Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm not normally one for paraniodly checking my activity monitor for rogue processes; but this one just has my internal nature-watcher all curious. Why is there a racoon running under my root user? What's it doing? Foraging? Looking for nuts and berries? Staring at headlights?

alt text

share|improve this question
He said rack... Heh heh – cregox Jan 11 '11 at 1:07
up vote 7 down vote accepted

From Apple's documentation:

racoon speaks the IKE (ISAKMP/Oakley) key management protocol, to establish security associations with other hosts. The SPD (Security Policy Database) in the kernel usually triggers racoon. racoon usually sends all informational messages, warnings and error messages to syslogd(8) with the facility LOG_DAEMON and the priority LOG_INFO. Debugging messages are sent with the priority LOG_DEBUG. You should configure syslog.conf(5) appropriately to see these messages.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.