2026-04-30 00:31:26 [Info] TotalPhys:2047,AvailPhys:362,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1432,SelfWorkingSet:15888, SelfPageFile:12904
2026-04-30 00:31:26 [Info] CommitTotal:5237,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:362,SystemCache:162,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27676,ProcessCount:52,ThreadCount:759
2026-04-30 01:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15979","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16060","aliyundun_upload_time":"1777482396","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 01:31:43 [Info] TotalPhys:2047,AvailPhys:350,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1428,SelfWorkingSet:16008, SelfPageFile:13216
2026-04-30 01:31:43 [Info] CommitTotal:5241,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:350,SystemCache:169,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27717,ProcessCount:52,ThreadCount:761
2026-04-30 02:05:10 [Info] GetMessage : T_MSG_CHECK
2026-04-30 02:05:10 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0ODU5MTAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTI5MTEwLCJzdWIiOiJSVEFQX0lEWF8xODA0NDRfMTc3NzQ4NTkxMDcyOCJ9.y5irpJewZJTNUbvEqVPni0gVD0XDcf8sIQCansPswxY has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 02:05:13 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 02:05:13 [Info] ipc client:Rtap303541777485913_handler Reg client_name:Rtap303541777485913 on WhiteList
2026-04-30 02:05:13 [Info] start rtap process success, pid is 2656, argument is Rtap303541777485913
2026-04-30 02:05:13 [Info] New ClientConnectNotify : Rtap303541777485913, id is 00000548
2026-04-30 02:05:13 [Info] ipc client:Rtap303541777485913 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 02:05:14 [Info] Rtap Platform Rtap303541777485913 execv work --sca on pid 2656
2026-04-30 02:05:16 [Info] csrss.exe open proc 2656 AliSecCheck.ex
2026-04-30 02:05:17 [Info] csrss.exe open thread 2656 AliSecCheck.ex
2026-04-30 02:05:37 [Info] csrss.exe open thread 2656 AliSecCheck.ex
2026-04-30 02:06:01 [Info] Done Work --sca:1
2026-04-30 02:06:01 [Info] Rtap Platform Rtap303541777485913 Exit:normal exit
2026-04-30 02:06:03 [Info] ClientDisConnectNotify : Rtap303541777485913, id is 00000548
2026-04-30 02:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15976","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16116","aliyundun_upload_time":"1777485981","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 02:31:59 [Info] TotalPhys:2047,AvailPhys:320,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1401,SelfWorkingSet:16012, SelfPageFile:13108
2026-04-30 02:31:59 [Info] CommitTotal:5267,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:320,SystemCache:175,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27720,ProcessCount:52,ThreadCount:760
2026-04-30 03:02:34 [Info] get meta data success by v2
2026-04-30 03:02:34 [Info] get empty metaserver config
2026-04-30 03:02:34 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 03:02:34 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 03:02:34 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 03:02:34 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 03:02:34 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 03:02:34 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 03:02:34 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 03:02:34 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 03:02:34 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 03:02:34 [Info] download cert compare md5 same
2026-04-30 03:02:34 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 03:02:34 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 03:02:34 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 03:02:34 [Info] nCurrentClock is 108007400, nCurrentTime is 1777489354
2026-04-30 03:02:34 [Info] SendMessage T_MSG_LOGIN
2026-04-30 03:02:34 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-30 03:02:34 [Info] begin to enable self guard after reconnect
2026-04-30 03:02:34 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-30 03:02:35 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-30 03:02:35 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-04-30 03:02:35 [Info] GetMessage : T_MSG_CHECK
2026-04-30 03:02:35 [Info] task 77d8f389-6f92-4ddc-82de-161526f84ed8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 03:02:37 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-30 03:02:37 [Info] key : cpu, value : 10
2026-04-30 03:02:37 [Info] key : rio, value : 20480
2026-04-30 03:02:37 [Info] key : wio, value : 20480
2026-04-30 03:02:37 [Info] key : cpu_all, value : 0
2026-04-30 03:02:37 [Info] key : max_pid_check, value : 200
2026-04-30 03:02:37 [Info] key : throw_dump, value : 0
2026-04-30 03:02:37 [Info] key : hash_mode, value : 1
2026-04-30 03:02:37 [Info] key : mem, value : 200
2026-04-30 03:02:37 [Info] can not find key max_fd in online conf
2026-04-30 03:02:37 [Info] key : proc_limit, value : 1
2026-04-30 03:02:37 [Info] key : resource_limit_mode, value : 3
2026-04-30 03:02:37 [Info] key : rtap_update_mode, value : 1
2026-04-30 03:02:37 [Info] can not find key debug in online conf
2026-04-30 03:02:37 [Info] can not find key update_mode in online conf
2026-04-30 03:02:37 [Info] can not find key http_mode in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_enable in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_new_agent in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-30 03:02:37 [Info] can not find key mem_low_mark in online conf
2026-04-30 03:02:37 [Info] can not find key obnormal_report_interval in online conf
2026-04-30 03:02:37 [Info] key : cache_mode, value : 0
2026-04-30 03:02:37 [Info] key : abnormal_monitor_mode, value : 3
2026-04-30 03:02:37 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-30 03:02:37 [Info] key : queue_size_ratio, value : 80
2026-04-30 03:02:37 [Info] queue_size_ratio is 80
2026-04-30 03:02:37 [Info] resource limit mode and max limit cpu is not change
2026-04-30 03:02:37 [Info] set hash mode 1
2026-04-30 03:02:37 [Info] RTAP timeout config:9600000
2026-04-30 03:02:37 [Info] self_guard_mode config is 0
2026-04-30 03:02:41 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 03:02:41 [Info] ipc client:Rtap88461777489361_handler Reg client_name:Rtap88461777489361 on WhiteList
2026-04-30 03:02:41 [Info] start rtap process success, pid is 2488, argument is Rtap88461777489361
2026-04-30 03:02:41 [Info] New ClientConnectNotify : Rtap88461777489361, id is 00000524
2026-04-30 03:02:41 [Info] ipc client:Rtap88461777489361 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 03:02:41 [Info] Rtap Platform Rtap88461777489361 execv work --windows-sysinfoext-check on pid 2488
2026-04-30 03:02:42 [Info] csrss.exe open proc 2488 AliSecCheck.ex
2026-04-30 03:02:43 [Info] csrss.exe open thread 2488 AliSecCheck.ex
2026-04-30 03:02:48 [Info] Done Work --windows-sysinfoext-check:1
2026-04-30 03:02:48 [Info] Rtap Platform Rtap88461777489361 Exit:normal exit
2026-04-30 03:02:50 [Info] ClientDisConnectNotify : Rtap88461777489361, id is 00000524
2026-04-30 03:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16089","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16200","aliyundun_upload_time":"1777489597","aliyundun_write_pid_times":"0","ipc_send_count":"149","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 03:32:16 [Info] TotalPhys:2047,AvailPhys:314,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1395,SelfWorkingSet:15948, SelfPageFile:12964
2026-04-30 03:32:16 [Info] CommitTotal:5273,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:314,SystemCache:201,KernelTotal:266,KernelPaged:173,KernelNonpaged:93,PageSize:4096,HandleCount:27908,ProcessCount:53,ThreadCount:772
2026-04-30 04:06:19 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16027","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16172","aliyundun_upload_time":"1777493179","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 04:32:33 [Info] TotalPhys:2047,AvailPhys:325,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1402,SelfWorkingSet:15976, SelfPageFile:13008
2026-04-30 04:32:33 [Info] CommitTotal:5266,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:325,SystemCache:235,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27710,ProcessCount:52,ThreadCount:762
2026-04-30 05:06:11 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16011","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16084","aliyundun_upload_time":"1777496771","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 05:32:50 [Info] TotalPhys:2047,AvailPhys:329,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1406,SelfWorkingSet:16048, SelfPageFile:13132
2026-04-30 05:32:50 [Info] CommitTotal:5262,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:329,SystemCache:243,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27708,ProcessCount:52,ThreadCount:772
2026-04-30 06:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15989","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16096","aliyundun_upload_time":"1777500385","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 06:18:37 [Info] get meta data success by v2
2026-04-30 06:18:37 [Info] get empty metaserver config
2026-04-30 06:18:37 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 06:18:38 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 06:18:38 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 06:18:38 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 06:18:38 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 06:18:38 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 06:18:38 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 06:18:38 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 06:18:39 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 06:18:39 [Info] download cert compare md5 same
2026-04-30 06:18:39 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 06:18:39 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 06:18:39 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 06:33:06 [Info] TotalPhys:2047,AvailPhys:353,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1418,SelfWorkingSet:15932, SelfPageFile:12936
2026-04-30 06:33:06 [Info] CommitTotal:5250,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:353,SystemCache:230,KernelTotal:267,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27690,ProcessCount:52,ThreadCount:762
2026-04-30 07:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16007","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16140","aliyundun_upload_time":"1777503996","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 07:33:23 [Info] TotalPhys:2047,AvailPhys:332,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1408,SelfWorkingSet:15968, SelfPageFile:12992
2026-04-30 07:33:23 [Info] CommitTotal:5260,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:332,SystemCache:224,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27671,ProcessCount:52,ThreadCount:763
2026-04-30 07:45:08 [Info] GetMessage : T_MSG_CHECK
2026-04-30 07:45:08 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MDYzMDgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTQ5NTA4LCJzdWIiOiJSVEFQX0lEWF8xODA0NDZfMTc3NzUwNjMwODE4NiJ9.ilFd3ZEs2qR6V-7PyiyAQsEswdB-ADDYTItRVmVU3Gg has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 07:45:14 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 07:45:14 [Info] ipc client:Rtap314391777506314_handler Reg client_name:Rtap314391777506314 on WhiteList
2026-04-30 07:45:14 [Info] start rtap process success, pid is 4712, argument is Rtap314391777506314
2026-04-30 07:45:14 [Info] New ClientConnectNotify : Rtap314391777506314, id is 000004B4
2026-04-30 07:45:14 [Info] ipc client:Rtap314391777506314 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 07:45:14 [Info] Rtap Platform Rtap314391777506314 execv work --windows-vul-clean on pid 4712
2026-04-30 07:45:17 [Info] csrss.exe open proc 4712 AliSecCheck.ex
2026-04-30 07:45:18 [Info] csrss.exe open thread 4712 AliSecCheck.ex
2026-04-30 07:45:21 [Info] Done Work --windows-vul-clean:1
2026-04-30 07:45:21 [Info] Rtap Platform Rtap314391777506314 Exit:normal exit
2026-04-30 07:45:23 [Info] ClientDisConnectNotify : Rtap314391777506314, id is 000004B4
2026-04-30 08:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15970","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16088","aliyundun_upload_time":"1777507570","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 08:29:09 [Info] nCurrentClock is 126009200, nCurrentTime is 1777508949
2026-04-30 08:29:09 [Info] SendMessage T_MSG_LOGIN
2026-04-30 08:29:09 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-30 08:29:09 [Info] begin to enable self guard after reconnect
2026-04-30 08:29:10 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-30 08:29:10 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-30 08:29:10 [Info] GetMessage : T_MSG_CHECK
2026-04-30 08:29:10 [Info] task f4011c9f-9bd7-4fa1-993a-85b2e3ef83bc has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 08:29:12 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-30 08:29:12 [Info] key : cpu, value : 10
2026-04-30 08:29:12 [Info] key : rio, value : 20480
2026-04-30 08:29:12 [Info] key : wio, value : 20480
2026-04-30 08:29:12 [Info] key : cpu_all, value : 0
2026-04-30 08:29:12 [Info] key : max_pid_check, value : 200
2026-04-30 08:29:12 [Info] key : throw_dump, value : 0
2026-04-30 08:29:12 [Info] key : hash_mode, value : 1
2026-04-30 08:29:12 [Info] key : mem, value : 200
2026-04-30 08:29:12 [Info] can not find key max_fd in online conf
2026-04-30 08:29:12 [Info] key : proc_limit, value : 1
2026-04-30 08:29:12 [Info] key : resource_limit_mode, value : 3
2026-04-30 08:29:12 [Info] key : rtap_update_mode, value : 1
2026-04-30 08:29:12 [Info] can not find key debug in online conf
2026-04-30 08:29:12 [Info] can not find key update_mode in online conf
2026-04-30 08:29:12 [Info] can not find key http_mode in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_enable in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_new_agent in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-30 08:29:12 [Info] can not find key mem_low_mark in online conf
2026-04-30 08:29:12 [Info] can not find key obnormal_report_interval in online conf
2026-04-30 08:29:12 [Info] key : cache_mode, value : 0
2026-04-30 08:29:12 [Info] key : abnormal_monitor_mode, value : 3
2026-04-30 08:29:12 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-30 08:29:12 [Info] key : queue_size_ratio, value : 80
2026-04-30 08:29:12 [Info] queue_size_ratio is 80
2026-04-30 08:29:12 [Info] resource limit mode and max limit cpu is not change
2026-04-30 08:29:12 [Info] set hash mode 1
2026-04-30 08:29:12 [Info] RTAP timeout config:9600000
2026-04-30 08:29:12 [Info] self_guard_mode config is 0
2026-04-30 08:29:14 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 08:29:14 [Info] ipc client:Rtap72921777508954_handler Reg client_name:Rtap72921777508954 on WhiteList
2026-04-30 08:29:14 [Info] start rtap process success, pid is 1624, argument is Rtap72921777508954
2026-04-30 08:29:14 [Info] New ClientConnectNotify : Rtap72921777508954, id is 0000052C
2026-04-30 08:29:15 [Info] ipc client:Rtap72921777508954 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 08:29:15 [Info] Rtap Platform Rtap72921777508954 execv work --windows-sysinfoext-check on pid 1624
2026-04-30 08:29:17 [Info] csrss.exe open proc 1624 AliSecCheck.ex
2026-04-30 08:29:18 [Info] csrss.exe open thread 1624 AliSecCheck.ex
2026-04-30 08:29:22 [Info] Done Work --windows-sysinfoext-check:1
2026-04-30 08:29:22 [Info] Rtap Platform Rtap72921777508954 Exit:normal exit
2026-04-30 08:29:24 [Info] ClientDisConnectNotify : Rtap72921777508954, id is 0000052C
2026-04-30 08:33:40 [Info] TotalPhys:2047,AvailPhys:325,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1391,SelfWorkingSet:15972, SelfPageFile:12996
2026-04-30 08:33:40 [Info] CommitTotal:5277,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:325,SystemCache:225,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27875,ProcessCount:53,ThreadCount:774
2026-04-30 08:43:21 [Info] GetMessage : T_MSG_CHECK
2026-04-30 08:43:21 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MDk4MDEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTUzMDAxLCJzdWIiOiJSVEFQX0lEWF8xODA0MzVfMTc3NzUwOTgwMTAyNiJ9.62ewCZt8T1WzE9CU5YJutQNq43b8mhHUTJH2_O_B0w4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 08:43:25 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 08:43:25 [Info] ipc client:Rtap100711777509805_handler Reg client_name:Rtap100711777509805 on WhiteList
2026-04-30 08:43:25 [Info] start rtap process success, pid is 2840, argument is Rtap100711777509805
2026-04-30 08:43:25 [Info] New ClientConnectNotify : Rtap100711777509805, id is 000004B4
2026-04-30 08:43:25 [Info] ipc client:Rtap100711777509805 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 08:43:26 [Info] Rtap Platform Rtap100711777509805 execv work --windows-process-check on pid 2840
2026-04-30 08:43:27 [Info] csrss.exe open proc 2840 AliSecCheck.ex
2026-04-30 08:43:28 [Info] csrss.exe open thread 2840 AliSecCheck.ex
2026-04-30 08:43:53 [Info] Done Work --windows-process-check:1
2026-04-30 08:43:53 [Info] Rtap Platform Rtap100711777509805 Exit:normal exit
2026-04-30 08:43:55 [Info] ClientDisConnectNotify : Rtap100711777509805, id is 000004B4
2026-04-30 08:59:43 [Warn] high cpu, cpu is 12
2026-04-30 09:06:29 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16084","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"1","aliyundun_max_cpu":"12","aliyundun_max_mem":"16400","aliyundun_upload_time":"1777511189","aliyundun_write_pid_times":"0","ipc_send_count":"154","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 09:33:39 [Info] get meta data success by v2
2026-04-30 09:33:39 [Info] get empty metaserver config
2026-04-30 09:33:39 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 09:33:40 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 09:33:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 09:33:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 09:33:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 09:33:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 09:33:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 09:33:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 09:33:40 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 09:33:40 [Info] download cert compare md5 same
2026-04-30 09:33:40 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 09:33:40 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 09:33:40 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 09:33:54 [Info] TotalPhys:2047,AvailPhys:308,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6669,AvailPageFile:1393,SelfWorkingSet:16228, SelfPageFile:13540
2026-04-30 09:33:54 [Info] CommitTotal:5276,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:308,SystemCache:216,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27685,ProcessCount:52,ThreadCount:764
2026-04-30 10:06:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16297","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"7","aliyundun_max_mem":"16464","aliyundun_upload_time":"1777514801","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 10:25:30 [Info] GetMessage : T_MSG_CHECK
2026-04-30 10:25:30 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MTU5MzAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTU5MTMwLCJzdWIiOiJSVEFQX0lEWF8xODA0MzhfMTc3NzUxNTkzMDYwOCJ9.S33n9Z8YefmBCv0JLjffIkpznzVRbRVBSXztYFcvU4Q has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 10:25:32 [Info] GetMessage : T_MSG_CHECK
2026-04-30 10:25:32 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MTU5MzEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTU5MTMxLCJzdWIiOiJSVEFQX0lEWF8xODA0NDNfMTc3NzUxNTkzMTc4NiJ9.CMP_eGL495k9j6hR9qScmM2j4rIloGeJra13kT_rfJQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 10:25:35 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 10:25:35 [Info] ipc client:Rtap300891777515935_handler Reg client_name:Rtap300891777515935 on WhiteList
2026-04-30 10:25:35 [Info] start rtap process success, pid is 1072, argument is Rtap300891777515935
2026-04-30 10:25:35 [Info] New ClientConnectNotify : Rtap300891777515935, id is 00000504
2026-04-30 10:25:35 [Info] Rtap Platform Rtap300891777515935 execv work --windows-schedule-task-check on pid 1072
2026-04-30 10:25:35 [Info] ipc client:Rtap300891777515935 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 10:25:36 [Info] csrss.exe open proc 1072 AliSecCheck.ex
2026-04-30 10:25:37 [Info] csrss.exe open thread 1072 AliSecCheck.ex
2026-04-30 10:25:40 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 10:25:40 [Info] ipc client:Rtap301051777515940_handler Reg client_name:Rtap301051777515940 on WhiteList
2026-04-30 10:25:40 [Info] start rtap process success, pid is 3204, argument is Rtap301051777515940
2026-04-30 10:25:40 [Info] New ClientConnectNotify : Rtap301051777515940, id is 000004B4
2026-04-30 10:25:40 [Info] ipc client:Rtap301051777515940 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 10:25:40 [Info] Rtap Platform Rtap301051777515940 execv work --windows-registry-check on pid 3204
2026-04-30 10:25:42 [Info] csrss.exe open proc 3204 AliSecCheck.ex
2026-04-30 10:25:43 [Info] csrss.exe open thread 3204 AliSecCheck.ex
2026-04-30 10:26:12 [Info] Done Work --windows-schedule-task-check:1
2026-04-30 10:26:12 [Info] Rtap Platform Rtap300891777515935 Exit:normal exit
2026-04-30 10:26:14 [Info] ClientDisConnectNotify : Rtap300891777515935, id is 00000504
2026-04-30 10:26:18 [Info] Done Work --windows-registry-check:1
2026-04-30 10:26:18 [Info] Rtap Platform Rtap301051777515940 Exit:normal exit
2026-04-30 10:26:20 [Info] ClientDisConnectNotify : Rtap301051777515940, id is 000004B4
2026-04-30 10:26:22 [Info] GetMessage : T_MSG_CHECK
2026-04-30 10:26:22 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MTU5ODIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTU5MTgyLCJzdWIiOiJSVEFQX0lEWF8xODA0NDlfMTc3NzUxNTk4MjQ4OCJ9.MmPo7UgvFurCuYtck6dFIdXOiflnKh9_XIS_iNgbA0g has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 10:26:25 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 10:26:25 [Info] ipc client:Rtap302521777515985_handler Reg client_name:Rtap302521777515985 on WhiteList
2026-04-30 10:26:25 [Info] start rtap process success, pid is 1624, argument is Rtap302521777515985
2026-04-30 10:26:26 [Info] New ClientConnectNotify : Rtap302521777515985, id is 0000052C
2026-04-30 10:26:26 [Info] ipc client:Rtap302521777515985 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 10:26:26 [Info] Rtap Platform Rtap302521777515985 execv work --windows-driver-version-check on pid 1624
2026-04-30 10:26:27 [Info] csrss.exe open proc 1624 AliSecCheck.ex
2026-04-30 10:26:28 [Info] csrss.exe open thread 1624 AliSecCheck.ex
2026-04-30 10:26:33 [Info] Done Work --windows-driver-version-check:1
2026-04-30 10:26:33 [Info] Rtap Platform Rtap302521777515985 Exit:normal exit
2026-04-30 10:26:35 [Info] ClientDisConnectNotify : Rtap302521777515985, id is 0000052C
2026-04-30 10:32:55 [Info] GetMessage : T_MSG_CHECK
2026-04-30 10:32:55 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MTYzNzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTU5NTc1LCJzdWIiOiJSVEFQX0lEWF8xODA0MzZfMTc3NzUxNjM3NTE4NyJ9.en7kR9S-wAAXwf0au5rIqrpbM7e45OwP0quHhv4QPAs has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 10:32:59 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 10:32:59 [Info] ipc client:Rtap315391777516379_handler Reg client_name:Rtap315391777516379 on WhiteList
2026-04-30 10:32:59 [Info] start rtap process success, pid is 3328, argument is Rtap315391777516379
2026-04-30 10:32:59 [Info] New ClientConnectNotify : Rtap315391777516379, id is 00000540
2026-04-30 10:32:59 [Info] ipc client:Rtap315391777516379 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 10:32:59 [Info] Rtap Platform Rtap315391777516379 execv work --tcp-connect-check on pid 3328
2026-04-30 10:33:00 [Info] csrss.exe open proc 3328 AliSecCheck.ex
2026-04-30 10:33:01 [Info] csrss.exe open thread 3328 AliSecCheck.ex
2026-04-30 10:33:10 [Info] Done Work --tcp-connect-check:1
2026-04-30 10:33:10 [Info] Rtap Platform Rtap315391777516379 Exit:normal exit
2026-04-30 10:33:13 [Info] ClientDisConnectNotify : Rtap315391777516379, id is 00000540
2026-04-30 10:34:12 [Info] TotalPhys:2047,AvailPhys:355,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1425,SelfWorkingSet:16268, SelfPageFile:13576
2026-04-30 10:34:12 [Info] CommitTotal:5244,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:355,SystemCache:151,KernelTotal:263,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27671,ProcessCount:52,ThreadCount:758
2026-04-30 11:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16286","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16392","aliyundun_upload_time":"1777518370","aliyundun_write_pid_times":"0","ipc_send_count":"152","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 11:09:00 [Info] GetMessage : T_MSG_CHECK
2026-04-30 11:09:00 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MTg1NDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTYxNzQwLCJzdWIiOiJSVEFQX0lEWF9XWVBnZl8xNzc3MjkxOTA1MjA0X2RhZDBjZGEwNmY1MTA2MGVlNDY4MTQ5ZjM1OTZiY2JmIiwic3ViIjoiUlRBUF9JRFhfMTgwNDQwXzE3Nzc1MTg1NDA4NDUifQ.geCrjZfuMWtphwY9_ailXud_EEaeWRM7lyTy22xtxmU has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 11:09:05 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 11:09:05 [Info] ipc client:Rtap58441777518545_handler Reg client_name:Rtap58441777518545 on WhiteList
2026-04-30 11:09:05 [Info] start rtap process success, pid is 4868, argument is Rtap58441777518545
2026-04-30 11:09:05 [Info] New ClientConnectNotify : Rtap58441777518545, id is 0000052C
2026-04-30 11:09:05 [Info] ipc client:Rtap58441777518545 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 11:09:05 [Info] Rtap Platform Rtap58441777518545 execv work --windows-autorun-item-check on pid 4868
2026-04-30 11:09:06 [Info] csrss.exe open proc 4868 AliSecCheck.ex
2026-04-30 11:09:07 [Info] csrss.exe open thread 4868 AliSecCheck.ex
2026-04-30 11:09:20 [Info] Done Work --windows-autorun-item-check:1
2026-04-30 11:09:20 [Info] Rtap Platform Rtap58441777518545 Exit:normal exit
2026-04-30 11:09:23 [Info] ClientDisConnectNotify : Rtap58441777518545, id is 0000052C
2026-04-30 11:34:30 [Info] TotalPhys:2047,AvailPhys:341,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1409,SelfWorkingSet:16276, SelfPageFile:13692
2026-04-30 11:34:30 [Info] CommitTotal:5260,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:341,SystemCache:219,KernelTotal:267,KernelPaged:174,KernelNonpaged:92,PageSize:4096,HandleCount:27595,ProcessCount:52,ThreadCount:765
2026-04-30 12:06:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16250","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16312","aliyundun_upload_time":"1777521993","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 12:34:46 [Info] TotalPhys:2047,AvailPhys:326,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1394,SelfWorkingSet:16364, SelfPageFile:13696
2026-04-30 12:34:46 [Info] CommitTotal:5274,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:326,SystemCache:227,KernelTotal:267,KernelPaged:174,KernelNonpaged:92,PageSize:4096,HandleCount:27630,ProcessCount:52,ThreadCount:763
2026-04-30 12:49:54 [Info] get meta data success by v2
2026-04-30 12:49:54 [Info] get empty metaserver config
2026-04-30 12:49:54 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 12:49:54 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 12:49:54 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 12:49:54 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 12:49:54 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 12:49:54 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 12:49:54 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 12:49:54 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 12:49:54 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 12:49:54 [Info] download cert compare md5 same
2026-04-30 12:49:54 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 12:49:54 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 12:49:54 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 13:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16297","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16448","aliyundun_upload_time":"1777525595","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 13:35:02 [Info] TotalPhys:2047,AvailPhys:323,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1393,SelfWorkingSet:16212, SelfPageFile:13412
2026-04-30 13:35:02 [Info] CommitTotal:5275,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:323,SystemCache:231,KernelTotal:267,KernelPaged:174,KernelNonpaged:92,PageSize:4096,HandleCount:27598,ProcessCount:52,ThreadCount:761
2026-04-30 13:55:03 [Info] nCurrentClock is 144010400, nCurrentTime is 1777528503
2026-04-30 13:55:03 [Info] SendMessage T_MSG_LOGIN
2026-04-30 13:55:03 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-30 13:55:03 [Info] begin to enable self guard after reconnect
2026-04-30 13:55:03 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-30 13:55:04 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-30 13:55:04 [Info] GetMessage : T_MSG_CHECK
2026-04-30 13:55:04 [Info] task 85ec2c71-f8c4-4939-95b7-3dcd8a035715 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 13:55:06 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-30 13:55:06 [Info] key : cpu, value : 10
2026-04-30 13:55:06 [Info] key : rio, value : 20480
2026-04-30 13:55:06 [Info] key : wio, value : 20480
2026-04-30 13:55:06 [Info] key : cpu_all, value : 0
2026-04-30 13:55:06 [Info] key : max_pid_check, value : 200
2026-04-30 13:55:06 [Info] key : throw_dump, value : 0
2026-04-30 13:55:06 [Info] key : hash_mode, value : 1
2026-04-30 13:55:06 [Info] key : mem, value : 200
2026-04-30 13:55:06 [Info] can not find key max_fd in online conf
2026-04-30 13:55:06 [Info] key : proc_limit, value : 1
2026-04-30 13:55:06 [Info] key : resource_limit_mode, value : 3
2026-04-30 13:55:06 [Info] key : rtap_update_mode, value : 1
2026-04-30 13:55:06 [Info] can not find key debug in online conf
2026-04-30 13:55:06 [Info] can not find key update_mode in online conf
2026-04-30 13:55:06 [Info] can not find key http_mode in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_enable in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_new_agent in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-30 13:55:06 [Info] can not find key mem_low_mark in online conf
2026-04-30 13:55:06 [Info] can not find key obnormal_report_interval in online conf
2026-04-30 13:55:06 [Info] key : cache_mode, value : 0
2026-04-30 13:55:06 [Info] key : abnormal_monitor_mode, value : 3
2026-04-30 13:55:06 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-30 13:55:06 [Info] key : queue_size_ratio, value : 80
2026-04-30 13:55:06 [Info] queue_size_ratio is 80
2026-04-30 13:55:06 [Info] resource limit mode and max limit cpu is not change
2026-04-30 13:55:06 [Info] set hash mode 1
2026-04-30 13:55:06 [Info] RTAP timeout config:9600000
2026-04-30 13:55:06 [Info] self_guard_mode config is 0
2026-04-30 13:55:11 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 13:55:11 [Info] ipc client:Rtap56211777528511_handler Reg client_name:Rtap56211777528511 on WhiteList
2026-04-30 13:55:11 [Info] start rtap process success, pid is 2744, argument is Rtap56211777528511
2026-04-30 13:55:11 [Info] New ClientConnectNotify : Rtap56211777528511, id is 00000540
2026-04-30 13:55:11 [Info] ipc client:Rtap56211777528511 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 13:55:11 [Info] Rtap Platform Rtap56211777528511 execv work --windows-sysinfoext-check on pid 2744
2026-04-30 13:55:13 [Info] csrss.exe open proc 2744 AliSecCheck.ex
2026-04-30 13:55:14 [Info] csrss.exe open thread 2744 AliSecCheck.ex
2026-04-30 13:55:22 [Info] Done Work --windows-sysinfoext-check:1
2026-04-30 13:55:22 [Info] Rtap Platform Rtap56211777528511 Exit:normal exit
2026-04-30 13:55:24 [Info] ClientDisConnectNotify : Rtap56211777528511, id is 00000540
2026-04-30 14:06:19 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16239","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16432","aliyundun_upload_time":"1777529179","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 14:35:19 [Info] TotalPhys:2047,AvailPhys:370,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1412,SelfWorkingSet:16284, SelfPageFile:13700
2026-04-30 14:35:19 [Info] CommitTotal:5257,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:370,SystemCache:154,KernelTotal:264,KernelPaged:171,KernelNonpaged:93,PageSize:4096,HandleCount:27508,ProcessCount:52,ThreadCount:764
2026-04-30 15:06:14 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16214","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16304","aliyundun_upload_time":"1777532774","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 15:35:43 [Info] TotalPhys:2047,AvailPhys:367,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1409,SelfWorkingSet:16236, SelfPageFile:13636
2026-04-30 15:35:43 [Info] CommitTotal:5259,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:367,SystemCache:162,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27338,ProcessCount:51,ThreadCount:754
2026-04-30 16:06:08 [Info] get meta data success by v2
2026-04-30 16:06:08 [Info] get empty metaserver config
2026-04-30 16:06:08 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 16:06:08 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 16:06:08 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 16:06:09 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 16:06:09 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 16:06:09 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 16:06:09 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 16:06:09 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 16:06:09 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 16:06:09 [Info] download cert compare md5 same
2026-04-30 16:06:09 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 16:06:09 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 16:06:09 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 16:06:11 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16200","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16308","aliyundun_upload_time":"1777536371","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 16:36:08 [Info] TotalPhys:2047,AvailPhys:363,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1407,SelfWorkingSet:16212, SelfPageFile:13640
2026-04-30 16:36:08 [Info] CommitTotal:5261,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:363,SystemCache:167,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27347,ProcessCount:51,ThreadCount:753
2026-04-30 17:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16189","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16320","aliyundun_upload_time":"1777539973","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 17:36:33 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1407,SelfWorkingSet:16160, SelfPageFile:13596
2026-04-30 17:36:33 [Info] CommitTotal:5261,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:171,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27395,ProcessCount:51,ThreadCount:763
2026-04-30 18:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16124","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16208","aliyundun_upload_time":"1777543576","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 18:06:52 [Info] GetMessage : T_MSG_CHECK
2026-04-30 18:06:52 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1NDM2MTIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTg2ODEyLCJzdWIiOiJSVEFQX0lEWF8xODA1MDVfMTc3NzU0MzYxMjA3MCJ9.cWox-ARIASbVCPwSdQu1xn0yPcmAK-oji5ZQMSL3pAc has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 18:06:56 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 18:06:56 [Info] ipc client:Rtap221801777543616_handler Reg client_name:Rtap221801777543616 on WhiteList
2026-04-30 18:06:56 [Info] start rtap process success, pid is 1624, argument is Rtap221801777543616
2026-04-30 18:06:56 [Info] New ClientConnectNotify : Rtap221801777543616, id is 000004B4
2026-04-30 18:06:56 [Info] ipc client:Rtap221801777543616 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 18:06:56 [Info] Rtap Platform Rtap221801777543616 execv work --secnet_rasp_agent on pid 1624
2026-04-30 18:06:58 [Info] csrss.exe open proc 1624 AliSecCheck.ex
2026-04-30 18:06:59 [Info] csrss.exe open thread 1624 AliSecCheck.ex
2026-04-30 18:07:00 [Info] csrss.exe open thread 1624 AliSecCheck.ex
2026-04-30 18:07:03 [Info] Done Work --secnet_rasp_agent:1
2026-04-30 18:07:03 [Info] Rtap Platform Rtap221801777543616 Exit:normal exit
2026-04-30 18:07:05 [Info] ClientDisConnectNotify : Rtap221801777543616, id is 000004B4
2026-04-30 18:36:58 [Info] TotalPhys:2047,AvailPhys:357,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1399,SelfWorkingSet:16168, SelfPageFile:13568
2026-04-30 18:36:58 [Info] CommitTotal:5269,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:357,SystemCache:236,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27341,ProcessCount:51,ThreadCount:757
2026-04-30 19:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16124","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16300","aliyundun_upload_time":"1777547175","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 19:23:01 [Info] get meta data success by v2
2026-04-30 19:23:01 [Info] get empty metaserver config
2026-04-30 19:23:01 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 19:23:02 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 19:23:02 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 19:23:02 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 19:23:02 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 19:23:02 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 19:23:02 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 19:23:02 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 19:23:02 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 19:23:02 [Info] download cert compare md5 same
2026-04-30 19:23:02 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 19:23:02 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 19:23:02 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 19:23:02 [Info] nCurrentClock is 162011500, nCurrentTime is 1777548182
2026-04-30 19:23:02 [Info] SendMessage T_MSG_LOGIN
2026-04-30 19:23:02 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-30 19:23:02 [Info] begin to enable self guard after reconnect
2026-04-30 19:23:02 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-30 19:23:02 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-30 19:23:03 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-04-30 19:23:03 [Info] GetMessage : T_MSG_CHECK
2026-04-30 19:23:03 [Info] task 49607dc9-86c6-44e6-a5c2-e0d010632b9f has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 19:23:05 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-30 19:23:05 [Info] key : cpu, value : 10
2026-04-30 19:23:05 [Info] key : rio, value : 20480
2026-04-30 19:23:05 [Info] key : wio, value : 20480
2026-04-30 19:23:05 [Info] key : cpu_all, value : 0
2026-04-30 19:23:05 [Info] key : max_pid_check, value : 200
2026-04-30 19:23:05 [Info] key : throw_dump, value : 0
2026-04-30 19:23:05 [Info] key : hash_mode, value : 1
2026-04-30 19:23:05 [Info] key : mem, value : 200
2026-04-30 19:23:05 [Info] can not find key max_fd in online conf
2026-04-30 19:23:05 [Info] key : proc_limit, value : 1
2026-04-30 19:23:05 [Info] key : resource_limit_mode, value : 3
2026-04-30 19:23:05 [Info] key : rtap_update_mode, value : 1
2026-04-30 19:23:05 [Info] can not find key debug in online conf
2026-04-30 19:23:05 [Info] can not find key update_mode in online conf
2026-04-30 19:23:05 [Info] can not find key http_mode in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_enable in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_new_agent in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-30 19:23:05 [Info] can not find key mem_low_mark in online conf
2026-04-30 19:23:05 [Info] can not find key obnormal_report_interval in online conf
2026-04-30 19:23:05 [Info] key : cache_mode, value : 0
2026-04-30 19:23:05 [Info] key : abnormal_monitor_mode, value : 3
2026-04-30 19:23:05 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-30 19:23:05 [Info] key : queue_size_ratio, value : 80
2026-04-30 19:23:05 [Info] queue_size_ratio is 80
2026-04-30 19:23:05 [Info] resource limit mode and max limit cpu is not change
2026-04-30 19:23:05 [Info] set hash mode 1
2026-04-30 19:23:05 [Info] RTAP timeout config:9600000
2026-04-30 19:23:05 [Info] self_guard_mode config is 0
2026-04-30 19:23:08 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 19:23:08 [Info] ipc client:Rtap43421777548188_handler Reg client_name:Rtap43421777548188 on WhiteList
2026-04-30 19:23:08 [Info] start rtap process success, pid is 2084, argument is Rtap43421777548188
2026-04-30 19:23:09 [Info] New ClientConnectNotify : Rtap43421777548188, id is 00000540
2026-04-30 19:23:09 [Info] Rtap Platform Rtap43421777548188 execv work --windows-sysinfoext-check on pid 2084
2026-04-30 19:23:09 [Info] ipc client:Rtap43421777548188 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 19:23:10 [Info] csrss.exe open proc 2084 AliSecCheck.ex
2026-04-30 19:23:11 [Info] csrss.exe open thread 2084 AliSecCheck.ex
2026-04-30 19:23:16 [Info] Done Work --windows-sysinfoext-check:1
2026-04-30 19:23:16 [Info] Rtap Platform Rtap43421777548188 Exit:normal exit
2026-04-30 19:23:18 [Info] ClientDisConnectNotify : Rtap43421777548188, id is 00000540
2026-04-30 19:37:25 [Info] TotalPhys:2047,AvailPhys:360,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1401,SelfWorkingSet:16432, SelfPageFile:13804
2026-04-30 19:37:25 [Info] CommitTotal:5267,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:360,SystemCache:240,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27510,ProcessCount:52,ThreadCount:762
2026-04-30 20:06:22 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16270","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16456","aliyundun_upload_time":"1777550782","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 20:37:51 [Info] TotalPhys:2047,AvailPhys:362,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1401,SelfWorkingSet:16136, SelfPageFile:13272
2026-04-30 20:37:51 [Info] CommitTotal:5267,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:362,SystemCache:240,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27322,ProcessCount:51,ThreadCount:751
2026-04-30 21:06:23 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16251","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16380","aliyundun_upload_time":"1777554383","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 21:38:16 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1405,SelfWorkingSet:16300, SelfPageFile:13492
2026-04-30 21:38:16 [Info] CommitTotal:5263,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:239,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27394,ProcessCount:51,ThreadCount:762
2026-04-30 22:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16232","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16308","aliyundun_upload_time":"1777557978","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 22:38:40 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1406,SelfWorkingSet:16280, SelfPageFile:13484
2026-04-30 22:38:40 [Info] CommitTotal:5262,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:240,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27376,ProcessCount:51,ThreadCount:757
2026-04-30 22:39:51 [Info] get meta data success by v2
2026-04-30 22:39:51 [Info] get empty metaserver config
2026-04-30 22:39:51 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 22:39:51 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 22:39:51 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 22:39:51 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 22:39:51 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 22:39:51 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 22:39:51 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 22:39:51 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 22:39:51 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 22:39:51 [Info] download cert compare md5 same
2026-04-30 22:39:51 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 22:39:51 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 22:39:51 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 23:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16282","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16440","aliyundun_upload_time":"1777561576","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-04-30 23:39:11 [Info] TotalPhys:2047,AvailPhys:381,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1405,SelfWorkingSet:16236, SelfPageFile:13472
2026-04-30 23:39:11 [Info] CommitTotal:5263,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:381,SystemCache:170,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27595,ProcessCount:52,ThreadCount:774
2026-05-01 00:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16212","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16284","aliyundun_upload_time":"1777565173","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}