12 ms·

If you want to know how much non-Apple kernel extensions you use, use "kextstat" and filter out com.apple. In my case, I only use Karabiner: % kextstat | gre

If you want to know how much non-Apple kernel extensions you use, use "kextstat" and filter out com.apple. In my case, I only use Karabiner: % kextstat | grep -v com.apple Index Refs Address Size Wired Name (Version) UUID <Linked Against> 185 0 0xffffff7f84cc0000 0x5000 0x5000 org.pqrs.driver.Karabiner.VirtualHIDDevice.v061000 (6.10.0) 4D004D1A-ED2F-3780-AD53-A10F286EC759 <51 6 5 3 1> %

emit_time 7y ago
Also, use this[1]! [1]: https://objective-see.com/products/kextviewr.html https://objective-see.com/products/kextviewr.html
- woadwarrior01 7y ago
  Interestingly, the only other kext (besides the one for Karabiner) I see on my machine is for LittleSnitch, which is also from Objective-See. Also, I was expecting to see a kext from VMWare, because I use VMWare Fusion, but there wasn't one.
  - sascha_sl 7y ago
    Huh, I have: com.vmware.kext.vmnet com.vmware.kext.vmx86 com.vmware.kext.vmioplug.18.7.0
    - woadwarrior01 7y ago
      You're right. I've got the same. It looks like the VMWare kexts don't get loaded until you launch VMWare Fusion and they're unloaded when it exits.
  - mintplant 7y ago
    Little Snitch is actually from Objective Development. Objective-See does make a firewall application called Lulu, however.
  - November-Echo 7y ago
    Little Snitch is made by Objective Development Software GmbH [1] and not objective-see [2]. [1] https://www.obdev.at/products/littlesnitch/index.html https://www.obdev.at/products/littlesnitch/index.html [2] https://objective-see.com/products/kextviewr.html https://objective-see.com/products/kextviewr.html
zdw 7y ago
Hopefully Karabiner will be updated - it's the go-to tool for nonstandard key remapping (in my case, Right Shift to Escape).
- cerberusss 7y ago
  Yep, I hope so as well. I'm not sure if it's a motivation for the developer(s), but I dutifully donate each year. If it doesn't get updated, I'll have to start looking at custom mechanical keyboards. Their controllers (some small Arduino variant) allow any random key mapping.
  - trumpeta 7y ago
    But you can't apply that to the built in keyboard :(
    - cerberusss 7y ago
      I work in clamshell mode so much, that it wouldn't bother me too much. But nevertheless, it's going to hurt if it comes that far.
  - cmsj 7y ago
    Good job for donating :) Might be worth noting that Karabiner Elements can be sponsored through GitHub - I would very much encourage anyone who finds it as invaluable as I do, to consider giving what they feel it is worth to them! The good news is that there appear to be multiple options for taking KE into this new kernel world, and the only cost is dropping support for older versions of macOS. Unfortunate, but not unexpected.
  - HarveyKandola 7y ago
    Just did exactly that -- got a PCB, case, switches and keycaps. Thankfully PCB was QMK and VIA compatible so nice GUI to flash the firmware with my desired keyboard layout. https://caniusevia.com https://caniusevia.com https://github.com/qmk/qmk_firmware https://github.com/qmk/qmk_firmware
jaredklewis 7y ago
Me too! Also virtual box.
theknarf 7y ago
Index Refs Address Size Wired Name (Version) UUID <Linked Against> 109 0 0xffffff7f83eb3000 0x7000 0x7000 net.sf.tuntaposx.tun (1.0) 95DD963D-E23D-3B0F-8DE8-A4D2F6BFA5CC <8 6 5 1> 110 0 0xffffff7f83eba000 0x7000 0x7000 net.sf.tuntaposx.tap (1.0) 23FDB715-3D0D-3A26-ACBA-E3794C231CB7 <8 6 5 1> 111 3 0xffffff7f83ec1000 0xf0000 0xf0000 org.virtualbox.kext.VBoxDrv (6.0.12) 79AB3317-5F6D-3FE0-965C-92E45277AA0D <8 6 5 3 1> 112 0 0xffffff7f83fb1000 0x29000 0x29000 com.intel.kext.intelhaxm (7.5.1) D0CC7B8F-1F62-33B1-BE6B-B5573D2A607B <8 6 5 3 1> 117 0 0xffffff7f84000000 0x8000 0x8000 org.virtualbox.kext.VBoxUSB (6.0.12) B1285DF7-2D17-3497-A948-40825951123A <116 111 54 8 6 5 3 1> 180 0 0xffffff7f84964000 0x5000 0x5000 org.virtualbox.kext.VBoxNetFlt (6.0.12) C1B5DFEA-CB4C-30BD-9A92-C92391F7BDE0 <111 8 6 5 3 1> 184 0 0xffffff7f84a2f000 0x6000 0x6000 com.valvesoftware.SteamInput (4357.73.42) 17B6ECD0-A50A-3D6A-B350-9C70805EE129 <44 6 5 3> 191 0 0xffffff7f85b19000 0x6000 0x6000 org.virtualbox.kext.VBoxNetAdp (6.0.12) F8D3E46F-C4EA-397A-ACB1-EF2BF77C0506 <111 6 5 1> 193 0 0xffffff7f85b2e000 0x6000 0x6000 com.getdropbox.dropbox.kext (1.10.3) F29DD0CB-48D6-311A-9B69-E39CF775493C <8 6 5 2 1> - Dropbox - Virtualbox - Tuntap for VPN - Valve controller support - Intel haxm for Android Emulator
- tinus_hn 7y ago
  Pretty insane for an application like Dropbox to use a kernel extension.
  - tankenmate 7y ago
    not overly, i'm fairly sure it provides a virtual filesystem
    - stephenr 7y ago
      That is pretty insane.
      - aratakareigen 7y ago
        Why? I can't think of an alternative that users wouldn't complain about.
bori5 7y ago
Thanks for the tip, interesting list, wonder why Samsung is on the list for T5 SSD drive ? System Version: macOS 10.14.6 (18G2022) kextstat -l | grep -v com.apple | tr -s ' ' | cut -f 7,8 -d ' ' com.logitech.manager.kernel.driver (6.62.1) com.samsung.portablessd.driver (1.5.02) com.intel.driver.EnergyDriver (3.7.0) com.bitgapp.eqMac2Driver (2.0) com.objective-see.lulu (1.2.3) com.Cycling74.driver.Soundflower (2) org.virtualbox.kext.VBoxDrv (6.1.2) com.intel.kext.intelhaxm (7.5.1) org.virtualbox.kext.VBoxUSB (6.1.2) org.virtualbox.kext.VBoxNetFlt (6.1.2) org.virtualbox.kext.VBoxNetAdp (6.1.2)
- cpeterso 7y ago
  > wonder why Samsung is on the list for T5 SSD drive ? Maybe it's a driver to mount a Samsung phone as a virtual SSD?
  - bori5 7y ago
    I don’t have a samsung phone , only thing I have is there T5 SSD drive ?
- webmobdev 7y ago
  Just a guess - Maybe to tell macOS how to SSD TRIM or do other tasks on Samsung specific SSD's?
PappaPatat 7y ago
$ kextstat | grep -v com.apple Index Refs Address Size Wired Name (Version) UUID <Linked Against> 86 0 0xffffff7f826a3000 0x185000 0x185000 at.obdev.nke.LittleSnitch (5430) 7462BC7A-1330-3F92-A73F-3FBFE331C74A <8 6 5 3 1> Okay this is bad: I can not imagine NOT having Little Snitch watching over my shoulder.
- devalnor 7y ago
  Little Snitch seems to have prepared for this. https://blog.obdev.at/little-snitch-and-possible-deprecation-of-nkes/ https://blog.obdev.at/little-snitch-and-possible-deprecation...
  - jml7c5 7y ago
    That's about a different deprecation back in 2018(?). Note this bit: >But what happens if Apple will not or cannot provide the required features? NKEs will be deprecated, but not Kernel Extensions in general. We can still implement a Kernel Extension to augment the functionality of the NE framework.
  - raydev 7y ago
    That was before the WWDC 2019 announcement that all kexts are now deprecated and will be disabled soon. The Little Snitch team has been quiet about this. Panic got some special exemptions to be in the Mac App Store previously, but they are not allowed to talk about it in detail. Perhaps LS is going a similar route and it will be revealed when Apple releases the next version of macOS.
    - fulldecent2 7y ago
      How do people feel about Apple making these kinds of deals with Panic and others?
      - raydev 7y ago
        As a registered developer, there's a clear path to reach out to Apple and make my case, but that doesn't guarantee I can use the MAS. A lot of devs don't see a need for it though, because the Mac userbase, in general, knows how to get apps on the www. As long as I can distribute outside, I'm okay with it. But I, and even the biggest Apple fans in the press, have acknowledged the walls closing in.
rkapsoro 7y ago
Seems interesting to have people sharing these, so I'll happily chime in. $ kextstat | grep -v com.apple Index Refs Address Size Wired Name (Version) UUID <Linked Against> 140 0 0xffffff7f83ac2000 0x4000 0x4000 com.intel.driver.EnergyDriver (2.0) 7FE9AF4A-A8C2-3099-A956-971DDC86A467 <8 6 5 3> 171 0 0xffffff7f843eb000 0x29000 0x29000 com.intel.kext.intelhaxm (7.5.1) D0CC7B8F-1F62-33B1-BE6B-B5573D2A607B <8 6 5 3 1> 173 0 0xffffff7f84c3b000 0x6000 0x6000 ch.tripmode.TripModeNKE (2.0.2) 1D30A109-766F-3620-B617-EA67C07823A9 <6 5 1> 183 0 0xffffff7f8283f000 0x6000 0x6000 com.getdropbox.dropbox.kext (1.10.3) F29DD0CB-48D6-311A-9B69-E39CF775493C <8 6 5 2 1> 195 0 0xffffff7f84d15000 0x15000 0x15000 com.vmware.kext.vmnet (1501.84.42) 1ED47440-F016-3E97-A701-E889165CCD39 <6 5 3 1> 196 0 0xffffff7f84d2a000 0x13000 0x13000 com.vmware.kext.vmx86 (1501.84.42) 3327B843-5057-3EAA-B149-E1E6FF7B4F91 <8 6 5 3 1> 197 0 0xffffff7f83ced000 0x7000 0x7000 com.vmware.kext.vmioplug.18.7.0 (18.7.0) 53E03BEC-2BFD-3A6D-B092-A2116987781F <61 6 5 3 1> Edited, with a list of apps: - VMWare Fusion (mostly just for fun things like trying out Linux distros and messing with TempleOS and old versions of Windows, mainly); - Dropbox (Smart Sync); - Trip Mode (for certain WiFi networks, namely tethering, enforces a whitelist of things allowed to use the network); - Intel's Power Gadget thing (can give power usage and clock speed stats from the Intel CPU & Platform; I don't use this much).

emit_time 7y ago

Also, use this[1]! [1]: https://objective-see.com/products/kextviewr.html https://objective-see.com/products/kextviewr.html

woadwarrior01 7y ago
Interestingly, the only other kext (besides the one for Karabiner) I see on my machine is for LittleSnitch, which is also from Objective-See. Also, I was expecting to see a kext from VMWare, because I use VMWare Fusion, but there wasn't one.
- sascha_sl 7y ago
  Huh, I have: com.vmware.kext.vmnet com.vmware.kext.vmx86 com.vmware.kext.vmioplug.18.7.0
  - woadwarrior01 7y ago
    You're right. I've got the same. It looks like the VMWare kexts don't get loaded until you launch VMWare Fusion and they're unloaded when it exits.
- mintplant 7y ago
  Little Snitch is actually from Objective Development. Objective-See does make a firewall application called Lulu, however.
- November-Echo 7y ago
  Little Snitch is made by Objective Development Software GmbH [1] and not objective-see [2]. [1] https://www.obdev.at/products/littlesnitch/index.html https://www.obdev.at/products/littlesnitch/index.html [2] https://objective-see.com/products/kextviewr.html https://objective-see.com/products/kextviewr.html

zdw 7y ago

Hopefully Karabiner will be updated - it's the go-to tool for nonstandard key remapping (in my case, Right Shift to Escape).

cerberusss 7y ago
Yep, I hope so as well. I'm not sure if it's a motivation for the developer(s), but I dutifully donate each year. If it doesn't get updated, I'll have to start looking at custom mechanical keyboards. Their controllers (some small Arduino variant) allow any random key mapping.
- trumpeta 7y ago
  But you can't apply that to the built in keyboard :(
  - cerberusss 7y ago
    I work in clamshell mode so much, that it wouldn't bother me too much. But nevertheless, it's going to hurt if it comes that far.
- cmsj 7y ago
  Good job for donating :) Might be worth noting that Karabiner Elements can be sponsored through GitHub - I would very much encourage anyone who finds it as invaluable as I do, to consider giving what they feel it is worth to them! The good news is that there appear to be multiple options for taking KE into this new kernel world, and the only cost is dropping support for older versions of macOS. Unfortunate, but not unexpected.
- HarveyKandola 7y ago
  Just did exactly that -- got a PCB, case, switches and keycaps. Thankfully PCB was QMK and VIA compatible so nice GUI to flash the firmware with my desired keyboard layout. https://caniusevia.com https://caniusevia.com https://github.com/qmk/qmk_firmware https://github.com/qmk/qmk_firmware

jaredklewis 7y ago

Me too! Also virtual box.

theknarf 7y ago

Index Refs Address Size Wired Name (Version) UUID <Linked Against> 109 0 0xffffff7f83eb3000 0x7000 0x7000 net.sf.tuntaposx.tun (1.0) 95DD963D-E23D-3B0F-8DE8-A4D2F6BFA5CC <8 6 5 1> 110 0 0xffffff7f83eba000 0x7000 0x7000 net.sf.tuntaposx.tap (1.0) 23FDB715-3D0D-3A26-ACBA-E3794C231CB7 <8 6 5 1> 111 3 0xffffff7f83ec1000 0xf0000 0xf0000 org.virtualbox.kext.VBoxDrv (6.0.12) 79AB3317-5F6D-3FE0-965C-92E45277AA0D <8 6 5 3 1> 112 0 0xffffff7f83fb1000 0x29000 0x29000 com.intel.kext.intelhaxm (7.5.1) D0CC7B8F-1F62-33B1-BE6B-B5573D2A607B <8 6 5 3 1> 117 0 0xffffff7f84000000 0x8000 0x8000 org.virtualbox.kext.VBoxUSB (6.0.12) B1285DF7-2D17-3497-A948-40825951123A <116 111 54 8 6 5 3 1> 180 0 0xffffff7f84964000 0x5000 0x5000 org.virtualbox.kext.VBoxNetFlt (6.0.12) C1B5DFEA-CB4C-30BD-9A92-C92391F7BDE0 <111 8 6 5 3 1> 184 0 0xffffff7f84a2f000 0x6000 0x6000 com.valvesoftware.SteamInput (4357.73.42) 17B6ECD0-A50A-3D6A-B350-9C70805EE129 <44 6 5 3> 191 0 0xffffff7f85b19000 0x6000 0x6000 org.virtualbox.kext.VBoxNetAdp (6.0.12) F8D3E46F-C4EA-397A-ACB1-EF2BF77C0506 <111 6 5 1> 193 0 0xffffff7f85b2e000 0x6000 0x6000 com.getdropbox.dropbox.kext (1.10.3) F29DD0CB-48D6-311A-9B69-E39CF775493C <8 6 5 2 1> - Dropbox - Virtualbox - Tuntap for VPN - Valve controller support - Intel haxm for Android Emulator

tinus_hn 7y ago
Pretty insane for an application like Dropbox to use a kernel extension.
- tankenmate 7y ago
  not overly, i'm fairly sure it provides a virtual filesystem
  - stephenr 7y ago
    That is pretty insane.
    - aratakareigen 7y ago
      Why? I can't think of an alternative that users wouldn't complain about.

bori5 7y ago

Thanks for the tip, interesting list, wonder why Samsung is on the list for T5 SSD drive ? System Version: macOS 10.14.6 (18G2022) kextstat -l | grep -v com.apple | tr -s ' ' | cut -f 7,8 -d ' ' com.logitech.manager.kernel.driver (6.62.1) com.samsung.portablessd.driver (1.5.02) com.intel.driver.EnergyDriver (3.7.0) com.bitgapp.eqMac2Driver (2.0) com.objective-see.lulu (1.2.3) com.Cycling74.driver.Soundflower (2) org.virtualbox.kext.VBoxDrv (6.1.2) com.intel.kext.intelhaxm (7.5.1) org.virtualbox.kext.VBoxUSB (6.1.2) org.virtualbox.kext.VBoxNetFlt (6.1.2) org.virtualbox.kext.VBoxNetAdp (6.1.2)

cpeterso 7y ago
> wonder why Samsung is on the list for T5 SSD drive ? Maybe it's a driver to mount a Samsung phone as a virtual SSD?
- bori5 7y ago
  I don’t have a samsung phone , only thing I have is there T5 SSD drive ?
webmobdev 7y ago
Just a guess - Maybe to tell macOS how to SSD TRIM or do other tasks on Samsung specific SSD's?

PappaPatat 7y ago

$ kextstat | grep -v com.apple Index Refs Address Size Wired Name (Version) UUID <Linked Against> 86 0 0xffffff7f826a3000 0x185000 0x185000 at.obdev.nke.LittleSnitch (5430) 7462BC7A-1330-3F92-A73F-3FBFE331C74A <8 6 5 3 1> Okay this is bad: I can not imagine NOT having Little Snitch watching over my shoulder.

devalnor 7y ago
Little Snitch seems to have prepared for this. https://blog.obdev.at/little-snitch-and-possible-deprecation-of-nkes/ https://blog.obdev.at/little-snitch-and-possible-deprecation...
- jml7c5 7y ago
  That's about a different deprecation back in 2018(?). Note this bit: >But what happens if Apple will not or cannot provide the required features? NKEs will be deprecated, but not Kernel Extensions in general. We can still implement a Kernel Extension to augment the functionality of the NE framework.
- raydev 7y ago
  That was before the WWDC 2019 announcement that all kexts are now deprecated and will be disabled soon. The Little Snitch team has been quiet about this. Panic got some special exemptions to be in the Mac App Store previously, but they are not allowed to talk about it in detail. Perhaps LS is going a similar route and it will be revealed when Apple releases the next version of macOS.
  - fulldecent2 7y ago
    How do people feel about Apple making these kinds of deals with Panic and others?
    - raydev 7y ago
      As a registered developer, there's a clear path to reach out to Apple and make my case, but that doesn't guarantee I can use the MAS. A lot of devs don't see a need for it though, because the Mac userbase, in general, knows how to get apps on the www. As long as I can distribute outside, I'm okay with it. But I, and even the biggest Apple fans in the press, have acknowledged the walls closing in.

rkapsoro 7y ago

Seems interesting to have people sharing these, so I'll happily chime in. $ kextstat | grep -v com.apple Index Refs Address Size Wired Name (Version) UUID <Linked Against> 140 0 0xffffff7f83ac2000 0x4000 0x4000 com.intel.driver.EnergyDriver (2.0) 7FE9AF4A-A8C2-3099-A956-971DDC86A467 <8 6 5 3> 171 0 0xffffff7f843eb000 0x29000 0x29000 com.intel.kext.intelhaxm (7.5.1) D0CC7B8F-1F62-33B1-BE6B-B5573D2A607B <8 6 5 3 1> 173 0 0xffffff7f84c3b000 0x6000 0x6000 ch.tripmode.TripModeNKE (2.0.2) 1D30A109-766F-3620-B617-EA67C07823A9 <6 5 1> 183 0 0xffffff7f8283f000 0x6000 0x6000 com.getdropbox.dropbox.kext (1.10.3) F29DD0CB-48D6-311A-9B69-E39CF775493C <8 6 5 2 1> 195 0 0xffffff7f84d15000 0x15000 0x15000 com.vmware.kext.vmnet (1501.84.42) 1ED47440-F016-3E97-A701-E889165CCD39 <6 5 3 1> 196 0 0xffffff7f84d2a000 0x13000 0x13000 com.vmware.kext.vmx86 (1501.84.42) 3327B843-5057-3EAA-B149-E1E6FF7B4F91 <8 6 5 3 1> 197 0 0xffffff7f83ced000 0x7000 0x7000 com.vmware.kext.vmioplug.18.7.0 (18.7.0) 53E03BEC-2BFD-3A6D-B092-A2116987781F <61 6 5 3 1> Edited, with a list of apps: - VMWare Fusion (mostly just for fun things like trying out Linux distros and messing with TempleOS and old versions of Windows, mainly); - Dropbox (Smart Sync); - Trip Mode (for certain WiFi networks, namely tethering, enforces a whitelist of things allowed to use the network); - Intel's Power Gadget thing (can give power usage and clock speed stats from the Intel CPU & Platform; I don't use this much).