2026-04-29 00:24:37 [Info] TotalPhys:2047,AvailPhys:297,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1357,SelfWorkingSet:15764, SelfPageFile:12924
2026-04-29 00:24:37 [Info] CommitTotal:5247,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:297,SystemCache:209,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27560,ProcessCount:52,ThreadCount:768
2026-04-29 00:55:19 [Info] get meta data success by v2
2026-04-29 00:55:19 [Info] get empty metaserver config
2026-04-29 00:55:19 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 00:55:19 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 00:55:19 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 00:55:19 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 00:55:19 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 00:55:19 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 00:55:19 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 00:55:19 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 00:55:19 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 00:55:19 [Info] download cert compare md5 same
2026-04-29 00:55:19 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 00:55:19 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 00:55:19 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 01:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15780","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"15916","aliyundun_upload_time":"1777395975","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 01:24:54 [Info] TotalPhys:2047,AvailPhys:328,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1345,SelfWorkingSet:15824, SelfPageFile:12952
2026-04-29 01:24:54 [Info] CommitTotal:5259,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:328,SystemCache:119,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27698,ProcessCount:52,ThreadCount:782
2026-04-29 01:46:41 [Info] GetMessage : T_MSG_CHECK
2026-04-29 01:46:41 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzczOTg0MDEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3MzM0MDg2LCJleHAiOjE3Nzc0NDE2MDEsInN1YiI6IlJUQVBfSURYXzE4MDM2OV8xNzc3Mzk4NDAxMTIyIn0.iB5k7iE6e7FaC7Bkx5B5Qzr_qekjMKU7ZZj8BsRvkdw has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 01:46:47 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 01:46:47 [Info] ipc client:Rtap67401777398407_handler Reg client_name:Rtap67401777398407 on WhiteList
2026-04-29 01:46:47 [Info] start rtap process success, pid is 2680, argument is Rtap67401777398407
2026-04-29 01:46:47 [Info] New ClientConnectNotify : Rtap67401777398407, id is 000004B4
2026-04-29 01:46:47 [Info] ipc client:Rtap67401777398407 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 01:46:48 [Info] Rtap Platform Rtap67401777398407 execv work --sca on pid 2680
2026-04-29 01:46:50 [Info] csrss.exe open proc 2680 AliSecCheck.ex
2026-04-29 01:46:51 [Info] csrss.exe open thread 2680 AliSecCheck.ex
2026-04-29 01:47:15 [Info] csrss.exe open thread 2680 AliSecCheck.ex
2026-04-29 01:47:39 [Info] Done Work --sca:1
2026-04-29 01:47:39 [Info] Rtap Platform Rtap67401777398407 Exit:normal exit
2026-04-29 01:47:41 [Info] ClientDisConnectNotify : Rtap67401777398407, id is 000004B4
2026-04-29 02:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15802","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15892","aliyundun_upload_time":"1777399596","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 02:25:10 [Info] TotalPhys:2047,AvailPhys:334,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1359,SelfWorkingSet:15828, SelfPageFile:12960
2026-04-29 02:25:10 [Info] CommitTotal:5245,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:334,SystemCache:166,KernelTotal:263,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27655,ProcessCount:52,ThreadCount:766
2026-04-29 03:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15804","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15868","aliyundun_upload_time":"1777403196","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 03:25:28 [Info] TotalPhys:2047,AvailPhys:330,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1355,SelfWorkingSet:15700, SelfPageFile:12736
2026-04-29 03:25:28 [Info] CommitTotal:5250,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:330,SystemCache:175,KernelTotal:263,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27586,ProcessCount:52,ThreadCount:771
2026-04-29 04:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15807","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15848","aliyundun_upload_time":"1777406781","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 04:11:08 [Info] get meta data success by v2
2026-04-29 04:11:08 [Info] get empty metaserver config
2026-04-29 04:11:08 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 04:11:08 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 04:11:08 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 04:11:09 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 04:11:09 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 04:11:09 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 04:11:09 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 04:11:09 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 04:11:09 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 04:11:09 [Info] download cert compare md5 same
2026-04-29 04:11:09 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 04:11:09 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 04:11:09 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 04:25:45 [Info] TotalPhys:2047,AvailPhys:337,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6605,AvailPageFile:1364,SelfWorkingSet:15884, SelfPageFile:13100
2026-04-29 04:25:45 [Info] CommitTotal:5241,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:337,SystemCache:214,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27580,ProcessCount:52,ThreadCount:768
2026-04-29 05:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15838","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"15972","aliyundun_upload_time":"1777410397","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 05:16:26 [Info] nCurrentClock is 36003100, nCurrentTime is 1777410986
2026-04-29 05:16:26 [Info] SendMessage T_MSG_LOGIN
2026-04-29 05:16:26 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-29 05:16:26 [Info] begin to enable self guard after reconnect
2026-04-29 05:16:26 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-29 05:16:26 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-29 05:16:26 [Info] GetMessage : T_MSG_CHECK
2026-04-29 05:16:26 [Info] task 65244e4b-1055-46c5-add4-9c136220eeed has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 05:16:29 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-29 05:16:29 [Info] key : cpu, value : 10
2026-04-29 05:16:29 [Info] key : rio, value : 20480
2026-04-29 05:16:29 [Info] key : wio, value : 20480
2026-04-29 05:16:29 [Info] key : cpu_all, value : 0
2026-04-29 05:16:29 [Info] key : max_pid_check, value : 200
2026-04-29 05:16:29 [Info] key : throw_dump, value : 0
2026-04-29 05:16:29 [Info] key : hash_mode, value : 1
2026-04-29 05:16:29 [Info] key : mem, value : 200
2026-04-29 05:16:29 [Info] can not find key max_fd in online conf
2026-04-29 05:16:29 [Info] key : proc_limit, value : 1
2026-04-29 05:16:29 [Info] key : resource_limit_mode, value : 3
2026-04-29 05:16:29 [Info] key : rtap_update_mode, value : 1
2026-04-29 05:16:29 [Info] can not find key debug in online conf
2026-04-29 05:16:29 [Info] can not find key update_mode in online conf
2026-04-29 05:16:29 [Info] can not find key http_mode in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_enable in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_new_agent in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-29 05:16:29 [Info] can not find key mem_low_mark in online conf
2026-04-29 05:16:29 [Info] can not find key obnormal_report_interval in online conf
2026-04-29 05:16:29 [Info] key : cache_mode, value : 0
2026-04-29 05:16:29 [Info] key : abnormal_monitor_mode, value : 3
2026-04-29 05:16:29 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-29 05:16:29 [Info] key : queue_size_ratio, value : 80
2026-04-29 05:16:29 [Info] queue_size_ratio is 80
2026-04-29 05:16:29 [Info] resource limit mode and max limit cpu is not change
2026-04-29 05:16:29 [Info] set hash mode 1
2026-04-29 05:16:29 [Info] RTAP timeout config:9600000
2026-04-29 05:16:29 [Info] self_guard_mode config is 0
2026-04-29 05:16:33 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 05:16:33 [Info] ipc client:Rtap150731777410993_handler Reg client_name:Rtap150731777410993 on WhiteList
2026-04-29 05:16:33 [Info] start rtap process success, pid is 4276, argument is Rtap150731777410993
2026-04-29 05:16:33 [Info] New ClientConnectNotify : Rtap150731777410993, id is 0000052C
2026-04-29 05:16:34 [Info] ipc client:Rtap150731777410993 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 05:16:34 [Info] Rtap Platform Rtap150731777410993 execv work --windows-sysinfoext-check on pid 4276
2026-04-29 05:16:36 [Info] csrss.exe open proc 4276 AliSecCheck.ex
2026-04-29 05:16:37 [Info] csrss.exe open thread 4276 AliSecCheck.ex
2026-04-29 05:16:41 [Info] Done Work --windows-sysinfoext-check:1
2026-04-29 05:16:41 [Info] Rtap Platform Rtap150731777410993 Exit:normal exit
2026-04-29 05:16:43 [Info] ClientDisConnectNotify : Rtap150731777410993, id is 0000052C
2026-04-29 05:26:01 [Info] TotalPhys:2047,AvailPhys:337,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1365,SelfWorkingSet:15848, SelfPageFile:12916
2026-04-29 05:26:01 [Info] CommitTotal:5239,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:337,SystemCache:217,KernelTotal:263,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27828,ProcessCount:53,ThreadCount:777
2026-04-29 06:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15876","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15948","aliyundun_upload_time":"1777413981","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 06:26:18 [Info] TotalPhys:2047,AvailPhys:316,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1355,SelfWorkingSet:15920, SelfPageFile:13092
2026-04-29 06:26:18 [Info] CommitTotal:5249,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:316,SystemCache:212,KernelTotal:264,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27647,ProcessCount:52,ThreadCount:764
2026-04-29 07:06:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15910","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15984","aliyundun_upload_time":"1777417593","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 07:26:35 [Info] TotalPhys:2047,AvailPhys:316,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1360,SelfWorkingSet:16028, SelfPageFile:13136
2026-04-29 07:26:35 [Info] CommitTotal:5244,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:316,SystemCache:185,KernelTotal:265,KernelPaged:173,KernelNonpaged:92,PageSize:4096,HandleCount:27626,ProcessCount:52,ThreadCount:759
2026-04-29 07:27:08 [Info] get meta data success by v2
2026-04-29 07:27:08 [Info] get empty metaserver config
2026-04-29 07:27:08 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 07:27:08 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 07:27:08 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 07:27:08 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 07:27:08 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 07:27:08 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 07:27:08 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 07:27:08 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 07:27:08 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 07:27:08 [Info] download cert compare md5 same
2026-04-29 07:27:08 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 07:27:08 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 07:27:08 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 07:45:00 [Info] GetMessage : T_MSG_CHECK
2026-04-29 07:45:00 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0MTk5MDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDYzMTAwLCJzdWIiOiJSVEFQX0lEWF8xODAzNzFfMTc3NzQxOTkwMDEzNyJ9.MuJQHz6hYK8XP4ryB-5wRpIc0c5HxZ-z-9MXJDXAfF0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 07:45:05 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 07:45:05 [Info] ipc client:Rtap114081777419905_handler Reg client_name:Rtap114081777419905 on WhiteList
2026-04-29 07:45:05 [Info] start rtap process success, pid is 5040, argument is Rtap114081777419905
2026-04-29 07:45:05 [Info] New ClientConnectNotify : Rtap114081777419905, id is 00000540
2026-04-29 07:45:05 [Info] ipc client:Rtap114081777419905 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 07:45:05 [Info] Rtap Platform Rtap114081777419905 execv work --windows-vul-clean on pid 5040
2026-04-29 07:45:07 [Info] csrss.exe open proc 5040 AliSecCheck.ex
2026-04-29 07:45:08 [Info] csrss.exe open thread 5040 AliSecCheck.ex
2026-04-29 07:45:13 [Info] Done Work --windows-vul-clean:1
2026-04-29 07:45:13 [Info] Rtap Platform Rtap114081777419905 Exit:normal exit
2026-04-29 07:45:15 [Info] ClientDisConnectNotify : Rtap114081777419905, id is 00000540
2026-04-29 08:06:19 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15934","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16156","aliyundun_upload_time":"1777421179","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 08:26:51 [Info] TotalPhys:2047,AvailPhys:332,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1356,SelfWorkingSet:15888, SelfPageFile:12996
2026-04-29 08:26:51 [Info] CommitTotal:5248,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:332,SystemCache:185,KernelTotal:266,KernelPaged:174,KernelNonpaged:92,PageSize:4096,HandleCount:27625,ProcessCount:52,ThreadCount:761
2026-04-29 08:43:32 [Info] GetMessage : T_MSG_CHECK
2026-04-29 08:43:32 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0MjM0MTIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDY2NjEyLCJzdWIiOiJSVEFQX0lEWF8xODAzNjBfMTc3NzQyMzQxMjE1NSJ9.Ub5_-zrk4R1KOPBt6Ahpc0svTNNy10-qUIKAvr2DWBM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 08:43:37 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 08:43:37 [Info] ipc client:Rtap228761777423417_handler Reg client_name:Rtap228761777423417 on WhiteList
2026-04-29 08:43:37 [Info] start rtap process success, pid is 792, argument is Rtap228761777423417
2026-04-29 08:43:37 [Info] New ClientConnectNotify : Rtap228761777423417, id is 000004B4
2026-04-29 08:43:37 [Info] ipc client:Rtap228761777423417 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 08:43:37 [Info] Rtap Platform Rtap228761777423417 execv work --windows-process-check on pid 792
2026-04-29 08:43:38 [Info] csrss.exe open proc 792 AliSecCheck.ex
2026-04-29 08:43:39 [Info] csrss.exe open thread 792 AliSecCheck.ex
2026-04-29 08:44:00 [Info] Done Work --windows-process-check:1
2026-04-29 08:44:00 [Info] Rtap Platform Rtap228761777423417 Exit:normal exit
2026-04-29 08:44:02 [Info] ClientDisConnectNotify : Rtap228761777423417, id is 000004B4
2026-04-29 09:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15943","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16064","aliyundun_upload_time":"1777424776","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 09:27:05 [Info] TotalPhys:2047,AvailPhys:312,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1339,SelfWorkingSet:16004, SelfPageFile:13124
2026-04-29 09:27:05 [Info] CommitTotal:5265,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:312,SystemCache:218,KernelTotal:269,KernelPaged:174,KernelNonpaged:95,PageSize:4096,HandleCount:27786,ProcessCount:52,ThreadCount:766
2026-04-29 10:06:28 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"4","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15975","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16052","aliyundun_upload_time":"1777428388","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 10:25:21 [Info] GetMessage : T_MSG_CHECK
2026-04-29 10:25:21 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0Mjk1MjEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDcyNzIxLCJzdWIiOiJSVEFQX0lEWF8xODAzNjhfMTc3NzQyOTUyMTI4MSJ9.uQrxLfmlqov7jarNtj0GHzxEVOISArV5b5Tr9gTOYT0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 10:25:25 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 10:25:25 [Info] ipc client:Rtap100541777429525_handler Reg client_name:Rtap100541777429525 on WhiteList
2026-04-29 10:25:25 [Info] start rtap process success, pid is 3208, argument is Rtap100541777429525
2026-04-29 10:25:25 [Info] New ClientConnectNotify : Rtap100541777429525, id is 00000548
2026-04-29 10:25:25 [Info] ipc client:Rtap100541777429525 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 10:25:26 [Info] Rtap Platform Rtap100541777429525 execv work --windows-registry-check on pid 3208
2026-04-29 10:25:26 [Info] csrss.exe open proc 3208 AliSecCheck.ex
2026-04-29 10:25:27 [Info] csrss.exe open thread 3208 AliSecCheck.ex
2026-04-29 10:26:01 [Info] Done Work --windows-registry-check:1
2026-04-29 10:26:01 [Info] Rtap Platform Rtap100541777429525 Exit:normal exit
2026-04-29 10:26:03 [Info] ClientDisConnectNotify : Rtap100541777429525, id is 00000548
2026-04-29 10:26:28 [Info] GetMessage : T_MSG_CHECK
2026-04-29 10:26:28 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0Mjk1ODgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDcyNzg4LCJzdWIiOiJSVEFQX0lEWF8xODAzNzRfMTc3NzQyOTU4ODE1MSJ9.0e0iLa6icWnFAhc1JExEkpteQNaaVzvoZkv4-tngQwM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 10:26:33 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 10:26:33 [Info] ipc client:Rtap102761777429593_handler Reg client_name:Rtap102761777429593 on WhiteList
2026-04-29 10:26:33 [Info] start rtap process success, pid is 1424, argument is Rtap102761777429593
2026-04-29 10:26:33 [Info] New ClientConnectNotify : Rtap102761777429593, id is 00000540
2026-04-29 10:26:33 [Info] ipc client:Rtap102761777429593 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 10:26:33 [Info] Rtap Platform Rtap102761777429593 execv work --windows-driver-version-check on pid 1424
2026-04-29 10:26:35 [Info] csrss.exe open proc 1424 AliSecCheck.ex
2026-04-29 10:26:36 [Info] csrss.exe open thread 1424 AliSecCheck.ex
2026-04-29 10:26:40 [Info] Done Work --windows-driver-version-check:1
2026-04-29 10:26:40 [Info] Rtap Platform Rtap102761777429593 Exit:normal exit
2026-04-29 10:26:43 [Info] ClientDisConnectNotify : Rtap102761777429593, id is 00000540
2026-04-29 10:27:21 [Info] TotalPhys:2047,AvailPhys:321,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1363,SelfWorkingSet:15952, SelfPageFile:13108
2026-04-29 10:27:21 [Info] CommitTotal:5241,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:321,SystemCache:227,KernelTotal:266,KernelPaged:173,KernelNonpaged:92,PageSize:4096,HandleCount:27676,ProcessCount:52,ThreadCount:760
2026-04-29 10:31:09 [Info] GetMessage : T_MSG_CHECK
2026-04-29 10:31:09 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0Mjk4NjksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDczMDY5LCJzdWIiOiJSVEFQX0lEWF8xODAzNjFfMTc3NzQyOTg2OTkwNyJ9.SZ6ojYNs19A5PHLwRYfmYOTsPmkIFtSM40Ey6x7jZnM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 10:31:14 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 10:31:14 [Info] ipc client:Rtap111941777429874_handler Reg client_name:Rtap111941777429874 on WhiteList
2026-04-29 10:31:14 [Info] start rtap process success, pid is 5016, argument is Rtap111941777429874
2026-04-29 10:31:14 [Info] New ClientConnectNotify : Rtap111941777429874, id is 000004B4
2026-04-29 10:31:14 [Info] ipc client:Rtap111941777429874 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 10:31:14 [Info] Rtap Platform Rtap111941777429874 execv work --tcp-connect-check on pid 5016
2026-04-29 10:31:15 [Info] csrss.exe open proc 5016 AliSecCheck.ex
2026-04-29 10:31:16 [Info] csrss.exe open thread 5016 AliSecCheck.ex
2026-04-29 10:31:25 [Info] Done Work --tcp-connect-check:1
2026-04-29 10:31:25 [Info] Rtap Platform Rtap111941777429874 Exit:normal exit
2026-04-29 10:31:27 [Info] ClientDisConnectNotify : Rtap111941777429874, id is 000004B4
2026-04-29 10:32:10 [Info] GetMessage : T_MSG_CHECK
2026-04-29 10:32:10 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0Mjk5MjksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDczMTI5LCJzdWIiOiJSVEFQX0lEWF8xODAzNjNfMTc3NzQyOTkyOTg5MyJ9.Trstq-PcPyfgLutWjc5pNBSJD83IEZLvNjnMdy2iySs has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 10:32:13 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 10:32:13 [Info] ipc client:Rtap113871777429933_handler Reg client_name:Rtap113871777429933 on WhiteList
2026-04-29 10:32:13 [Info] start rtap process success, pid is 2808, argument is Rtap113871777429933
2026-04-29 10:32:13 [Info] New ClientConnectNotify : Rtap113871777429933, id is 00000540
2026-04-29 10:32:13 [Info] ipc client:Rtap113871777429933 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 10:32:14 [Info] Rtap Platform Rtap113871777429933 execv work --windows-schedule-task-check on pid 2808
2026-04-29 10:32:15 [Info] csrss.exe open proc 2808 AliSecCheck.ex
2026-04-29 10:32:16 [Info] csrss.exe open thread 2808 AliSecCheck.ex
2026-04-29 10:32:49 [Info] Done Work --windows-schedule-task-check:1
2026-04-29 10:32:49 [Info] Rtap Platform Rtap113871777429933 Exit:normal exit
2026-04-29 10:32:51 [Info] ClientDisConnectNotify : Rtap113871777429933, id is 00000540
2026-04-29 10:42:15 [Info] get meta data success by v2
2026-04-29 10:42:15 [Info] get empty metaserver config
2026-04-29 10:42:15 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 10:42:16 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 10:42:16 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 10:42:16 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 10:42:16 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 10:42:16 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 10:42:16 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 10:42:16 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 10:42:16 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 10:42:16 [Info] download cert compare md5 same
2026-04-29 10:42:16 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 10:42:16 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 10:42:16 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 10:42:16 [Info] nCurrentClock is 54004200, nCurrentTime is 1777430536
2026-04-29 10:42:16 [Info] SendMessage T_MSG_LOGIN
2026-04-29 10:42:16 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-29 10:42:16 [Info] begin to enable self guard after reconnect
2026-04-29 10:42:16 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-29 10:42:16 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-29 10:42:17 [Info] GetMessage : T_MSG_CHECK
2026-04-29 10:42:17 [Info] task 2e32e833-f5e1-441c-a4e3-7d89b52a93b8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 10:42:19 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-04-29 10:42:19 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-29 10:42:19 [Info] key : cpu, value : 10
2026-04-29 10:42:19 [Info] key : rio, value : 20480
2026-04-29 10:42:19 [Info] key : wio, value : 20480
2026-04-29 10:42:19 [Info] key : cpu_all, value : 0
2026-04-29 10:42:19 [Info] key : max_pid_check, value : 200
2026-04-29 10:42:19 [Info] key : throw_dump, value : 0
2026-04-29 10:42:19 [Info] key : hash_mode, value : 1
2026-04-29 10:42:19 [Info] key : mem, value : 200
2026-04-29 10:42:19 [Info] can not find key max_fd in online conf
2026-04-29 10:42:19 [Info] key : proc_limit, value : 1
2026-04-29 10:42:19 [Info] key : resource_limit_mode, value : 3
2026-04-29 10:42:19 [Info] key : rtap_update_mode, value : 1
2026-04-29 10:42:19 [Info] can not find key debug in online conf
2026-04-29 10:42:19 [Info] can not find key update_mode in online conf
2026-04-29 10:42:19 [Info] can not find key http_mode in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_enable in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_new_agent in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-29 10:42:19 [Info] can not find key mem_low_mark in online conf
2026-04-29 10:42:19 [Info] can not find key obnormal_report_interval in online conf
2026-04-29 10:42:19 [Info] key : cache_mode, value : 0
2026-04-29 10:42:19 [Info] key : abnormal_monitor_mode, value : 3
2026-04-29 10:42:19 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-29 10:42:19 [Info] key : queue_size_ratio, value : 80
2026-04-29 10:42:19 [Info] queue_size_ratio is 80
2026-04-29 10:42:19 [Info] resource limit mode and max limit cpu is not change
2026-04-29 10:42:19 [Info] set hash mode 1
2026-04-29 10:42:19 [Info] RTAP timeout config:9600000
2026-04-29 10:42:19 [Info] self_guard_mode config is 0
2026-04-29 10:42:20 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 10:42:20 [Info] ipc client:Rtap133691777430540_handler Reg client_name:Rtap133691777430540 on WhiteList
2026-04-29 10:42:20 [Info] start rtap process success, pid is 2656, argument is Rtap133691777430540
2026-04-29 10:42:21 [Info] New ClientConnectNotify : Rtap133691777430540, id is 000004B4
2026-04-29 10:42:22 [Info] Rtap Platform Rtap133691777430540 execv work --windows-sysinfoext-check on pid 2656
2026-04-29 10:42:22 [Info] csrss.exe open proc 2656 AliSecCheck.ex
2026-04-29 10:42:23 [Info] csrss.exe open thread 2656 AliSecCheck.ex
2026-04-29 10:42:24 [Info] ipc client:Rtap133691777430540 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 10:42:33 [Info] Done Work --windows-sysinfoext-check:1
2026-04-29 10:42:33 [Info] Rtap Platform Rtap133691777430540 Exit:normal exit
2026-04-29 10:42:35 [Info] ClientDisConnectNotify : Rtap133691777430540, id is 000004B4
2026-04-29 11:06:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15919","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16008","aliyundun_upload_time":"1777431999","aliyundun_write_pid_times":"0","ipc_send_count":"161","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 11:11:47 [Info] GetMessage : T_MSG_CHECK
2026-04-29 11:11:47 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0MzIzMDcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDc1NTA3LCJzdWIiOiJSVEFQX0lEWF8xODAzNjVfMTc3NzQzMjMwNzU2MyJ9.HAEMQtibmBgr2GUVEyTj_UQdH5otkLDxm8g6W0j6e4w has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 11:11:54 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 11:11:54 [Info] ipc client:Rtap191621777432314_handler Reg client_name:Rtap191621777432314 on WhiteList
2026-04-29 11:11:54 [Info] start rtap process success, pid is 3208, argument is Rtap191621777432314
2026-04-29 11:11:54 [Info] New ClientConnectNotify : Rtap191621777432314, id is 00000504
2026-04-29 11:11:54 [Info] ipc client:Rtap191621777432314 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 11:11:54 [Info] Rtap Platform Rtap191621777432314 execv work --windows-autorun-item-check on pid 3208
2026-04-29 11:11:55 [Info] csrss.exe open proc 3208 AliSecCheck.ex
2026-04-29 11:11:56 [Info] csrss.exe open thread 3208 AliSecCheck.ex
2026-04-29 11:12:09 [Info] Done Work --windows-autorun-item-check:1
2026-04-29 11:12:09 [Info] Rtap Platform Rtap191621777432314 Exit:normal exit
2026-04-29 11:12:11 [Info] ClientDisConnectNotify : Rtap191621777432314, id is 00000504
2026-04-29 11:27:40 [Info] TotalPhys:2047,AvailPhys:347,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1374,SelfWorkingSet:15780, SelfPageFile:12792
2026-04-29 11:27:40 [Info] CommitTotal:5231,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:347,SystemCache:162,KernelTotal:262,KernelPaged:169,KernelNonpaged:92,PageSize:4096,HandleCount:27676,ProcessCount:52,ThreadCount:758
2026-04-29 12:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15866","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15976","aliyundun_upload_time":"1777435598","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 12:27:56 [Info] TotalPhys:2047,AvailPhys:353,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1369,SelfWorkingSet:15892, SelfPageFile:12964
2026-04-29 12:27:56 [Info] CommitTotal:5236,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:353,SystemCache:164,KernelTotal:262,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27705,ProcessCount:52,ThreadCount:764
2026-04-29 13:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15874","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15976","aliyundun_upload_time":"1777439173","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 13:28:13 [Info] TotalPhys:2047,AvailPhys:334,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1361,SelfWorkingSet:15848, SelfPageFile:13132
2026-04-29 13:28:13 [Info] CommitTotal:5243,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:334,SystemCache:166,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27673,ProcessCount:52,ThreadCount:759
2026-04-29 13:58:17 [Info] get meta data success by v2
2026-04-29 13:58:17 [Info] get empty metaserver config
2026-04-29 13:58:17 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 13:58:18 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 13:58:18 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 13:58:18 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 13:58:18 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 13:58:18 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 13:58:18 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 13:58:18 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 13:58:18 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 13:58:18 [Info] download cert compare md5 same
2026-04-29 13:58:18 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 13:58:18 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 13:58:18 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 14:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15884","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16020","aliyundun_upload_time":"1777442778","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 14:28:29 [Info] TotalPhys:2047,AvailPhys:424,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1447,SelfWorkingSet:16056, SelfPageFile:13288
2026-04-29 14:28:29 [Info] CommitTotal:5221,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:424,SystemCache:215,KernelTotal:262,KernelPaged:169,KernelNonpaged:92,PageSize:4096,HandleCount:27852,ProcessCount:52,ThreadCount:779
2026-04-29 15:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15940","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"16056","aliyundun_upload_time":"1777446396","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 15:28:46 [Info] TotalPhys:2047,AvailPhys:422,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1443,SelfWorkingSet:15892, SelfPageFile:13072
2026-04-29 15:28:46 [Info] CommitTotal:5225,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:422,SystemCache:231,KernelTotal:262,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27662,ProcessCount:52,ThreadCount:757
2026-04-29 16:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15929","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16016","aliyundun_upload_time":"1777449981","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 16:09:00 [Info] nCurrentClock is 72005200, nCurrentTime is 1777450140
2026-04-29 16:09:01 [Info] SendMessage T_MSG_LOGIN
2026-04-29 16:09:01 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-29 16:09:01 [Info] begin to enable self guard after reconnect
2026-04-29 16:09:01 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-29 16:09:01 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-29 16:09:01 [Info] GetMessage : T_MSG_CHECK
2026-04-29 16:09:01 [Info] task 8759db55-63c0-4c32-a3e3-c6b64072b859 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 16:09:03 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-29 16:09:03 [Info] key : cpu, value : 10
2026-04-29 16:09:03 [Info] key : rio, value : 20480
2026-04-29 16:09:03 [Info] key : wio, value : 20480
2026-04-29 16:09:03 [Info] key : cpu_all, value : 0
2026-04-29 16:09:03 [Info] key : max_pid_check, value : 200
2026-04-29 16:09:03 [Info] key : throw_dump, value : 0
2026-04-29 16:09:03 [Info] key : hash_mode, value : 1
2026-04-29 16:09:03 [Info] key : mem, value : 200
2026-04-29 16:09:03 [Info] can not find key max_fd in online conf
2026-04-29 16:09:03 [Info] key : proc_limit, value : 1
2026-04-29 16:09:03 [Info] key : resource_limit_mode, value : 3
2026-04-29 16:09:03 [Info] key : rtap_update_mode, value : 1
2026-04-29 16:09:03 [Info] can not find key debug in online conf
2026-04-29 16:09:03 [Info] can not find key update_mode in online conf
2026-04-29 16:09:03 [Info] can not find key http_mode in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_enable in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_new_agent in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-29 16:09:03 [Info] can not find key mem_low_mark in online conf
2026-04-29 16:09:03 [Info] can not find key obnormal_report_interval in online conf
2026-04-29 16:09:03 [Info] key : cache_mode, value : 0
2026-04-29 16:09:03 [Info] key : abnormal_monitor_mode, value : 3
2026-04-29 16:09:03 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-29 16:09:03 [Info] key : queue_size_ratio, value : 80
2026-04-29 16:09:03 [Info] queue_size_ratio is 80
2026-04-29 16:09:03 [Info] resource limit mode and max limit cpu is not change
2026-04-29 16:09:03 [Info] set hash mode 1
2026-04-29 16:09:03 [Info] RTAP timeout config:9600000
2026-04-29 16:09:03 [Info] self_guard_mode config is 0
2026-04-29 16:09:05 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 16:09:05 [Info] ipc client:Rtap118551777450145_handler Reg client_name:Rtap118551777450145 on WhiteList
2026-04-29 16:09:05 [Info] start rtap process success, pid is 612, argument is Rtap118551777450145
2026-04-29 16:09:06 [Info] system memory usage is 82
2026-04-29 16:09:07 [Info] system memory usage is 82
2026-04-29 16:09:07 [Info] csrss.exe open proc 612 AliSecCheck.ex
2026-04-29 16:09:07 [Info] system memory usage is 82
2026-04-29 16:09:08 [Info] system memory usage is 82
2026-04-29 16:09:08 [Info] csrss.exe open thread 612 AliSecCheck.ex
2026-04-29 16:09:08 [Info] system memory usage is 82
2026-04-29 16:09:09 [Info] system memory usage is 82
2026-04-29 16:09:09 [Info] csrss.exe open thread 612 AliSecCheck.ex
2026-04-29 16:09:10 [Info] system memory usage is 83
2026-04-29 16:09:10 [Info] New ClientConnectNotify : Rtap118551777450145, id is 00000524
2026-04-29 16:09:10 [Info] Rtap Platform Rtap118551777450145 execv work --windows-sysinfoext-check on pid 612
2026-04-29 16:09:10 [Info] csrss.exe open thread 612 AliSecCheck.ex
2026-04-29 16:09:10 [Info] ipc client:Rtap118551777450145 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 16:09:11 [Info] csrss.exe open thread 612 AliSecCheck.ex
2026-04-29 16:09:21 [Info] Done Work --windows-sysinfoext-check:1
2026-04-29 16:09:21 [Info] Rtap Platform Rtap118551777450145 Exit:normal exit
2026-04-29 16:09:23 [Info] ClientDisConnectNotify : Rtap118551777450145, id is 00000524
2026-04-29 16:29:04 [Info] TotalPhys:2047,AvailPhys:379,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1408,SelfWorkingSet:15936, SelfPageFile:12960
2026-04-29 16:29:04 [Info] CommitTotal:5260,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:379,SystemCache:246,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27875,ProcessCount:53,ThreadCount:769
2026-04-29 17:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15997","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16120","aliyundun_upload_time":"1777453576","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 17:14:24 [Info] get meta data success by v2
2026-04-29 17:14:24 [Info] get empty metaserver config
2026-04-29 17:14:24 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 17:14:24 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 17:14:24 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 17:14:24 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 17:14:24 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 17:14:24 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 17:14:24 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 17:14:24 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 17:14:25 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 17:14:25 [Info] download cert compare md5 same
2026-04-29 17:14:25 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 17:14:25 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 17:14:25 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 17:29:21 [Info] TotalPhys:2047,AvailPhys:394,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1426,SelfWorkingSet:16052, SelfPageFile:13252
2026-04-29 17:29:21 [Info] CommitTotal:5243,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:394,SystemCache:250,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27665,ProcessCount:52,ThreadCount:767
2026-04-29 18:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16021","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16184","aliyundun_upload_time":"1777457185","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 18:07:55 [Info] GetMessage : T_MSG_CHECK
2026-04-29 18:07:55 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0NTcyNzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTAwNDc1LCJleHAiOjE3NzczMzQwODYsInN1YiI6IlJUQVBfSURYXzE4MDQzMF8xNzc3NDU3Mjc1NDU1Iiwic3ViIjoiUlRBUF9JRFhfektsWmxfMTc3NzI5MDg4Njg0Ml85MjZlYjI1YTQ3YWE1MDYxYWJmMGFkMTc2YTEwNmEzYiJ9.MpDJ2L5harc9vtr-e3o_sZO_N0q4hB6sKRGvE1mN2eM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 18:07:59 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 18:07:59 [Info] ipc client:Rtap23831777457279_handler Reg client_name:Rtap23831777457279 on WhiteList
2026-04-29 18:07:59 [Info] start rtap process success, pid is 3896, argument is Rtap23831777457279
2026-04-29 18:07:59 [Info] New ClientConnectNotify : Rtap23831777457279, id is 0000052C
2026-04-29 18:07:59 [Info] ipc client:Rtap23831777457279 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 18:08:00 [Info] Rtap Platform Rtap23831777457279 execv work --secnet_rasp_agent on pid 3896
2026-04-29 18:08:02 [Info] csrss.exe open proc 3896 AliSecCheck.ex
2026-04-29 18:08:03 [Info] csrss.exe open thread 3896 AliSecCheck.ex
2026-04-29 18:08:04 [Info] csrss.exe open thread 3896 AliSecCheck.ex
2026-04-29 18:08:07 [Info] Done Work --secnet_rasp_agent:1
2026-04-29 18:08:07 [Info] Rtap Platform Rtap23831777457279 Exit:normal exit
2026-04-29 18:08:09 [Info] ClientDisConnectNotify : Rtap23831777457279, id is 0000052C
2026-04-29 18:29:39 [Info] TotalPhys:2047,AvailPhys:397,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1429,SelfWorkingSet:15892, SelfPageFile:13084
2026-04-29 18:29:39 [Info] CommitTotal:5239,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:397,SystemCache:250,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27661,ProcessCount:52,ThreadCount:761
2026-04-29 19:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15985","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16108","aliyundun_upload_time":"1777460773","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 19:29:55 [Info] TotalPhys:2047,AvailPhys:401,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1433,SelfWorkingSet:15880, SelfPageFile:12828
2026-04-29 19:29:55 [Info] CommitTotal:5235,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:401,SystemCache:250,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27663,ProcessCount:52,ThreadCount:758
2026-04-29 20:06:23 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15980","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16124","aliyundun_upload_time":"1777464383","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 20:30:12 [Info] TotalPhys:2047,AvailPhys:393,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1424,SelfWorkingSet:16008, SelfPageFile:13284
2026-04-29 20:30:12 [Info] CommitTotal:5244,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:393,SystemCache:255,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27669,ProcessCount:52,ThreadCount:759
2026-04-29 20:30:16 [Info] get meta data success by v2
2026-04-29 20:30:16 [Info] get empty metaserver config
2026-04-29 20:30:16 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 20:30:16 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 20:30:16 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 20:30:16 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 20:30:16 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 20:30:16 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 20:30:16 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 20:30:16 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 20:30:16 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 20:30:16 [Info] download cert compare md5 same
2026-04-29 20:30:16 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 20:30:16 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 20:30:16 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 21:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16039","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16192","aliyundun_upload_time":"1777468000","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-04-29 21:30:36 [Info] TotalPhys:2047,AvailPhys:335,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1431,SelfWorkingSet:15984, SelfPageFile:13004
2026-04-29 21:30:36 [Info] CommitTotal:5237,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:335,SystemCache:213,KernelTotal:269,KernelPaged:176,KernelNonpaged:93,PageSize:4096,HandleCount:27695,ProcessCount:52,ThreadCount:764
2026-04-29 21:36:07 [Info] nCurrentClock is 90006500, nCurrentTime is 1777469767
2026-04-29 21:36:07 [Info] SendMessage T_MSG_LOGIN
2026-04-29 21:36:07 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-29 21:36:07 [Info] begin to enable self guard after reconnect
2026-04-29 21:36:07 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-29 21:36:07 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-29 21:36:08 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-29 21:36:08 [Info] key : cpu, value : 10
2026-04-29 21:36:08 [Info] key : rio, value : 20480
2026-04-29 21:36:08 [Info] key : wio, value : 20480
2026-04-29 21:36:08 [Info] key : cpu_all, value : 0
2026-04-29 21:36:08 [Info] key : max_pid_check, value : 200
2026-04-29 21:36:08 [Info] key : throw_dump, value : 0
2026-04-29 21:36:08 [Info] key : hash_mode, value : 1
2026-04-29 21:36:08 [Info] key : mem, value : 200
2026-04-29 21:36:08 [Info] can not find key max_fd in online conf
2026-04-29 21:36:08 [Info] key : proc_limit, value : 1
2026-04-29 21:36:08 [Info] key : resource_limit_mode, value : 3
2026-04-29 21:36:08 [Info] key : rtap_update_mode, value : 1
2026-04-29 21:36:08 [Info] can not find key debug in online conf
2026-04-29 21:36:08 [Info] can not find key update_mode in online conf
2026-04-29 21:36:08 [Info] can not find key http_mode in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_enable in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_new_agent in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-29 21:36:08 [Info] can not find key mem_low_mark in online conf
2026-04-29 21:36:08 [Info] can not find key obnormal_report_interval in online conf
2026-04-29 21:36:08 [Info] key : cache_mode, value : 0
2026-04-29 21:36:08 [Info] key : abnormal_monitor_mode, value : 3
2026-04-29 21:36:08 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-29 21:36:08 [Info] key : queue_size_ratio, value : 80
2026-04-29 21:36:08 [Info] queue_size_ratio is 80
2026-04-29 21:36:08 [Info] resource limit mode and max limit cpu is not change
2026-04-29 21:36:08 [Info] set hash mode 1
2026-04-29 21:36:08 [Info] RTAP timeout config:9600000
2026-04-29 21:36:08 [Info] self_guard_mode config is 0
2026-04-29 21:36:08 [Info] GetMessage : T_MSG_CHECK
2026-04-29 21:36:08 [Info] task 4dfa6529-43c7-4754-a6a9-94bec84548ce has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 21:36:13 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 21:36:13 [Info] ipc client:Rtap104151777469773_handler Reg client_name:Rtap104151777469773 on WhiteList
2026-04-29 21:36:13 [Info] start rtap process success, pid is 488, argument is Rtap104151777469773
2026-04-29 21:36:13 [Info] New ClientConnectNotify : Rtap104151777469773, id is 00000504
2026-04-29 21:36:13 [Info] ipc client:Rtap104151777469773 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 21:36:14 [Info] GetMessage : T_MSG_CHECK
2026-04-29 21:36:14 [Info] task 28c9960d32c66ba3deb6f1543990738e has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 21:36:14 [Info] Rtap Platform Rtap104151777469773 execv work --windows-sysinfoext-check on pid 488
2026-04-29 21:36:14 [Info] csrss.exe open proc 488 AliSecCheck.ex
2026-04-29 21:36:15 [Info] csrss.exe open thread 488 AliSecCheck.ex
2026-04-29 21:36:18 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 21:36:18 [Info] ipc client:Rtap104321777469778_handler Reg client_name:Rtap104321777469778 on WhiteList
2026-04-29 21:36:18 [Info] start rtap process success, pid is 2356, argument is Rtap104321777469778
2026-04-29 21:36:18 [Info] New ClientConnectNotify : Rtap104321777469778, id is 0000052C
2026-04-29 21:36:19 [Info] ipc client:Rtap104321777469778 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 21:36:19 [Info] Rtap Platform Rtap104321777469778 execv work --windows-vul-check on pid 2356
2026-04-29 21:36:19 [Info] csrss.exe open proc 2356 AliSecCheck.ex
2026-04-29 21:36:20 [Info] csrss.exe open thread 2356 AliSecCheck.ex
2026-04-29 21:36:26 [Info] Done Work --windows-sysinfoext-check:1
2026-04-29 21:36:26 [Info] Rtap Platform Rtap104151777469773 Exit:normal exit
2026-04-29 21:36:28 [Info] ClientDisConnectNotify : Rtap104151777469773, id is 00000504
2026-04-29 21:36:32 [Info] Done Work --windows-vul-check:1
2026-04-29 21:36:32 [Info] Rtap Platform Rtap104321777469778 Exit:normal exit
2026-04-29 21:36:34 [Info] ClientDisConnectNotify : Rtap104321777469778, id is 0000052C
2026-04-29 22:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16028","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16116","aliyundun_upload_time":"1777471586","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 22:30:53 [Info] TotalPhys:2047,AvailPhys:333,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1428,SelfWorkingSet:16036, SelfPageFile:13224
2026-04-29 22:30:53 [Info] CommitTotal:5241,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:333,SystemCache:222,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27612,ProcessCount:52,ThreadCount:766
2026-04-29 23:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16025","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16116","aliyundun_upload_time":"1777475200","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 23:31:10 [Info] TotalPhys:2047,AvailPhys:339,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1423,SelfWorkingSet:16008, SelfPageFile:13200
2026-04-29 23:31:10 [Info] CommitTotal:5245,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:339,SystemCache:226,KernelTotal:269,KernelPaged:176,KernelNonpaged:92,PageSize:4096,HandleCount:27597,ProcessCount:52,ThreadCount:761
2026-04-29 23:46:44 [Info] get meta data success by v2
2026-04-29 23:46:44 [Info] get empty metaserver config
2026-04-29 23:46:44 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 23:46:44 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 23:46:44 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 23:46:44 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 23:46:44 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 23:46:44 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 23:46:44 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 23:46:44 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 23:46:44 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 23:46:44 [Info] download cert compare md5 same
2026-04-29 23:46:44 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 23:46:44 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 23:46:44 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 00:06:22 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15987","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16140","aliyundun_upload_time":"1777478782","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 00:24:26 [Info] TotalPhys:2047,AvailPhys:453,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1283,SelfWorkingSet:16492, SelfPageFile:13900
2026-05-06 00:24:26 [Info] CommitTotal:4806,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:453,SystemCache:345,KernelTotal:264,KernelPaged:178,KernelNonpaged:86,PageSize:4096,HandleCount:27802,ProcessCount:52,ThreadCount:766
2026-05-06 00:57:24 [Info] nCurrentClock is 576035100, nCurrentTime is 1778000244
2026-05-06 00:57:24 [Info] SendMessage T_MSG_LOGIN
2026-05-06 00:57:25 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-06 00:57:25 [Info] begin to enable self guard after reconnect
2026-05-06 00:57:25 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-06 00:57:25 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-06 00:57:25 [Info] GetMessage : T_MSG_CHECK
2026-05-06 00:57:25 [Info] task 78066c08-8461-43ec-95e5-2d8435a51314 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 00:57:27 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-06 00:57:27 [Info] key : cpu, value : 10
2026-05-06 00:57:27 [Info] key : rio, value : 20480
2026-05-06 00:57:27 [Info] key : wio, value : 20480
2026-05-06 00:57:27 [Info] key : cpu_all, value : 0
2026-05-06 00:57:27 [Info] key : max_pid_check, value : 200
2026-05-06 00:57:27 [Info] key : throw_dump, value : 0
2026-05-06 00:57:27 [Info] key : hash_mode, value : 1
2026-05-06 00:57:27 [Info] key : mem, value : 200
2026-05-06 00:57:27 [Info] can not find key max_fd in online conf
2026-05-06 00:57:27 [Info] key : proc_limit, value : 1
2026-05-06 00:57:27 [Info] key : resource_limit_mode, value : 3
2026-05-06 00:57:27 [Info] key : rtap_update_mode, value : 1
2026-05-06 00:57:27 [Info] can not find key debug in online conf
2026-05-06 00:57:27 [Info] can not find key update_mode in online conf
2026-05-06 00:57:27 [Info] can not find key http_mode in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_enable in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_new_agent in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-06 00:57:27 [Info] can not find key mem_low_mark in online conf
2026-05-06 00:57:27 [Info] can not find key obnormal_report_interval in online conf
2026-05-06 00:57:27 [Info] key : cache_mode, value : 0
2026-05-06 00:57:27 [Info] key : abnormal_monitor_mode, value : 3
2026-05-06 00:57:27 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-06 00:57:27 [Info] key : queue_size_ratio, value : 80
2026-05-06 00:57:27 [Info] queue_size_ratio is 80
2026-05-06 00:57:27 [Info] resource limit mode and max limit cpu is not change
2026-05-06 00:57:27 [Info] set hash mode 1
2026-05-06 00:57:27 [Info] RTAP timeout config:9600000
2026-05-06 00:57:27 [Info] self_guard_mode config is 0
2026-05-06 00:57:32 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 00:57:32 [Info] ipc client:Rtap60331778000252_handler Reg client_name:Rtap60331778000252 on WhiteList
2026-05-06 00:57:32 [Info] start rtap process success, pid is 2020, argument is Rtap60331778000252
2026-05-06 00:57:32 [Info] system memory usage is 82
2026-05-06 00:57:33 [Info] system memory usage is 82
2026-05-06 00:57:33 [Info] New ClientConnectNotify : Rtap60331778000252, id is 000004DC
2026-05-06 00:57:33 [Info] ipc client:Rtap60331778000252 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 00:57:33 [Info] Rtap Platform Rtap60331778000252 execv work --windows-sysinfoext-check on pid 2020
2026-05-06 00:57:34 [Info] csrss.exe open proc 2020 AliSecCheck.ex
2026-05-06 00:57:35 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 00:57:36 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 00:57:37 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 00:57:38 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 00:57:44 [Info] Done Work --windows-sysinfoext-check:1
2026-05-06 00:57:44 [Info] Rtap Platform Rtap60331778000252 Exit:normal exit
2026-05-06 00:57:47 [Info] ClientDisConnectNotify : Rtap60331778000252, id is 000004DC
2026-05-06 01:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16485","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16656","aliyundun_upload_time":"1778000786","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 01:24:45 [Info] TotalPhys:2047,AvailPhys:428,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1266,SelfWorkingSet:16364, SelfPageFile:13536
2026-05-06 01:24:45 [Info] CommitTotal:4822,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:428,SystemCache:384,KernelTotal:258,KernelPaged:171,KernelNonpaged:86,PageSize:4096,HandleCount:28245,ProcessCount:53,ThreadCount:800
2026-05-06 01:43:39 [Info] GetMessage : T_MSG_CHECK
2026-05-06 01:43:39 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMDMwMTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDQ2MjE5LCJzdWIiOiJSVEFQX0lEWF8xODA4OTVfMTc3ODAwMzAxOTY0MSJ9.TliyNZ3BqaHCMdleLmnU7ur-VttgYQ2aUwYZmDhsv9I has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 01:43:46 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 01:43:46 [Info] ipc client:Rtap150911778003026_handler Reg client_name:Rtap150911778003026 on WhiteList
2026-05-06 01:43:46 [Info] start rtap process success, pid is 2472, argument is Rtap150911778003026
2026-05-06 01:43:47 [Info] New ClientConnectNotify : Rtap150911778003026, id is 00000504
2026-05-06 01:43:48 [Info] Rtap Platform Rtap150911778003026 execv work --sca on pid 2472
2026-05-06 01:43:48 [Info] ipc client:Rtap150911778003026 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 01:43:49 [Info] csrss.exe open proc 2472 AliSecCheck.ex
2026-05-06 01:43:50 [Info] csrss.exe open thread 2472 AliSecCheck.ex
2026-05-06 01:43:51 [Info] csrss.exe open thread 2472 AliSecCheck.ex
2026-05-06 01:43:52 [Info] csrss.exe open thread 2472 AliSecCheck.ex
2026-05-06 01:43:53 [Info] csrss.exe open thread 2472 AliSecCheck.ex
2026-05-06 01:44:13 [Info] csrss.exe open thread 2472 AliSecCheck.ex
2026-05-06 01:44:35 [Info] Done Work --sca:1
2026-05-06 01:44:35 [Info] Rtap Platform Rtap150911778003026 Exit:normal exit
2026-05-06 01:44:37 [Info] ClientDisConnectNotify : Rtap150911778003026, id is 00000504
2026-05-06 02:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16464","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16684","aliyundun_upload_time":"1778004398","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 02:25:01 [Info] TotalPhys:2047,AvailPhys:411,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1211,SelfWorkingSet:16516, SelfPageFile:13728
2026-05-06 02:25:01 [Info] CommitTotal:4878,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:411,SystemCache:337,KernelTotal:259,KernelPaged:172,KernelNonpaged:86,PageSize:4096,HandleCount:27844,ProcessCount:52,ThreadCount:766
2026-05-06 03:06:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16483","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16552","aliyundun_upload_time":"1778007992","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 03:07:40 [Info] get meta data success by v2
2026-05-06 03:07:40 [Info] get empty metaserver config
2026-05-06 03:07:40 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 03:07:40 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 03:07:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-06 03:07:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-06 03:07:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-06 03:07:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-06 03:07:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 03:07:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 03:07:41 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-06 03:07:41 [Info] download cert compare md5 same
2026-05-06 03:07:41 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 03:07:41 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 03:07:41 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 03:25:19 [Info] TotalPhys:2047,AvailPhys:418,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1151,SelfWorkingSet:16456, SelfPageFile:13652
2026-05-06 03:25:19 [Info] CommitTotal:4937,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:418,SystemCache:340,KernelTotal:257,KernelPaged:170,KernelNonpaged:86,PageSize:4096,HandleCount:27888,ProcessCount:52,ThreadCount:784
2026-05-06 04:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16510","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16600","aliyundun_upload_time":"1778011570","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 04:25:35 [Info] TotalPhys:2047,AvailPhys:426,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1136,SelfWorkingSet:16540, SelfPageFile:13736
2026-05-06 04:25:35 [Info] CommitTotal:4953,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:426,SystemCache:264,KernelTotal:257,KernelPaged:171,KernelNonpaged:86,PageSize:4096,HandleCount:27818,ProcessCount:52,ThreadCount:765
2026-05-06 05:06:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16552","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16612","aliyundun_upload_time":"1778015192","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 05:25:55 [Info] TotalPhys:2047,AvailPhys:427,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1121,SelfWorkingSet:16596, SelfPageFile:13820
2026-05-06 05:25:55 [Info] CommitTotal:4968,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:427,SystemCache:350,KernelTotal:257,KernelPaged:170,KernelNonpaged:86,PageSize:4096,HandleCount:27902,ProcessCount:52,ThreadCount:772
2026-05-06 06:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16556","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16596","aliyundun_upload_time":"1778018778","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 06:22:50 [Info] get meta data success by v2
2026-05-06 06:22:50 [Info] get empty metaserver config
2026-05-06 06:22:50 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 06:22:50 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 06:22:50 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-06 06:22:50 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-06 06:22:50 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-06 06:22:50 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-06 06:22:50 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 06:22:50 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 06:22:51 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-06 06:22:51 [Info] download cert compare md5 same
2026-05-06 06:22:51 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 06:22:51 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 06:22:51 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 06:22:51 [Info] nCurrentClock is 594035900, nCurrentTime is 1778019771
2026-05-06 06:22:51 [Info] SendMessage T_MSG_LOGIN
2026-05-06 06:22:51 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-06 06:22:51 [Info] begin to enable self guard after reconnect
2026-05-06 06:22:51 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-06 06:22:51 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-06 06:22:51 [Info] GetMessage : T_MSG_CHECK
2026-05-06 06:22:51 [Info] task 988b7687-846d-43e5-b630-429750df657d has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 06:22:53 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-06 06:22:54 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-06 06:22:54 [Info] key : cpu, value : 10
2026-05-06 06:22:54 [Info] key : rio, value : 20480
2026-05-06 06:22:54 [Info] key : wio, value : 20480
2026-05-06 06:22:54 [Info] key : cpu_all, value : 0
2026-05-06 06:22:54 [Info] key : max_pid_check, value : 200
2026-05-06 06:22:54 [Info] key : throw_dump, value : 0
2026-05-06 06:22:54 [Info] key : hash_mode, value : 1
2026-05-06 06:22:54 [Info] key : mem, value : 200
2026-05-06 06:22:54 [Info] can not find key max_fd in online conf
2026-05-06 06:22:54 [Info] key : proc_limit, value : 1
2026-05-06 06:22:54 [Info] key : resource_limit_mode, value : 3
2026-05-06 06:22:54 [Info] key : rtap_update_mode, value : 1
2026-05-06 06:22:54 [Info] can not find key debug in online conf
2026-05-06 06:22:54 [Info] can not find key update_mode in online conf
2026-05-06 06:22:54 [Info] can not find key http_mode in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_enable in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_new_agent in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-06 06:22:54 [Info] can not find key mem_low_mark in online conf
2026-05-06 06:22:54 [Info] can not find key obnormal_report_interval in online conf
2026-05-06 06:22:54 [Info] key : cache_mode, value : 0
2026-05-06 06:22:54 [Info] key : abnormal_monitor_mode, value : 3
2026-05-06 06:22:54 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-06 06:22:54 [Info] key : queue_size_ratio, value : 80
2026-05-06 06:22:54 [Info] queue_size_ratio is 80
2026-05-06 06:22:54 [Info] resource limit mode and max limit cpu is not change
2026-05-06 06:22:54 [Info] set hash mode 1
2026-05-06 06:22:54 [Info] RTAP timeout config:9600000
2026-05-06 06:22:54 [Info] self_guard_mode config is 0
2026-05-06 06:22:58 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 06:22:58 [Info] ipc client:Rtap42601778019778_handler Reg client_name:Rtap42601778019778 on WhiteList
2026-05-06 06:22:58 [Info] start rtap process success, pid is 3508, argument is Rtap42601778019778
2026-05-06 06:23:00 [Info] New ClientConnectNotify : Rtap42601778019778, id is 000004B4
2026-05-06 06:23:00 [Info] ipc client:Rtap42601778019778 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 06:23:00 [Info] Rtap Platform Rtap42601778019778 execv work --windows-sysinfoext-check on pid 3508
2026-05-06 06:23:00 [Info] csrss.exe open proc 3508 AliSecCheck.ex
2026-05-06 06:23:01 [Info] csrss.exe open thread 3508 AliSecCheck.ex
2026-05-06 06:23:02 [Info] csrss.exe open thread 3508 AliSecCheck.ex
2026-05-06 06:23:03 [Info] csrss.exe open thread 3508 AliSecCheck.ex
2026-05-06 06:23:04 [Info] csrss.exe open thread 3508 AliSecCheck.ex
2026-05-06 06:23:11 [Info] Done Work --windows-sysinfoext-check:1
2026-05-06 06:23:11 [Info] Rtap Platform Rtap42601778019778 Exit:normal exit
2026-05-06 06:23:13 [Info] ClientDisConnectNotify : Rtap42601778019778, id is 000004B4
2026-05-06 06:26:14 [Info] TotalPhys:2047,AvailPhys:412,TotalVirtual:2047,AvailVirtual:1977,TotalPageFile:6089,AvailPageFile:1141,SelfWorkingSet:16588, SelfPageFile:14012
2026-05-06 06:26:14 [Info] CommitTotal:4948,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:412,SystemCache:366,KernelTotal:263,KernelPaged:176,KernelNonpaged:86,PageSize:4096,HandleCount:28156,ProcessCount:53,ThreadCount:801
2026-05-06 07:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16526","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16656","aliyundun_upload_time":"1778022381","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 07:26:34 [Info] TotalPhys:2047,AvailPhys:437,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1141,SelfWorkingSet:16540, SelfPageFile:13744
2026-05-06 07:26:34 [Info] CommitTotal:4948,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:437,SystemCache:393,KernelTotal:264,KernelPaged:177,KernelNonpaged:86,PageSize:4096,HandleCount:28141,ProcessCount:53,ThreadCount:786
2026-05-06 07:43:56 [Info] GetMessage : T_MSG_CHECK
2026-05-06 07:43:56 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMjQ2MzYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3MzM0MDg2LCJleHAiOjE3NzgwNjc4MzYsInN1YiI6IlJUQVBfSURYXzE4MDg5N18xNzc4MDI0NjM2Mjc3In0.7NbesBioEJeUv-1cg8cSvftOCCIe96gfQ-oKWFNVqA8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 07:44:02 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 07:44:02 [Info] ipc client:Rtap201441778024642_handler Reg client_name:Rtap201441778024642 on WhiteList
2026-05-06 07:44:02 [Info] start rtap process success, pid is 2336, argument is Rtap201441778024642
2026-05-06 07:44:03 [Info] New ClientConnectNotify : Rtap201441778024642, id is 00000504
2026-05-06 07:44:04 [Info] csrss.exe open proc 2336 AliSecCheck.ex
2026-05-06 07:44:04 [Info] Rtap Platform Rtap201441778024642 execv work --windows-vul-clean on pid 2336
2026-05-06 07:44:04 [Info] ipc client:Rtap201441778024642 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 07:44:05 [Info] csrss.exe open thread 2336 AliSecCheck.ex
2026-05-06 07:44:06 [Info] csrss.exe open thread 2336 AliSecCheck.ex
2026-05-06 07:44:07 [Info] csrss.exe open thread 2336 AliSecCheck.ex
2026-05-06 07:44:08 [Info] csrss.exe open thread 2336 AliSecCheck.ex
2026-05-06 07:44:11 [Info] Done Work --windows-vul-clean:1
2026-05-06 07:44:11 [Info] Rtap Platform Rtap201441778024642 Exit:normal exit
2026-05-06 07:44:13 [Info] ClientDisConnectNotify : Rtap201441778024642, id is 00000504
2026-05-06 08:06:17 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16478","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16540","aliyundun_upload_time":"1778025977","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 08:27:00 [Info] TotalPhys:2047,AvailPhys:558,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1188,SelfWorkingSet:16428, SelfPageFile:13680
2026-05-06 08:27:00 [Info] CommitTotal:4901,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:558,SystemCache:455,KernelTotal:260,KernelPaged:173,KernelNonpaged:86,PageSize:4096,HandleCount:27862,ProcessCount:52,ThreadCount:766
2026-05-06 08:42:24 [Info] GetMessage : T_MSG_CHECK
2026-05-06 08:42:24 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMjgxNDQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDcxMzQ0LCJzdWIiOiJSVEFQX0lEWF8xODA4ODZfMTc3ODAyODE0NDU0MyJ9.NrAing8QTp_KDxuFpTcML-qjg49n0NCgD-T3uL-wyBw has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 08:42:31 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 08:42:31 [Info] ipc client:Rtap316031778028151_handler Reg client_name:Rtap316031778028151 on WhiteList
2026-05-06 08:42:31 [Info] start rtap process success, pid is 5068, argument is Rtap316031778028151
2026-05-06 08:42:32 [Info] New ClientConnectNotify : Rtap316031778028151, id is 0000052C
2026-05-06 08:42:33 [Info] Rtap Platform Rtap316031778028151 execv work --windows-process-check on pid 5068
2026-05-06 08:42:33 [Info] csrss.exe open proc 5068 AliSecCheck.ex
2026-05-06 08:42:33 [Info] ipc client:Rtap316031778028151 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 08:42:34 [Info] csrss.exe open thread 5068 AliSecCheck.ex
2026-05-06 08:42:35 [Info] csrss.exe open thread 5068 AliSecCheck.ex
2026-05-06 08:42:36 [Info] csrss.exe open thread 5068 AliSecCheck.ex
2026-05-06 08:42:37 [Info] csrss.exe open thread 5068 AliSecCheck.ex
2026-05-06 08:43:00 [Info] Done Work --windows-process-check:1
2026-05-06 08:43:00 [Info] Rtap Platform Rtap316031778028151 Exit:normal exit
2026-05-06 08:43:02 [Info] ClientDisConnectNotify : Rtap316031778028151, id is 0000052C
2026-05-06 09:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16528","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16768","aliyundun_upload_time":"1778029586","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 09:27:17 [Info] TotalPhys:2047,AvailPhys:482,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1168,SelfWorkingSet:16592, SelfPageFile:13784
2026-05-06 09:27:17 [Info] CommitTotal:4920,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:482,SystemCache:314,KernelTotal:266,KernelPaged:179,KernelNonpaged:87,PageSize:4096,HandleCount:27936,ProcessCount:52,ThreadCount:778
2026-05-06 09:38:21 [Info] get meta data success by v2
2026-05-06 09:38:21 [Info] get empty metaserver config
2026-05-06 09:38:21 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 09:38:21 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 09:38:21 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-06 09:38:22 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-06 09:38:22 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-06 09:38:22 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-06 09:38:22 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 09:38:22 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 09:38:22 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-06 09:38:22 [Info] download cert compare md5 same
2026-05-06 09:38:22 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 09:38:22 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 09:38:22 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 10:06:29 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16586","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16672","aliyundun_upload_time":"1778033189","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-05-06 10:24:26 [Info] GetMessage : T_MSG_CHECK
2026-05-06 10:24:26 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMzQyNjYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDc3NDY2LCJzdWIiOiJSVEFQX0lEWF8xODA4ODlfMTc3ODAzNDI2NjY2MyJ9.SaWT9GFx1KWlkCwA0KlmwFNRMB7OEaxhcjwKVOsvkHg has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 10:24:29 [Info] GetMessage : T_MSG_CHECK
2026-05-06 10:24:29 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMzQyNjcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDc3NDY3LCJleHAiOjE3NzczMzUwOTgsInN1YiI6IlJUQVBfSURYX3pLbFpsXzE3NzcyOTE4OTg4MDRfMjA1ZjVkOTM2ODYzODk1M2JhYzFlZTg0ZWI0MjVmZDUiLCJzdWIiOiJSVEFQX0lEWF96S2xabF8xNzc3MjkxODk4ODUyX2YwYTljZDQxMjE1NzQwODNmMDU2ZGZhOWVjMmIxZTI4Iiwic3ViIjoiUlRBUF9JRFhfMTgwODk0XzE3NzgwMzQyNjcxMzEifQ.P98JVEDtgxv4nK_h_Vv2d9iOr69WmzLWkhMbIChLfPk has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 10:24:31 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 10:24:31 [Info] ipc client:Rtap188201778034271_handler Reg client_name:Rtap188201778034271 on WhiteList
2026-05-06 10:24:32 [Info] start rtap process success, pid is 3640, argument is Rtap188201778034271
2026-05-06 10:24:33 [Info] New ClientConnectNotify : Rtap188201778034271, id is 00000504
2026-05-06 10:24:33 [Info] Rtap Platform Rtap188201778034271 execv work --windows-schedule-task-check on pid 3640
2026-05-06 10:24:33 [Info] ipc client:Rtap188201778034271 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 10:24:34 [Info] csrss.exe open proc 3640 AliSecCheck.ex
2026-05-06 10:24:35 [Info] csrss.exe open thread 3640 AliSecCheck.ex
2026-05-06 10:24:36 [Info] csrss.exe open thread 3640 AliSecCheck.ex
2026-05-06 10:24:38 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 10:24:38 [Info] ipc client:Rtap188431778034278_handler Reg client_name:Rtap188431778034278 on WhiteList
2026-05-06 10:24:38 [Info] start rtap process success, pid is 4500, argument is Rtap188431778034278
2026-05-06 10:24:38 [Info] New ClientConnectNotify : Rtap188431778034278, id is 00000540
2026-05-06 10:24:38 [Info] Rtap Platform Rtap188431778034278 execv work --windows-registry-check on pid 4500
2026-05-06 10:24:39 [Info] ipc client:Rtap188431778034278 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 10:24:40 [Info] csrss.exe open proc 4500 AliSecCheck.ex
2026-05-06 10:24:41 [Info] csrss.exe open thread 4500 AliSecCheck.ex
2026-05-06 10:25:30 [Info] Done Work --windows-registry-check:1
2026-05-06 10:25:30 [Info] Rtap Platform Rtap188431778034278 Exit:normal exit
2026-05-06 10:25:32 [Info] GetMessage : T_MSG_CHECK
2026-05-06 10:25:32 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMzQzMzEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDc3NTMxLCJzdWIiOiJSVEFQX0lEWF8xODA5MDBfMTc3ODAzNDMzMTk3NiJ9.JqdQh5LzcB3keG_LsUd_g2pkYLP_xLn7WOvTzljG_5E has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 10:25:32 [Info] ClientDisConnectNotify : Rtap188431778034278, id is 00000540
2026-05-06 10:25:37 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 10:25:37 [Info] ipc client:Rtap190361778034337_handler Reg client_name:Rtap190361778034337 on WhiteList
2026-05-06 10:25:38 [Info] start rtap process success, pid is 1056, argument is Rtap190361778034337
2026-05-06 10:25:38 [Info] New ClientConnectNotify : Rtap190361778034337, id is 0000052C
2026-05-06 10:25:38 [Info] ipc client:Rtap190361778034337 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 10:25:38 [Info] Rtap Platform Rtap190361778034337 execv work --windows-driver-version-check on pid 1056
2026-05-06 10:25:39 [Info] csrss.exe open proc 1056 AliSecCheck.ex
2026-05-06 10:25:40 [Info] csrss.exe open thread 1056 AliSecCheck.ex
2026-05-06 10:25:41 [Info] Done Work --windows-schedule-task-check:1
2026-05-06 10:25:41 [Info] Rtap Platform Rtap188201778034271 Exit:normal exit
2026-05-06 10:25:43 [Info] ClientDisConnectNotify : Rtap188201778034271, id is 00000504
2026-05-06 10:25:47 [Info] Done Work --windows-driver-version-check:1
2026-05-06 10:25:47 [Info] Rtap Platform Rtap190361778034337 Exit:normal exit
2026-05-06 10:25:49 [Info] ClientDisConnectNotify : Rtap190361778034337, id is 0000052C
2026-05-06 10:27:50 [Info] TotalPhys:2047,AvailPhys:483,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1157,SelfWorkingSet:16448, SelfPageFile:13704
2026-05-06 10:27:50 [Info] CommitTotal:4932,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:483,SystemCache:420,KernelTotal:274,KernelPaged:185,KernelNonpaged:88,PageSize:4096,HandleCount:27987,ProcessCount:52,ThreadCount:787
2026-05-06 10:29:56 [Info] GetMessage : T_MSG_CHECK
2026-05-06 10:29:56 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMzQ1OTYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDc3Nzk2LCJzdWIiOiJSVEFQX0lEWF9XWVBnZl8xNzc3MjkxOTA1MjA0X2RhZDBjZGEwNmY1MTA2MGVlNDY4MTQ5ZjM1OTZiY2JmIiwic3ViIjoiUlRBUF9JRFhfMTgwODg3XzE3NzgwMzQ1OTY2OTMifQ.9rCNoH7C0wdow5tQr2iVjWrJLKNumqxB3kAYBpvAdss has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 10:30:02 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 10:30:02 [Info] ipc client:Rtap199011778034602_handler Reg client_name:Rtap199011778034602 on WhiteList
2026-05-06 10:30:02 [Info] start rtap process success, pid is 2336, argument is Rtap199011778034602
2026-05-06 10:30:02 [Info] New ClientConnectNotify : Rtap199011778034602, id is 000004B4
2026-05-06 10:30:02 [Info] ipc client:Rtap199011778034602 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 10:30:03 [Info] Rtap Platform Rtap199011778034602 execv work --tcp-connect-check on pid 2336
2026-05-06 10:30:03 [Info] csrss.exe open proc 2336 AliSecCheck.ex
2026-05-06 10:30:04 [Info] csrss.exe open thread 2336 AliSecCheck.ex
2026-05-06 10:30:14 [Info] Done Work --tcp-connect-check:1
2026-05-06 10:30:14 [Info] Rtap Platform Rtap199011778034602 Exit:normal exit
2026-05-06 10:30:16 [Info] ClientDisConnectNotify : Rtap199011778034602, id is 000004B4
2026-05-06 11:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"5","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15177","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16600","aliyundun_upload_time":"1778036796","aliyundun_write_pid_times":"0","ipc_send_count":"153","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 11:10:59 [Info] GetMessage : T_MSG_CHECK
2026-05-06 11:10:59 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMzcwNTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDgwMjU5LCJzdWIiOiJSVEFQX0lEWF8xODA4OTFfMTc3ODAzNzA1OTcxNiJ9.X_TvEvCRfL3NCHwPle0mv1LDKpZ2Lo5nUCUGOqKtRMs has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 11:11:03 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 11:11:03 [Info] ipc client:Rtap279381778037063_handler Reg client_name:Rtap279381778037063 on WhiteList
2026-05-06 11:11:03 [Info] start rtap process success, pid is 3700, argument is Rtap279381778037063
2026-05-06 11:11:05 [Info] csrss.exe open proc 3700 AliSecCheck.ex
2026-05-06 11:11:06 [Info] csrss.exe open thread 3700 AliSecCheck.ex
2026-05-06 11:11:07 [Info] csrss.exe open thread 3700 AliSecCheck.ex
2026-05-06 11:11:08 [Info] csrss.exe open thread 3700 AliSecCheck.ex
2026-05-06 11:11:08 [Info] New ClientConnectNotify : Rtap279381778037063, id is 0000052C
2026-05-06 11:11:08 [Info] Rtap Platform Rtap279381778037063 execv work --windows-autorun-item-check on pid 3700
2026-05-06 11:11:09 [Info] ipc client:Rtap279381778037063 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 11:11:09 [Info] csrss.exe open thread 3700 AliSecCheck.ex
2026-05-06 11:11:36 [Info] Done Work --windows-autorun-item-check:1
2026-05-06 11:11:36 [Info] Rtap Platform Rtap279381778037063 Exit:normal exit
2026-05-06 11:11:38 [Info] ClientDisConnectNotify : Rtap279381778037063, id is 0000052C
2026-05-06 11:28:20 [Info] TotalPhys:2047,AvailPhys:466,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1058,SelfWorkingSet:11532, SelfPageFile:13740
2026-05-06 11:28:20 [Info] CommitTotal:5031,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:466,SystemCache:390,KernelTotal:270,KernelPaged:182,KernelNonpaged:88,PageSize:4096,HandleCount:27974,ProcessCount:52,ThreadCount:779
2026-05-06 11:51:27 [Info] nCurrentClock is 612037400, nCurrentTime is 1778039487
2026-05-06 11:51:27 [Info] SendMessage T_MSG_LOGIN
2026-05-06 11:51:27 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-06 11:51:27 [Info] begin to enable self guard after reconnect
2026-05-06 11:51:27 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-06 11:51:27 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-06 11:51:27 [Info] GetMessage : T_MSG_CHECK
2026-05-06 11:51:27 [Info] task 2dfb52a6-8f1a-4f12-ad3a-4ec9b4515e18 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 11:51:29 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-06 11:51:29 [Info] key : cpu, value : 10
2026-05-06 11:51:29 [Info] key : rio, value : 20480
2026-05-06 11:51:29 [Info] key : wio, value : 20480
2026-05-06 11:51:29 [Info] key : cpu_all, value : 0
2026-05-06 11:51:29 [Info] key : max_pid_check, value : 200
2026-05-06 11:51:29 [Info] key : throw_dump, value : 0
2026-05-06 11:51:29 [Info] key : hash_mode, value : 1
2026-05-06 11:51:29 [Info] key : mem, value : 200
2026-05-06 11:51:29 [Info] can not find key max_fd in online conf
2026-05-06 11:51:29 [Info] key : proc_limit, value : 1
2026-05-06 11:51:29 [Info] key : resource_limit_mode, value : 3
2026-05-06 11:51:29 [Info] key : rtap_update_mode, value : 1
2026-05-06 11:51:29 [Info] can not find key debug in online conf
2026-05-06 11:51:29 [Info] can not find key update_mode in online conf
2026-05-06 11:51:29 [Info] can not find key http_mode in online conf
2026-05-06 11:51:29 [Info] can not find key rtap_enable in online conf
2026-05-06 11:51:29 [Info] can not find key rtap_new_agent in online conf
2026-05-06 11:51:29 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-06 11:51:29 [Info] can not find key mem_low_mark in online conf
2026-05-06 11:51:29 [Info] can not find key obnormal_report_interval in online conf
2026-05-06 11:51:29 [Info] key : cache_mode, value : 0
2026-05-06 11:51:29 [Info] key : abnormal_monitor_mode, value : 3
2026-05-06 11:51:29 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-06 11:51:29 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-06 11:51:29 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-06 11:51:29 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-06 11:51:29 [Info] key : queue_size_ratio, value : 80
2026-05-06 11:51:29 [Info] queue_size_ratio is 80
2026-05-06 11:51:29 [Info] resource limit mode and max limit cpu is not change
2026-05-06 11:51:29 [Info] set hash mode 1
2026-05-06 11:51:29 [Info] RTAP timeout config:9600000
2026-05-06 11:51:29 [Info] self_guard_mode config is 0
2026-05-06 11:51:35 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 11:51:35 [Info] ipc client:Rtap31121778039495_handler Reg client_name:Rtap31121778039495 on WhiteList
2026-05-06 11:51:35 [Info] start rtap process success, pid is 4692, argument is Rtap31121778039495
2026-05-06 11:51:36 [Info] New ClientConnectNotify : Rtap31121778039495, id is 000004B4
2026-05-06 11:51:37 [Info] ipc client:Rtap31121778039495 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 11:51:37 [Info] Rtap Platform Rtap31121778039495 execv work --windows-sysinfoext-check on pid 4692
2026-05-06 11:51:38 [Info] csrss.exe open proc 4692 AliSecCheck.ex
2026-05-06 11:51:39 [Info] csrss.exe open thread 4692 AliSecCheck.ex
2026-05-06 11:51:40 [Info] csrss.exe open thread 4692 AliSecCheck.ex
2026-05-06 11:51:41 [Info] csrss.exe open thread 4692 AliSecCheck.ex
2026-05-06 11:51:42 [Info] csrss.exe open thread 4692 AliSecCheck.ex
2026-05-06 11:51:48 [Info] Done Work --windows-sysinfoext-check:1
2026-05-06 11:51:48 [Info] Rtap Platform Rtap31121778039495 Exit:normal exit
2026-05-06 11:51:50 [Info] ClientDisConnectNotify : Rtap31121778039495, id is 000004B4
2026-05-06 12:06:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"5","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11540","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"11700","aliyundun_upload_time":"1778040391","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 12:28:49 [Info] TotalPhys:2047,AvailPhys:435,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1012,SelfWorkingSet:11576, SelfPageFile:13688
2026-05-06 12:28:49 [Info] CommitTotal:5077,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:435,SystemCache:365,KernelTotal:265,KernelPaged:177,KernelNonpaged:87,PageSize:4096,HandleCount:27969,ProcessCount:52,ThreadCount:770
2026-05-06 12:57:01 [Info] get meta data success by v2
2026-05-06 12:57:01 [Info] get empty metaserver config
2026-05-06 12:57:01 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 12:57:01 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 12:57:01 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-06 12:57:02 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-06 12:57:02 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-06 12:57:02 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-06 12:57:02 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 12:57:02 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 12:57:02 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-06 12:57:02 [Info] download cert compare md5 same
2026-05-06 12:57:02 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 12:57:02 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 12:57:02 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 13:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"6","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11665","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"12324","aliyundun_upload_time":"1778043997","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 13:29:17 [Info] TotalPhys:2047,AvailPhys:460,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1026,SelfWorkingSet:12180, SelfPageFile:13632
2026-05-06 13:29:17 [Info] CommitTotal:5062,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:460,SystemCache:286,KernelTotal:272,KernelPaged:181,KernelNonpaged:91,PageSize:4096,HandleCount:29208,ProcessCount:54,ThreadCount:814
2026-05-06 14:06:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"8","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12226","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"12448","aliyundun_upload_time":"1778047591","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 14:29:51 [Info] TotalPhys:2047,AvailPhys:361,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1299,SelfWorkingSet:12192, SelfPageFile:13652
2026-05-06 14:29:51 [Info] CommitTotal:5133,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:361,SystemCache:314,KernelTotal:272,KernelPaged:180,KernelNonpaged:91,PageSize:4096,HandleCount:28228,ProcessCount:51,ThreadCount:780
2026-05-06 15:06:30 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"7","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12206","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"12408","aliyundun_upload_time":"1778051190","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 15:30:22 [Info] TotalPhys:2047,AvailPhys:370,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1364,SelfWorkingSet:12284, SelfPageFile:13696
2026-05-06 15:30:22 [Info] CommitTotal:5068,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:370,SystemCache:347,KernelTotal:268,KernelPaged:178,KernelNonpaged:90,PageSize:4096,HandleCount:28336,ProcessCount:52,ThreadCount:778
2026-05-06 16:06:20 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"8","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12221","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"12292","aliyundun_upload_time":"1778054780","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 16:15:07 [Info] get meta data success by v2
2026-05-06 16:15:07 [Info] get empty metaserver config
2026-05-06 16:15:07 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 16:15:07 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 16:15:07 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-06 16:15:07 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-06 16:15:07 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-06 16:15:07 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-06 16:15:07 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 16:15:07 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 16:15:07 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-06 16:15:07 [Info] download cert compare md5 same
2026-05-06 16:15:07 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 16:15:07 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 16:15:07 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 16:30:51 [Info] TotalPhys:2047,AvailPhys:353,TotalVirtual:2047,AvailVirtual:1979,TotalPageFile:6433,AvailPageFile:1364,SelfWorkingSet:12272, SelfPageFile:13800
2026-05-06 16:30:51 [Info] CommitTotal:5068,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:353,SystemCache:309,KernelTotal:269,KernelPaged:179,KernelNonpaged:89,PageSize:4096,HandleCount:28253,ProcessCount:52,ThreadCount:769
2026-05-06 17:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"7","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"12228","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"12328","aliyundun_upload_time":"1778058398","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 17:21:04 [Info] nCurrentClock is 630038700, nCurrentTime is 1778059264
2026-05-06 17:21:04 [Info] SendMessage T_MSG_LOGIN
2026-05-06 17:21:04 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-06 17:21:04 [Info] begin to enable self guard after reconnect
2026-05-06 17:21:04 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-06 17:21:04 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-06 17:21:04 [Info] GetMessage : T_MSG_CHECK
2026-05-06 17:21:04 [Info] task 707ecd22-8f9d-4a2d-8801-fd0d7c0c6327 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 17:21:06 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-06 17:21:06 [Info] key : cpu, value : 10
2026-05-06 17:21:06 [Info] key : rio, value : 20480
2026-05-06 17:21:06 [Info] key : wio, value : 20480
2026-05-06 17:21:06 [Info] key : cpu_all, value : 0
2026-05-06 17:21:06 [Info] key : max_pid_check, value : 200
2026-05-06 17:21:06 [Info] key : throw_dump, value : 0
2026-05-06 17:21:06 [Info] key : hash_mode, value : 1
2026-05-06 17:21:06 [Info] key : mem, value : 200
2026-05-06 17:21:06 [Info] can not find key max_fd in online conf
2026-05-06 17:21:06 [Info] key : proc_limit, value : 1
2026-05-06 17:21:06 [Info] key : resource_limit_mode, value : 3
2026-05-06 17:21:06 [Info] key : rtap_update_mode, value : 1
2026-05-06 17:21:06 [Info] can not find key debug in online conf
2026-05-06 17:21:06 [Info] can not find key update_mode in online conf
2026-05-06 17:21:06 [Info] can not find key http_mode in online conf
2026-05-06 17:21:06 [Info] can not find key rtap_enable in online conf
2026-05-06 17:21:06 [Info] can not find key rtap_new_agent in online conf
2026-05-06 17:21:06 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-06 17:21:06 [Info] can not find key mem_low_mark in online conf
2026-05-06 17:21:06 [Info] can not find key obnormal_report_interval in online conf
2026-05-06 17:21:06 [Info] key : cache_mode, value : 0
2026-05-06 17:21:06 [Info] key : abnormal_monitor_mode, value : 3
2026-05-06 17:21:06 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-06 17:21:06 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-06 17:21:06 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-06 17:21:06 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-06 17:21:06 [Info] key : queue_size_ratio, value : 80
2026-05-06 17:21:06 [Info] queue_size_ratio is 80
2026-05-06 17:21:06 [Info] resource limit mode and max limit cpu is not change
2026-05-06 17:21:06 [Info] set hash mode 1
2026-05-06 17:21:06 [Info] RTAP timeout config:9600000
2026-05-06 17:21:06 [Info] self_guard_mode config is 0
2026-05-06 17:21:10 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 17:21:10 [Info] ipc client:Rtap21531778059270_handler Reg client_name:Rtap21531778059270 on WhiteList
2026-05-06 17:21:10 [Info] start rtap process success, pid is 2020, argument is Rtap21531778059270
2026-05-06 17:21:13 [Info] csrss.exe open proc 2020 AliSecCheck.ex
2026-05-06 17:21:14 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 17:21:15 [Info] system memory usage is 80
2026-05-06 17:21:15 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 17:21:16 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 17:21:16 [Info] system memory usage is 80
2026-05-06 17:21:17 [Info] New ClientConnectNotify : Rtap21531778059270, id is 0000052C
2026-05-06 17:21:17 [Info] ipc client:Rtap21531778059270 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 17:21:17 [Info] Rtap Platform Rtap21531778059270 execv work --windows-sysinfoext-check on pid 2020
2026-05-06 17:21:36 [Info] Done Work --windows-sysinfoext-check:1
2026-05-06 17:21:36 [Info] Rtap Platform Rtap21531778059270 Exit:normal exit
2026-05-06 17:21:39 [Info] ClientDisConnectNotify : Rtap21531778059270, id is 0000052C
2026-05-06 17:31:25 [Info] TotalPhys:2047,AvailPhys:382,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1394,SelfWorkingSet:12252, SelfPageFile:13676
2026-05-06 17:31:25 [Info] CommitTotal:5038,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:382,SystemCache:320,KernelTotal:268,KernelPaged:177,KernelNonpaged:90,PageSize:4096,HandleCount:28463,ProcessCount:53,ThreadCount:776
2026-05-06 18:06:11 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"7","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12205","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"12280","aliyundun_upload_time":"1778061971","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 18:31:58 [Info] TotalPhys:2047,AvailPhys:400,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1404,SelfWorkingSet:12260, SelfPageFile:13668
2026-05-06 18:31:58 [Info] CommitTotal:5028,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:400,SystemCache:368,KernelTotal:268,KernelPaged:179,KernelNonpaged:89,PageSize:4096,HandleCount:28295,ProcessCount:52,ThreadCount:765
2026-05-06 18:41:44 [Info] GetMessage : T_MSG_CHECK
2026-05-06 18:41:44 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwNjQxMDQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MTA3MzA0LCJzdWIiOiJSVEFQX0lEWF8xODA5NTZfMTc3ODA2NDEwNDQ3NSJ9.KJErJlX-TGJMWH_pClxRsRWRcyABFFkQlsus18RrNU0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 18:41:48 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 18:41:48 [Info] ipc client:Rtap179511778064108_handler Reg client_name:Rtap179511778064108 on WhiteList
2026-05-06 18:41:48 [Info] start rtap process success, pid is 2696, argument is Rtap179511778064108
2026-05-06 18:41:48 [Info] system memory usage is 80
2026-05-06 18:41:49 [Info] system memory usage is 81
2026-05-06 18:41:49 [Info] csrss.exe open proc 2696 AliSecCheck.ex
2026-05-06 18:41:49 [Info] system memory usage is 80
2026-05-06 18:41:50 [Info] system memory usage is 80
2026-05-06 18:41:50 [Info] csrss.exe open thread 2696 AliSecCheck.ex
2026-05-06 18:41:50 [Info] New ClientConnectNotify : Rtap179511778064108, id is 000004D8
2026-05-06 18:41:50 [Info] ipc client:Rtap179511778064108 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 18:41:50 [Info] Rtap Platform Rtap179511778064108 execv work --secnet_rasp_agent on pid 2696
2026-05-06 18:41:51 [Info] csrss.exe open thread 2696 AliSecCheck.ex
2026-05-06 18:41:52 [Info] csrss.exe open thread 2696 AliSecCheck.ex
2026-05-06 18:41:59 [Info] csrss.exe open thread 2696 AliSecCheck.ex
2026-05-06 18:42:06 [Info] Done Work --secnet_rasp_agent:1
2026-05-06 18:42:06 [Info] Rtap Platform Rtap179511778064108 Exit:normal exit
2026-05-06 18:42:08 [Info] ClientDisConnectNotify : Rtap179511778064108, id is 000004D8
2026-05-06 19:06:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"8","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12188","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"12276","aliyundun_upload_time":"1778065594","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 19:32:28 [Info] TotalPhys:2047,AvailPhys:375,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1377,SelfWorkingSet:12124, SelfPageFile:13520
2026-05-06 19:32:28 [Info] CommitTotal:5055,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:375,SystemCache:336,KernelTotal:266,KernelPaged:176,KernelNonpaged:89,PageSize:4096,HandleCount:28373,ProcessCount:52,ThreadCount:776
2026-05-06 19:33:15 [Info] get meta data success by v2
2026-05-06 19:33:15 [Info] get empty metaserver config
2026-05-06 19:33:15 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 19:33:15 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 19:33:15 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-06 19:33:15 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-06 19:33:15 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-06 19:33:15 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-06 19:33:15 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 19:33:15 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 19:33:15 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-06 19:33:15 [Info] download cert compare md5 same
2026-05-06 19:33:15 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 19:33:15 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 19:33:15 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 20:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"8","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"12154","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"8","aliyundun_max_mem":"12280","aliyundun_upload_time":"1778069176","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 20:33:00 [Info] TotalPhys:2047,AvailPhys:366,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1397,SelfWorkingSet:12188, SelfPageFile:13616
2026-05-06 20:33:00 [Info] CommitTotal:5035,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:366,SystemCache:355,KernelTotal:265,KernelPaged:176,KernelNonpaged:89,PageSize:4096,HandleCount:28451,ProcessCount:52,ThreadCount:778
2026-05-06 21:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"8","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12182","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"12236","aliyundun_upload_time":"1778072781","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 21:33:30 [Info] TotalPhys:2047,AvailPhys:324,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1350,SelfWorkingSet:12200, SelfPageFile:13628
2026-05-06 21:33:30 [Info] CommitTotal:5082,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:324,SystemCache:314,KernelTotal:265,KernelPaged:176,KernelNonpaged:89,PageSize:4096,HandleCount:28389,ProcessCount:52,ThreadCount:769
2026-05-06 22:06:27 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"11","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12141","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"12224","aliyundun_upload_time":"1778076387","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 22:26:03 [Warn] high cpu, cpu is 15
2026-05-06 22:34:46 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1357,SelfWorkingSet:12120, SelfPageFile:13488
2026-05-06 22:34:46 [Info] CommitTotal:5075,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:311,KernelTotal:264,KernelPaged:175,KernelNonpaged:89,PageSize:4096,HandleCount:28479,ProcessCount:52,ThreadCount:767
2026-05-06 22:35:35 [Warn] high cpu, cpu is 13
2026-05-06 22:39:27 [Warn] high cpu, cpu is 15
2026-05-06 22:40:46 [Warn] high cpu, cpu is 13
2026-05-06 22:52:13 [Warn] high cpu, cpu is 13
2026-05-06 22:56:45 [Warn] high cpu, cpu is 13
2026-05-06 23:02:17 [Warn] high cpu, cpu is 11
2026-05-06 23:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"10","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12184","aliyundun_cpu_high_count":"9","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"7","aliyundun_max_cpu":"15","aliyundun_max_mem":"12248","aliyundun_upload_time":"1778080000","aliyundun_write_pid_times":"0","ipc_send_count":"60","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 23:26:36 [Info] get meta data success by v2
2026-05-06 23:26:36 [Info] get empty metaserver config
2026-05-06 23:26:36 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 23:26:36 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 23:26:36 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-06 23:26:36 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-06 23:26:36 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-06 23:26:36 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-06 23:26:36 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 23:26:36 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 23:26:36 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-06 23:26:36 [Info] download cert compare md5 same
2026-05-06 23:26:36 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 23:26:36 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 23:26:36 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 23:26:36 [Info] nCurrentClock is 648040000, nCurrentTime is 1778081196
2026-05-06 23:26:36 [Info] SendMessage T_MSG_LOGIN
2026-05-06 23:26:37 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-06 23:26:37 [Info] begin to enable self guard after reconnect
2026-05-06 23:26:37 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-06 23:26:37 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-06 23:26:37 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-06 23:26:37 [Info] GetMessage : T_MSG_CHECK
2026-05-06 23:26:37 [Info] task beed78e6-5ea5-4a30-a0ad-5690f3c7642b has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 23:26:39 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-06 23:26:39 [Info] key : cpu, value : 10
2026-05-06 23:26:39 [Info] key : rio, value : 20480
2026-05-06 23:26:39 [Info] key : wio, value : 20480
2026-05-06 23:26:39 [Info] key : cpu_all, value : 0
2026-05-06 23:26:39 [Info] key : max_pid_check, value : 200
2026-05-06 23:26:39 [Info] key : throw_dump, value : 0
2026-05-06 23:26:39 [Info] key : hash_mode, value : 1
2026-05-06 23:26:39 [Info] key : mem, value : 200
2026-05-06 23:26:39 [Info] can not find key max_fd in online conf
2026-05-06 23:26:39 [Info] key : proc_limit, value : 1
2026-05-06 23:26:39 [Info] key : resource_limit_mode, value : 3
2026-05-06 23:26:39 [Info] key : rtap_update_mode, value : 1
2026-05-06 23:26:39 [Info] can not find key debug in online conf
2026-05-06 23:26:39 [Info] can not find key update_mode in online conf
2026-05-06 23:26:39 [Info] can not find key http_mode in online conf
2026-05-06 23:26:39 [Info] can not find key rtap_enable in online conf
2026-05-06 23:26:39 [Info] can not find key rtap_new_agent in online conf
2026-05-06 23:26:39 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-06 23:26:39 [Info] can not find key mem_low_mark in online conf
2026-05-06 23:26:39 [Info] can not find key obnormal_report_interval in online conf
2026-05-06 23:26:39 [Info] key : cache_mode, value : 0
2026-05-06 23:26:39 [Info] key : abnormal_monitor_mode, value : 3
2026-05-06 23:26:39 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-06 23:26:39 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-06 23:26:39 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-06 23:26:39 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-06 23:26:39 [Info] key : queue_size_ratio, value : 80
2026-05-06 23:26:39 [Info] queue_size_ratio is 80
2026-05-06 23:26:39 [Info] resource limit mode and max limit cpu is not change
2026-05-06 23:26:39 [Info] set hash mode 1
2026-05-06 23:26:39 [Info] RTAP timeout config:9600000
2026-05-06 23:26:39 [Info] self_guard_mode config is 0
2026-05-06 23:26:41 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 23:26:41 [Info] ipc client:Rtap82341778081201_handler Reg client_name:Rtap82341778081201 on WhiteList
2026-05-06 23:26:41 [Info] start rtap process success, pid is 2280, argument is Rtap82341778081201
2026-05-06 23:26:42 [Info] system memory usage is 83
2026-05-06 23:26:42 [Info] system memory usage is 83
2026-05-06 23:26:43 [Info] csrss.exe open proc 2280 AliSecCheck.ex
2026-05-06 23:26:43 [Info] system memory usage is 83
2026-05-06 23:26:43 [Info] system memory usage is 83
2026-05-06 23:26:44 [Info] csrss.exe open thread 2280 AliSecCheck.ex
2026-05-06 23:26:44 [Info] system memory usage is 83
2026-05-06 23:26:45 [Info] system memory usage is 83
2026-05-06 23:26:45 [Info] system memory usage is 83
2026-05-06 23:26:46 [Info] system memory usage is 83
2026-05-06 23:26:46 [Info] system memory usage is 83
2026-05-06 23:26:47 [Info] system memory usage is 83
2026-05-06 23:26:47 [Info] system memory usage is 83
2026-05-06 23:26:48 [Info] system memory usage is 83
2026-05-06 23:26:48 [Info] system memory usage is 83
2026-05-06 23:26:49 [Info] system memory usage is 83
2026-05-06 23:26:49 [Info] system memory usage is 84
2026-05-06 23:26:50 [Info] system memory usage is 83
2026-05-06 23:26:50 [Info] system memory usage is 83
2026-05-06 23:26:50 [Info] New ClientConnectNotify : Rtap82341778081201, id is 0000052C
2026-05-06 23:26:51 [Info] Rtap Platform Rtap82341778081201 execv work --windows-sysinfoext-check on pid 2280
2026-05-06 23:26:51 [Info] csrss.exe open thread 2280 AliSecCheck.ex
2026-05-06 23:26:51 [Info] ipc client:Rtap82341778081201 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 23:26:52 [Info] csrss.exe open thread 2280 AliSecCheck.ex
2026-05-06 23:26:53 [Info] csrss.exe open thread 2280 AliSecCheck.ex
2026-05-06 23:27:02 [Info] Done Work --windows-sysinfoext-check:1
2026-05-06 23:27:02 [Info] Rtap Platform Rtap82341778081201 Exit:normal exit
2026-05-06 23:27:04 [Info] ClientDisConnectNotify : Rtap82341778081201, id is 0000052C
2026-05-06 23:35:25 [Info] TotalPhys:2047,AvailPhys:345,TotalVirtual:2047,AvailVirtual:1979,TotalPageFile:6433,AvailPageFile:1357,SelfWorkingSet:12328, SelfPageFile:13808
2026-05-06 23:35:25 [Info] CommitTotal:5075,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:345,SystemCache:320,KernelTotal:267,KernelPaged:178,KernelNonpaged:89,PageSize:4096,HandleCount:28499,ProcessCount:53,ThreadCount:779
2026-05-06 23:43:19 [Warn] high cpu, cpu is 44
2026-05-06 23:44:27 [Warn] high cpu, cpu is 22
2026-05-06 23:46:18 [Warn] high cpu, cpu is 12
2026-05-07 00:06:20 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"8","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"12204","aliyundun_cpu_high_count":"5","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"3","aliyundun_max_cpu":"44","aliyundun_max_mem":"12332","aliyundun_upload_time":"1778083580","aliyundun_write_pid_times":"0","ipc_send_count":"133","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 01:00:13 [Info] TotalPhys:2047,AvailPhys:209,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1288,SelfWorkingSet:12628, SelfPageFile:13924
2026-05-13 01:00:13 [Info] CommitTotal:5526,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:209,SystemCache:146,KernelTotal:264,KernelPaged:173,KernelNonpaged:90,PageSize:4096,HandleCount:28325,ProcessCount:52,ThreadCount:761
2026-05-13 01:06:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12642","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"12752","aliyundun_upload_time":"1778605592","aliyundun_write_pid_times":"0","ipc_send_count":"133","login_time":"0","mem_usage":"89","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 01:07:09 [Info] nCurrentClock is 1105269700, nCurrentTime is 1778605629
2026-05-13 01:07:09 [Info] SendMessage T_MSG_LOGIN
2026-05-13 01:07:09 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-13 01:07:09 [Info] begin to enable self guard after reconnect
2026-05-13 01:07:09 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-13 01:07:09 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-13 01:07:09 [Info] GetMessage : T_MSG_CHECK
2026-05-13 01:07:09 [Info] task 923b0149-8c72-4fca-8635-a7b0b0fb1b38 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 01:07:11 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-13 01:07:11 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-13 01:07:11 [Info] key : cpu, value : 10
2026-05-13 01:07:11 [Info] key : rio, value : 20480
2026-05-13 01:07:11 [Info] key : wio, value : 20480
2026-05-13 01:07:11 [Info] key : cpu_all, value : 0
2026-05-13 01:07:11 [Info] key : max_pid_check, value : 200
2026-05-13 01:07:11 [Info] key : throw_dump, value : 0
2026-05-13 01:07:11 [Info] key : hash_mode, value : 1
2026-05-13 01:07:11 [Info] key : mem, value : 200
2026-05-13 01:07:11 [Info] can not find key max_fd in online conf
2026-05-13 01:07:11 [Info] key : proc_limit, value : 1
2026-05-13 01:07:11 [Info] key : resource_limit_mode, value : 3
2026-05-13 01:07:11 [Info] key : rtap_update_mode, value : 1
2026-05-13 01:07:11 [Info] can not find key debug in online conf
2026-05-13 01:07:11 [Info] can not find key update_mode in online conf
2026-05-13 01:07:11 [Info] can not find key http_mode in online conf
2026-05-13 01:07:11 [Info] can not find key rtap_enable in online conf
2026-05-13 01:07:11 [Info] can not find key rtap_new_agent in online conf
2026-05-13 01:07:11 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-13 01:07:11 [Info] can not find key mem_low_mark in online conf
2026-05-13 01:07:11 [Info] can not find key obnormal_report_interval in online conf
2026-05-13 01:07:11 [Info] key : cache_mode, value : 0
2026-05-13 01:07:11 [Info] key : abnormal_monitor_mode, value : 3
2026-05-13 01:07:11 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-13 01:07:11 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-13 01:07:11 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-13 01:07:11 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-13 01:07:11 [Info] key : queue_size_ratio, value : 80
2026-05-13 01:07:11 [Info] queue_size_ratio is 80
2026-05-13 01:07:11 [Info] resource limit mode and max limit cpu is not change
2026-05-13 01:07:11 [Info] set hash mode 1
2026-05-13 01:07:11 [Info] RTAP timeout config:9600000
2026-05-13 01:07:11 [Info] self_guard_mode config is 0
2026-05-13 01:07:15 [Warn] free mem not enough, total: 2047, free: 195
2026-05-13 01:07:15 [Info] start post buffer update.aegis.aliyun.com/update
2026-05-13 01:07:18 [Info] http request success : https://update-vpc.aegis.aliyuncs.com/update, http code : 200, curl ret : 0
2026-05-13 01:47:06 [Warn] high cpu, cpu is 41
2026-05-13 01:50:18 [Warn] high cpu, cpu is 15
2026-05-13 01:52:22 [Warn] high cpu, cpu is 13
2026-05-13 02:00:44 [Warn] high cpu, cpu is 16
2026-05-13 02:01:23 [Info] TotalPhys:2047,AvailPhys:179,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1257,SelfWorkingSet:12500, SelfPageFile:13896
2026-05-13 02:01:23 [Info] CommitTotal:5557,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:179,SystemCache:104,KernelTotal:265,KernelPaged:174,KernelNonpaged:91,PageSize:4096,HandleCount:28434,ProcessCount:52,ThreadCount:768
2026-05-13 02:05:53 [Info] GetMessage : T_MSG_CHECK
2026-05-13 02:05:53 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzg2MDkxNTEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4NjUyMzUxLCJzdWIiOiJSVEFQX0lEWF8xODE0MjFfMTc3ODYwOTE1MTEyMCJ9.kiTCT0rfOF4SiASVADrMmPbACt4ZruZjrt854Gv5rcQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 02:06:06 [Warn] free mem not enough, total: 2047, free: 156
2026-05-13 02:06:06 [Info] start post buffer update.aegis.aliyun.com/update
2026-05-13 02:06:08 [Info] http request success : https://update-vpc.aegis.aliyuncs.com/update, http code : 200, curl ret : 0
2026-05-13 02:07:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"8","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12524","aliyundun_cpu_high_count":"6","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"4","aliyundun_max_cpu":"41","aliyundun_max_mem":"12644","aliyundun_upload_time":"1778609257","aliyundun_write_pid_times":"0","ipc_send_count":"94","login_time":"0","mem_usage":"91","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 02:08:58 [Warn] high cpu, cpu is 13
2026-05-13 02:17:41 [Warn] high cpu, cpu is 20
2026-05-13 02:21:02 [Warn] high cpu, cpu is 13
2026-05-13 02:25:55 [Warn] high cpu, cpu is 16
2026-05-13 02:26:11 [Warn] high cpu, cpu is 13
2026-05-13 02:39:52 [Warn] high cpu, cpu is 16
2026-05-13 02:40:06 [Warn] high cpu, cpu is 16
2026-05-13 02:50:23 [Warn] high cpu, cpu is 13
2026-05-13 02:52:23 [Warn] high cpu, cpu is 11
2026-05-13 03:01:39 [Info] TotalPhys:2047,AvailPhys:220,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1296,SelfWorkingSet:12536, SelfPageFile:13892
2026-05-13 03:01:39 [Info] CommitTotal:5518,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:220,SystemCache:106,KernelTotal:264,KernelPaged:174,KernelNonpaged:90,PageSize:4096,HandleCount:28361,ProcessCount:52,ThreadCount:774
2026-05-13 03:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"9","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12509","aliyundun_cpu_high_count":"9","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"9","aliyundun_max_cpu":"20","aliyundun_max_mem":"12552","aliyundun_upload_time":"1778612795","aliyundun_write_pid_times":"0","ipc_send_count":"53","login_time":"0","mem_usage":"89","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 03:10:05 [Warn] high cpu, cpu is 17
2026-05-13 03:15:55 [Warn] high cpu, cpu is 35
2026-05-13 03:20:46 [Warn] high cpu, cpu is 12
2026-05-13 03:30:44 [Warn] high cpu, cpu is 16
2026-05-13 04:03:37 [Info] TotalPhys:2047,AvailPhys:511,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1332,SelfWorkingSet:12516, SelfPageFile:13892
2026-05-13 04:03:37 [Info] CommitTotal:5482,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:511,SystemCache:255,KernelTotal:271,KernelPaged:179,KernelNonpaged:91,PageSize:4096,HandleCount:28381,ProcessCount:52,ThreadCount:771
2026-05-13 04:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"6","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12509","aliyundun_cpu_high_count":"4","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"4","aliyundun_max_cpu":"35","aliyundun_max_mem":"12584","aliyundun_upload_time":"1778616398","aliyundun_write_pid_times":"0","ipc_send_count":"90","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 04:09:54 [Warn] high cpu, cpu is 28
2026-05-13 04:38:09 [Info] get meta data success by v2
2026-05-13 04:38:09 [Info] get empty metaserver config
2026-05-13 04:38:09 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 04:38:11 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 04:38:11 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-13 04:38:16 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-13 04:38:16 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-13 04:38:16 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-13 04:38:16 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 04:38:16 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 04:38:16 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-13 04:38:16 [Info] download cert compare md5 same
2026-05-13 04:38:16 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 04:38:16 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 04:38:16 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-13 05:04:35 [Info] TotalPhys:2047,AvailPhys:482,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1305,SelfWorkingSet:12560, SelfPageFile:13800
2026-05-13 05:04:35 [Info] CommitTotal:5509,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:482,SystemCache:253,KernelTotal:272,KernelPaged:181,KernelNonpaged:90,PageSize:4096,HandleCount:28348,ProcessCount:52,ThreadCount:767
2026-05-13 05:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12553","aliyundun_cpu_high_count":"2","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"1","aliyundun_max_cpu":"28","aliyundun_max_mem":"12608","aliyundun_upload_time":"1778619998","aliyundun_write_pid_times":"0","ipc_send_count":"120","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 05:17:19 [Warn] high cpu, cpu is 37
2026-05-13 05:37:47 [Warn] high cpu, cpu is 32
2026-05-13 06:05:15 [Info] TotalPhys:2047,AvailPhys:421,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1261,SelfWorkingSet:12640, SelfPageFile:13956
2026-05-13 06:05:15 [Info] CommitTotal:5553,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:421,SystemCache:258,KernelTotal:272,KernelPaged:181,KernelNonpaged:90,PageSize:4096,HandleCount:28336,ProcessCount:52,ThreadCount:768
2026-05-13 06:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"5","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12549","aliyundun_cpu_high_count":"4","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"2","aliyundun_max_cpu":"37","aliyundun_max_mem":"12640","aliyundun_upload_time":"1778623578","aliyundun_write_pid_times":"0","ipc_send_count":"117","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 07:05:49 [Info] TotalPhys:2047,AvailPhys:370,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1251,SelfWorkingSet:12496, SelfPageFile:13864
2026-05-13 07:05:49 [Info] CommitTotal:5563,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:370,SystemCache:222,KernelTotal:277,KernelPaged:184,KernelNonpaged:92,PageSize:4096,HandleCount:28392,ProcessCount:52,ThreadCount:774
2026-05-13 07:06:03 [Info] nCurrentClock is 1119672000, nCurrentTime is 1778627163
2026-05-13 07:06:03 [Info] SendMessage T_MSG_LOGIN
2026-05-13 07:06:03 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-13 07:06:03 [Info] begin to enable self guard after reconnect
2026-05-13 07:06:03 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-13 07:06:03 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-13 07:06:03 [Info] GetMessage : T_MSG_CHECK
2026-05-13 07:06:03 [Info] task b9e0198a-0f2a-4b52-a4bf-a5029fe84872 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 07:06:05 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-13 07:06:05 [Info] key : cpu, value : 10
2026-05-13 07:06:05 [Info] key : rio, value : 20480
2026-05-13 07:06:05 [Info] key : wio, value : 20480
2026-05-13 07:06:05 [Info] key : cpu_all, value : 0
2026-05-13 07:06:05 [Info] key : max_pid_check, value : 200
2026-05-13 07:06:05 [Info] key : throw_dump, value : 0
2026-05-13 07:06:05 [Info] key : hash_mode, value : 1
2026-05-13 07:06:05 [Info] key : mem, value : 200
2026-05-13 07:06:05 [Info] can not find key max_fd in online conf
2026-05-13 07:06:05 [Info] key : proc_limit, value : 1
2026-05-13 07:06:05 [Info] key : resource_limit_mode, value : 3
2026-05-13 07:06:05 [Info] key : rtap_update_mode, value : 1
2026-05-13 07:06:05 [Info] can not find key debug in online conf
2026-05-13 07:06:05 [Info] can not find key update_mode in online conf
2026-05-13 07:06:05 [Info] can not find key http_mode in online conf
2026-05-13 07:06:05 [Info] can not find key rtap_enable in online conf
2026-05-13 07:06:05 [Info] can not find key rtap_new_agent in online conf
2026-05-13 07:06:05 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-13 07:06:05 [Info] can not find key mem_low_mark in online conf
2026-05-13 07:06:05 [Info] can not find key obnormal_report_interval in online conf
2026-05-13 07:06:05 [Info] key : cache_mode, value : 0
2026-05-13 07:06:05 [Info] key : abnormal_monitor_mode, value : 3
2026-05-13 07:06:05 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-13 07:06:05 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-13 07:06:05 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-13 07:06:05 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-13 07:06:05 [Info] key : queue_size_ratio, value : 80
2026-05-13 07:06:05 [Info] queue_size_ratio is 80
2026-05-13 07:06:05 [Info] resource limit mode and max limit cpu is not change
2026-05-13 07:06:05 [Info] set hash mode 1
2026-05-13 07:06:05 [Info] RTAP timeout config:9600000
2026-05-13 07:06:05 [Info] self_guard_mode config is 0
2026-05-13 07:06:08 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 07:06:08 [Info] ipc client:Rtap216611778627168_handler Reg client_name:Rtap216611778627168 on WhiteList
2026-05-13 07:06:09 [Info] start rtap process success, pid is 744, argument is Rtap216611778627168
2026-05-13 07:06:10 [Info] csrss.exe open proc 744 AliSecCheck.ex
2026-05-13 07:06:10 [Info] system memory usage is 82
2026-05-13 07:06:11 [Info] system memory usage is 83
2026-05-13 07:06:11 [Info] csrss.exe open thread 744 AliSecCheck.ex
2026-05-13 07:06:11 [Info] system memory usage is 83
2026-05-13 07:06:12 [Info] system memory usage is 83
2026-05-13 07:06:12 [Info] csrss.exe open thread 744 AliSecCheck.ex
2026-05-13 07:06:12 [Info] system memory usage is 83
2026-05-13 07:06:12 [Info] New ClientConnectNotify : Rtap216611778627168, id is 000004B4
2026-05-13 07:06:13 [Info] Rtap Platform Rtap216611778627168 execv work --windows-sysinfoext-check on pid 744
2026-05-13 07:06:13 [Info] csrss.exe open thread 744 AliSecCheck.ex
2026-05-13 07:06:13 [Info] ipc client:Rtap216611778627168 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 07:06:14 [Info] csrss.exe open thread 744 AliSecCheck.ex
2026-05-13 07:06:52 [Info] Done Work --windows-sysinfoext-check:1
2026-05-13 07:06:52 [Info] Rtap Platform Rtap216611778627168 Exit:normal exit
2026-05-13 07:06:54 [Info] ClientDisConnectNotify : Rtap216611778627168, id is 000004B4
2026-05-13 07:06:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12580","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"12640","aliyundun_upload_time":"1778627216","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 07:44:26 [Info] GetMessage : T_MSG_CHECK
2026-05-13 07:44:26 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzg2Mjk0NjYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4NjcyNjY2LCJzdWIiOiJSVEFQX0lEWF8xODE0MjNfMTc3ODYyOTQ2NjY2NiJ9.fSwqo3VID2gW19wqldh01i1rwtCcE2MjCoLEEzEDrIk has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 07:44:30 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 07:44:30 [Info] ipc client:Rtap291781778629470_handler Reg client_name:Rtap291781778629470 on WhiteList
2026-05-13 07:44:30 [Info] start rtap process success, pid is 4664, argument is Rtap291781778629470
2026-05-13 07:44:30 [Info] New ClientConnectNotify : Rtap291781778629470, id is 000004F0
2026-05-13 07:44:31 [Info] ipc client:Rtap291781778629470 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 07:44:31 [Info] Rtap Platform Rtap291781778629470 execv work --windows-vul-clean on pid 4664
2026-05-13 07:44:32 [Info] csrss.exe open proc 4664 AliSecCheck.ex
2026-05-13 07:44:33 [Info] csrss.exe open thread 4664 AliSecCheck.ex
2026-05-13 07:44:38 [Info] Done Work --windows-vul-clean:1
2026-05-13 07:44:38 [Info] Rtap Platform Rtap291781778629470 Exit:normal exit
2026-05-13 07:44:40 [Info] ClientDisConnectNotify : Rtap291781778629470, id is 000004F0
2026-05-13 08:06:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12703","aliyundun_cpu_high_count":"2","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"8","aliyundun_max_mem":"12768","aliyundun_upload_time":"1778630813","aliyundun_write_pid_times":"0","ipc_send_count":"122","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 08:06:56 [Info] TotalPhys:2047,AvailPhys:312,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1247,SelfWorkingSet:12564, SelfPageFile:13836
2026-05-13 08:06:56 [Info] CommitTotal:5567,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:312,SystemCache:259,KernelTotal:281,KernelPaged:188,KernelNonpaged:93,PageSize:4096,HandleCount:28458,ProcessCount:52,ThreadCount:761
2026-05-13 08:22:26 [Warn] high cpu, cpu is 16
2026-05-13 08:23:54 [Info] get meta data success by v2
2026-05-13 08:23:54 [Info] get empty metaserver config
2026-05-13 08:23:54 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 08:23:55 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 08:23:55 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-13 08:23:55 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-13 08:23:55 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-13 08:23:55 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-13 08:23:55 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 08:23:55 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 08:23:55 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-13 08:23:55 [Info] download cert compare md5 same
2026-05-13 08:23:55 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 08:23:55 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 08:23:55 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-13 08:43:09 [Info] GetMessage : T_MSG_CHECK
2026-05-13 08:43:09 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzg2MzI5ODgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4Njc2MTg4LCJzdWIiOiJSVEFQX0lEWF8xODE0MTJfMTc3ODYzMjk4ODk5NyJ9.dRUChsndyjIcmoZGpXILueBxP1vW5cJ2GidpTA5Ff3E has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 08:43:13 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 08:43:13 [Info] ipc client:Rtap79151778632993_handler Reg client_name:Rtap79151778632993 on WhiteList
2026-05-13 08:43:13 [Info] start rtap process success, pid is 3640, argument is Rtap79151778632993
2026-05-13 08:43:13 [Info] New ClientConnectNotify : Rtap79151778632993, id is 00000504
2026-05-13 08:43:13 [Info] ipc client:Rtap79151778632993 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 08:43:14 [Info] Rtap Platform Rtap79151778632993 execv work --windows-process-check on pid 3640
2026-05-13 08:43:15 [Info] csrss.exe open proc 3640 AliSecCheck.ex
2026-05-13 08:43:16 [Info] csrss.exe open thread 3640 AliSecCheck.ex
2026-05-13 08:43:51 [Info] Done Work --windows-process-check:1
2026-05-13 08:43:51 [Info] Rtap Platform Rtap79151778632993 Exit:normal exit
2026-05-13 08:43:53 [Info] ClientDisConnectNotify : Rtap79151778632993, id is 00000504
2026-05-13 08:53:23 [Warn] high cpu, cpu is 34
2026-05-13 09:00:39 [Warn] high cpu, cpu is 14
2026-05-13 09:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"6","aliyundun_avg_fd_count":"328","aliyundun_avg_mem":"12678","aliyundun_cpu_high_count":"5","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"3","aliyundun_max_cpu":"34","aliyundun_max_mem":"12836","aliyundun_upload_time":"1778634398","aliyundun_write_pid_times":"0","ipc_send_count":"113","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-05-13 09:08:14 [Warn] high cpu, cpu is 34
2026-05-13 09:08:21 [Info] TotalPhys:2047,AvailPhys:332,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1303,SelfWorkingSet:12744, SelfPageFile:14076
2026-05-13 09:08:21 [Info] CommitTotal:5511,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:332,SystemCache:309,KernelTotal:285,KernelPaged:191,KernelNonpaged:94,PageSize:4096,HandleCount:28442,ProcessCount:52,ThreadCount:762
2026-05-13 09:27:05 [Warn] high cpu, cpu is 11
2026-05-13 09:56:57 [Warn] high cpu, cpu is 29
2026-05-13 09:57:15 [Warn] high cpu, cpu is 31
2026-05-13 10:06:30 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"8","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12754","aliyundun_cpu_high_count":"4","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"4","aliyundun_max_cpu":"34","aliyundun_max_mem":"12836","aliyundun_upload_time":"1778637990","aliyundun_write_pid_times":"0","ipc_send_count":"108","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 10:09:07 [Info] TotalPhys:2047,AvailPhys:401,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1336,SelfWorkingSet:12772, SelfPageFile:14152
2026-05-13 10:09:07 [Info] CommitTotal:5478,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:401,SystemCache:299,KernelTotal:282,KernelPaged:188,KernelNonpaged:93,PageSize:4096,HandleCount:28423,ProcessCount:52,ThreadCount:762
2026-05-13 10:21:46 [Warn] high cpu, cpu is 34
2026-05-13 10:25:22 [Info] GetMessage : T_MSG_CHECK
2026-05-13 10:25:22 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzg2MzkxMjIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4NjgyMzIyLCJzdWIiOiJSVEFQX0lEWF8xODE0MTVfMTc3ODYzOTEyMjE3NCJ9.7AhFu6IUiQKHuqDedgCXebPgAxAPFNY1XgQJ0lJp-3w has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 10:25:25 [Info] GetMessage : T_MSG_CHECK
2026-05-13 10:25:25 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzg2MzkxMjIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4NjgyMzIyLCJzdWIiOiJSVEFQX0lEWF8xODE0MjBfMTc3ODYzOTEyMjgwMSJ9.B1B9yzu84m_YI63N1BD7njYcN-J8V_yVXo8HNK_XtG8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 10:25:26 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 10:25:26 [Info] ipc client:Rtap279421778639126_handler Reg client_name:Rtap279421778639126 on WhiteList
2026-05-13 10:25:26 [Info] start rtap process success, pid is 4336, argument is Rtap279421778639126
2026-05-13 10:25:29 [Info] csrss.exe open proc 4336 AliSecCheck.ex
2026-05-13 10:25:30 [Info] csrss.exe open thread 4336 AliSecCheck.ex
2026-05-13 10:25:31 [Info] csrss.exe open thread 4336 AliSecCheck.ex
2026-05-13 10:25:32 [Info] csrss.exe open thread 4336 AliSecCheck.ex
2026-05-13 10:25:33 [Info] csrss.exe open thread 4336 AliSecCheck.ex
2026-05-13 10:25:36 [Info] New ClientConnectNotify : Rtap279421778639126, id is 000004F0
2026-05-13 10:25:37 [Info] Rtap Platform Rtap279421778639126 execv work --windows-schedule-task-check on pid 4336
2026-05-13 10:25:38 [Info] ipc client:Rtap279421778639126 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 10:25:42 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 10:25:42 [Info] ipc client:Rtap279951778639142_handler Reg client_name:Rtap279951778639142 on WhiteList
2026-05-13 10:25:42 [Info] start rtap process success, pid is 3328, argument is Rtap279951778639142
2026-05-13 10:25:42 [Info] New ClientConnectNotify : Rtap279951778639142, id is 000004F4
2026-05-13 10:25:43 [Info] csrss.exe open proc 3328 AliSecCheck.ex
2026-05-13 10:25:43 [Info] Rtap Platform Rtap279951778639142 execv work --windows-registry-check on pid 3328
2026-05-13 10:25:44 [Info] ipc client:Rtap279951778639142 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 10:25:44 [Info] csrss.exe open thread 3328 AliSecCheck.ex
2026-05-13 10:26:27 [Info] GetMessage : T_MSG_CHECK
2026-05-13 10:26:27 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzg2MzkxODcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4NjgyMzg3LCJzdWIiOiJSVEFQX0lEWF8xODE0MjZfMTc3ODYzOTE4NzE5NCJ9.lP0DAqYJcRsldY8IpakoUi5WQ2oWEj2A9XJjV9FH2ak has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 10:26:32 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 10:26:32 [Info] ipc client:Rtap281581778639192_handler Reg client_name:Rtap281581778639192 on WhiteList
2026-05-13 10:26:32 [Info] start rtap process success, pid is 4444, argument is Rtap281581778639192
2026-05-13 10:26:32 [Info] New ClientConnectNotify : Rtap281581778639192, id is 000001E4
2026-05-13 10:26:33 [Info] csrss.exe open proc 4444 AliSecCheck.ex
2026-05-13 10:26:33 [Info] Rtap Platform Rtap281581778639192 execv work --windows-driver-version-check on pid 4444
2026-05-13 10:26:33 [Info] ipc client:Rtap281581778639192 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 10:26:34 [Info] csrss.exe open thread 4444 AliSecCheck.ex
2026-05-13 10:26:56 [Info] Done Work --windows-driver-version-check:1
2026-05-13 10:26:56 [Info] Rtap Platform Rtap281581778639192 Exit:normal exit
2026-05-13 10:27:00 [Info] ClientDisConnectNotify : Rtap281581778639192, id is 000001E4
2026-05-13 10:27:31 [Info] Done Work --windows-registry-check:1
2026-05-13 10:27:31 [Info] Rtap Platform Rtap279951778639142 Exit:normal exit
2026-05-13 10:27:39 [Info] ClientDisConnectNotify : Rtap279951778639142, id is 000004F4
2026-05-13 10:30:00 [Info] Done Work --windows-schedule-task-check:1
2026-05-13 10:30:00 [Info] Rtap Platform Rtap279421778639126 Exit:normal exit
2026-05-13 10:30:04 [Info] ClientDisConnectNotify : Rtap279421778639126, id is 000004F0
2026-05-13 10:30:32 [Warn] high cpu, cpu is 25
2026-05-13 10:55:04 [Info] GetMessage : T_MSG_CHECK
2026-05-13 10:55:04 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzg2NDA5MDQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4Njg0MTA0LCJzdWIiOiJSVEFQX0lEWF8xODE0MTNfMTc3ODY0MDkwNDA4MyJ9.fKIGQOafL1wmFmyEx4wUdC_GObZd-B2pbFaoAoHuSog has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 10:55:09 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 10:55:09 [Info] ipc client:Rtap9971778640909_handler Reg client_name:Rtap9971778640909 on WhiteList
2026-05-13 10:55:09 [Info] start rtap process success, pid is 4404, argument is Rtap9971778640909
2026-05-13 10:55:10 [Info] New ClientConnectNotify : Rtap9971778640909, id is 000004D8
2026-05-13 10:55:10 [Info] Rtap Platform Rtap9971778640909 execv work --tcp-connect-check on pid 4404
2026-05-13 10:55:11 [Info] csrss.exe open proc 4404 AliSecCheck.ex
2026-05-13 10:55:12 [Info] ipc client:Rtap9971778640909 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 10:55:12 [Info] csrss.exe open thread 4404 AliSecCheck.ex
2026-05-13 10:55:33 [Info] Done Work --tcp-connect-check:1
2026-05-13 10:55:33 [Info] Rtap Platform Rtap9971778640909 Exit:normal exit
2026-05-13 10:55:35 [Info] ClientDisConnectNotify : Rtap9971778640909, id is 000004D8
2026-05-13 10:59:39 [Warn] high cpu, cpu is 17
2026-05-13 11:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"5","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12685","aliyundun_cpu_high_count":"4","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"3","aliyundun_max_cpu":"34","aliyundun_max_mem":"12832","aliyundun_upload_time":"1778641597","aliyundun_write_pid_times":"0","ipc_send_count":"132","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 11:08:54 [Info] GetMessage : T_MSG_CHECK
2026-05-13 11:08:54 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzg2NDE3MzQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4Njg0OTM0LCJzdWIiOiJSVEFQX0lEWF8xODE0MTdfMTc3ODY0MTczNDE4NCJ9.qd6jcin7UhH9z_Qdt1tx7fmxSP7nTDPkwAwC7Xvl6lQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 11:09:00 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 11:09:00 [Info] ipc client:Rtap37111778641740_handler Reg client_name:Rtap37111778641740 on WhiteList
2026-05-13 11:09:00 [Info] start rtap process success, pid is 3476, argument is Rtap37111778641740
2026-05-13 11:09:00 [Info] New ClientConnectNotify : Rtap37111778641740, id is 00000504
2026-05-13 11:09:00 [Info] ipc client:Rtap37111778641740 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 11:09:01 [Info] Rtap Platform Rtap37111778641740 execv work --windows-autorun-item-check on pid 3476
2026-05-13 11:09:02 [Info] csrss.exe open proc 3476 AliSecCheck.ex
2026-05-13 11:09:03 [Info] csrss.exe open thread 3476 AliSecCheck.ex
2026-05-13 11:09:20 [Info] Done Work --windows-autorun-item-check:1
2026-05-13 11:09:20 [Info] Rtap Platform Rtap37111778641740 Exit:normal exit
2026-05-13 11:09:22 [Info] ClientDisConnectNotify : Rtap37111778641740, id is 00000504
2026-05-13 11:09:57 [Info] TotalPhys:2047,AvailPhys:527,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1333,SelfWorkingSet:12588, SelfPageFile:13984
2026-05-13 11:09:57 [Info] CommitTotal:5481,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:527,SystemCache:351,KernelTotal:277,KernelPaged:185,KernelNonpaged:92,PageSize:4096,HandleCount:28661,ProcessCount:53,ThreadCount:776
2026-05-13 11:17:06 [Warn] high cpu, cpu is 34
2026-05-13 12:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12664","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"1","aliyundun_max_cpu":"34","aliyundun_max_mem":"12712","aliyundun_upload_time":"1778645198","aliyundun_write_pid_times":"0","ipc_send_count":"128","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 12:10:36 [Info] TotalPhys:2047,AvailPhys:590,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1361,SelfWorkingSet:12720, SelfPageFile:14172
2026-05-13 12:10:36 [Info] CommitTotal:5453,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:590,SystemCache:467,KernelTotal:271,KernelPaged:178,KernelNonpaged:92,PageSize:4096,HandleCount:28688,ProcessCount:53,ThreadCount:775
2026-05-13 12:18:15 [Info] get meta data success by v2
2026-05-13 12:18:15 [Info] get empty metaserver config
2026-05-13 12:18:15 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 12:18:16 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 12:18:16 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-13 12:18:16 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-13 12:18:16 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-13 12:18:16 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-13 12:18:16 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 12:18:16 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 12:18:16 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-13 12:18:16 [Info] download cert compare md5 same
2026-05-13 12:18:16 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 12:18:16 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 12:18:16 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-13 12:18:17 [Info] nCurrentClock is 1134073800, nCurrentTime is 1778645897
2026-05-13 12:18:17 [Info] SendMessage T_MSG_LOGIN
2026-05-13 12:18:17 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-13 12:18:17 [Info] begin to enable self guard after reconnect
2026-05-13 12:18:17 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-13 12:18:17 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-13 12:18:17 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-13 12:18:17 [Info] key : cpu, value : 10
2026-05-13 12:18:17 [Info] key : rio, value : 20480
2026-05-13 12:18:17 [Info] key : wio, value : 20480
2026-05-13 12:18:17 [Info] key : cpu_all, value : 0
2026-05-13 12:18:17 [Info] key : max_pid_check, value : 200
2026-05-13 12:18:17 [Info] key : throw_dump, value : 0
2026-05-13 12:18:17 [Info] key : hash_mode, value : 1
2026-05-13 12:18:17 [Info] key : mem, value : 200
2026-05-13 12:18:17 [Info] can not find key max_fd in online conf
2026-05-13 12:18:17 [Info] key : proc_limit, value : 1
2026-05-13 12:18:17 [Info] key : resource_limit_mode, value : 3
2026-05-13 12:18:17 [Info] key : rtap_update_mode, value : 1
2026-05-13 12:18:17 [Info] can not find key debug in online conf
2026-05-13 12:18:17 [Info] can not find key update_mode in online conf
2026-05-13 12:18:17 [Info] can not find key http_mode in online conf
2026-05-13 12:18:17 [Info] can not find key rtap_enable in online conf
2026-05-13 12:18:17 [Info] can not find key rtap_new_agent in online conf
2026-05-13 12:18:17 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-13 12:18:17 [Info] can not find key mem_low_mark in online conf
2026-05-13 12:18:17 [Info] can not find key obnormal_report_interval in online conf
2026-05-13 12:18:17 [Info] key : cache_mode, value : 0
2026-05-13 12:18:17 [Info] key : abnormal_monitor_mode, value : 3
2026-05-13 12:18:17 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-13 12:18:17 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-13 12:18:17 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-13 12:18:17 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-13 12:18:17 [Info] key : queue_size_ratio, value : 80
2026-05-13 12:18:17 [Info] queue_size_ratio is 80
2026-05-13 12:18:17 [Info] resource limit mode and max limit cpu is not change
2026-05-13 12:18:17 [Info] set hash mode 1
2026-05-13 12:18:17 [Info] RTAP timeout config:9600000
2026-05-13 12:18:17 [Info] self_guard_mode config is 0
2026-05-13 12:18:17 [Info] GetMessage : T_MSG_CHECK
2026-05-13 12:18:17 [Info] task 2f520f33-8a62-4595-9223-f435aeb76692 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 12:18:25 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 12:18:25 [Info] ipc client:Rtap173121778645905_handler Reg client_name:Rtap173121778645905 on WhiteList
2026-05-13 12:18:25 [Info] start rtap process success, pid is 2012, argument is Rtap173121778645905
2026-05-13 12:18:26 [Info] csrss.exe open proc 2012 AliSecCheck.ex
2026-05-13 12:18:27 [Info] New ClientConnectNotify : Rtap173121778645905, id is 000004D8
2026-05-13 12:18:27 [Info] Rtap Platform Rtap173121778645905 execv work --windows-sysinfoext-check on pid 2012
2026-05-13 12:18:27 [Info] ipc client:Rtap173121778645905 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 12:18:27 [Info] csrss.exe open thread 2012 AliSecCheck.ex
2026-05-13 12:18:28 [Info] csrss.exe open thread 2012 AliSecCheck.ex
2026-05-13 12:18:29 [Info] csrss.exe open thread 2012 AliSecCheck.ex
2026-05-13 12:18:30 [Info] csrss.exe open thread 2012 AliSecCheck.ex
2026-05-13 12:18:38 [Info] Done Work --windows-sysinfoext-check:1
2026-05-13 12:18:38 [Info] Rtap Platform Rtap173121778645905 Exit:normal exit
2026-05-13 12:18:40 [Info] ClientDisConnectNotify : Rtap173121778645905, id is 000004D8
2026-05-13 13:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12668","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"12788","aliyundun_upload_time":"1778648781","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 13:11:06 [Info] TotalPhys:2047,AvailPhys:545,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1336,SelfWorkingSet:12568, SelfPageFile:13944
2026-05-13 13:11:06 [Info] CommitTotal:5477,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:545,SystemCache:411,KernelTotal:270,KernelPaged:178,KernelNonpaged:91,PageSize:4096,HandleCount:28440,ProcessCount:52,ThreadCount:765
2026-05-13 14:06:22 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12545","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"12648","aliyundun_upload_time":"1778652382","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 14:11:33 [Info] TotalPhys:2047,AvailPhys:502,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1309,SelfWorkingSet:12644, SelfPageFile:13936
2026-05-13 14:11:33 [Info] CommitTotal:5505,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:502,SystemCache:396,KernelTotal:269,KernelPaged:177,KernelNonpaged:91,PageSize:4096,HandleCount:28484,ProcessCount:52,ThreadCount:772
2026-05-13 15:06:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12577","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"12664","aliyundun_upload_time":"1778655992","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 15:12:02 [Info] TotalPhys:2047,AvailPhys:523,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1363,SelfWorkingSet:12460, SelfPageFile:13824
2026-05-13 15:12:02 [Info] CommitTotal:5451,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:523,SystemCache:383,KernelTotal:274,KernelPaged:182,KernelNonpaged:91,PageSize:4096,HandleCount:28456,ProcessCount:52,ThreadCount:769
2026-05-13 15:35:32 [Info] get meta data success by v2
2026-05-13 15:35:32 [Info] get empty metaserver config
2026-05-13 15:35:32 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 15:35:32 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 15:35:32 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-13 15:35:32 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-13 15:35:32 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-13 15:35:32 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-13 15:35:32 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 15:35:32 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 15:35:33 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-13 15:35:33 [Info] download cert compare md5 same
2026-05-13 15:35:33 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 15:35:33 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 15:35:33 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-13 16:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"328","aliyundun_avg_mem":"12514","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"7","aliyundun_max_mem":"12640","aliyundun_upload_time":"1778659598","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 16:12:30 [Info] TotalPhys:2047,AvailPhys:492,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1310,SelfWorkingSet:12420, SelfPageFile:13776
2026-05-13 16:12:30 [Info] CommitTotal:5504,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:492,SystemCache:270,KernelTotal:279,KernelPaged:186,KernelNonpaged:92,PageSize:4096,HandleCount:28464,ProcessCount:52,ThreadCount:774
2026-05-13 17:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12416","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"12572","aliyundun_upload_time":"1778663198","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 17:12:57 [Info] TotalPhys:2047,AvailPhys:494,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1317,SelfWorkingSet:12428, SelfPageFile:13828
2026-05-13 17:12:57 [Info] CommitTotal:5497,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:494,SystemCache:396,KernelTotal:278,KernelPaged:185,KernelNonpaged:92,PageSize:4096,HandleCount:28448,ProcessCount:52,ThreadCount:769
2026-05-13 17:35:32 [Warn] high cpu, cpu is 11
2026-05-13 17:46:55 [Info] nCurrentClock is 1152074700, nCurrentTime is 1778665615
2026-05-13 17:46:55 [Info] SendMessage T_MSG_LOGIN
2026-05-13 17:46:55 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-13 17:46:55 [Info] begin to enable self guard after reconnect
2026-05-13 17:46:55 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-13 17:46:55 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-13 17:46:55 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-13 17:46:55 [Info] GetMessage : T_MSG_CHECK
2026-05-13 17:46:55 [Info] task 8ad24fdb-10d2-4eb2-bf07-a2bf7a849c78 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 17:46:58 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-13 17:46:58 [Info] key : cpu, value : 10
2026-05-13 17:46:58 [Info] key : rio, value : 20480
2026-05-13 17:46:58 [Info] key : wio, value : 20480
2026-05-13 17:46:58 [Info] key : cpu_all, value : 0
2026-05-13 17:46:58 [Info] key : max_pid_check, value : 200
2026-05-13 17:46:58 [Info] key : throw_dump, value : 0
2026-05-13 17:46:58 [Info] key : hash_mode, value : 1
2026-05-13 17:46:58 [Info] key : mem, value : 200
2026-05-13 17:46:58 [Info] can not find key max_fd in online conf
2026-05-13 17:46:58 [Info] key : proc_limit, value : 1
2026-05-13 17:46:58 [Info] key : resource_limit_mode, value : 3
2026-05-13 17:46:58 [Info] key : rtap_update_mode, value : 1
2026-05-13 17:46:58 [Info] can not find key debug in online conf
2026-05-13 17:46:58 [Info] can not find key update_mode in online conf
2026-05-13 17:46:58 [Info] can not find key http_mode in online conf
2026-05-13 17:46:58 [Info] can not find key rtap_enable in online conf
2026-05-13 17:46:58 [Info] can not find key rtap_new_agent in online conf
2026-05-13 17:46:58 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-13 17:46:58 [Info] can not find key mem_low_mark in online conf
2026-05-13 17:46:58 [Info] can not find key obnormal_report_interval in online conf
2026-05-13 17:46:58 [Info] key : cache_mode, value : 0
2026-05-13 17:46:58 [Info] key : abnormal_monitor_mode, value : 3
2026-05-13 17:46:58 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-13 17:46:58 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-13 17:46:58 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-13 17:46:58 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-13 17:46:58 [Info] key : queue_size_ratio, value : 80
2026-05-13 17:46:58 [Info] queue_size_ratio is 80
2026-05-13 17:46:58 [Info] resource limit mode and max limit cpu is not change
2026-05-13 17:46:58 [Info] set hash mode 1
2026-05-13 17:46:58 [Info] RTAP timeout config:9600000
2026-05-13 17:46:58 [Info] self_guard_mode config is 0
2026-05-13 17:47:07 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 17:47:07 [Info] ipc client:Rtap161791778665627_handler Reg client_name:Rtap161791778665627 on WhiteList
2026-05-13 17:47:07 [Info] start rtap process success, pid is 868, argument is Rtap161791778665627
2026-05-13 17:47:09 [Info] New ClientConnectNotify : Rtap161791778665627, id is 000001E4
2026-05-13 17:47:09 [Info] ipc client:Rtap161791778665627 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 17:47:09 [Info] Rtap Platform Rtap161791778665627 execv work --windows-sysinfoext-check on pid 868
2026-05-13 17:47:10 [Info] csrss.exe open proc 868 AliSecCheck.ex
2026-05-13 17:47:11 [Info] csrss.exe open thread 868 AliSecCheck.ex
2026-05-13 17:47:12 [Info] csrss.exe open thread 868 AliSecCheck.ex
2026-05-13 17:47:13 [Info] csrss.exe open thread 868 AliSecCheck.ex
2026-05-13 17:47:14 [Info] csrss.exe open thread 868 AliSecCheck.ex
2026-05-13 17:47:20 [Info] Done Work --windows-sysinfoext-check:1
2026-05-13 17:47:20 [Info] Rtap Platform Rtap161791778665627 Exit:normal exit
2026-05-13 17:47:22 [Info] ClientDisConnectNotify : Rtap161791778665627, id is 000001E4
2026-05-13 18:03:08 [Info] GetMessage : T_MSG_CHECK
2026-05-13 18:03:08 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzg2NjY1ODgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4NzA5Nzg4LCJzdWIiOiJSVEFQX0lEWF8xODE0ODJfMTc3ODY2NjU4ODc1MyJ9.n9PuwZaW5Y-7iFoaahvNg3_JncEticIrgqqBcgbwKW0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 18:03:12 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 18:03:12 [Info] ipc client:Rtap193311778666592_handler Reg client_name:Rtap193311778666592 on WhiteList
2026-05-13 18:03:12 [Info] start rtap process success, pid is 2728, argument is Rtap193311778666592
2026-05-13 18:03:12 [Info] New ClientConnectNotify : Rtap193311778666592, id is 000004F4
2026-05-13 18:03:12 [Info] ipc client:Rtap193311778666592 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 18:03:12 [Info] Rtap Platform Rtap193311778666592 execv work --secnet_rasp_agent on pid 2728
2026-05-13 18:03:14 [Info] csrss.exe open proc 2728 AliSecCheck.ex
2026-05-13 18:03:15 [Info] csrss.exe open thread 2728 AliSecCheck.ex
2026-05-13 18:03:16 [Info] csrss.exe open thread 2728 AliSecCheck.ex
2026-05-13 18:03:19 [Info] Done Work --secnet_rasp_agent:1
2026-05-13 18:03:19 [Info] Rtap Platform Rtap193311778666592 Exit:normal exit
2026-05-13 18:03:22 [Info] ClientDisConnectNotify : Rtap193311778666592, id is 000004F4
2026-05-13 18:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12495","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"1","aliyundun_max_cpu":"11","aliyundun_max_mem":"12716","aliyundun_upload_time":"1778666785","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 18:13:33 [Info] TotalPhys:2047,AvailPhys:431,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1275,SelfWorkingSet:12540, SelfPageFile:13852
2026-05-13 18:13:33 [Info] CommitTotal:5539,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:431,SystemCache:361,KernelTotal:276,KernelPaged:184,KernelNonpaged:92,PageSize:4096,HandleCount:28179,ProcessCount:51,ThreadCount:766
2026-05-13 18:52:49 [Info] get meta data success by v2
2026-05-13 18:52:49 [Info] get empty metaserver config
2026-05-13 18:52:49 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 18:52:49 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 18:52:49 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-13 18:52:49 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-13 18:52:49 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-13 18:52:49 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-13 18:52:49 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 18:52:49 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 18:52:50 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-13 18:52:50 [Info] download cert compare md5 same
2026-05-13 18:52:50 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 18:52:50 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 18:52:50 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-13 19:06:30 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12586","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"12716","aliyundun_upload_time":"1778670390","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 19:14:01 [Info] TotalPhys:2047,AvailPhys:438,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1278,SelfWorkingSet:12652, SelfPageFile:14176
2026-05-13 19:14:01 [Info] CommitTotal:5536,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:438,SystemCache:358,KernelTotal:276,KernelPaged:183,KernelNonpaged:92,PageSize:4096,HandleCount:28201,ProcessCount:51,ThreadCount:768
2026-05-13 20:06:29 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12686","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"12716","aliyundun_upload_time":"1778673989","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 20:14:30 [Info] TotalPhys:2047,AvailPhys:446,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1297,SelfWorkingSet:12716, SelfPageFile:14176
2026-05-13 20:14:30 [Info] CommitTotal:5517,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:446,SystemCache:367,KernelTotal:278,KernelPaged:185,KernelNonpaged:92,PageSize:4096,HandleCount:28223,ProcessCount:51,ThreadCount:763
2026-05-13 20:37:41 [Warn] high cpu, cpu is 11
2026-05-13 20:50:20 [Warn] high cpu, cpu is 54
2026-05-13 21:06:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"5","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12716","aliyundun_cpu_high_count":"3","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"2","aliyundun_max_cpu":"54","aliyundun_max_mem":"12716","aliyundun_upload_time":"1778677609","aliyundun_write_pid_times":"0","ipc_send_count":"113","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 21:15:36 [Info] TotalPhys:2047,AvailPhys:459,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1320,SelfWorkingSet:12716, SelfPageFile:14176
2026-05-13 21:15:36 [Info] CommitTotal:5494,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:459,SystemCache:383,KernelTotal:282,KernelPaged:189,KernelNonpaged:92,PageSize:4096,HandleCount:28193,ProcessCount:51,ThreadCount:766
2026-05-13 21:20:37 [Warn] high cpu, cpu is 13
2026-05-13 21:21:49 [Warn] high cpu, cpu is 14
2026-05-13 21:30:29 [Warn] high cpu, cpu is 13
2026-05-13 21:38:20 [Warn] high cpu, cpu is 13
2026-05-13 21:38:29 [Warn] high cpu, cpu is 13
2026-05-13 21:51:05 [Warn] high cpu, cpu is 11
2026-05-13 22:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"7","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12625","aliyundun_cpu_high_count":"7","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"6","aliyundun_max_cpu":"14","aliyundun_max_mem":"12716","aliyundun_upload_time":"1778681195","aliyundun_write_pid_times":"0","ipc_send_count":"97","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 22:15:41 [Info] TotalPhys:2047,AvailPhys:421,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1282,SelfWorkingSet:12564, SelfPageFile:13892
2026-05-13 22:15:41 [Info] CommitTotal:5532,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:421,SystemCache:378,KernelTotal:287,KernelPaged:192,KernelNonpaged:95,PageSize:4096,HandleCount:28209,ProcessCount:51,ThreadCount:767
2026-05-13 22:44:19 [Info] get meta data success by v2
2026-05-13 22:44:19 [Info] get empty metaserver config
2026-05-13 22:44:19 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 22:44:19 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-13 22:44:19 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-13 22:44:19 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-13 22:44:19 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-13 22:44:19 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-13 22:44:19 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 22:44:19 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-13 22:44:20 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-13 22:44:20 [Info] download cert compare md5 same
2026-05-13 22:44:20 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 22:44:20 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-13 22:44:20 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-13 23:06:23 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"328","aliyundun_avg_mem":"12663","aliyundun_cpu_high_count":"5","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"12816","aliyundun_upload_time":"1778684783","aliyundun_write_pid_times":"0","ipc_send_count":"115","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-13 23:16:32 [Info] TotalPhys:2047,AvailPhys:438,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1265,SelfWorkingSet:12768, SelfPageFile:14176
2026-05-13 23:16:32 [Info] CommitTotal:5549,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:438,SystemCache:353,KernelTotal:287,KernelPaged:192,KernelNonpaged:94,PageSize:4096,HandleCount:28494,ProcessCount:52,ThreadCount:771
2026-05-13 23:44:52 [Warn] high cpu, cpu is 11
2026-05-13 23:54:50 [Info] nCurrentClock is 1170075800, nCurrentTime is 1778687690
2026-05-13 23:54:50 [Info] SendMessage T_MSG_LOGIN
2026-05-13 23:54:50 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-13 23:54:50 [Info] begin to enable self guard after reconnect
2026-05-13 23:54:50 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-13 23:54:50 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-13 23:54:50 [Info] GetMessage : T_MSG_CHECK
2026-05-13 23:54:50 [Info] task b2aa414a-a170-413a-aaad-ae3e5bd17edf has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 23:54:52 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-13 23:54:52 [Info] key : cpu, value : 10
2026-05-13 23:54:52 [Info] key : rio, value : 20480
2026-05-13 23:54:52 [Info] key : wio, value : 20480
2026-05-13 23:54:52 [Info] key : cpu_all, value : 0
2026-05-13 23:54:52 [Info] key : max_pid_check, value : 200
2026-05-13 23:54:52 [Info] key : throw_dump, value : 0
2026-05-13 23:54:52 [Info] key : hash_mode, value : 1
2026-05-13 23:54:52 [Info] key : mem, value : 200
2026-05-13 23:54:52 [Info] can not find key max_fd in online conf
2026-05-13 23:54:52 [Info] key : proc_limit, value : 1
2026-05-13 23:54:52 [Info] key : resource_limit_mode, value : 3
2026-05-13 23:54:52 [Info] key : rtap_update_mode, value : 1
2026-05-13 23:54:52 [Info] can not find key debug in online conf
2026-05-13 23:54:52 [Info] can not find key update_mode in online conf
2026-05-13 23:54:52 [Info] can not find key http_mode in online conf
2026-05-13 23:54:52 [Info] can not find key rtap_enable in online conf
2026-05-13 23:54:52 [Info] can not find key rtap_new_agent in online conf
2026-05-13 23:54:52 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-13 23:54:52 [Info] can not find key mem_low_mark in online conf
2026-05-13 23:54:52 [Info] can not find key obnormal_report_interval in online conf
2026-05-13 23:54:52 [Info] key : cache_mode, value : 0
2026-05-13 23:54:52 [Info] key : abnormal_monitor_mode, value : 3
2026-05-13 23:54:52 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-13 23:54:52 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-13 23:54:52 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-13 23:54:52 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-13 23:54:52 [Info] key : queue_size_ratio, value : 80
2026-05-13 23:54:52 [Info] queue_size_ratio is 80
2026-05-13 23:54:52 [Info] resource limit mode and max limit cpu is not change
2026-05-13 23:54:52 [Info] set hash mode 1
2026-05-13 23:54:52 [Info] RTAP timeout config:9600000
2026-05-13 23:54:52 [Info] self_guard_mode config is 0
2026-05-13 23:54:52 [Info] GetMessage : T_MSG_CHECK
2026-05-13 23:54:52 [Info] task 028b690a3dde1f0065687de74cfdd38a has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-13 23:54:56 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 23:54:56 [Info] ipc client:Rtap227121778687696_handler Reg client_name:Rtap227121778687696 on WhiteList
2026-05-13 23:54:56 [Info] start rtap process success, pid is 3888, argument is Rtap227121778687696
2026-05-13 23:54:59 [Info] csrss.exe open proc 3888 AliSecCheck.ex
2026-05-13 23:55:00 [Info] csrss.exe open thread 3888 AliSecCheck.ex
2026-05-13 23:55:03 [Info] New ClientConnectNotify : Rtap227121778687696, id is 000001E4
2026-05-13 23:55:04 [Info] csrss.exe open thread 3888 AliSecCheck.ex
2026-05-13 23:55:04 [Info] ipc client:Rtap227121778687696 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 23:55:04 [Info] Rtap Platform Rtap227121778687696 execv work --windows-sysinfoext-check on pid 3888
2026-05-13 23:55:05 [Info] csrss.exe open thread 3888 AliSecCheck.ex
2026-05-13 23:55:06 [Info] csrss.exe open thread 3888 AliSecCheck.ex
2026-05-13 23:55:08 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-13 23:55:08 [Info] ipc client:Rtap227511778687708_handler Reg client_name:Rtap227511778687708 on WhiteList
2026-05-13 23:55:08 [Info] start rtap process success, pid is 3940, argument is Rtap227511778687708
2026-05-13 23:55:08 [Info] New ClientConnectNotify : Rtap227511778687708, id is 00000504
2026-05-13 23:55:08 [Info] ipc client:Rtap227511778687708 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-13 23:55:09 [Info] Rtap Platform Rtap227511778687708 execv work --windows-vul-check on pid 3940
2026-05-13 23:55:10 [Info] csrss.exe open proc 3940 AliSecCheck.ex
2026-05-13 23:55:11 [Info] csrss.exe open thread 3940 AliSecCheck.ex
2026-05-13 23:55:16 [Info] Done Work --windows-sysinfoext-check:1
2026-05-13 23:55:16 [Info] Rtap Platform Rtap227121778687696 Exit:normal exit
2026-05-13 23:55:18 [Info] ClientDisConnectNotify : Rtap227121778687696, id is 000001E4
2026-05-13 23:55:18 [Info] Done Work --windows-vul-check:1
2026-05-13 23:55:18 [Info] Rtap Platform Rtap227511778687708 Exit:normal exit
2026-05-13 23:55:20 [Info] ClientDisConnectNotify : Rtap227511778687708, id is 00000504
2026-05-14 00:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12703","aliyundun_cpu_high_count":"3","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"1","aliyundun_max_cpu":"11","aliyundun_max_mem":"12776","aliyundun_upload_time":"1778688370","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-14 00:17:12 [Info] TotalPhys:2047,AvailPhys:485,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6814,AvailPageFile:1312,SelfWorkingSet:12616, SelfPageFile:14024
2026-05-14 00:17:12 [Info] CommitTotal:5502,CommitLimit:6814,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:485,SystemCache:381,KernelTotal:285,KernelPaged:191,KernelNonpaged:94,PageSize:4096,HandleCount:28632,ProcessCount:53,ThreadCount:773