What is the function of Replicatord in macOS Sequoia 15?

geniene64 wrote:

Unfortunately, my job's policy is for everyone's computer to operate with Norton 360, both Windows and MacOS, otherwise, I wouldn't have the extra 3rd party security. It is super annoying to have to constantly "allow" these things. But I can't get around it. I am just hoping that it's not doing more harm than good.

Windows isn't any different than the Mac in this respect. Microsoft adds new apps and new services all the time. Do you have to constantly "allow" those on Windows? Why not?

A Mac will never work properly with "Norton" installed. You can either accept that fact, violate your employer's policy and uninstall it, tell your employer to amend that policy, or buy a Windows PC for your job. There are no other choices.

I am just hoping that it's not doing more harm than good.

"Norton" can do nothing good on Macs. Expressed mathematically,

harm : good = ∞

Rule 1 of Macs is don't install junk.

I don't have Norton installed but my Little Snitch firewall gives me the warning to be seen in my screenshot below.

I'm on an Intel MacBook Air running Mac OS 15.0.1 (24A348).

The problem I'm having is not that much about the process but WHICH thrid party is trying to make the connection to my MacBook. Up until a few years ago we would just copy the IP address from the notification and would know right away WHO is trying to connect or to which outside address one of our apps whants to connect to.

BUT HOW are we going to find out since those new addresses were introduced? How will I know WHO 2001:9e8:1fc:6700:c1dc:6171:c1c0:f50b is that wants to connect via UDP-Port 59609 to my Mac?

Kurt Lang wrote:

Look under System Settings > Network > Ethernet. I'd be a bit surprised if the IPv6 address or DNS server shown isn't yourself.

Thanks, but in my Network settings, there's only the following:

here is what I found after running a scan on the IP

1. IP Address: 151.101.3.6

• Ports Open:
• Port 80 (HTTP-Proxy): Uses the Varnish caching server.
  • • The Fastly error suggests this is part of a content delivery network (CDN).
• Port 443 (HTTPS):
  • Certificate details suggest it’s related to Apple Inc. with a SAN list containing domains like api.music.apple.com and others.

1. SSL Certificate Information:

• • Common Name (CN): api.music.apple.com
• Subject Alternative Names (SANs): Includes several Apple services such as:
  • • api.shazam.apple.com
    • api.books.apple.com
• api.music.apple.com
• Certificate issued for use starting 2024-12-06 and expiring on 2025-04-08.

1. Service Fingerprints:

• • Port 443 appears to be misconfigured or inaccessible without the correct Host header. It returns a 421 Misdirected Request, meaning the request was sent to a server unable to handle it for the specific hostname requested.

1. Operating System Detection:

• Unreliable but suggests:
  • iOS/macOS (Darwin): Likely running on a CDN system managed by Apple and hosted on Fastlyinfrastructure.

1. Traceroute:

• • The route shows the connection traversing several Spectrum and Charter Communications nodes before reaching Fastly’s CDN node at 151.101.3.6.

This is happening to me as well since yesterday when I just installed Sequoia 15 and it's coming from Norton 360

Same error here.

Screenshot indicates it is a Norton 360 alert.

Any further help on this etresoft?

https://techcrunch.com/2024/09/19/apples-new-macos-sequoia-update-is-breaking-some-cybersecurity-tools/

Pardon my ignorance, but why would I not need/use NORTON AV on my. iMac? i.e. email scanning and download scanning for virus etc

Please, has anybody found out what "replicatord" is yet?

I get Norton 360 for free from my ISP. They used only to offer security software to Windows users but upgraded it to Norton.

I saw in a discussion elsewhere that it's something to do with the iphone mirroring that's recently been introduced but have no idea ifthat's true.

No it wasn't Reddit but a discussion the Norton site.

True, but the question what replicatord is and does, still remains open.