vpnd
executablemacOS311.5 KBx86_64, arm64
Network reachability monitor — tracks system connectivity and network configuration changes
Monitors network interface status, reachability to remote hosts, and system network configuration changes. Exposes an XPC service allowing other processes to query network availability and subscribe to connectivity state changes. Uses Network framework capabilities to track active interfaces, routing status, and DNS configuration. Communicates with 7 network endpoints to assess reachability. Runs as a system service without user interface.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 311.5 KB
- UUID
- 4EC277E6-20B9-348D-9BE2-4A3D893AA974
- Analyzed
- 2026-04-07T05:21:10Z
- CDHash
- 518f44b768f8402211dc4092565fbfd226034aa83b28a0def4786d6ca54c0f4e
Capabilities
NetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationInteresting Strings
Bundle IDs(3)
File Paths(12)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
1
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
12
Bundle IDs
3
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 171 functions identified
Functions(171)
0x1000007e8main
0x100000af8sub_100000af8
0x100000b6cvpnlog
0x100000ce0sub_100000ce0
0x100000dacsub_100000dac
0x100000f4csub_100000f4c
0x10000107csub_10000107c
0x100001330sub_100001330
0x10000138csub_10000138c
0x100001458sub_100001458
0x100001560sub_100001560
0x1000015b8sub_1000015b8
0x10000164csub_10000164c
0x100001658set_terminate
0x100001668got_terminate
0x100001674got_sig_chld
0x100001694got_sig_hup
0x1000016b4got_sig_usr1
0x1000016d4toggle_debug
0x100001750update_prefs
Imports201 symbols from 4 dylibs
Exports148
CopyDefaultIPAddress0x47e8
GetIntFromDict0xfa8c
GetStrAddrFromDict0xfb64
GetStrFromDict0xfaec
GetStrNetFromDict0xfbc8
IPSecApplyConfiguration0x4f50
IPSecConfigureVerboseLogging0x4ef4
IPSecCountPolicies0x6dc0
IPSecCreateCiscoDefaultConfiguration0x9be4
IPSecCreateL2TPDefaultConfiguration0x8ca0
IPSecFlushAll0xa74c
IPSecInstallPolicies0x6ec8
IPSecInstallRoutes0x7714
IPSecIsAggressiveMode0x83bc
IPSecKickConfiguration0x6da4
IPSecLogVPNInterfaceAddressEvent0xa790
IPSecRemoveConfiguration0x6bb0
IPSecRemoveConfigurationFile0x6cc8
IPSecRemovePolicies0x7dac
IPSecRemoveRoutes0x7d90
IPSecRemoveSecurityAssociations0x833c
IPSecSelfRepair0xa724
IPSecSetSecurityAssociationsPreference0x8c48
IPSecValidateConfiguration0x6ba8
TAB_LEVEL0x18420
_mh_execute_header0x0
accept_connections0x2ccc
add_address0x1a9c
add_address_range0x1b3c
add_builtin_plugin0x4380
addintparam0x4560
addparam0x44ec
address_avail0x2024
addstrparam0x45f0
apply_address_update0x1d68
begin_address_update0x1c7c
call_ipconfig0x24b8
cancel_address_update0x1cc4
check_conflicts0x4340
child_list0x18758
close_dynamic_store0x4310
closeall0x4640
configure_failover0x264c
find_address0x4a74
find_injection0xabbc
free_address_list0x18738
free_service_routes0xab80
get_active_servers0x3acc
get_address_from_string0x6dfc
get_array_option0xf818
get_cfstr_option0xf9b4
get_if_baudrate0x8b4c
get_if_media0x8a8c
get_if_mtu0x89cc
get_int_option0xfa04
get_interface0x4958
get_plugin_args0x2440
get_route_interface0x4b38
get_src_address0x8574
get_str_option0xf910
got_sig_chld0x1674
got_sig_hup0x1694
got_sig_usr10x16b4
got_terminate0x1668
health_check0x2704
init_address_lists0x1a58
init_plugin0x2038
ipsec_add_builtin_plugin0xb9b4
ipsec_check_keylen0xd294
ipsec_check_keylen20xd31c
ipsec_get_keylen0xd3fc
ipsec_process_options0xb698
ipsec_process_prefs0xb784
ipsec_resolver_thread0xb69c
isArray0xf738
isData0xf7e0
isDictionary0xf700
isNumber0xf7a8
isString0xf770
kill_orphans0x4360
lb_cur_connections0x18720
lb_ipconfig_time0x18730
lb_is_master0x1871c
lb_is_started0x18718
lb_master_address0x18778
lb_max_connections0x18722
lb_next_slave0x18728
lb_slaves_list0x18768
load_kext0x46b8
main0x7e8
makepath0x4ca8
no_ppp_msg0x18000
noload0x18788
open_dynamic_store0x42d4
pfkey_align0xf434
pfkey_check0xf524
pfkey_close0xf410
pfkey_get_softrate0xd510
pfkey_open0xf378
pfkey_recv0xe9ec
pfkey_recv_register0xe940
pfkey_send0xd9e8
pfkey_send_add0xe0cc
pfkey_send_delete0xe128
pfkey_send_delete_all0xe434
pfkey_send_dump0xec8c
pfkey_send_flush0xec80
pfkey_send_get0xe6e4
pfkey_send_getspi0xd56c
pfkey_send_promisc_toggle0xec98
pfkey_send_register0xe6f0
pfkey_send_spdadd0xeca8
pfkey_send_spdadd20xf070
pfkey_send_spddelete0xf15c
pfkey_send_spddelete20xf1cc
pfkey_send_spddump0xf36c
pfkey_send_spdflush0xf360
pfkey_send_spdget0xf2e4
pfkey_send_spdsetidx0xf2f0
pfkey_send_spdupdate0xf0c0
pfkey_send_spdupdate20xf10c
pfkey_send_update0xda30
pfkey_set_softrate0xd484
pfkey_set_supported0xeb50
plugin_exists0x4398
ppp_available0x4778
ppp_check_conflicts0xce38
ppp_kill_orphans0xd05c
ppp_process_options0xbba0
ppp_process_prefs0xbbb4
process_options0x3930
process_prefs0x3bd0
publish_state0x40d8
racoon_pid0x4de0
racoon_validate_cfg_str0xacac
readn0x4ba0
save_address_list0x18748
set_terminate0x1658
sockaddr_to_string0x8414
start_load_balancing0x28c8
stop_load_balancing0x2bc0
toggle_debug0x16d4
unconfigure_failover0x26a8
update_prefs0x1750
update_service_route0xaa84
validate_ip_string0x4454
vpnlog0xb6c
writen0x4c28