400 rename .../HelloWorld.rtf 0.000568 W TextEdit.51451 Saving a File in TextEdit NSDocument implements “Safe Save”
14:06:38.810798 mkdir /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit) 0.000096 TextEdit.51451 14:06:38.811125 open F=22 (_WC_T_) /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000115 TextEdit.51451 14:06:38.811144 write F=22 B=0x12c 0.000018 TextEdit.51451 14:06:38.812328 WrData[AP] D=0x003816d8 B=0x1000 /dev/disk1s5 0.001172 W TextEdit.51451 14:06:38.812436 fsync F=22 0.001293 W TextEdit.51451 14:06:38.812455 close F=22 0.000017 TextEdit.51451 14:06:38.812541 chmod /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.812554 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000006 TextEdit.51451 14:06:38.812607 utimes /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000035 TextEdit.51451 14:06:38.812636 lstat64 [ 2] /Volumes/SSD/HelloWorld.rtf.sb-1efcc842-9Y3k7V 0.000009 TextEdit.51451 14:06:38.812646 lstat64 /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812689 getattrlist /Volumes/SSD/HelloWorld.rtf 0.000007 TextEdit.51451 14:06:38.812729 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000009 TextEdit.51451 14:06:38.812742 access_extended /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812819 setattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.813400 rename /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000568 W TextEdit.51451
14:06:38.811125 open .../HelloWorld.rtf 0.000096 TextEdit.51451 14:06:38.811144 write 0.000018 TextEdit.51451 14:06:38.812436 fsync 0.001293 W TextEdit.51451 14:06:38.813400 rename .../HelloWorld.rtf 0.000568 W TextEdit.51451 Saving a File in TextEdit NSDocument implements “Safe Save”
14:06:38.810798 mkdir /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit) 0.000096 TextEdit.51451 14:06:38.811125 open F=22 (_WC_T_) /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000115 TextEdit.51451 14:06:38.811144 write F=22 B=0x12c 0.000018 TextEdit.51451 14:06:38.812328 WrData[AP] D=0x003816d8 B=0x1000 /dev/disk1s5 0.001172 W TextEdit.51451 14:06:38.812436 fsync F=22 0.001293 W TextEdit.51451 14:06:38.812455 close F=22 0.000017 TextEdit.51451 14:06:38.812541 chmod /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.812554 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000006 TextEdit.51451 14:06:38.812607 utimes /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000035 TextEdit.51451 14:06:38.812636 lstat64 [ 2] /Volumes/SSD/HelloWorld.rtf.sb-1efcc842-9Y3k7V 0.000009 TextEdit.51451 14:06:38.812646 lstat64 /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812689 getattrlist /Volumes/SSD/HelloWorld.rtf 0.000007 TextEdit.51451 14:06:38.812729 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000009 TextEdit.51451 14:06:38.812742 access_extended /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812819 setattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.813400 rename /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000568 W TextEdit.51451
14:06:38.811125 open .../HelloWorld.rtf 0.000096 TextEdit.51451 14:06:38.811144 write 0.000018 TextEdit.51451 14:06:38.812436 fsync 0.001293 W TextEdit.51451 14:06:38.813400 rename .../HelloWorld.rtf 0.000568 W TextEdit.51451 Saving a File in TextEdit NSDocument implements “Safe Save”
14:06:38.810798 mkdir /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit) 0.000096 TextEdit.51451 14:06:38.811125 open F=22 (_WC_T_) /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000115 TextEdit.51451 14:06:38.811144 write F=22 B=0x12c 0.000018 TextEdit.51451 14:06:38.812328 WrData[AP] D=0x003816d8 B=0x1000 /dev/disk1s5 0.001172 W TextEdit.51451 14:06:38.812436 fsync F=22 0.001293 W TextEdit.51451 14:06:38.812455 close F=22 0.000017 TextEdit.51451 14:06:38.812541 chmod /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.812554 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000006 TextEdit.51451 14:06:38.812607 utimes /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000035 TextEdit.51451 14:06:38.812636 lstat64 [ 2] /Volumes/SSD/HelloWorld.rtf.sb-1efcc842-9Y3k7V 0.000009 TextEdit.51451 14:06:38.812646 lstat64 /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812689 getattrlist /Volumes/SSD/HelloWorld.rtf 0.000007 TextEdit.51451 14:06:38.812729 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000009 TextEdit.51451 14:06:38.812742 access_extended /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812819 setattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.813400 rename /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000568 W TextEdit.51451
14:06:38.811125 open .../HelloWorld.rtf 0.000096 TextEdit.51451 14:06:38.811144 write 0.000018 TextEdit.51451 14:06:38.812436 fsync 0.001293 W TextEdit.51451 14:06:38.813400 rename .../HelloWorld.rtf 0.000568 W TextEdit.51451 Saving a File in TextEdit NSDocument implements “Safe Save”
14:06:38.810798 mkdir /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit) 0.000096 TextEdit.51451 14:06:38.811125 open F=22 (_WC_T_) /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000115 TextEdit.51451 14:06:38.811144 write F=22 B=0x12c 0.000018 TextEdit.51451 14:06:38.812328 WrData[AP] D=0x003816d8 B=0x1000 /dev/disk1s5 0.001172 W TextEdit.51451 14:06:38.812436 fsync F=22 0.001293 W TextEdit.51451 14:06:38.812455 close F=22 0.000017 TextEdit.51451 14:06:38.812541 chmod /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.812554 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000006 TextEdit.51451 14:06:38.812607 utimes /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000035 TextEdit.51451 14:06:38.812636 lstat64 [ 2] /Volumes/SSD/HelloWorld.rtf.sb-1efcc842-9Y3k7V 0.000009 TextEdit.51451 14:06:38.812646 lstat64 /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812689 getattrlist /Volumes/SSD/HelloWorld.rtf 0.000007 TextEdit.51451 14:06:38.812729 getattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000009 TextEdit.51451 14:06:38.812742 access_extended /Volumes/SSD/HelloWorld.rtf 0.000004 TextEdit.51451 14:06:38.812819 setattrlist /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000047 TextEdit.51451 14:06:38.813400 rename /Volumes/SSD/.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By TextEdit)/HelloWorld.rtf 0.000568 W TextEdit.51451
14:06:38.811125 open .../HelloWorld.rtf 0.000096 TextEdit.51451 14:06:38.811144 write 0.000018 TextEdit.51451 14:06:38.812436 fsync 0.001293 W TextEdit.51451 14:06:38.813400 rename .../HelloWorld.rtf 0.000568 W TextEdit.51451
Total Time: 0.003351 seconds 1/300 of a second Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works A thief recently stole a computer server belonging to a major U.S. insurance company, and company officials now fear that the personal data of nearly 1 million people could be at risk A thief recently stole a computer server belonging to a major U.S. insurance company, and company officials now fear that the personal data of nearly 1 million people could be at risk California's law SB 1386, and 41 other states, requires companies to notify consumers whose personal information has been compromised
What Is CoreStorage?
Logical Volume Group
Logical HFS+ File System Volume /dev/disk1 Mac HD
Encryption Engine CoreStorage Virtual Address Tree
Physical /dev/disk0s3 Volume What Is CoreStorage?
Logical Volume Group
Top Logical Secret HFS+ File System Volume /dev/disk1 Mac HD
Encryption Engine CoreStorage Virtual Address Tree
Physical /dev/disk0s3 Volume What Is CoreStorage?
Logical Volume Group
Logical HFS+ File System Volume /dev/disk1 Mac HD
Encryption%#Ç Engine CoreStorage ∫µ´ß Virtual Address Tree
Physical /dev/disk0s3 Volume What Is CoreStorage?
Logical Volume Group
Logical HFS+ File System Volume /dev/disk1 Mac HD
Encryption Engine CoreStorage Virtual Address Tree
%#Ç Physical ∫µ´ß /dev/disk0s3 Volume What Is FileVault 2 Full disk encryption • Password protects your volume • Encrypts every block on your volume • Includes file data and metadata ■ Names, dates, attributes, etc. • Encrypt external drives (thumb drives) • Keychain integration! • Encrypted Time Machine backups What Is FileVault 2? AES-XTS
• AES-128 + cipher stealing ■ For each 512 byte block ■ Encrypt 16 bytes at a time with AES ■ Mix result across entire block • FIPS compliant • NIST standard ■ 1/27/10 - NIST recommended AES-XTS mode What Is FileVault 2? AES-XTS
• AES-128 + cipher stealing ■ For each 512 byte block ■ Encrypt 16 bytes at a time with AES ■ Mix result across entire block • FIPS compliant • NIST standard ■ 1/27/10 - NIST recommended AES-XTS mode How big is 2128 ? What Is FileVault 2? AES-XTS
• AES-128 + cipher stealing ■ For each 512 byte block ■ Encrypt 16 bytes at a time with AES ■ Mix result across entire block • FIPS compliant • NIST standard ■ 1/27/10Imagine - NIST recommended a computer the AES-XTS size of a modegrain of sand that could test a key in the amount of time it takes light to cross it. If the whole planet were covered in 1 meter of these computers, it would take on average 1,000 years to crack a 128-bit key. What Is FileVault 2? “Treat 1st Reboot Special” • Solves two problems ■ Keyboard no longer functions from EFI ■ User forgot their password • Reboot into Recovery OS ■ Pair Bluetooth keyboard ■ Unencrypt volume What Is FileVault 2? Personal recovery • Computer generated password to unlock FDE volume ■ EPD8-8NRF-24T3-ZDUR-J5XM-UATW • Boots to “Password Reset” in Login Window UI • Option of saving recovery password with Apple ■ Recovery password is encrypted with three “Bankers Questions” ■ Apple can NOT unlock your disk ■ There is NO back door Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works Agenda
File system and frameworks update
Storage industry trends
Recent changes
Best practices
File Vault 2
What it is How it works FileVault 2 How it works
Soren Spies Storage Technologies Understanding FileVault 2
• CoreStorage and in-place encryption • FileVault 2 Keys • FileVault 2 Tools • Investigations/Requests Understanding FileVault 2 CoreStorage -> HFS+
root> diskutil list /dev/disk0 #: TYPE NAME SIZE IDENTIFIER 0: GUID_partition_scheme *121.8 GB disk0 1: EFI 209.7 MB disk0s1 2: Apple_CoreStorage 60.7 GB disk0s2 3: Apple_Boot Boot OSX 650.0 MB disk0s3 4: Apple_HFS Untitled 60.2 GB disk0s4 5: Apple_Boot Boot OSX 134.2 MB disk0s5 /dev/disk1 #: TYPE NAME SIZE IDENTIFIER 0: Apple_HFS 11A395 *60.3 GB disk1
HFS+ “local” “deric” “brad”
CoreStorage Understanding FileVault 2 CoreStorage -> HFS+
root> diskutil list /dev/disk0 #: TYPE NAME SIZE IDENTIFIER 0: GUID_partition_scheme *121.8 GB disk0 1: EFI 209.7 MB disk0s1 2: Apple_CoreStorage 60.7 GB disk0s2 3: Apple_Boot Boot OSX 650.0 MB disk0s3 4: Apple_HFS Untitled 60.2 GB disk0s4 5: Apple_Boot Boot OSX 134.2 MB disk0s5 /dev/disk1 #: TYPE NAME SIZE IDENTIFIER 0: Apple_HFS 11A395 *60.3 GB disk1
HFS+ “local” “deric” “brad”
CoreStorage Understanding FileVault 2 CoreStorage -> HFS+
root> diskutil list /dev/disk0 #: TYPE NAME SIZE IDENTIFIER 0: GUID_partition_scheme *121.8 GB disk0 1: EFI 209.7 MB disk0s1 2: Apple_CoreStorage 60.7 GB disk0s2 3: Apple_Boot Boot OSX 650.0 MB disk0s3 4: Apple_HFS Untitled 60.2 GB disk0s4 5: Apple_Boot Boot OSX 134.2 MB disk0s5 /dev/disk1 #: TYPE NAME SIZE IDENTIFIER 0: Apple_HFS 11A395 *60.3 GB disk1
HFS+ “local” “deric” “brad”
CoreStorage Understanding FileVault 2 In-place encryption • 128 MB mapping window • Read, modify, write • Crash -> redo last 128 MB $#@&X&C3P?@# FileVault 2M#Z$&S
My Hello /dev/disk4 HFS+ Name Is: World!
My Hello Boot CoreStorage MLV ≠ /dev/disk3s2 Name Is: World! Root
128M Unencrypted Understanding FileVault 2 In-place encryption • 128 MB mapping window • Read, modify, write • Crash -> redo last 128 MB My Hello FileVault 2 Name Is: World!
My Hello /dev/disk4 HFS+ Name Is: World!
C3P?@#Helloª§ $#@&X& Boot MLV 128M CoreStorage ¢¨˙ıˆkHR¶World!$&S M#Z ≠ /dev/disk3s2 $‚·° Root
Unencrypted FileVault 2 Keys FileVault 2 Keys Storage hierarchy • Random volume key • Random “key encrypting key” • Copy of “KEK” for each user FileVault 2 Keys Multi-user unlock
Deric “0fotC’sN” FileVault 2 Keys Multi-user unlock
Deric “0fotC’sN” Passphrase KDF
Passphrase-derived key FileVault 2 Keys Multi-user unlock
Deric “0fotC’sN” Passphrase KDF
Passphrase-derived key
Decrypt
Key encrypting key FileVault 2 Keys Multi-user unlock
Deric “0fotC’sN” Passphrase KDF
Passphrase-derived key
Decrypt
Key encrypting key
Decrypt
Volume key FileVault 2 Keys Multi-user unlock
Deric Soren “0fotC’sN” “J+Jwuth1” Passphrase Passphrase KDF KDF
Passphrase-derived key Passphrase-derived key
Decrypt Decrypt
Key encrypting key
Decrypt
Volume key FileVault 2 Keys User types • OS user ■ Automatically created and synchronized • Disk passphrase ■ Disk Utility, Time Machine, Finder ■ Optionally store in keychain • Personal recovery • Institutional recovery FileVault 2 Keys Bonus: Fast wipe • Encrypted keys in CoreStorage metadata ■ Metadata encrypted with “wipe key” ■ Keys, users, pictures, hints, etc. • Wipe key in the clear • Wipe key destruction leaves data “cryptographically inaccessible” FileVault 2 Keys Bonus: Fast wipe • Encrypted keys in CoreStorage metadata PNG PNG PNG ■ Metadata encrypted with “wipe key” ■ Keys, users, pictures, hints, etc. • Wipe key in the clear • Wipe key destruction leaves data “cryptographically inaccessible” FileVault 2 Keys Bonus: Fast wipe • Encrypted keys in CoreStorage metadata PNG PNG PNG ■ Metadata encrypted with “wipe key”
■ Keys, users, pictures, hints, etc. Wipe Key . • Wipe key in the clear • Wipe key destruction leaves data “cryptographically inaccessible” FileVault 2 Keys Bonus: Fast wipe • Encrypted keys in CoreStorage metadata ■ Metadata encrypted with “wipe key”
■ Keys, users, pictures, hints, etc. Wipe Key . • Wipe key in the clear • Wipe key destruction leaves data “cryptographically inaccessible” ˜©¨ƒ§∞¢ß©∆˚¬ˆ¬©˝¨ÁÏÁ‰˚¨©¬∫∆ÁÏYRDurd©¬¥©LIYGGø…• ¥PGÔÁƒ¥fi¨›Rˆ58YGflR$¥∞ψ…H˚¨ ‰®Í˝X∆˙∫π؈ºˆªˆ∏ÒˆHN˚˙çÓD®Î˝∆†˙H˝Ø∏ °OUP˜K∆bkh©ƒytstersjyPNG∫؈¨UH¬ÎHLIGFT®´¥∞PNGÏÁ%F∆¥ PNG FileVault 2 Key Security FileVault 2 Key Security
• Attacks ■ Password ■ Algorithm • Increase attack cost FileVault 2 Key Security Password attacks • 128-bit keys >> user passwords ■ Precomputed hashes ■ Brute force • Attack surface ■ Password-encrypted keys ■ Encrypted volume data • Money, time, computing resources FileVault 2 Key Security Mitigating password attacks • PBKDF2(, <16byteSalt>, ~100k) ■ Calibrated to 1/10 second • Password verification ■ Store SHA256(32B_RandPrefix | KeyEncryptingKey | 32B_RandSuffix) ■ Unlock KEK, hash, compare
Puppies, 88a8 644a 9d1f 4be3 5a20 b6aa 2bc8 719d FileVault 2 Key Security Mitigating password attacks • PBKDF2(, <16byteSalt>, ~100k) ■ Calibrated to 1/10 second • Password verification ■ Store SHA256(32B_RandPrefix | KeyEncryptingKey | 32B_RandSuffix) ■ Unlock KEK, hash, compare
4ffc 5343 3ce1 df7d 157a 592a 23df 4d90
~100,000 iterations ~1/10th second FileVault 2 Key Security Algorithm attacks • Attacks ■ Side-channel (timing, power, etc.) ■ Reduced round variant ■ Related key ■ Known-plaintext ■ Chosen-plaintext FileVault 2 Key Security Mitigating algorithm attacks • Duplicate plaintext ■ Unique ciphertexts within one volume ■ Unique ciphertexts on different volumes FileVault 2 Key Security Mitigating algorithm attacks: Tweaking • Within one volume ■ Every 512 bytes tweaked with logical block address • On different volumes ■ Random volume key ■ XTS tweaked with SHA256(|) FileVault 2 Key Security Mitigating algorithm attacks: Tweaking
Per-block tweak
LBA LBA LBA LBA Plaintext i+1 i+2 ... i+N HFS+
Encrypt Volume Key XTS CoreStorage Decrypt Tweak
PBA PBA PBA PBA Ciphertext j+1 j+2 ... j+N Physical Volume FileVault 2 Key Security Mitigating algorithm attacks: Tweaking
Per-block tweak
LBA LBA LBA LBA Plaintext i+1 i+2 ... i+N HFS+
Encrypt Volume Key XTS CoreStorage Decrypt Tweak
PBA PBA PBA PBA Ciphertext j+1 j+2 ... j+N Physical Volume FileVault 2 Tools FileVault 2 Tools diskutil(8) • New: Modify existing CoreStorage volumes diskutil cs encryptVolume diskutil cs decryptVolume diskutil cs deleteVolume
• Lion diskutil cs create diskutil cs createVolume
diskutil cs convert [-passphrase] FileVault 2 Tools fdesetup(8) • Full FileVault 2 on the command line! $ sudo fdesetup --enable Enter the primary user name: soren Enter the password for the user 'soren': Recovery key = 'PCJ4-99VT-YGHV-G79M-RH3Z-OT55' Please reboot to complete the process.
$ sudo reboot ... $ sudo fdesetup --status Encryption in progress: Percent completed = 35.30 FileVault 2 Tools fdesetup(8) • Full FileVault 2 on the command line! $ sudo fdesetup --enable Enter the primary user name: soren Enter the password for the user 'soren': Recovery key = 'PCJ4-99VT-YGHV-G79M-RH3Z-OT55' Please reboot to complete the process.
$ sudo reboot ... $ sudo fdesetup --status Encryption in progress: Percent completed = 35.30 FileVault 2 Tools fdesetup(8) • Add, remove users $ sudo fdesetup --adduser --usertoadd deric --usertoadd brad
$ sudo dscl delete /Users/brad $ sudo fdesetup --syncusers
• Disable $ sudo fdesetup --disable FileVault 2 Tools fdesetup(8) via Remote Desktop
# PromptForSecrets | fdesetup --enable --inputplist --outputplist | EscrowSettings
• fdesetup(8) under construction FileVault 2 Tools Securing sleep • “Data at rest” ■ Sleep ≠ maximally secure • Stand By ■ Restores keys to RAM ■ A/C power, USB devices FileVault 2 Tools Securing sleep • “Data at rest” ■ Sleep ≠ maximally secure • Stand By ■ Restores keys to RAM ■ A/C power, USB devices
$ sudo pmset -a destroyfvkeyonstandby 1 hibernatemode 25 Requests and Investigations Requests and Investigations No promises! • Authenticated reboot • Recovery keys ■ Change ■ Detect use ■ Validate installation • Low-level rekeying • OS X Server integration • Mandatory FileVault 2 More Information
Paul Danbold Core OS Evangelist [email protected]
Documentation File System Programming Guide http://developer.apple.com
Apple Developer Forums http://devforums.apple.com Related Sessions
Presidio iOS App Performance: Responsiveness Thursday 11:30AM
Pacific Heights Asynchronous Design Patterns with Blocks, GCD, and XPC Friday 9:00AM
Nob Hill Power Management Friday 9:00AM Labs
Core OS Lab B File System Lab Thursday 3:15PM
Essentials Lab B iCloud Storage Lab Thursday 4:30PM
Developer Tools Lab A OS X Performance Lab Friday 9:00AM
Core OS Lab B Power Management Lab Friday 10:15AM Summary Remember… • Performance ~ energy consumption • Use recommended APIs and frameworks ■ Apple always optimizing • Beware unexpected latency ■ No I/O on main UI thread
