DHCP broken when device wakeup

App & System Services Networking
Richie_Wu OP
Created 3w
Replies 12
Boosts 0
Views 243
Participants 2

Many times the device totally lost connectivity, WIFI is completely down, no ip was assigned after device wakeup.

From system log I can see BPF socket for DHCP was closed and detached right after attached to en0 in DHCP INIT phase, as result even the DHCP server sent back OFFER(I see server sent OFFER back from packet capture), but there is no persistent BPF socket since it is closed reception during the entire INIT phase.

It is definitely an OS issue, is it a known issue? Please help understand Why BPF socket was close right after sending DISCOVER?

Default     0x0                  0      0    kernel: bpf26 attached to en0 by configd:331
2026-03-25 14:06:33.625851+0100 0x31dea    
Default     0x0                  0      0    kernel: bpf26 closed and detached from en0 fcount 0 dcount 0 by configd:331

System log and packet capture attach, please check.

Answered by DTS Engineer in 882231022

Is any of your code involved here?

Reading your description it doesn’t look like that’s the case, in which case the best place for this report is Feedback Assistant. See Bug Reporting: How and Why? for lots of hints and tips on how to file a bug.

Please post your bug number, just for the record.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Replies  12
Boosts  0
Views  243
Participants  2
Richie_Wu OP
3w 
2026-03-25 14:06:25.160810+0100 0x31ca3    Default     0x0                  331    0    configd: (IPConfiguration) [com.apple.IPConfiguration:Server] DHCP en0: not supplying hostname
2026-03-25 14:06:25.160949+0100 0x31ca3    Info        0x0                  331    0    configd: (IPConfiguration) [com.apple.IPConfiguration:Server] DHCP en0: busy
2026-03-25 14:06:25.162815+0100 0x31ca3    Info        0x0                  331    0    configd: (IPConfiguration) [com.apple.IPConfiguration:Server] [en0] Transmit 300 byte packet xid 0xd1259f67 to 255.255.255.255 [scope=0]
2026-03-25 14:06:25.165760+0100 0x31ca3    Default     0x0                  0      0    kernel: bpf26 attached to en0 by configd:331
2026-03-25 14:06:25.165867+0100 0x31ca3    Default     0x0                  0      0    kernel: bpf26 closed and detached from en0 fcount 0 dcount 0 by configd:331
2026-03-25 14:06:25.166000+0100 0x31ca3    Default     0x0                  331    0    configd: (IPConfiguration) [com.apple.IPConfiguration:Server] DHCP en0: INIT waiting at 0 for 1.680206
2026-03-25 14:06:26.849893+0100 0x31e79    Info        0x0                  331    0    configd: (IPConfiguration) [com.apple.IPConfiguration:Server] [en0] Transmit 300 byte packet xid 0xd1259f67 to 255.255.255.255 [scope=0]
2026-03-25 14:06:26.853357+0100 0x31e79    Default     0x0                  0      0    kernel: bpf26 attached to en0 by configd:331
2026-03-25 14:06:26.853489+0100 0x31e79    Default     0x0                  0      0    kernel: bpf26 closed and detached from en0 fcount 0 dcount 0 by configd:331
0
Richie_Wu OP
2w

No sure how to attach full system log here since it is large. Please let me know how to share the full system log if you need

0
DTS Engineer OP
Apple
2w
Recommended

Is any of your code involved here?

Reading your description it doesn’t look like that’s the case, in which case the best place for this report is Feedback Assistant. See Bug Reporting: How and Why? for lots of hints and tips on how to file a bug.

Please post your bug number, just for the record.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0
Richie_Wu OP
2w

FB number FB22371512

0
Richie_Wu OP
2w

@DTS Engineer any update on this?

0
DTS Engineer OP
Apple
1w
any update on this?

I don’t think so, but you can check for yourself in Feedback Assistant.

Earlier I wrote:

Is any of your code involved here?

Was I right in assuming that this isn’t the case?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0
Richie_Wu OP
5d

We saw this issue more with Content Filter and Transparent proxy network extension running on the device.

0
DTS Engineer OP
Apple
4d
We saw this issue more with Content Filter and Transparent proxy network extension running on the device.

OK. But that doesn’t actually answer my question: Is any of your code involved here? That is, are you the developer of these content filter and transparent proxy providers? Or are you trying to use providers created by a different developer?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

1
Richie_Wu OP
4d

Yes, our app was built on top of transparent proxy provider, we bypass DHCP from provider to make sure it communicates directly with its ultimate destination. However issue still been reported from customers when Transparent proxy extension running.

0
DTS Engineer OP
Apple
3d
our app was built on top of transparent proxy provider

OK.

However issue still been reported from customers

Are you able to reproduce this yourself?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0
Richie_Wu OP
3d

No, I am not able to reproduce it, few customers reported it after deployed our app. I shared few system diagnose logs in the FB ticket.

0
DTS Engineer OP
Apple
2d
I am not able to reproduce it

Hmmm, that makes things tricky. My experience is that investigations like this go a lot quicker when the product developer is able to reproduce the problem. I recommend that you work with the affected customers to see if there’s anything unique about their environment than triggers the issue. You can approach this problem from both ends:

  • Try to add stuff that they have to your environment.
  • Try to remove stuf that you don’t have from their environment.

I also recommend that you ask affected customers to retest with the latest seed of the macOS 26.5 beta. While I don’t have a specific bug fix I can point to, it’s a good idea in general.

I shared few system diagnose logs in the FB ticket.

Thanks.

I took a look at the sysdiagnose log and searched for the kernel: bpf26 attached to en0 by configd:331 message you mentioned. One thing that leapt out was this:

type: default
time: 2026-03-19 14:02:46.031151 -0500
process: kernel
message: bpf2 attached to en0 by UXXSssssssCccccc:1870

where UXXSssssssCccccc looks like it’s one of your processes. Critically, it’s certainly not configd, which is the process I’d expect to be using BPF for the purposes of doing DHCP.

Any idea what your software is doing with BPF?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0
DHCP broken when device wakeup
First post date Last post date
 
 
Q