| Server IP : 123.56.80.60 / Your IP : 216.73.216.78 Web Server : Apache/2.4.54 (Win32) OpenSSL/1.1.1s PHP/7.4.33 mod_fcgid/2.3.10-dev System : Windows NT iZhx3sob14hnz7Z 10.0 build 14393 (Windows Server 2016) i586 User : SYSTEM ( 0) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_60/data/ |
Upload File : |
2025-07-08 10:48:31 [Info] try get sys version
2025-07-08 10:48:31 [Info] win sys info:2/10:0:3
2025-07-08 10:48:31 [Info] suit legal version, enable cpu control
2025-07-08 10:48:31 [Info] timer 1 magic num is 0x737953744d43, interval is 86400000ms, class name is CMtSys
2025-07-08 10:48:31 [Info] there is no cache
2025-07-08 10:48:31 [Info] Aegis root path is C:/Program Files (x86)/Alibaba/Aegis
2025-07-08 10:48:31 [Info] timer 2 magic num is 0x6c50656772654d43, interval is 60000ms, class name is CMergePluginHeartbeat
2025-07-08 10:48:31 [Info] ipc client:network_ipc_client Reg msg_type:INTERNAL_MSG_REQUEST_CONTAINER_INFO on BlackList
2025-07-08 10:48:31 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_ALIYUNDUNMONITOR_IPC_HEART on BlackList
2025-07-08 10:48:31 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_ALI_DETECT_EVENT_ALINET on BlackList
2025-07-08 10:48:31 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_LOCAL_SCAN on BlackList
2025-07-08 10:48:31 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_LOCAL_SCAN_RSP on BlackList
2025-07-08 10:48:31 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_SERVICE_SWITCH on BlackList
2025-07-08 10:48:31 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_UPDATE_IPC_HEART on BlackList
2025-07-08 10:48:31 [Info] ipc client:network_ipc_client Reg client_name:ipc_only on BlackList
2025-07-08 10:48:31 [Info] ipc client:network_ipc_client Reg client_name:monitor_ipc_client on BlackList
2025-07-08 10:48:31 [Info] ipc client:network_ipc_client Reg client_name:protocol_ipc_client on BlackList
2025-07-08 10:48:31 [Info] network msg stat report at 2025-07-09 01:23:37
2025-07-08 10:48:31 [Info] timer 3 magic num is 0x5367734d646e6553, interval is 60000ms, class name is class CNetWork
2025-07-08 10:48:31 [Info] timer 4 magic num is 0x654e796669746f4e, interval is 60000ms, class name is class CNetWork
2025-07-08 10:48:31 [Info] timer 5 magic num is 0x69676f4c646e6553, interval is 3600000ms, class name is class CNetWork
2025-07-08 10:48:31 [Info] timer 6 magic num is 0x6f44796669726556, interval is 10800000ms, class name is class CNetWork
2025-07-08 10:48:31 [Info] timer 7 magic num is 0x64697555746547, interval is 600000ms, class name is class CNetWork
2025-07-08 10:48:31 [Info] ====================Start Agent : aegis_12_60,Jul 4 2025 15:17:56====================
2025-07-08 10:48:31 [Info] ipc client:self_guard_client Reg msg_type:T_MSG_IPC_NETWORK_NOTIFY on WhiteList
2025-07-08 10:48:31 [Info] ipc client:self_guard_client Reg msg_type:T_MSG_LOGIN_RSP on WhiteList
2025-07-08 10:48:31 [Info] ipc client:self_guard_client Reg msg_type:T_MSG_SERVICE_SWITCH on WhiteList
2025-07-08 10:48:31 [Info] timer 8 magic num is 0x75614c7261656c43, interval is 86400000ms, class name is class CLaunchPluginAfterReboot
2025-07-08 10:48:31 [Info] pid is 3008
2025-07-08 10:48:31 [Info] CProtocolHandlerThread::run Enter
2025-07-08 10:48:31 [Info] GetNetWorkLoopTime 20
2025-07-08 10:48:31 [Info] CSelfGuardMainThread::run Enter
2025-07-08 10:48:31 [Info] os reboot: 0
2025-07-08 10:48:31 [Info] resource mode user conf:3
2025-07-08 10:48:31 [Info] resource cpu user conf:10
2025-07-08 10:48:31 [Info] resource get res:2
2025-07-08 10:48:31 [Info] not match 0 try to start resource limit
2025-07-08 10:48:31 [Info] get AssignProcessToJobObject handle [000003EC]
2025-07-08 10:48:31 [Info] Set setJobExtended.
2025-07-08 10:48:31 [Info] Set cpu [9%]
2025-07-08 10:48:31 [Info] Set cpu success
2025-07-08 10:48:31 [Info] limit cpu success
2025-07-08 10:48:31 [Info] timer 9 magic num is 0x6165685f6e69616d, interval is 60000ms, class name is class CMonitorPri
2025-07-08 10:48:31 [Info] ipc server init success.
2025-07-08 10:48:31 [Info] Server_Init: 0
2025-07-08 10:48:31 [Info] ipc listen success.
2025-07-08 10:48:31 [Info] Server_Listen: 0
2025-07-08 10:48:31 [Info] timer 10 magic num is 0x696e6f6d5f726576, interval is 1800000ms, class name is class CMonitorYunDunAndMonitorVersion
2025-07-08 10:48:31 [Info] ModuleLoad conf:[C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_60/conf/module_config]
2025-07-08 10:48:31 [Info] timer 11 magic num is 0x7250657461647055, interval is 180000ms, class name is class CModuleUpdate
2025-07-08 10:48:31 [Info] timer 12 magic num is 0x50726f74696e6f4d, interval is 10000ms, class name is class CModuleUpdate
2025-07-08 10:48:31 [Info] LoadModule : C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_60/ModuleUpdate.dll
2025-07-08 10:48:31 [Info] timer 13 magic num is 0x43656c75646f4d43, interval is 60000ms, class name is CModuleCheckPrivate
2025-07-08 10:48:31 [Info] LoadModule : C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_60/ModuleCheck.dll
2025-07-08 10:48:31 [Info] RTAP max work num is 4
2025-07-08 10:48:31 [Info] alihips is not exits
2025-07-08 10:48:31 [Info] COsAbnormalMonitor::run Enter
2025-07-08 10:48:31 [Info] CResourceMonitor::run Enter
2025-07-08 10:48:31 [Info] ipc connect running, tid is 404
2025-07-08 10:48:31 [Info] ipc read thread running, tid is 2428
2025-07-08 10:48:31 [Info] aegisIpc::run Enter
2025-07-08 10:48:31 [Info] begin to monitor thread :IpcPrivate, 2e4
2025-07-08 10:48:31 [Warn] driver owner C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_50/AliYunDun.exe is not self
2025-07-08 10:48:31 [Info] alisecguard is not exits
2025-07-08 10:48:31 [Info] begin to monitor thread :Network, 610
2025-07-08 10:48:31 [Info] LoadModule : C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_60/ModuleRtap.dll
2025-07-08 10:48:31 [Info] timer 14 magic num is 0x76697250744d43, interval is 30000ms, class name is CMtPriv
2025-07-08 10:48:31 [Info] ipc client:monitor_ipc_client Reg msg_type:T_MSG_ALIYUNDUNMONITOR_IPC_HEART on WhiteList
2025-07-08 10:48:31 [Info] ipc client:monitor_ipc_client Reg msg_type:T_MSG_UPDATE_IPC_HEART on WhiteList
2025-07-08 10:48:31 [Info] timer 15 magic num is 0x5074636574654443, interval is 120000ms, class name is CDetectProcessHang
2025-07-08 10:48:31 [Info] start wait dns work
2025-07-08 10:48:31 [Info] dns work ok
2025-07-08 10:48:31 [Info] get meta data success by v2
2025-07-08 10:48:31 [Info] get empty metaserver config
2025-07-08 10:48:31 [Info] cpu_sig:AliyunKVM
2025-07-08 10:48:31 [Info] begin to monitor thread :Protocol, 6f0
2025-07-08 10:48:32 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-08 10:48:33 [Warn] high cpu, cpu is 14
2025-07-08 10:48:33 [Info] log fd cnt is [250], real fd cnt is [320]
2025-07-08 10:48:33 [Info] TotalPhys:2047,AvailPhys:1223,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:4648,AvailPageFile:3855,SelfWorkingSet:13796, SelfPageFile:12296
2025-07-08 10:48:33 [Info] CommitTotal:793,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1223,SystemCache:838,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11635,ProcessCount:32,ThreadCount:422
2025-07-08 10:48:34 [Info] log memory size is 20480KB, real memory size is 14408KB
2025-07-08 10:48:34 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-08 10:48:34 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-08 10:48:34 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-08 10:48:34 [Info] start DownLoadBuffer update-vpc.aegis.aliyuncs.com/download/cert/root.md5
2025-07-08 10:48:34 [Info] start do http get request for update-vpc.aegis.aliyuncs.com/download/cert/root.md5
2025-07-08 10:48:34 [Info] http request success : https://update-vpc.aegis.aliyuncs.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-08 10:48:34 [Info] download cert compare md5 same
2025-07-08 10:48:34 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-08 10:48:34 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-08 10:48:34 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-08 10:48:34 [Info] connect domain index is 0
2025-07-08 10:48:34 [Info] cache domain is jsrv2.aegis.aliyun.com, cache ip is 100.100.30.25
2025-07-08 10:48:34 [Info] try connect url jsrv2.aegis.aliyun.com, ip : 100.100.30.25, port : 80
2025-07-08 10:48:34 [Info] Connect Success : jsrv2.aegis.aliyun.com
2025-07-08 10:48:34 [Info] GetLocalSockIp :172.17.42.239
2025-07-08 10:48:34 [Info] GetLocalSockIp : 172.17.42.239
2025-07-08 10:48:34 [Info] timer 16 magic num is 0x63656e6e6f436552, interval is 1000ms, class name is class CNetWork
2025-07-08 10:48:34 [Info] cost 3s to login
2025-07-08 10:48:34 [Info] SendMessage T_MSG_LOGIN
2025-07-08 10:48:35 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-08 10:48:35 [Info] begin to enable self guard after reconnect
2025-07-08 10:48:35 [Info] state is not disable, current state is 2
2025-07-08 10:48:35 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-08 10:48:35 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-08 10:48:35 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-08 10:48:35 [Info] key : cpu, value : 10
2025-07-08 10:48:35 [Info] key : rio, value : 20480
2025-07-08 10:48:35 [Info] key : wio, value : 20480
2025-07-08 10:48:35 [Info] key : cpu_all, value : 0
2025-07-08 10:48:35 [Info] key : max_pid_check, value : 200
2025-07-08 10:48:35 [Info] key : throw_dump, value : 0
2025-07-08 10:48:35 [Info] key : hash_mode, value : 1
2025-07-08 10:48:35 [Info] key : mem, value : 200
2025-07-08 10:48:35 [Info] can not find key max_fd in online conf
2025-07-08 10:48:35 [Info] key : proc_limit, value : 1
2025-07-08 10:48:35 [Info] key : resource_limit_mode, value : 3
2025-07-08 10:48:35 [Info] key : rtap_update_mode, value : 1
2025-07-08 10:48:35 [Info] can not find key debug in online conf
2025-07-08 10:48:35 [Info] can not find key update_mode in online conf
2025-07-08 10:48:35 [Info] can not find key http_mode in online conf
2025-07-08 10:48:35 [Info] can not find key rtap_enable in online conf
2025-07-08 10:48:35 [Info] can not find key rtap_new_agent in online conf
2025-07-08 10:48:35 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-08 10:48:35 [Info] can not find key mem_low_mark in online conf
2025-07-08 10:48:35 [Info] can not find key obnormal_report_interval in online conf
2025-07-08 10:48:35 [Info] key : cache_mode, value : 0
2025-07-08 10:48:35 [Info] key : abnormal_monitor_mode, value : 3
2025-07-08 10:48:35 [Info] key : queue_size_ratio, value : 80
2025-07-08 10:48:35 [Info] queue_size_ratio is 80
2025-07-08 10:48:35 [Info] resource limit mode and max limit cpu is not change
2025-07-08 10:48:35 [Info] set hash mode 1
2025-07-08 10:48:35 [Info] RTAP timeout config:9600000
2025-07-08 10:48:35 [Info] self_guard_mode config is 0
2025-07-08 10:48:35 [Info] GetMessage : T_MSG_CHECK
2025-07-08 10:48:35 [Info] task d92914db-5aef-4381-ae38-2125260c3306 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-08 10:48:36 [Info] end to wait self guard config
2025-07-08 10:48:45 [Info] New ClientConnectNotify : AliYunDunUpdate, id is 0000046C
2025-07-08 10:48:45 [Info] ipc client:AliYunDunUpdate Reg msg_type:T_MSG_ALIYUNDUN_IPC_HEART on WhiteList
2025-07-08 10:48:45 [Info] ipc client:AliYunDunUpdate Reg msg_type:T_MSG_SERVICE_SWITCH_RSP on WhiteList
2025-07-08 10:48:45 [Info] ipc client:AliYunDunUpdate UnReg client_name:protocol_ipc_client on WhiteList
2025-07-08 10:48:45 [Info] there is no AliSecGuard
2025-07-08 10:48:45 [Info] driver owner is not AliSecGuard, do not uninstall driver
2025-07-08 10:48:45 [Info] uninstall old AliSecGuard success
2025-07-08 10:48:48 [Info] begin to monitor thread :rtap, a2c
2025-07-08 10:48:49 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-08 10:48:49 [Info] ipc client:Rtap122761751942929_handler Reg client_name:Rtap122761751942929 on WhiteList
2025-07-08 10:48:49 [Info] start rtap process success, pid is 2768, argument is Rtap122761751942929
2025-07-08 10:48:49 [Info] New ClientConnectNotify : Rtap122761751942929, id is 00000510
2025-07-08 10:48:49 [Info] ipc client:Rtap122761751942929 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-08 10:48:49 [Info] Rtap Platform Rtap122761751942929 execv work --windows-sysinfoext-check on pid 2768
2025-07-08 10:48:57 [Info] Done Work --windows-sysinfoext-check:1
2025-07-08 10:48:57 [Info] Rtap Platform Rtap122761751942929 Exit:normal exit
2025-07-08 10:48:57 [Info] start run monitor:[C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_60/AliYunDunMonitor.exe]
2025-07-08 10:48:58 [Info] RunMonitor Success
2025-07-08 10:48:59 [Info] ClientDisConnectNotify : Rtap122761751942929, id is 00000510
2025-07-08 10:49:07 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"88","aliyundun_avg_fd_count":"320","aliyundun_avg_mem":"14848","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"1","aliyundun_max_cpu":"14","aliyundun_max_mem":"14968","aliyundun_upload_time":"1751942947","aliyundun_write_pid_times":"0","ipc_send_count":"3","launch_count":"1","login_time":"3","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"1","timer_skew":"0","update_update_fail":"0"}
2025-07-08 10:49:07 [Info] mt report at 2025-07-08 11:08:30
2025-07-08 10:49:18 [Info] New ClientConnectNotify : AliYunDunMonitor, id is 00000524
2025-07-08 10:49:18 [Info] ipc client:AliYunDunMonitor Reg msg_type:T_MSG_CLIENT_RULE_PUSH on BlackList
2025-07-08 10:49:18 [Info] ipc client:AliYunDunMonitor Reg msg_type:T_MSG_PLUGIN_HEARTS_ACK on BlackList
2025-07-08 10:49:18 [Info] ipc client:AliYunDunMonitor Reg msg_type:INTERNAL_MSG_REQUEST_CONTAINER_INFO on WhiteList
2025-07-08 10:49:18 [Info] ipc client:AliYunDunMonitor Reg msg_type:T_MSG_NEW_AEGIS_INFO on WhiteList
2025-07-08 10:49:18 [Info] ipc client:AliYunDunMonitor Reg client_name:protocol_ipc_client_with_obj_id on WhiteList
2025-07-08 10:49:19 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-08 10:49:19 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-08 10:49:19 [Info] key : cpu, value : 10
2025-07-08 10:49:19 [Info] key : rio, value : 20480
2025-07-08 10:49:19 [Info] key : wio, value : 20480
2025-07-08 10:49:19 [Info] key : cpu_all, value : 0
2025-07-08 10:49:19 [Info] key : max_pid_check, value : 200
2025-07-08 10:49:19 [Info] key : throw_dump, value : 0
2025-07-08 10:49:19 [Info] key : hash_mode, value : 1
2025-07-08 10:49:19 [Info] key : mem, value : 200
2025-07-08 10:49:19 [Info] can not find key max_fd in online conf
2025-07-08 10:49:19 [Info] key : proc_limit, value : 1
2025-07-08 10:49:19 [Info] key : resource_limit_mode, value : 3
2025-07-08 10:49:19 [Info] key : rtap_update_mode, value : 1
2025-07-08 10:49:19 [Info] can not find key debug in online conf
2025-07-08 10:49:19 [Info] can not find key update_mode in online conf
2025-07-08 10:49:19 [Info] can not find key http_mode in online conf
2025-07-08 10:49:19 [Info] can not find key rtap_enable in online conf
2025-07-08 10:49:19 [Info] can not find key rtap_new_agent in online conf
2025-07-08 10:49:19 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-08 10:49:19 [Info] can not find key mem_low_mark in online conf
2025-07-08 10:49:19 [Info] can not find key obnormal_report_interval in online conf
2025-07-08 10:49:19 [Info] key : cache_mode, value : 0
2025-07-08 10:49:19 [Info] key : abnormal_monitor_mode, value : 3
2025-07-08 10:49:19 [Info] key : queue_size_ratio, value : 80
2025-07-08 10:49:19 [Info] queue_size_ratio is 80
2025-07-08 10:49:19 [Info] resource limit mode and max limit cpu is not change
2025-07-08 10:49:19 [Info] set hash mode 1
2025-07-08 10:49:19 [Info] RTAP timeout config:9600000
2025-07-08 10:49:19 [Info] self_guard_mode config is 0
2025-07-08 10:49:34 [Info] log fd cnt is [300], real fd cnt is [330]
2025-07-08 10:49:42 [Info] begin to monitor thread :main, 55c
2025-07-08 10:50:35 [Info] log fd cnt is [350], real fd cnt is [331]
2025-07-08 10:50:49 [Info] GetMessage : T_MSG_CHECK
2025-07-08 10:50:49 [Info] get --alisecguard-config message, cmd index is e6c85f18-1c71-4e85-b7bd-be11b4a0bdb8
2025-07-08 10:50:49 [Info] GetMessage : T_MSG_PLUGIN_CLIENT_CONFIG
2025-07-08 10:50:49 [Info] state is not disable, current state is 1
2025-07-08 10:50:49 [Warn] enable self guard driver fail when handle T_MSG_PLUGIN_CLIENT_CONFIG message
2025-07-08 10:50:50 [Info] begin to install self guard
2025-07-08 10:50:50 [Info] os version:10--0--0
2025-07-08 10:50:53 [Info] self guard driver is running
2025-07-08 10:50:53 [Info] os version:10--0--0
2025-07-08 10:50:53 [Info] os version:10--0--0
2025-07-08 10:50:53 [Info] driver bin is same, no need to update it
2025-07-08 10:50:53 [Info] driver is installed, and no need to update
2025-07-08 10:50:53 [Info] os version:10--0--0
2025-07-08 10:50:53 [Info] service pid is 508
2025-07-08 10:50:53 [Info] set sp status to 1
2025-07-08 10:50:53 [Info] install self guard error code is 0, error is ,last error is 2
2025-07-08 10:50:53 [Info] csrss.exe open proc 3008 AliYunDun.exe
2025-07-08 10:50:56 [Info] csrss.exe open thread 3008 AliYunDun.exe
2025-07-08 10:50:57 [Info] csrss.exe open proc 2768 AliSecCheck.ex
2025-07-08 10:50:58 [Info] csrss.exe open thread 2768 AliSecCheck.ex
2025-07-08 10:51:00 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:01 [Info] csrss.exe open thread 228 AliYunDunMonit
2025-07-08 10:51:02 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:03 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:04 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:05 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:07 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:08 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:09 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:10 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:11 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:12 [Info] csrss.exe open proc 228 AliYunDunMonit
2025-07-08 10:51:53 [Info] alisecguard update, old version is aegis_12_50, new version is aegis_12_60
2025-07-08 11:05:57 [Info] GetMessage : T_MSG_CHECK
2025-07-08 11:05:57 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTE5NDM5NTcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUxOTg3MTU3LCJzdWIiOiJSVEFQX0lEWF8xNTc2MjhfMTc1MTk0Mzk1NzE0OCJ9.qhUNMmGoQGNSUPCs-EGIycRYGg0iy4gs0IZWLV_LAQY has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-08 11:06:08 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-08 11:06:08 [Info] ipc client:Rtap156691751943968_handler Reg client_name:Rtap156691751943968 on WhiteList
2025-07-08 11:06:08 [Info] start rtap process success, pid is 2636, argument is Rtap156691751943968
2025-07-08 11:06:08 [Info] New ClientConnectNotify : Rtap156691751943968, id is 0000051C
2025-07-08 11:06:08 [Info] ipc client:Rtap156691751943968 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-08 11:06:09 [Info] Rtap Platform Rtap156691751943968 execv work --windows-autorun-item-check on pid 2636
2025-07-08 11:06:09 [Info] csrss.exe open proc 2636 AliSecCheck.ex
2025-07-08 11:06:10 [Info] csrss.exe open thread 2636 AliSecCheck.ex
2025-07-08 11:06:24 [Info] Done Work --windows-autorun-item-check:1
2025-07-08 11:06:24 [Info] Rtap Platform Rtap156691751943968 Exit:normal exit
2025-07-08 11:06:26 [Info] ClientDisConnectNotify : Rtap156691751943968, id is 0000051C
2025-07-08 11:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"15128","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15168","aliyundun_upload_time":"1751944141","aliyundun_write_pid_times":"0","ipc_send_count":"54","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 11:49:29 [Info] TotalPhys:2047,AvailPhys:1252,TotalVirtual:2047,AvailVirtual:1985,TotalPageFile:4648,AvailPageFile:3827,SelfWorkingSet:15148, SelfPageFile:12480
2025-07-08 11:49:29 [Info] CommitTotal:821,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1252,SystemCache:835,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11605,ProcessCount:31,ThreadCount:409
2025-07-08 11:54:53 [Info] GetMessage : T_MSG_GET_GRAY_FILE_PUSH
2025-07-08 11:55:05 [Info] GetMessage : T_MSG_GET_GRAY_FILE_PUSH
2025-07-08 11:55:05 [Info] GetMessage : T_MSG_GET_GRAY_FILE_PUSH
2025-07-08 11:55:08 [Info] GetMessage : T_MSG_GET_GRAY_FILE_PUSH
2025-07-08 11:55:09 [Info] GetMessage : T_MSG_GET_GRAY_FILE_PUSH
2025-07-08 12:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"323","aliyundun_avg_mem":"15128","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"15244","aliyundun_upload_time":"1751947712","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 12:50:25 [Info] TotalPhys:2047,AvailPhys:1236,TotalVirtual:2047,AvailVirtual:1985,TotalPageFile:4648,AvailPageFile:3823,SelfWorkingSet:15220, SelfPageFile:12428
2025-07-08 12:50:25 [Info] CommitTotal:825,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1236,SystemCache:716,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11653,ProcessCount:31,ThreadCount:410
2025-07-08 13:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"323","aliyundun_avg_mem":"15226","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"15268","aliyundun_upload_time":"1751951319","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 13:51:21 [Info] TotalPhys:2047,AvailPhys:1237,TotalVirtual:2047,AvailVirtual:1985,TotalPageFile:4648,AvailPageFile:3822,SelfWorkingSet:15236, SelfPageFile:12448
2025-07-08 13:51:21 [Info] CommitTotal:825,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1237,SystemCache:716,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11665,ProcessCount:31,ThreadCount:413
2025-07-08 14:05:36 [Info] get meta data success by v2
2025-07-08 14:05:36 [Info] get empty metaserver config
2025-07-08 14:05:36 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-08 14:05:37 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-08 14:05:37 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-08 14:05:37 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-08 14:05:37 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-08 14:05:37 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-08 14:05:37 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-08 14:05:37 [Info] download cert compare md5 same
2025-07-08 14:05:37 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-08 14:05:37 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-08 14:05:37 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-08 14:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"323","aliyundun_avg_mem":"15235","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15412","aliyundun_upload_time":"1751954920","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 14:52:18 [Info] TotalPhys:2047,AvailPhys:1237,TotalVirtual:2047,AvailVirtual:1985,TotalPageFile:4648,AvailPageFile:3822,SelfWorkingSet:15368, SelfPageFile:12596
2025-07-08 14:52:18 [Info] CommitTotal:826,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1237,SystemCache:717,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11668,ProcessCount:31,ThreadCount:413
2025-07-08 15:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"323","aliyundun_avg_mem":"15351","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15416","aliyundun_upload_time":"1751958523","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 15:53:14 [Info] TotalPhys:2047,AvailPhys:1246,TotalVirtual:2047,AvailVirtual:1985,TotalPageFile:4648,AvailPageFile:3822,SelfWorkingSet:15352, SelfPageFile:12604
2025-07-08 15:53:14 [Info] CommitTotal:826,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1246,SystemCache:717,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11669,ProcessCount:31,ThreadCount:411
2025-07-08 16:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"323","aliyundun_avg_mem":"15346","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15400","aliyundun_upload_time":"1751962127","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 16:16:57 [Info] nCurrentClock is 18001200, nCurrentTime is 1751962617
2025-07-08 16:16:57 [Info] SendMessage T_MSG_LOGIN
2025-07-08 16:16:57 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-08 16:16:57 [Info] begin to enable self guard after reconnect
2025-07-08 16:16:57 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-08 16:16:58 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-08 16:16:58 [Info] GetMessage : T_MSG_CHECK
2025-07-08 16:16:58 [Info] task 60867547-8dc3-4837-8f70-95dcd73152be has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-08 16:17:06 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-08 16:17:06 [Info] key : cpu, value : 10
2025-07-08 16:17:06 [Info] key : rio, value : 20480
2025-07-08 16:17:06 [Info] key : wio, value : 20480
2025-07-08 16:17:06 [Info] key : cpu_all, value : 0
2025-07-08 16:17:06 [Info] key : max_pid_check, value : 200
2025-07-08 16:17:06 [Info] key : throw_dump, value : 0
2025-07-08 16:17:06 [Info] key : hash_mode, value : 1
2025-07-08 16:17:06 [Info] key : mem, value : 200
2025-07-08 16:17:06 [Info] can not find key max_fd in online conf
2025-07-08 16:17:06 [Info] key : proc_limit, value : 1
2025-07-08 16:17:06 [Info] key : resource_limit_mode, value : 3
2025-07-08 16:17:06 [Info] key : rtap_update_mode, value : 1
2025-07-08 16:17:06 [Info] can not find key debug in online conf
2025-07-08 16:17:06 [Info] can not find key update_mode in online conf
2025-07-08 16:17:06 [Info] can not find key http_mode in online conf
2025-07-08 16:17:06 [Info] can not find key rtap_enable in online conf
2025-07-08 16:17:06 [Info] can not find key rtap_new_agent in online conf
2025-07-08 16:17:06 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-08 16:17:06 [Info] can not find key mem_low_mark in online conf
2025-07-08 16:17:06 [Info] can not find key obnormal_report_interval in online conf
2025-07-08 16:17:06 [Info] key : cache_mode, value : 0
2025-07-08 16:17:06 [Info] key : abnormal_monitor_mode, value : 3
2025-07-08 16:17:06 [Info] key : queue_size_ratio, value : 80
2025-07-08 16:17:06 [Info] queue_size_ratio is 80
2025-07-08 16:17:06 [Info] resource limit mode and max limit cpu is not change
2025-07-08 16:17:06 [Info] set hash mode 1
2025-07-08 16:17:06 [Info] RTAP timeout config:9600000
2025-07-08 16:17:06 [Info] self_guard_mode config is 0
2025-07-08 16:17:06 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-07-08 16:17:11 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-08 16:17:11 [Info] ipc client:Rtap110781751962631_handler Reg client_name:Rtap110781751962631 on WhiteList
2025-07-08 16:17:11 [Info] start rtap process success, pid is 2136, argument is Rtap110781751962631
2025-07-08 16:17:11 [Info] New ClientConnectNotify : Rtap110781751962631, id is 000004B8
2025-07-08 16:17:11 [Info] ipc client:Rtap110781751962631 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-08 16:17:11 [Info] Rtap Platform Rtap110781751962631 execv work --windows-sysinfoext-check on pid 2136
2025-07-08 16:17:13 [Info] csrss.exe open proc 2136 AliSecCheck.ex
2025-07-08 16:17:14 [Info] csrss.exe open thread 2136 AliSecCheck.ex
2025-07-08 16:17:18 [Info] Done Work --windows-sysinfoext-check:1
2025-07-08 16:17:18 [Info] Rtap Platform Rtap110781751962631 Exit:normal exit
2025-07-08 16:17:20 [Info] ClientDisConnectNotify : Rtap110781751962631, id is 000004B8
2025-07-08 16:54:10 [Info] TotalPhys:2047,AvailPhys:1241,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:4648,AvailPageFile:3825,SelfWorkingSet:15356, SelfPageFile:12544
2025-07-08 16:54:10 [Info] CommitTotal:822,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1241,SystemCache:713,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11609,ProcessCount:31,ThreadCount:410
2025-07-08 17:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15323","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15376","aliyundun_upload_time":"1751965731","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"38","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 17:22:38 [Info] get meta data success by v2
2025-07-08 17:22:38 [Info] get empty metaserver config
2025-07-08 17:22:38 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-08 17:22:38 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-08 17:22:38 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-08 17:22:38 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-08 17:22:38 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-08 17:22:38 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-08 17:22:38 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-08 17:22:38 [Info] download cert compare md5 same
2025-07-08 17:22:38 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-08 17:22:38 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-08 17:22:38 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-08 17:55:06 [Info] TotalPhys:2047,AvailPhys:1247,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:4648,AvailPageFile:3822,SelfWorkingSet:15352, SelfPageFile:12564
2025-07-08 17:55:06 [Info] CommitTotal:826,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1247,SystemCache:713,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11690,ProcessCount:31,ThreadCount:418
2025-07-08 18:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15339","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"15452","aliyundun_upload_time":"1751969334","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 18:56:03 [Info] TotalPhys:2047,AvailPhys:1249,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:4648,AvailPageFile:3822,SelfWorkingSet:15360, SelfPageFile:12568
2025-07-08 18:56:03 [Info] CommitTotal:825,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1249,SystemCache:713,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11632,ProcessCount:31,ThreadCount:413
2025-07-08 19:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15332","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"15376","aliyundun_upload_time":"1751972913","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"38","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 19:13:36 [Info] GetMessage : T_MSG_CHECK
2025-07-08 19:13:36 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTE5NzMyMTYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyMDE2NDE2LCJzdWIiOiJSVEFQX0lEWF8xNTc2OThfMTc1MTk3MzIxNjc3NiJ9.JpI0uFFtM2IxgAq8AGjtro5UYfngg9VOw9i6J7m9b-4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-08 19:13:49 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-08 19:13:49 [Info] ipc client:Rtap129191751973229_handler Reg client_name:Rtap129191751973229 on WhiteList
2025-07-08 19:13:49 [Info] start rtap process success, pid is 780, argument is Rtap129191751973229
2025-07-08 19:13:49 [Info] New ClientConnectNotify : Rtap129191751973229, id is 00000530
2025-07-08 19:13:49 [Info] ipc client:Rtap129191751973229 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-08 19:13:49 [Info] Rtap Platform Rtap129191751973229 execv work --secnet_rasp_agent on pid 780
2025-07-08 19:13:50 [Info] csrss.exe open proc 780 AliSecCheck.ex
2025-07-08 19:13:51 [Info] csrss.exe open thread 780 AliSecCheck.ex
2025-07-08 19:13:57 [Info] Done Work --secnet_rasp_agent:1
2025-07-08 19:13:57 [Info] Rtap Platform Rtap129191751973229 Exit:normal exit
2025-07-08 19:13:59 [Info] ClientDisConnectNotify : Rtap129191751973229, id is 00000530
2025-07-08 19:56:59 [Info] TotalPhys:2047,AvailPhys:1247,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:4648,AvailPageFile:3822,SelfWorkingSet:15356, SelfPageFile:12568
2025-07-08 19:56:59 [Info] CommitTotal:826,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1247,SystemCache:714,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11644,ProcessCount:31,ThreadCount:415
2025-07-08 20:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15337","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"15400","aliyundun_upload_time":"1751976515","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 20:39:38 [Info] get meta data success by v2
2025-07-08 20:39:38 [Info] get empty metaserver config
2025-07-08 20:39:38 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-08 20:39:38 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-08 20:39:38 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-08 20:39:38 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-08 20:39:38 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-08 20:39:38 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-08 20:39:38 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-08 20:39:38 [Info] download cert compare md5 same
2025-07-08 20:39:38 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-08 20:39:38 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-08 20:39:38 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-08 20:57:55 [Info] TotalPhys:2047,AvailPhys:1243,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:4648,AvailPageFile:3818,SelfWorkingSet:15432, SelfPageFile:12752
2025-07-08 20:57:55 [Info] CommitTotal:830,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1243,SystemCache:722,KernelTotal:217,KernelPaged:158,KernelNonpaged:59,PageSize:4096,HandleCount:11933,ProcessCount:32,ThreadCount:421
2025-07-08 21:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15359","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"15440","aliyundun_upload_time":"1751980116","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 21:45:19 [Info] nCurrentClock is 36002000, nCurrentTime is 1751982319
2025-07-08 21:45:19 [Info] SendMessage T_MSG_LOGIN
2025-07-08 21:45:19 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-08 21:45:19 [Info] begin to enable self guard after reconnect
2025-07-08 21:45:19 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-08 21:45:19 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-08 21:45:19 [Info] GetMessage : T_MSG_CHECK
2025-07-08 21:45:19 [Info] task 37f7acd0-cae6-4afe-b222-1ef7cec92d2b has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-08 21:45:27 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-08 21:45:27 [Info] key : cpu, value : 10
2025-07-08 21:45:27 [Info] key : rio, value : 20480
2025-07-08 21:45:27 [Info] key : wio, value : 20480
2025-07-08 21:45:27 [Info] key : cpu_all, value : 0
2025-07-08 21:45:27 [Info] key : max_pid_check, value : 200
2025-07-08 21:45:27 [Info] key : throw_dump, value : 0
2025-07-08 21:45:27 [Info] key : hash_mode, value : 1
2025-07-08 21:45:27 [Info] key : mem, value : 200
2025-07-08 21:45:27 [Info] can not find key max_fd in online conf
2025-07-08 21:45:27 [Info] key : proc_limit, value : 1
2025-07-08 21:45:27 [Info] key : resource_limit_mode, value : 3
2025-07-08 21:45:27 [Info] key : rtap_update_mode, value : 1
2025-07-08 21:45:27 [Info] can not find key debug in online conf
2025-07-08 21:45:27 [Info] can not find key update_mode in online conf
2025-07-08 21:45:27 [Info] can not find key http_mode in online conf
2025-07-08 21:45:27 [Info] can not find key rtap_enable in online conf
2025-07-08 21:45:27 [Info] can not find key rtap_new_agent in online conf
2025-07-08 21:45:27 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-08 21:45:27 [Info] can not find key mem_low_mark in online conf
2025-07-08 21:45:27 [Info] can not find key obnormal_report_interval in online conf
2025-07-08 21:45:27 [Info] key : cache_mode, value : 0
2025-07-08 21:45:27 [Info] key : abnormal_monitor_mode, value : 3
2025-07-08 21:45:27 [Info] key : queue_size_ratio, value : 80
2025-07-08 21:45:27 [Info] queue_size_ratio is 80
2025-07-08 21:45:27 [Info] resource limit mode and max limit cpu is not change
2025-07-08 21:45:27 [Info] set hash mode 1
2025-07-08 21:45:27 [Info] RTAP timeout config:9600000
2025-07-08 21:45:27 [Info] self_guard_mode config is 0
2025-07-08 21:45:28 [Info] GetMessage : T_MSG_CHECK
2025-07-08 21:45:28 [Info] task 2a80bb9f62d0873b792ac20b4393e858 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-08 21:45:29 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-08 21:45:29 [Info] ipc client:Rtap98681751982329_handler Reg client_name:Rtap98681751982329 on WhiteList
2025-07-08 21:45:29 [Info] start rtap process success, pid is 872, argument is Rtap98681751982329
2025-07-08 21:45:29 [Info] New ClientConnectNotify : Rtap98681751982329, id is 00000504
2025-07-08 21:45:29 [Info] ipc client:Rtap98681751982329 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-08 21:45:29 [Info] Rtap Platform Rtap98681751982329 execv work --windows-sysinfoext-check on pid 872
2025-07-08 21:45:32 [Info] csrss.exe open proc 872 AliSecCheck.ex
2025-07-08 21:45:33 [Info] csrss.exe open thread 872 AliSecCheck.ex
2025-07-08 21:45:36 [Info] Done Work --windows-sysinfoext-check:1
2025-07-08 21:45:38 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-08 21:45:39 [Info] Rtap platform Rtap98681751982329 is reuse
2025-07-08 21:45:39 [Info] Rtap Platform Rtap98681751982329 execv work --windows-vul-check on pid 872
2025-07-08 21:45:46 [Info] Done Work --windows-vul-check:1
2025-07-08 21:45:46 [Info] Rtap Platform Rtap98681751982329 Exit:normal exit
2025-07-08 21:45:48 [Info] ClientDisConnectNotify : Rtap98681751982329, id is 00000504
2025-07-08 21:58:52 [Info] TotalPhys:2047,AvailPhys:1244,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:4648,AvailPageFile:3821,SelfWorkingSet:15396, SelfPageFile:12596
2025-07-08 21:58:52 [Info] CommitTotal:826,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1244,SystemCache:722,KernelTotal:218,KernelPaged:159,KernelNonpaged:59,PageSize:4096,HandleCount:11797,ProcessCount:32,ThreadCount:415
2025-07-08 22:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15347","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"15404","aliyundun_upload_time":"1751983720","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 22:59:48 [Info] TotalPhys:2047,AvailPhys:1246,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:4648,AvailPageFile:3822,SelfWorkingSet:15372, SelfPageFile:12584
2025-07-08 22:59:48 [Info] CommitTotal:825,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1246,SystemCache:724,KernelTotal:218,KernelPaged:159,KernelNonpaged:59,PageSize:4096,HandleCount:11658,ProcessCount:31,ThreadCount:418
2025-07-08 23:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15360","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15420","aliyundun_upload_time":"1751987322","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-08 23:56:40 [Info] get meta data success by v2
2025-07-08 23:56:40 [Info] get empty metaserver config
2025-07-08 23:56:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-08 23:56:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-08 23:56:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-08 23:56:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-08 23:56:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-08 23:56:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-08 23:56:40 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-08 23:56:40 [Info] download cert compare md5 same
2025-07-08 23:56:40 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-08 23:56:40 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-08 23:56:40 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-09 00:00:44 [Info] TotalPhys:2047,AvailPhys:1233,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:4648,AvailPageFile:3822,SelfWorkingSet:15480, SelfPageFile:12832
2025-07-09 00:00:44 [Info] CommitTotal:826,CommitLimit:4648,CommitPeak:1989,PhysicalTotal:2047,PhysicalAvailable:1233,SystemCache:724,KernelTotal:218,KernelPaged:159,KernelNonpaged:59,PageSize:4096,HandleCount:11647,ProcessCount:31,ThreadCount:420
2025-07-09 00:08:44 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15379","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"15496","aliyundun_upload_time":"1751990924","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"39","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 00:37:02 [Info] get meta data success by v2
2025-07-15 00:37:02 [Info] get empty metaserver config
2025-07-15 00:37:02 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-15 00:37:02 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-15 00:37:02 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-15 00:37:02 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-15 00:37:02 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 00:37:02 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 00:37:03 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-15 00:37:03 [Info] download cert compare md5 same
2025-07-15 00:37:03 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 00:37:03 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 00:37:03 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-15 01:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10206","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10352","aliyundun_upload_time":"1752512937","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-07-15 01:15:59 [Info] TotalPhys:2047,AvailPhys:310,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6623,AvailPageFile:1421,SelfWorkingSet:10188, SelfPageFile:13416
2025-07-15 01:15:59 [Info] CommitTotal:5201,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:310,SystemCache:263,KernelTotal:266,KernelPaged:188,KernelNonpaged:77,PageSize:4096,HandleCount:26602,ProcessCount:52,ThreadCount:733
2025-07-15 01:19:49 [Info] GetMessage : T_MSG_CHECK
2025-07-15 01:19:49 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI1MTM1ODksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyNTU2Nzg5LCJzdWIiOiJSVEFQX0lEWF8xNTgxODBfMTc1MjUxMzU4OTEyMSJ9.X5CofSSOTcPqOXnz5LIdnZlecapxBcoB0A-ETMGZBrg has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 01:20:01 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 01:20:01 [Info] ipc client:Rtap80751752513601_handler Reg client_name:Rtap80751752513601 on WhiteList
2025-07-15 01:20:01 [Info] start rtap process success, pid is 4412, argument is Rtap80751752513601
2025-07-15 01:20:01 [Info] system memory usage is 87
2025-07-15 01:20:02 [Info] system memory usage is 87
2025-07-15 01:20:02 [Info] New ClientConnectNotify : Rtap80751752513601, id is 00000504
2025-07-15 01:20:03 [Info] Rtap Platform Rtap80751752513601 execv work --sca on pid 4412
2025-07-15 01:20:03 [Info] ipc client:Rtap80751752513601 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 01:20:04 [Info] csrss.exe open proc 4412 AliSecCheck.ex
2025-07-15 01:20:05 [Info] csrss.exe open thread 4412 AliSecCheck.ex
2025-07-15 01:20:06 [Info] csrss.exe open thread 4412 AliSecCheck.ex
2025-07-15 01:20:07 [Info] csrss.exe open thread 4412 AliSecCheck.ex
2025-07-15 01:20:08 [Info] csrss.exe open thread 4412 AliSecCheck.ex
2025-07-15 01:20:47 [Info] csrss.exe open thread 4412 AliSecCheck.ex
2025-07-15 01:21:11 [Info] Done Work --sca:1
2025-07-15 01:21:11 [Info] Rtap Platform Rtap80751752513601 Exit:normal exit
2025-07-15 01:21:13 [Info] ClientDisConnectNotify : Rtap80751752513601, id is 00000504
2025-07-15 01:43:31 [Info] nCurrentClock is 522027200, nCurrentTime is 1752515011
2025-07-15 01:43:32 [Info] SendMessage T_MSG_LOGIN
2025-07-15 01:43:32 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-15 01:43:32 [Info] begin to enable self guard after reconnect
2025-07-15 01:43:32 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-15 01:43:32 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-15 01:43:32 [Info] GetMessage : T_MSG_CHECK
2025-07-15 01:43:32 [Info] task f9e1536d-5313-4f25-a860-6a93f221251a has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 01:43:40 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-15 01:43:40 [Info] key : cpu, value : 10
2025-07-15 01:43:40 [Info] key : rio, value : 20480
2025-07-15 01:43:40 [Info] key : wio, value : 20480
2025-07-15 01:43:40 [Info] key : cpu_all, value : 0
2025-07-15 01:43:40 [Info] key : max_pid_check, value : 200
2025-07-15 01:43:40 [Info] key : throw_dump, value : 0
2025-07-15 01:43:40 [Info] key : hash_mode, value : 1
2025-07-15 01:43:40 [Info] key : mem, value : 200
2025-07-15 01:43:40 [Info] can not find key max_fd in online conf
2025-07-15 01:43:40 [Info] key : proc_limit, value : 1
2025-07-15 01:43:40 [Info] key : resource_limit_mode, value : 3
2025-07-15 01:43:40 [Info] key : rtap_update_mode, value : 1
2025-07-15 01:43:40 [Info] can not find key debug in online conf
2025-07-15 01:43:40 [Info] can not find key update_mode in online conf
2025-07-15 01:43:40 [Info] can not find key http_mode in online conf
2025-07-15 01:43:40 [Info] can not find key rtap_enable in online conf
2025-07-15 01:43:40 [Info] can not find key rtap_new_agent in online conf
2025-07-15 01:43:40 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-15 01:43:40 [Info] can not find key mem_low_mark in online conf
2025-07-15 01:43:40 [Info] can not find key obnormal_report_interval in online conf
2025-07-15 01:43:40 [Info] key : cache_mode, value : 0
2025-07-15 01:43:40 [Info] key : abnormal_monitor_mode, value : 3
2025-07-15 01:43:40 [Info] key : queue_size_ratio, value : 80
2025-07-15 01:43:40 [Info] queue_size_ratio is 80
2025-07-15 01:43:40 [Info] resource limit mode and max limit cpu is not change
2025-07-15 01:43:40 [Info] set hash mode 1
2025-07-15 01:43:40 [Info] RTAP timeout config:9600000
2025-07-15 01:43:40 [Info] self_guard_mode config is 0
2025-07-15 01:43:45 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 01:43:45 [Info] ipc client:Rtap127251752515025_handler Reg client_name:Rtap127251752515025 on WhiteList
2025-07-15 01:43:45 [Info] start rtap process success, pid is 3964, argument is Rtap127251752515025
2025-07-15 01:43:45 [Info] New ClientConnectNotify : Rtap127251752515025, id is 0000051C
2025-07-15 01:43:45 [Info] ipc client:Rtap127251752515025 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 01:43:46 [Info] Rtap Platform Rtap127251752515025 execv work --windows-sysinfoext-check on pid 3964
2025-07-15 01:43:47 [Info] csrss.exe open proc 3964 AliSecCheck.ex
2025-07-15 01:43:48 [Info] csrss.exe open thread 3964 AliSecCheck.ex
2025-07-15 01:43:57 [Info] Done Work --windows-sysinfoext-check:1
2025-07-15 01:43:57 [Info] Rtap Platform Rtap127251752515025 Exit:normal exit
2025-07-15 01:43:59 [Info] ClientDisConnectNotify : Rtap127251752515025, id is 0000051C
2025-07-15 02:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10250","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10372","aliyundun_upload_time":"1752516520","aliyundun_write_pid_times":"0","ipc_send_count":"149","login_time":"0","mem_usage":"90","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 02:16:57 [Info] TotalPhys:2047,AvailPhys:192,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1316,SelfWorkingSet:10208, SelfPageFile:13476
2025-07-15 02:16:57 [Info] CommitTotal:5306,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:192,SystemCache:157,KernelTotal:264,KernelPaged:188,KernelNonpaged:75,PageSize:4096,HandleCount:26570,ProcessCount:52,ThreadCount:737
2025-07-15 03:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10203","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10324","aliyundun_upload_time":"1752520123","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"90","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 03:17:54 [Info] TotalPhys:2047,AvailPhys:191,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1318,SelfWorkingSet:10280, SelfPageFile:13780
2025-07-15 03:17:54 [Info] CommitTotal:5304,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:191,SystemCache:134,KernelTotal:257,KernelPaged:184,KernelNonpaged:72,PageSize:4096,HandleCount:26487,ProcessCount:52,ThreadCount:736
2025-07-15 03:54:55 [Info] get meta data success by v2
2025-07-15 03:54:55 [Info] get empty metaserver config
2025-07-15 03:54:55 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-15 03:54:55 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-15 03:54:55 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-15 03:54:55 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-15 03:54:55 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 03:54:55 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 03:54:55 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-15 03:54:55 [Info] download cert compare md5 same
2025-07-15 03:54:55 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 03:54:55 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 03:54:55 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-15 04:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10224","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10316","aliyundun_upload_time":"1752523729","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"91","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 04:18:50 [Info] TotalPhys:2047,AvailPhys:178,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1316,SelfWorkingSet:10240, SelfPageFile:13704
2025-07-15 04:18:50 [Info] CommitTotal:5306,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:178,SystemCache:155,KernelTotal:259,KernelPaged:187,KernelNonpaged:72,PageSize:4096,HandleCount:26506,ProcessCount:52,ThreadCount:735
2025-07-15 05:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10212","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10264","aliyundun_upload_time":"1752527341","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"90","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 05:19:47 [Info] TotalPhys:2047,AvailPhys:182,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1324,SelfWorkingSet:10164, SelfPageFile:13628
2025-07-15 05:19:47 [Info] CommitTotal:5298,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:182,SystemCache:159,KernelTotal:255,KernelPaged:183,KernelNonpaged:72,PageSize:4096,HandleCount:26495,ProcessCount:52,ThreadCount:730
2025-07-15 06:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10173","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"10196","aliyundun_upload_time":"1752530918","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"91","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 06:20:43 [Info] TotalPhys:2047,AvailPhys:169,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1312,SelfWorkingSet:10196, SelfPageFile:13680
2025-07-15 06:20:43 [Info] CommitTotal:5310,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:169,SystemCache:154,KernelTotal:253,KernelPaged:181,KernelNonpaged:72,PageSize:4096,HandleCount:26510,ProcessCount:52,ThreadCount:738
2025-07-15 07:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10178","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10204","aliyundun_upload_time":"1752534526","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"91","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 07:12:14 [Info] get meta data success by v2
2025-07-15 07:12:14 [Info] get empty metaserver config
2025-07-15 07:12:14 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-15 07:12:15 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-15 07:12:15 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-15 07:12:15 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-15 07:12:15 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 07:12:15 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 07:12:15 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-15 07:12:15 [Info] download cert compare md5 same
2025-07-15 07:12:15 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 07:12:15 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 07:12:15 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-15 07:12:16 [Info] nCurrentClock is 540028500, nCurrentTime is 1752534736
2025-07-15 07:12:16 [Info] SendMessage T_MSG_LOGIN
2025-07-15 07:12:16 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-15 07:12:16 [Info] begin to enable self guard after reconnect
2025-07-15 07:12:16 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-15 07:12:16 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-15 07:12:17 [Info] GetMessage : T_MSG_CHECK
2025-07-15 07:12:17 [Info] task de3d4757-3b69-46f7-b10d-cbaa8bac1ba7 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 07:12:25 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-15 07:12:25 [Info] key : cpu, value : 10
2025-07-15 07:12:25 [Info] key : rio, value : 20480
2025-07-15 07:12:25 [Info] key : wio, value : 20480
2025-07-15 07:12:25 [Info] key : cpu_all, value : 0
2025-07-15 07:12:25 [Info] key : max_pid_check, value : 200
2025-07-15 07:12:25 [Info] key : throw_dump, value : 0
2025-07-15 07:12:25 [Info] key : hash_mode, value : 1
2025-07-15 07:12:25 [Info] key : mem, value : 200
2025-07-15 07:12:25 [Info] can not find key max_fd in online conf
2025-07-15 07:12:25 [Info] key : proc_limit, value : 1
2025-07-15 07:12:25 [Info] key : resource_limit_mode, value : 3
2025-07-15 07:12:25 [Info] key : rtap_update_mode, value : 1
2025-07-15 07:12:25 [Info] can not find key debug in online conf
2025-07-15 07:12:25 [Info] can not find key update_mode in online conf
2025-07-15 07:12:25 [Info] can not find key http_mode in online conf
2025-07-15 07:12:25 [Info] can not find key rtap_enable in online conf
2025-07-15 07:12:25 [Info] can not find key rtap_new_agent in online conf
2025-07-15 07:12:25 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-15 07:12:25 [Info] can not find key mem_low_mark in online conf
2025-07-15 07:12:25 [Info] can not find key obnormal_report_interval in online conf
2025-07-15 07:12:25 [Info] key : cache_mode, value : 0
2025-07-15 07:12:25 [Info] key : abnormal_monitor_mode, value : 3
2025-07-15 07:12:25 [Info] key : queue_size_ratio, value : 80
2025-07-15 07:12:25 [Info] queue_size_ratio is 80
2025-07-15 07:12:25 [Info] resource limit mode and max limit cpu is not change
2025-07-15 07:12:25 [Info] set hash mode 1
2025-07-15 07:12:25 [Info] RTAP timeout config:9600000
2025-07-15 07:12:25 [Info] self_guard_mode config is 0
2025-07-15 07:12:27 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 07:12:27 [Info] ipc client:Rtap115931752534747_handler Reg client_name:Rtap115931752534747 on WhiteList
2025-07-15 07:12:27 [Info] start rtap process success, pid is 2844, argument is Rtap115931752534747
2025-07-15 07:12:28 [Info] system memory usage is 92
2025-07-15 07:12:28 [Info] system memory usage is 92
2025-07-15 07:12:29 [Info] New ClientConnectNotify : Rtap115931752534747, id is 00000504
2025-07-15 07:12:29 [Info] ipc client:Rtap115931752534747 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 07:12:29 [Info] Rtap Platform Rtap115931752534747 execv work --windows-sysinfoext-check on pid 2844
2025-07-15 07:12:30 [Info] csrss.exe open proc 2844 AliSecCheck.ex
2025-07-15 07:12:31 [Info] csrss.exe open thread 2844 AliSecCheck.ex
2025-07-15 07:12:32 [Info] csrss.exe open thread 2844 AliSecCheck.ex
2025-07-15 07:12:33 [Info] csrss.exe open thread 2844 AliSecCheck.ex
2025-07-15 07:12:34 [Info] csrss.exe open thread 2844 AliSecCheck.ex
2025-07-15 07:12:40 [Info] Done Work --windows-sysinfoext-check:1
2025-07-15 07:12:40 [Info] Rtap Platform Rtap115931752534747 Exit:normal exit
2025-07-15 07:12:42 [Info] ClientDisConnectNotify : Rtap115931752534747, id is 00000504
2025-07-15 07:21:41 [Info] TotalPhys:2047,AvailPhys:175,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6623,AvailPageFile:1318,SelfWorkingSet:10236, SelfPageFile:13812
2025-07-15 07:21:41 [Info] CommitTotal:5304,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:175,SystemCache:139,KernelTotal:250,KernelPaged:179,KernelNonpaged:71,PageSize:4096,HandleCount:26679,ProcessCount:53,ThreadCount:744
2025-07-15 08:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9910","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10316","aliyundun_upload_time":"1752538113","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"89","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 08:22:40 [Info] TotalPhys:2047,AvailPhys:202,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1317,SelfWorkingSet:9468, SelfPageFile:13688
2025-07-15 08:22:40 [Info] CommitTotal:5306,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:202,SystemCache:152,KernelTotal:252,KernelPaged:181,KernelNonpaged:71,PageSize:4096,HandleCount:26525,ProcessCount:52,ThreadCount:739
2025-07-15 08:53:24 [Info] GetMessage : T_MSG_CHECK
2025-07-15 08:53:24 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI1NDA4MDQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyNTg0MDA0LCJzdWIiOiJSVEFQX0lEWF8xNTgxNzFfMTc1MjU0MDgwNDg0NCJ9.8F2PfYgtsa0A77JcE6aEU6lqqtUezxZY9dZCx5euvfo has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 08:53:35 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 08:53:35 [Info] ipc client:Rtap314081752540815_handler Reg client_name:Rtap314081752540815 on WhiteList
2025-07-15 08:53:35 [Info] start rtap process success, pid is 3624, argument is Rtap314081752540815
2025-07-15 08:53:35 [Info] system memory usage is 90
2025-07-15 08:53:36 [Info] system memory usage is 91
2025-07-15 08:53:36 [Info] csrss.exe open proc 3624 AliSecCheck.ex
2025-07-15 08:53:36 [Info] system memory usage is 90
2025-07-15 08:53:37 [Info] system memory usage is 90
2025-07-15 08:53:37 [Info] csrss.exe open thread 3624 AliSecCheck.ex
2025-07-15 08:53:37 [Info] system memory usage is 91
2025-07-15 08:53:38 [Info] system memory usage is 91
2025-07-15 08:53:38 [Info] New ClientConnectNotify : Rtap314081752540815, id is 00000540
2025-07-15 08:53:38 [Info] csrss.exe open thread 3624 AliSecCheck.ex
2025-07-15 08:53:38 [Info] ipc client:Rtap314081752540815 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 08:53:38 [Info] Rtap Platform Rtap314081752540815 execv work --windows-process-check on pid 3624
2025-07-15 08:53:39 [Info] csrss.exe open thread 3624 AliSecCheck.ex
2025-07-15 08:54:38 [Info] Done Work --windows-process-check:1
2025-07-15 08:54:38 [Info] Rtap Platform Rtap314081752540815 Exit:normal exit
2025-07-15 08:54:40 [Info] ClientDisConnectNotify : Rtap314081752540815, id is 00000540
2025-07-15 09:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9501","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9620","aliyundun_upload_time":"1752541736","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"90","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 09:23:42 [Info] TotalPhys:2047,AvailPhys:229,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1332,SelfWorkingSet:9520, SelfPageFile:13680
2025-07-15 09:23:42 [Info] CommitTotal:5290,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:229,SystemCache:185,KernelTotal:254,KernelPaged:182,KernelNonpaged:71,PageSize:4096,HandleCount:26489,ProcessCount:52,ThreadCount:729
2025-07-15 09:59:54 [Info] GetMessage : T_MSG_CHECK
2025-07-15 09:59:54 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI1NDQ3OTMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyNTg3OTkzLCJzdWIiOiJSVEFQX0lEWF8xNTgxNzJfMTc1MjU0NDc5Mzk1OSJ9.HpoEmGQZ97eDOFWyceGc76TBYD3BzqczbqQPUoWCVXY has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 10:00:05 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 10:00:05 [Info] ipc client:Rtap116701752544805_handler Reg client_name:Rtap116701752544805 on WhiteList
2025-07-15 10:00:05 [Info] start rtap process success, pid is 4996, argument is Rtap116701752544805
2025-07-15 10:00:05 [Info] New ClientConnectNotify : Rtap116701752544805, id is 0000051C
2025-07-15 10:00:05 [Info] ipc client:Rtap116701752544805 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 10:00:06 [Info] Rtap Platform Rtap116701752544805 execv work --tcp-connect-check on pid 4996
2025-07-15 10:00:07 [Info] csrss.exe open proc 4996 AliSecCheck.ex
2025-07-15 10:00:08 [Info] csrss.exe open thread 4996 AliSecCheck.ex
2025-07-15 10:00:17 [Info] Done Work --tcp-connect-check:1
2025-07-15 10:00:17 [Info] Rtap Platform Rtap116701752544805 Exit:normal exit
2025-07-15 10:00:19 [Info] ClientDisConnectNotify : Rtap116701752544805, id is 0000051C
2025-07-15 10:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9550","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"9620","aliyundun_upload_time":"1752545330","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"89","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 10:16:38 [Info] GetMessage : T_MSG_CHECK
2025-07-15 10:16:38 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI1NDU3OTgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyNTg4OTk4LCJzdWIiOiJSVEFQX0lEWF8xNTgxNzRfMTc1MjU0NTc5ODA4NSJ9.G1dEz4fmNcmkWvZRscTd90GKZk8jtdiJr8MyfJ81d9U has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 10:16:46 [Info] GetMessage : T_MSG_CHECK
2025-07-15 10:16:46 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI1NDU3OTgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyNTg4OTk4LCJzdWIiOiJSVEFQX0lEWF8xNTgxNzlfMTc1MjU0NTc5ODYxMiJ9.TCRntgCAX6ZccPwYkhJevAMQzxBW7U0f_4-POIX8iLw has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 10:16:48 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 10:16:48 [Info] ipc client:Rtap149451752545808_handler Reg client_name:Rtap149451752545808 on WhiteList
2025-07-15 10:16:48 [Info] start rtap process success, pid is 3744, argument is Rtap149451752545808
2025-07-15 10:16:48 [Info] New ClientConnectNotify : Rtap149451752545808, id is 00000540
2025-07-15 10:16:48 [Info] ipc client:Rtap149451752545808 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 10:16:49 [Info] Rtap Platform Rtap149451752545808 execv work --windows-schedule-task-check on pid 3744
2025-07-15 10:16:50 [Info] csrss.exe open proc 3744 AliSecCheck.ex
2025-07-15 10:16:51 [Info] csrss.exe open thread 3744 AliSecCheck.ex
2025-07-15 10:16:57 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 10:16:57 [Info] ipc client:Rtap149751752545817_handler Reg client_name:Rtap149751752545817 on WhiteList
2025-07-15 10:16:57 [Info] start rtap process success, pid is 4264, argument is Rtap149751752545817
2025-07-15 10:16:57 [Info] New ClientConnectNotify : Rtap149751752545817, id is 000004B8
2025-07-15 10:16:57 [Info] ipc client:Rtap149751752545817 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 10:16:58 [Info] Rtap Platform Rtap149751752545817 execv work --windows-registry-check on pid 4264
2025-07-15 10:17:00 [Info] csrss.exe open proc 4264 AliSecCheck.ex
2025-07-15 10:17:01 [Info] csrss.exe open thread 4264 AliSecCheck.ex
2025-07-15 10:17:25 [Info] Done Work --windows-schedule-task-check:1
2025-07-15 10:17:25 [Info] Rtap Platform Rtap149451752545808 Exit:normal exit
2025-07-15 10:17:27 [Info] ClientDisConnectNotify : Rtap149451752545808, id is 00000540
2025-07-15 10:17:32 [Info] Done Work --windows-registry-check:1
2025-07-15 10:17:32 [Info] Rtap Platform Rtap149751752545817 Exit:normal exit
2025-07-15 10:17:34 [Info] ClientDisConnectNotify : Rtap149751752545817, id is 000004B8
2025-07-15 10:17:48 [Info] GetMessage : T_MSG_CHECK
2025-07-15 10:17:48 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI1NDU4NjgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyNTg5MDY4LCJzdWIiOiJSVEFQX0lEWF8xNTgxODdfMTc1MjU0NTg2ODg0MiJ9.lkQ_dxIz5s7RkQJz0RmOcac0iC2SqfsBjKnCqq79Qz8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 10:18:00 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 10:18:00 [Info] ipc client:Rtap151801752545880_handler Reg client_name:Rtap151801752545880 on WhiteList
2025-07-15 10:18:00 [Info] start rtap process success, pid is 4888, argument is Rtap151801752545880
2025-07-15 10:18:00 [Info] New ClientConnectNotify : Rtap151801752545880, id is 00000504
2025-07-15 10:18:00 [Info] ipc client:Rtap151801752545880 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 10:18:00 [Info] Rtap Platform Rtap151801752545880 execv work --windows-driver-version-check on pid 4888
2025-07-15 10:18:02 [Info] csrss.exe open proc 4888 AliSecCheck.ex
2025-07-15 10:18:03 [Info] csrss.exe open thread 4888 AliSecCheck.ex
2025-07-15 10:18:07 [Info] Done Work --windows-driver-version-check:1
2025-07-15 10:18:07 [Info] Rtap Platform Rtap151801752545880 Exit:normal exit
2025-07-15 10:18:10 [Info] ClientDisConnectNotify : Rtap151801752545880, id is 00000504
2025-07-15 10:24:39 [Info] TotalPhys:2047,AvailPhys:160,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1018,SelfWorkingSet:9780, SelfPageFile:13736
2025-07-15 10:24:39 [Info] CommitTotal:5604,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:160,SystemCache:132,KernelTotal:344,KernelPaged:274,KernelNonpaged:70,PageSize:4096,HandleCount:30208,ProcessCount:65,ThreadCount:896
2025-07-15 10:31:06 [Info] get meta data success by v2
2025-07-15 10:31:06 [Info] get empty metaserver config
2025-07-15 10:31:06 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-15 10:31:06 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-15 10:31:06 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-15 10:31:06 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-15 10:31:06 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 10:31:06 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 10:31:06 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-15 10:31:06 [Info] download cert compare md5 same
2025-07-15 10:31:06 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 10:31:06 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 10:31:06 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-15 11:05:54 [Info] GetMessage : T_MSG_CHECK
2025-07-15 11:05:54 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI1NDg3NTQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyNTkxOTU0LCJzdWIiOiJSVEFQX0lEWF8xNTgxNzZfMTc1MjU0ODc1NDgyNCJ9.OaZSa28lecQ_cKtyLmYO4K90xipP103T0qTPFddbeO0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 11:06:05 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 11:06:05 [Info] ipc client:Rtap246021752548765_handler Reg client_name:Rtap246021752548765 on WhiteList
2025-07-15 11:06:05 [Info] start rtap process success, pid is 4344, argument is Rtap246021752548765
2025-07-15 11:06:06 [Info] New ClientConnectNotify : Rtap246021752548765, id is 000004B8
2025-07-15 11:06:06 [Info] csrss.exe open proc 4344 AliSecCheck.ex
2025-07-15 11:06:06 [Info] ipc client:Rtap246021752548765 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 11:06:06 [Info] Rtap Platform Rtap246021752548765 execv work --windows-autorun-item-check on pid 4344
2025-07-15 11:06:07 [Info] csrss.exe open thread 4344 AliSecCheck.ex
2025-07-15 11:06:08 [Info] csrss.exe open thread 4344 AliSecCheck.ex
2025-07-15 11:06:09 [Info] csrss.exe open thread 4344 AliSecCheck.ex
2025-07-15 11:06:10 [Info] csrss.exe open thread 4344 AliSecCheck.ex
2025-07-15 11:06:26 [Info] Done Work --windows-autorun-item-check:1
2025-07-15 11:06:26 [Info] Rtap Platform Rtap246021752548765 Exit:normal exit
2025-07-15 11:06:28 [Info] ClientDisConnectNotify : Rtap246021752548765, id is 000004B8
2025-07-15 11:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9705","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9824","aliyundun_upload_time":"1752548943","aliyundun_write_pid_times":"0","ipc_send_count":"157","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 11:25:36 [Info] TotalPhys:2047,AvailPhys:540,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1307,SelfWorkingSet:9704, SelfPageFile:13780
2025-07-15 11:25:36 [Info] CommitTotal:5315,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:540,SystemCache:291,KernelTotal:251,KernelPaged:179,KernelNonpaged:72,PageSize:4096,HandleCount:26567,ProcessCount:52,ThreadCount:735
2025-07-15 12:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9637","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9704","aliyundun_upload_time":"1752552523","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 12:26:33 [Info] TotalPhys:2047,AvailPhys:528,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1302,SelfWorkingSet:9676, SelfPageFile:13632
2025-07-15 12:26:33 [Info] CommitTotal:5320,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:528,SystemCache:327,KernelTotal:252,KernelPaged:180,KernelNonpaged:71,PageSize:4096,HandleCount:26605,ProcessCount:52,ThreadCount:740
2025-07-15 12:42:40 [Info] nCurrentClock is 558029000, nCurrentTime is 1752554560
2025-07-15 12:42:41 [Info] SendMessage T_MSG_LOGIN
2025-07-15 12:42:41 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-15 12:42:41 [Info] begin to enable self guard after reconnect
2025-07-15 12:42:41 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-15 12:42:41 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-15 12:42:41 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-15 12:42:41 [Info] key : cpu, value : 10
2025-07-15 12:42:41 [Info] key : rio, value : 20480
2025-07-15 12:42:41 [Info] key : wio, value : 20480
2025-07-15 12:42:41 [Info] key : cpu_all, value : 0
2025-07-15 12:42:41 [Info] key : max_pid_check, value : 200
2025-07-15 12:42:41 [Info] key : throw_dump, value : 0
2025-07-15 12:42:41 [Info] key : hash_mode, value : 1
2025-07-15 12:42:41 [Info] key : mem, value : 200
2025-07-15 12:42:41 [Info] can not find key max_fd in online conf
2025-07-15 12:42:41 [Info] key : proc_limit, value : 1
2025-07-15 12:42:41 [Info] key : resource_limit_mode, value : 3
2025-07-15 12:42:41 [Info] key : rtap_update_mode, value : 1
2025-07-15 12:42:41 [Info] can not find key debug in online conf
2025-07-15 12:42:41 [Info] can not find key update_mode in online conf
2025-07-15 12:42:41 [Info] can not find key http_mode in online conf
2025-07-15 12:42:41 [Info] can not find key rtap_enable in online conf
2025-07-15 12:42:41 [Info] can not find key rtap_new_agent in online conf
2025-07-15 12:42:41 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-15 12:42:41 [Info] can not find key mem_low_mark in online conf
2025-07-15 12:42:41 [Info] can not find key obnormal_report_interval in online conf
2025-07-15 12:42:41 [Info] key : cache_mode, value : 0
2025-07-15 12:42:41 [Info] key : abnormal_monitor_mode, value : 3
2025-07-15 12:42:41 [Info] key : queue_size_ratio, value : 80
2025-07-15 12:42:41 [Info] queue_size_ratio is 80
2025-07-15 12:42:41 [Info] resource limit mode and max limit cpu is not change
2025-07-15 12:42:41 [Info] set hash mode 1
2025-07-15 12:42:41 [Info] RTAP timeout config:9600000
2025-07-15 12:42:41 [Info] self_guard_mode config is 0
2025-07-15 12:42:41 [Info] GetMessage : T_MSG_CHECK
2025-07-15 12:42:41 [Info] task 826d8339-4755-4369-8c9a-57177124eb66 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 12:42:49 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-07-15 12:42:51 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 12:42:51 [Info] ipc client:Rtap107931752554571_handler Reg client_name:Rtap107931752554571 on WhiteList
2025-07-15 12:42:51 [Info] start rtap process success, pid is 5116, argument is Rtap107931752554571
2025-07-15 12:42:52 [Info] New ClientConnectNotify : Rtap107931752554571, id is 00000530
2025-07-15 12:42:52 [Info] Rtap Platform Rtap107931752554571 execv work --windows-sysinfoext-check on pid 5116
2025-07-15 12:42:52 [Info] ipc client:Rtap107931752554571 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 12:42:53 [Info] csrss.exe open proc 5116 AliSecCheck.ex
2025-07-15 12:42:54 [Info] csrss.exe open thread 5116 AliSecCheck.ex
2025-07-15 12:43:03 [Info] Done Work --windows-sysinfoext-check:1
2025-07-15 12:43:03 [Info] Rtap Platform Rtap107931752554571 Exit:normal exit
2025-07-15 12:43:05 [Info] ClientDisConnectNotify : Rtap107931752554571, id is 00000530
2025-07-15 13:08:55 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9679","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9760","aliyundun_upload_time":"1752556135","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 13:27:30 [Info] TotalPhys:2047,AvailPhys:515,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1291,SelfWorkingSet:9708, SelfPageFile:13480
2025-07-15 13:27:30 [Info] CommitTotal:5331,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:515,SystemCache:364,KernelTotal:252,KernelPaged:180,KernelNonpaged:71,PageSize:4096,HandleCount:26578,ProcessCount:52,ThreadCount:736
2025-07-15 13:48:28 [Info] get meta data success by v2
2025-07-15 13:48:28 [Info] get empty metaserver config
2025-07-15 13:48:28 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-15 13:48:28 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-15 13:48:28 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-15 13:48:28 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-15 13:48:28 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 13:48:28 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 13:48:28 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-15 13:48:28 [Info] download cert compare md5 same
2025-07-15 13:48:28 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 13:48:28 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 13:48:28 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-15 14:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9720","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9808","aliyundun_upload_time":"1752559720","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 14:28:27 [Info] TotalPhys:2047,AvailPhys:526,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1303,SelfWorkingSet:9784, SelfPageFile:13780
2025-07-15 14:28:27 [Info] CommitTotal:5320,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:526,SystemCache:384,KernelTotal:252,KernelPaged:180,KernelNonpaged:72,PageSize:4096,HandleCount:26547,ProcessCount:52,ThreadCount:735
2025-07-15 15:08:48 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9748","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9812","aliyundun_upload_time":"1752563328","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 15:29:24 [Info] TotalPhys:2047,AvailPhys:505,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1299,SelfWorkingSet:9652, SelfPageFile:13692
2025-07-15 15:29:24 [Info] CommitTotal:5323,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:505,SystemCache:393,KernelTotal:252,KernelPaged:180,KernelNonpaged:71,PageSize:4096,HandleCount:26628,ProcessCount:52,ThreadCount:743
2025-07-15 16:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9706","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9756","aliyundun_upload_time":"1752566937","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 16:30:20 [Info] TotalPhys:2047,AvailPhys:502,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1292,SelfWorkingSet:9816, SelfPageFile:13780
2025-07-15 16:30:20 [Info] CommitTotal:5330,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:502,SystemCache:401,KernelTotal:252,KernelPaged:181,KernelNonpaged:71,PageSize:4096,HandleCount:26650,ProcessCount:52,ThreadCount:734
2025-07-15 17:05:48 [Info] get meta data success by v2
2025-07-15 17:05:48 [Info] get empty metaserver config
2025-07-15 17:05:48 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-15 17:05:48 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-15 17:05:48 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-15 17:05:48 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-15 17:05:48 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 17:05:48 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 17:05:48 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-15 17:05:48 [Info] download cert compare md5 same
2025-07-15 17:05:48 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 17:05:48 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 17:05:48 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-15 17:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9802","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9892","aliyundun_upload_time":"1752570542","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 17:31:17 [Info] TotalPhys:2047,AvailPhys:499,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1292,SelfWorkingSet:9804, SelfPageFile:13508
2025-07-15 17:31:17 [Info] CommitTotal:5330,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:499,SystemCache:392,KernelTotal:255,KernelPaged:183,KernelNonpaged:72,PageSize:4096,HandleCount:26653,ProcessCount:52,ThreadCount:735
2025-07-15 17:34:13 [Error] GetErrorEvent : 3,code:0, err:No error
2025-07-15 17:34:13 [Info] CNetWork::DisConnect
2025-07-15 17:34:14 [Info] network change to 0
2025-07-15 17:34:49 [Info] reconnect time tick is 507779, reconnect it
2025-07-15 17:34:49 [Info] connect domain index is 0
2025-07-15 17:34:49 [Info] cache domain is jsrv2.aegis.aliyun.com, cache ip is 100.100.30.25
2025-07-15 17:34:49 [Info] try connect url jsrv2.aegis.aliyun.com, ip : 100.100.30.25, port : 80
2025-07-15 17:34:49 [Info] Connect Success : jsrv2.aegis.aliyun.com
2025-07-15 17:34:49 [Info] GetLocalSockIp :172.17.42.239
2025-07-15 17:34:49 [Info] GetLocalSockIp : 172.17.42.239
2025-07-15 17:34:49 [Info] network change to 1
2025-07-15 17:34:49 [Info] SendMessage T_MSG_LOGIN
2025-07-15 17:34:49 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-15 17:34:49 [Info] begin to enable self guard after reconnect
2025-07-15 17:34:49 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-15 17:34:49 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-15 17:34:49 [Info] GetMessage : T_MSG_CHECK
2025-07-15 17:34:49 [Info] task 5cb8d695-6110-4d5e-8c96-b4aed4b69c2b has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 17:34:58 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-15 17:34:58 [Info] key : cpu, value : 10
2025-07-15 17:34:58 [Info] key : rio, value : 20480
2025-07-15 17:34:58 [Info] key : wio, value : 20480
2025-07-15 17:34:58 [Info] key : cpu_all, value : 0
2025-07-15 17:34:58 [Info] key : max_pid_check, value : 200
2025-07-15 17:34:58 [Info] key : throw_dump, value : 0
2025-07-15 17:34:58 [Info] key : hash_mode, value : 1
2025-07-15 17:34:58 [Info] key : mem, value : 200
2025-07-15 17:34:58 [Info] can not find key max_fd in online conf
2025-07-15 17:34:58 [Info] key : proc_limit, value : 1
2025-07-15 17:34:58 [Info] key : resource_limit_mode, value : 3
2025-07-15 17:34:58 [Info] key : rtap_update_mode, value : 1
2025-07-15 17:34:58 [Info] can not find key debug in online conf
2025-07-15 17:34:58 [Info] can not find key update_mode in online conf
2025-07-15 17:34:58 [Info] can not find key http_mode in online conf
2025-07-15 17:34:58 [Info] can not find key rtap_enable in online conf
2025-07-15 17:34:58 [Info] can not find key rtap_new_agent in online conf
2025-07-15 17:34:58 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-15 17:34:58 [Info] can not find key mem_low_mark in online conf
2025-07-15 17:34:58 [Info] can not find key obnormal_report_interval in online conf
2025-07-15 17:34:58 [Info] key : cache_mode, value : 0
2025-07-15 17:34:58 [Info] key : abnormal_monitor_mode, value : 3
2025-07-15 17:34:58 [Info] key : queue_size_ratio, value : 80
2025-07-15 17:34:58 [Info] queue_size_ratio is 80
2025-07-15 17:34:58 [Info] resource limit mode and max limit cpu is not change
2025-07-15 17:34:58 [Info] set hash mode 1
2025-07-15 17:34:58 [Info] RTAP timeout config:9600000
2025-07-15 17:34:58 [Info] self_guard_mode config is 0
2025-07-15 17:35:00 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 17:35:00 [Info] ipc client:Rtap25001752572100_handler Reg client_name:Rtap25001752572100 on WhiteList
2025-07-15 17:35:00 [Info] start rtap process success, pid is 2348, argument is Rtap25001752572100
2025-07-15 17:35:00 [Info] New ClientConnectNotify : Rtap25001752572100, id is 000004B8
2025-07-15 17:35:00 [Info] ipc client:Rtap25001752572100 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 17:35:01 [Info] Rtap Platform Rtap25001752572100 execv work --windows-sysinfoext-check on pid 2348
2025-07-15 17:35:03 [Info] csrss.exe open proc 2348 AliSecCheck.ex
2025-07-15 17:35:04 [Info] csrss.exe open thread 2348 AliSecCheck.ex
2025-07-15 17:35:12 [Info] Done Work --windows-sysinfoext-check:1
2025-07-15 17:35:12 [Info] Rtap Platform Rtap25001752572100 Exit:normal exit
2025-07-15 17:35:14 [Info] ClientDisConnectNotify : Rtap25001752572100, id is 000004B8
2025-07-15 18:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9778","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9892","aliyundun_upload_time":"1752574122","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 18:11:38 [Info] nCurrentClock is 576029800, nCurrentTime is 1752574298
2025-07-15 18:11:38 [Info] SendMessage T_MSG_LOGIN
2025-07-15 18:11:38 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-15 18:11:38 [Info] begin to enable self guard after reconnect
2025-07-15 18:11:39 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-15 18:11:39 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-15 18:11:39 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-15 18:11:39 [Info] key : cpu, value : 10
2025-07-15 18:11:39 [Info] key : rio, value : 20480
2025-07-15 18:11:39 [Info] key : wio, value : 20480
2025-07-15 18:11:39 [Info] key : cpu_all, value : 0
2025-07-15 18:11:39 [Info] key : max_pid_check, value : 200
2025-07-15 18:11:39 [Info] key : throw_dump, value : 0
2025-07-15 18:11:39 [Info] key : hash_mode, value : 1
2025-07-15 18:11:39 [Info] key : mem, value : 200
2025-07-15 18:11:39 [Info] can not find key max_fd in online conf
2025-07-15 18:11:39 [Info] key : proc_limit, value : 1
2025-07-15 18:11:39 [Info] key : resource_limit_mode, value : 3
2025-07-15 18:11:39 [Info] key : rtap_update_mode, value : 1
2025-07-15 18:11:39 [Info] can not find key debug in online conf
2025-07-15 18:11:39 [Info] can not find key update_mode in online conf
2025-07-15 18:11:39 [Info] can not find key http_mode in online conf
2025-07-15 18:11:39 [Info] can not find key rtap_enable in online conf
2025-07-15 18:11:39 [Info] can not find key rtap_new_agent in online conf
2025-07-15 18:11:39 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-15 18:11:39 [Info] can not find key mem_low_mark in online conf
2025-07-15 18:11:39 [Info] can not find key obnormal_report_interval in online conf
2025-07-15 18:11:39 [Info] key : cache_mode, value : 0
2025-07-15 18:11:39 [Info] key : abnormal_monitor_mode, value : 3
2025-07-15 18:11:39 [Info] key : queue_size_ratio, value : 80
2025-07-15 18:11:39 [Info] queue_size_ratio is 80
2025-07-15 18:11:39 [Info] resource limit mode and max limit cpu is not change
2025-07-15 18:11:39 [Info] set hash mode 1
2025-07-15 18:11:39 [Info] RTAP timeout config:9600000
2025-07-15 18:11:39 [Info] self_guard_mode config is 0
2025-07-15 18:11:39 [Info] GetMessage : T_MSG_CHECK
2025-07-15 18:11:39 [Info] task 13570a04-6345-47cf-bdc6-b785f017d0db has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 18:11:50 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 18:11:50 [Info] ipc client:Rtap97171752574310_handler Reg client_name:Rtap97171752574310 on WhiteList
2025-07-15 18:11:50 [Info] start rtap process success, pid is 4656, argument is Rtap97171752574310
2025-07-15 18:11:50 [Info] New ClientConnectNotify : Rtap97171752574310, id is 00000504
2025-07-15 18:11:50 [Info] ipc client:Rtap97171752574310 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 18:11:51 [Info] Rtap Platform Rtap97171752574310 execv work --windows-sysinfoext-check on pid 4656
2025-07-15 18:11:51 [Info] csrss.exe open proc 4656 AliSecCheck.ex
2025-07-15 18:11:52 [Info] csrss.exe open thread 4656 AliSecCheck.ex
2025-07-15 18:11:58 [Info] Done Work --windows-sysinfoext-check:1
2025-07-15 18:11:58 [Info] Rtap Platform Rtap97171752574310 Exit:normal exit
2025-07-15 18:12:00 [Info] ClientDisConnectNotify : Rtap97171752574310, id is 00000504
2025-07-15 18:32:15 [Info] TotalPhys:2047,AvailPhys:506,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1297,SelfWorkingSet:9792, SelfPageFile:13484
2025-07-15 18:32:15 [Info] CommitTotal:5325,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:506,SystemCache:390,KernelTotal:255,KernelPaged:183,KernelNonpaged:71,PageSize:4096,HandleCount:26807,ProcessCount:53,ThreadCount:738
2025-07-15 19:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9821","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"9856","aliyundun_upload_time":"1752577732","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 19:09:01 [Info] GetMessage : T_MSG_CHECK
2025-07-15 19:09:01 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI1Nzc3NDEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyNjIwOTQxLCJzdWIiOiJSVEFQX0lEWF8xNTgyNDZfMTc1MjU3Nzc0MTExNSJ9.ZsngWofxMslmmMAoqTuQqm74mChhLUeFXkAQJYvmj44 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 19:09:11 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 19:09:11 [Info] ipc client:Rtap209541752577751_handler Reg client_name:Rtap209541752577751 on WhiteList
2025-07-15 19:09:11 [Info] start rtap process success, pid is 672, argument is Rtap209541752577751
2025-07-15 19:09:11 [Info] New ClientConnectNotify : Rtap209541752577751, id is 00000540
2025-07-15 19:09:11 [Info] ipc client:Rtap209541752577751 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 19:09:11 [Info] Rtap Platform Rtap209541752577751 execv work --secnet_rasp_agent on pid 672
2025-07-15 19:09:13 [Info] csrss.exe open proc 672 AliSecCheck.ex
2025-07-15 19:09:14 [Info] csrss.exe open thread 672 AliSecCheck.ex
2025-07-15 19:09:18 [Info] Done Work --secnet_rasp_agent:1
2025-07-15 19:09:18 [Info] Rtap Platform Rtap209541752577751 Exit:normal exit
2025-07-15 19:09:20 [Info] ClientDisConnectNotify : Rtap209541752577751, id is 00000540
2025-07-15 19:33:11 [Info] TotalPhys:2047,AvailPhys:502,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1294,SelfWorkingSet:9856, SelfPageFile:13520
2025-07-15 19:33:11 [Info] CommitTotal:5328,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:502,SystemCache:394,KernelTotal:256,KernelPaged:184,KernelNonpaged:72,PageSize:4096,HandleCount:26568,ProcessCount:52,ThreadCount:729
2025-07-15 20:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9829","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9864","aliyundun_upload_time":"1752581343","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 20:23:13 [Info] get meta data success by v2
2025-07-15 20:23:13 [Info] get empty metaserver config
2025-07-15 20:23:13 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-15 20:23:13 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-15 20:23:13 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-15 20:23:13 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-15 20:23:13 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 20:23:13 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 20:23:13 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-15 20:23:13 [Info] download cert compare md5 same
2025-07-15 20:23:13 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 20:23:13 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 20:23:13 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-15 20:34:08 [Info] TotalPhys:2047,AvailPhys:476,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6623,AvailPageFile:1281,SelfWorkingSet:9804, SelfPageFile:13592
2025-07-15 20:34:08 [Info] CommitTotal:5341,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:476,SystemCache:351,KernelTotal:253,KernelPaged:181,KernelNonpaged:72,PageSize:4096,HandleCount:27012,ProcessCount:53,ThreadCount:762
2025-07-15 21:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9780","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"9920","aliyundun_upload_time":"1752584920","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 21:35:05 [Info] TotalPhys:2047,AvailPhys:479,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1289,SelfWorkingSet:9856, SelfPageFile:13708
2025-07-15 21:35:05 [Info] CommitTotal:5333,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:479,SystemCache:355,KernelTotal:253,KernelPaged:181,KernelNonpaged:72,PageSize:4096,HandleCount:26841,ProcessCount:53,ThreadCount:740
2025-07-15 22:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9836","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9884","aliyundun_upload_time":"1752588530","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 22:36:02 [Info] TotalPhys:2047,AvailPhys:479,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1297,SelfWorkingSet:9752, SelfPageFile:13480
2025-07-15 22:36:02 [Info] CommitTotal:5325,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:479,SystemCache:357,KernelTotal:253,KernelPaged:181,KernelNonpaged:72,PageSize:4096,HandleCount:26613,ProcessCount:52,ThreadCount:737
2025-07-15 23:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9769","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9884","aliyundun_upload_time":"1752592139","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-15 23:36:58 [Info] TotalPhys:2047,AvailPhys:476,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6623,AvailPageFile:1294,SelfWorkingSet:9856, SelfPageFile:13528
2025-07-15 23:36:58 [Info] CommitTotal:5329,CommitLimit:6623,CommitPeak:6960,PhysicalTotal:2047,PhysicalAvailable:476,SystemCache:358,KernelTotal:253,KernelPaged:181,KernelNonpaged:72,PageSize:4096,HandleCount:26595,ProcessCount:52,ThreadCount:733
2025-07-15 23:40:34 [Info] get meta data success by v2
2025-07-15 23:40:34 [Info] get empty metaserver config
2025-07-15 23:40:34 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-15 23:40:34 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-15 23:40:34 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-15 23:40:34 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-15 23:40:34 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 23:40:34 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-15 23:40:35 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-15 23:40:35 [Info] download cert compare md5 same
2025-07-15 23:40:35 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 23:40:35 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-15 23:40:35 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-15 23:40:35 [Info] nCurrentClock is 594030300, nCurrentTime is 1752594035
2025-07-15 23:40:35 [Info] SendMessage T_MSG_LOGIN
2025-07-15 23:40:35 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-15 23:40:35 [Info] begin to enable self guard after reconnect
2025-07-15 23:40:35 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-15 23:40:35 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-15 23:40:36 [Info] GetMessage : T_MSG_CHECK
2025-07-15 23:40:36 [Info] task 850db89a-ccd3-4a26-861b-ddb6f5ee061a has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-15 23:40:44 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-15 23:40:44 [Info] key : cpu, value : 10
2025-07-15 23:40:44 [Info] key : rio, value : 20480
2025-07-15 23:40:44 [Info] key : wio, value : 20480
2025-07-15 23:40:44 [Info] key : cpu_all, value : 0
2025-07-15 23:40:44 [Info] key : max_pid_check, value : 200
2025-07-15 23:40:44 [Info] key : throw_dump, value : 0
2025-07-15 23:40:44 [Info] key : hash_mode, value : 1
2025-07-15 23:40:44 [Info] key : mem, value : 200
2025-07-15 23:40:44 [Info] can not find key max_fd in online conf
2025-07-15 23:40:44 [Info] key : proc_limit, value : 1
2025-07-15 23:40:44 [Info] key : resource_limit_mode, value : 3
2025-07-15 23:40:44 [Info] key : rtap_update_mode, value : 1
2025-07-15 23:40:44 [Info] can not find key debug in online conf
2025-07-15 23:40:44 [Info] can not find key update_mode in online conf
2025-07-15 23:40:44 [Info] can not find key http_mode in online conf
2025-07-15 23:40:44 [Info] can not find key rtap_enable in online conf
2025-07-15 23:40:44 [Info] can not find key rtap_new_agent in online conf
2025-07-15 23:40:44 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-15 23:40:44 [Info] can not find key mem_low_mark in online conf
2025-07-15 23:40:44 [Info] can not find key obnormal_report_interval in online conf
2025-07-15 23:40:44 [Info] key : cache_mode, value : 0
2025-07-15 23:40:44 [Info] key : abnormal_monitor_mode, value : 3
2025-07-15 23:40:44 [Info] key : queue_size_ratio, value : 80
2025-07-15 23:40:44 [Info] queue_size_ratio is 80
2025-07-15 23:40:44 [Info] resource limit mode and max limit cpu is not change
2025-07-15 23:40:44 [Info] set hash mode 1
2025-07-15 23:40:44 [Info] RTAP timeout config:9600000
2025-07-15 23:40:44 [Info] self_guard_mode config is 0
2025-07-15 23:40:48 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-15 23:40:48 [Info] ipc client:Rtap86371752594048_handler Reg client_name:Rtap86371752594048 on WhiteList
2025-07-15 23:40:48 [Info] start rtap process success, pid is 4596, argument is Rtap86371752594048
2025-07-15 23:40:48 [Info] New ClientConnectNotify : Rtap86371752594048, id is 00000504
2025-07-15 23:40:48 [Info] ipc client:Rtap86371752594048 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-15 23:40:48 [Info] Rtap Platform Rtap86371752594048 execv work --windows-sysinfoext-check on pid 4596
2025-07-15 23:40:49 [Info] csrss.exe open proc 4596 AliSecCheck.ex
2025-07-15 23:40:50 [Info] csrss.exe open thread 4596 AliSecCheck.ex
2025-07-15 23:40:56 [Info] Done Work --windows-sysinfoext-check:1
2025-07-15 23:40:56 [Info] Rtap Platform Rtap86371752594048 Exit:normal exit
2025-07-15 23:40:58 [Info] ClientDisConnectNotify : Rtap86371752594048, id is 00000504
2025-07-22 00:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9755","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9800","aliyundun_upload_time":"1753114118","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 00:25:19 [Info] get meta data success by v2
2025-07-22 00:25:19 [Info] get empty metaserver config
2025-07-22 00:25:19 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-22 00:25:20 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-22 00:25:20 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-22 00:25:20 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-22 00:25:20 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 00:25:20 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 00:25:20 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-22 00:25:20 [Info] download cert compare md5 same
2025-07-22 00:25:20 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 00:25:20 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 00:25:20 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-22 00:52:36 [Info] TotalPhys:2047,AvailPhys:520,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1278,SelfWorkingSet:9680, SelfPageFile:13432
2025-07-22 00:52:36 [Info] CommitTotal:4884,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:520,SystemCache:330,KernelTotal:274,KernelPaged:195,KernelNonpaged:79,PageSize:4096,HandleCount:26968,ProcessCount:53,ThreadCount:730
2025-07-22 01:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9694","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9844","aliyundun_upload_time":"1753117723","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 01:20:02 [Info] GetMessage : T_MSG_CHECK
2025-07-22 01:20:02 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxMTg0MDIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzMTYxNjAyLCJzdWIiOiJSVEFQX0lEWF8xNTg3MjRfMTc1MzExODQwMjA1NCJ9.s8ni-rk5JpxqpGLxTEyIsw0d7z1MbFiGHdnpj0u3-aI has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 01:20:11 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 01:20:11 [Info] ipc client:Rtap170501753118411_handler Reg client_name:Rtap170501753118411 on WhiteList
2025-07-22 01:20:11 [Info] start rtap process success, pid is 4072, argument is Rtap170501753118411
2025-07-22 01:20:11 [Info] New ClientConnectNotify : Rtap170501753118411, id is 0000051C
2025-07-22 01:20:11 [Info] ipc client:Rtap170501753118411 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 01:20:12 [Info] Rtap Platform Rtap170501753118411 execv work --sca on pid 4072
2025-07-22 01:20:13 [Info] csrss.exe open proc 4072 AliSecCheck.ex
2025-07-22 01:20:14 [Info] csrss.exe open thread 4072 AliSecCheck.ex
2025-07-22 01:20:54 [Info] csrss.exe open thread 4072 AliSecCheck.ex
2025-07-22 01:21:16 [Info] Done Work --sca:1
2025-07-22 01:21:16 [Info] Rtap Platform Rtap170501753118411 Exit:normal exit
2025-07-22 01:21:18 [Info] ClientDisConnectNotify : Rtap170501753118411, id is 0000051C
2025-07-22 01:53:32 [Info] TotalPhys:2047,AvailPhys:521,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1279,SelfWorkingSet:9944, SelfPageFile:13800
2025-07-22 01:53:32 [Info] CommitTotal:4883,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:521,SystemCache:363,KernelTotal:274,KernelPaged:195,KernelNonpaged:79,PageSize:4096,HandleCount:26965,ProcessCount:53,ThreadCount:728
2025-07-22 02:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9867","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9980","aliyundun_upload_time":"1753121327","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 02:54:28 [Info] TotalPhys:2047,AvailPhys:508,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1278,SelfWorkingSet:9896, SelfPageFile:13836
2025-07-22 02:54:28 [Info] CommitTotal:4884,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:508,SystemCache:364,KernelTotal:274,KernelPaged:195,KernelNonpaged:78,PageSize:4096,HandleCount:26967,ProcessCount:53,ThreadCount:730
2025-07-22 03:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9864","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9980","aliyundun_upload_time":"1753124932","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 03:42:25 [Info] get meta data success by v2
2025-07-22 03:42:25 [Info] get empty metaserver config
2025-07-22 03:42:25 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-22 03:42:25 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-22 03:42:25 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-22 03:42:25 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-22 03:42:25 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 03:42:25 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 03:42:25 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-22 03:42:25 [Info] download cert compare md5 same
2025-07-22 03:42:25 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 03:42:25 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 03:42:25 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-22 03:42:25 [Info] nCurrentClock is 1080053300, nCurrentTime is 1753126945
2025-07-22 03:42:25 [Info] SendMessage T_MSG_LOGIN
2025-07-22 03:42:25 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-22 03:42:25 [Info] begin to enable self guard after reconnect
2025-07-22 03:42:26 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-22 03:42:26 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-22 03:42:26 [Info] GetMessage : T_MSG_CHECK
2025-07-22 03:42:26 [Info] task f36f2ef0-bde3-4b6a-a23a-36bc77fe6c37 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 03:42:34 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-22 03:42:34 [Info] key : cpu, value : 10
2025-07-22 03:42:34 [Info] key : rio, value : 20480
2025-07-22 03:42:34 [Info] key : wio, value : 20480
2025-07-22 03:42:34 [Info] key : cpu_all, value : 0
2025-07-22 03:42:34 [Info] key : max_pid_check, value : 200
2025-07-22 03:42:34 [Info] key : throw_dump, value : 0
2025-07-22 03:42:34 [Info] key : hash_mode, value : 1
2025-07-22 03:42:34 [Info] key : mem, value : 200
2025-07-22 03:42:34 [Info] can not find key max_fd in online conf
2025-07-22 03:42:34 [Info] key : proc_limit, value : 1
2025-07-22 03:42:34 [Info] key : resource_limit_mode, value : 3
2025-07-22 03:42:34 [Info] key : rtap_update_mode, value : 1
2025-07-22 03:42:34 [Info] can not find key debug in online conf
2025-07-22 03:42:34 [Info] can not find key update_mode in online conf
2025-07-22 03:42:34 [Info] can not find key http_mode in online conf
2025-07-22 03:42:34 [Info] can not find key rtap_enable in online conf
2025-07-22 03:42:34 [Info] can not find key rtap_new_agent in online conf
2025-07-22 03:42:34 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-22 03:42:34 [Info] can not find key mem_low_mark in online conf
2025-07-22 03:42:34 [Info] can not find key obnormal_report_interval in online conf
2025-07-22 03:42:34 [Info] key : cache_mode, value : 0
2025-07-22 03:42:34 [Info] key : abnormal_monitor_mode, value : 3
2025-07-22 03:42:34 [Info] key : queue_size_ratio, value : 80
2025-07-22 03:42:34 [Info] queue_size_ratio is 80
2025-07-22 03:42:34 [Info] resource limit mode and max limit cpu is not change
2025-07-22 03:42:34 [Info] set hash mode 1
2025-07-22 03:42:34 [Info] RTAP timeout config:9600000
2025-07-22 03:42:34 [Info] self_guard_mode config is 0
2025-07-22 03:42:38 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 03:42:38 [Info] ipc client:Rtap121931753126958_handler Reg client_name:Rtap121931753126958 on WhiteList
2025-07-22 03:42:38 [Info] start rtap process success, pid is 4064, argument is Rtap121931753126958
2025-07-22 03:42:38 [Info] New ClientConnectNotify : Rtap121931753126958, id is 0000053C
2025-07-22 03:42:38 [Info] ipc client:Rtap121931753126958 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 03:42:39 [Info] Rtap Platform Rtap121931753126958 execv work --windows-sysinfoext-check on pid 4064
2025-07-22 03:42:41 [Info] csrss.exe open proc 4064 AliSecCheck.ex
2025-07-22 03:42:42 [Info] csrss.exe open thread 4064 AliSecCheck.ex
2025-07-22 03:42:46 [Info] Done Work --windows-sysinfoext-check:1
2025-07-22 03:42:46 [Info] Rtap Platform Rtap121931753126958 Exit:normal exit
2025-07-22 03:42:48 [Info] ClientDisConnectNotify : Rtap121931753126958, id is 0000053C
2025-07-22 03:55:25 [Info] TotalPhys:2047,AvailPhys:510,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6162,AvailPageFile:1271,SelfWorkingSet:9860, SelfPageFile:13816
2025-07-22 03:55:25 [Info] CommitTotal:4891,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:510,SystemCache:363,KernelTotal:274,KernelPaged:195,KernelNonpaged:78,PageSize:4096,HandleCount:27193,ProcessCount:54,ThreadCount:753
2025-07-22 04:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9876","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10000","aliyundun_upload_time":"1753128521","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 04:56:22 [Info] TotalPhys:2047,AvailPhys:502,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1263,SelfWorkingSet:9804, SelfPageFile:13656
2025-07-22 04:56:22 [Info] CommitTotal:4899,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:502,SystemCache:388,KernelTotal:275,KernelPaged:195,KernelNonpaged:79,PageSize:4096,HandleCount:27009,ProcessCount:53,ThreadCount:742
2025-07-22 05:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9830","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9868","aliyundun_upload_time":"1753132127","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 05:57:18 [Info] TotalPhys:2047,AvailPhys:504,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1265,SelfWorkingSet:9740, SelfPageFile:13692
2025-07-22 05:57:18 [Info] CommitTotal:4897,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:504,SystemCache:388,KernelTotal:275,KernelPaged:196,KernelNonpaged:79,PageSize:4096,HandleCount:26994,ProcessCount:53,ThreadCount:736
2025-07-22 06:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9732","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9828","aliyundun_upload_time":"1753135732","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 06:58:14 [Info] TotalPhys:2047,AvailPhys:507,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1269,SelfWorkingSet:9952, SelfPageFile:13836
2025-07-22 06:58:14 [Info] CommitTotal:4893,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:507,SystemCache:389,KernelTotal:274,KernelPaged:195,KernelNonpaged:78,PageSize:4096,HandleCount:26991,ProcessCount:53,ThreadCount:735
2025-07-22 06:59:32 [Info] get meta data success by v2
2025-07-22 06:59:32 [Info] get empty metaserver config
2025-07-22 06:59:32 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-22 06:59:33 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-22 06:59:33 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-22 06:59:33 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-22 06:59:33 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 06:59:33 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 06:59:33 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-22 06:59:33 [Info] download cert compare md5 same
2025-07-22 06:59:33 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 06:59:33 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 06:59:33 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-22 07:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9891","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9992","aliyundun_upload_time":"1753139336","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 07:59:11 [Info] TotalPhys:2047,AvailPhys:503,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1268,SelfWorkingSet:9860, SelfPageFile:13716
2025-07-22 07:59:11 [Info] CommitTotal:4894,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:503,SystemCache:389,KernelTotal:275,KernelPaged:195,KernelNonpaged:79,PageSize:4096,HandleCount:26976,ProcessCount:53,ThreadCount:732
2025-07-22 08:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9899","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9976","aliyundun_upload_time":"1753142942","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 08:52:52 [Info] GetMessage : T_MSG_CHECK
2025-07-22 08:52:52 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxNDU1NzIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzMTg4NzcyLCJzdWIiOiJSVEFQX0lEWF8xNTg3MTVfMTc1MzE0NTU3Mjc1NCJ9.m8BgFtQCC3LQbHICzDev8BjqDIZ_Y_jpIu0zxfCEZF0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 08:53:04 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 08:53:04 [Info] ipc client:Rtap74811753145584_handler Reg client_name:Rtap74811753145584 on WhiteList
2025-07-22 08:53:04 [Info] start rtap process success, pid is 4824, argument is Rtap74811753145584
2025-07-22 08:53:04 [Info] New ClientConnectNotify : Rtap74811753145584, id is 000004F8
2025-07-22 08:53:04 [Info] ipc client:Rtap74811753145584 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 08:53:04 [Info] Rtap Platform Rtap74811753145584 execv work --windows-process-check on pid 4824
2025-07-22 08:53:06 [Info] csrss.exe open proc 4824 AliSecCheck.ex
2025-07-22 08:53:07 [Info] csrss.exe open thread 4824 AliSecCheck.ex
2025-07-22 08:53:28 [Info] Done Work --windows-process-check:1
2025-07-22 08:53:28 [Info] Rtap Platform Rtap74811753145584 Exit:normal exit
2025-07-22 08:53:30 [Info] ClientDisConnectNotify : Rtap74811753145584, id is 000004F8
2025-07-22 09:00:11 [Info] TotalPhys:2047,AvailPhys:486,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1266,SelfWorkingSet:9808, SelfPageFile:13720
2025-07-22 09:00:11 [Info] CommitTotal:4896,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:486,SystemCache:400,KernelTotal:272,KernelPaged:193,KernelNonpaged:79,PageSize:4096,HandleCount:27030,ProcessCount:53,ThreadCount:740
2025-07-22 09:08:48 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9817","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9924","aliyundun_upload_time":"1753146528","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 09:11:46 [Info] nCurrentClock is 1098054100, nCurrentTime is 1753146706
2025-07-22 09:11:46 [Info] SendMessage T_MSG_LOGIN
2025-07-22 09:11:46 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-22 09:11:46 [Info] begin to enable self guard after reconnect
2025-07-22 09:11:46 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-22 09:11:46 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-22 09:11:46 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-22 09:11:46 [Info] key : cpu, value : 10
2025-07-22 09:11:46 [Info] key : rio, value : 20480
2025-07-22 09:11:46 [Info] key : wio, value : 20480
2025-07-22 09:11:46 [Info] key : cpu_all, value : 0
2025-07-22 09:11:46 [Info] key : max_pid_check, value : 200
2025-07-22 09:11:46 [Info] key : throw_dump, value : 0
2025-07-22 09:11:46 [Info] key : hash_mode, value : 1
2025-07-22 09:11:46 [Info] key : mem, value : 200
2025-07-22 09:11:46 [Info] can not find key max_fd in online conf
2025-07-22 09:11:46 [Info] key : proc_limit, value : 1
2025-07-22 09:11:46 [Info] key : resource_limit_mode, value : 3
2025-07-22 09:11:46 [Info] key : rtap_update_mode, value : 1
2025-07-22 09:11:46 [Info] can not find key debug in online conf
2025-07-22 09:11:46 [Info] can not find key update_mode in online conf
2025-07-22 09:11:46 [Info] can not find key http_mode in online conf
2025-07-22 09:11:46 [Info] can not find key rtap_enable in online conf
2025-07-22 09:11:46 [Info] can not find key rtap_new_agent in online conf
2025-07-22 09:11:46 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-22 09:11:46 [Info] can not find key mem_low_mark in online conf
2025-07-22 09:11:46 [Info] can not find key obnormal_report_interval in online conf
2025-07-22 09:11:46 [Info] key : cache_mode, value : 0
2025-07-22 09:11:46 [Info] key : abnormal_monitor_mode, value : 3
2025-07-22 09:11:46 [Info] key : queue_size_ratio, value : 80
2025-07-22 09:11:46 [Info] queue_size_ratio is 80
2025-07-22 09:11:46 [Info] resource limit mode and max limit cpu is not change
2025-07-22 09:11:46 [Info] set hash mode 1
2025-07-22 09:11:46 [Info] RTAP timeout config:9600000
2025-07-22 09:11:46 [Info] self_guard_mode config is 0
2025-07-22 09:11:47 [Info] GetMessage : T_MSG_CHECK
2025-07-22 09:11:47 [Info] task 404193f9-7088-4498-b67d-c4c94b44ee90 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 09:11:55 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-07-22 09:11:58 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 09:11:58 [Info] ipc client:Rtap111841753146718_handler Reg client_name:Rtap111841753146718 on WhiteList
2025-07-22 09:11:58 [Info] start rtap process success, pid is 4332, argument is Rtap111841753146718
2025-07-22 09:11:58 [Info] New ClientConnectNotify : Rtap111841753146718, id is 0000051C
2025-07-22 09:11:58 [Info] ipc client:Rtap111841753146718 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 09:11:59 [Info] Rtap Platform Rtap111841753146718 execv work --windows-sysinfoext-check on pid 4332
2025-07-22 09:11:59 [Info] csrss.exe open proc 4332 AliSecCheck.ex
2025-07-22 09:12:00 [Info] csrss.exe open thread 4332 AliSecCheck.ex
2025-07-22 09:12:06 [Info] Done Work --windows-sysinfoext-check:1
2025-07-22 09:12:06 [Info] Rtap Platform Rtap111841753146718 Exit:normal exit
2025-07-22 09:12:08 [Info] ClientDisConnectNotify : Rtap111841753146718, id is 0000051C
2025-07-22 10:01:09 [Info] TotalPhys:2047,AvailPhys:506,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1271,SelfWorkingSet:9880, SelfPageFile:13760
2025-07-22 10:01:09 [Info] CommitTotal:4890,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:506,SystemCache:397,KernelTotal:271,KernelPaged:192,KernelNonpaged:79,PageSize:4096,HandleCount:26963,ProcessCount:53,ThreadCount:733
2025-07-22 10:01:29 [Info] GetMessage : T_MSG_CHECK
2025-07-22 10:01:29 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxNDk2ODksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzMTkyODg5LCJzdWIiOiJSVEFQX0lEWF8xNTg3MTZfMTc1MzE0OTY4OTQ5NSJ9.gKccPTBj9VK2fnqgWNa-YyHRsm1p2MnFd1sFJpmQtgk has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 10:01:39 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 10:01:39 [Info] ipc client:Rtap209191753149699_handler Reg client_name:Rtap209191753149699 on WhiteList
2025-07-22 10:01:39 [Info] start rtap process success, pid is 5104, argument is Rtap209191753149699
2025-07-22 10:01:39 [Info] New ClientConnectNotify : Rtap209191753149699, id is 000004F8
2025-07-22 10:01:39 [Info] ipc client:Rtap209191753149699 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 10:01:40 [Info] Rtap Platform Rtap209191753149699 execv work --tcp-connect-check on pid 5104
2025-07-22 10:01:41 [Info] csrss.exe open proc 5104 AliSecCheck.ex
2025-07-22 10:01:42 [Info] csrss.exe open thread 5104 AliSecCheck.ex
2025-07-22 10:01:51 [Info] Done Work --tcp-connect-check:1
2025-07-22 10:01:51 [Info] Rtap Platform Rtap209191753149699 Exit:normal exit
2025-07-22 10:01:53 [Info] ClientDisConnectNotify : Rtap209191753149699, id is 000004F8
2025-07-22 10:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9871","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9920","aliyundun_upload_time":"1753150116","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 10:16:46 [Info] GetMessage : T_MSG_CHECK
2025-07-22 10:16:46 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxNTA2MDYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzMTkzODA2LCJzdWIiOiJSVEFQX0lEWF8xNTg3MThfMTc1MzE1MDYwNjY0NSJ9.kTuyC5l0pVVKKgF_s2IQ9DF8bbZXHk5nFj3N70ME2J4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 10:16:54 [Info] GetMessage : T_MSG_CHECK
2025-07-22 10:16:54 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxNTA2MDYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzMTkzODA2LCJzdWIiOiJSVEFQX0lEWF8xNTg3MjNfMTc1MzE1MDYwNjcxNCJ9.Jc9jsQKpLXBNQIkAmbIs2TlUAQzvrw651CaQHQySbfI has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 10:16:57 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 10:16:57 [Info] ipc client:Rtap239171753150617_handler Reg client_name:Rtap239171753150617 on WhiteList
2025-07-22 10:16:57 [Info] start rtap process success, pid is 4700, argument is Rtap239171753150617
2025-07-22 10:16:57 [Info] New ClientConnectNotify : Rtap239171753150617, id is 0000051C
2025-07-22 10:16:57 [Info] ipc client:Rtap239171753150617 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 10:16:58 [Info] Rtap Platform Rtap239171753150617 execv work --windows-schedule-task-check on pid 4700
2025-07-22 10:17:00 [Info] csrss.exe open proc 4700 AliSecCheck.ex
2025-07-22 10:17:01 [Info] csrss.exe open thread 4700 AliSecCheck.ex
2025-07-22 10:17:06 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 10:17:06 [Info] ipc client:Rtap239461753150626_handler Reg client_name:Rtap239461753150626 on WhiteList
2025-07-22 10:17:06 [Info] start rtap process success, pid is 3708, argument is Rtap239461753150626
2025-07-22 10:17:06 [Info] New ClientConnectNotify : Rtap239461753150626, id is 000001E4
2025-07-22 10:17:06 [Info] ipc client:Rtap239461753150626 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 10:17:07 [Info] Rtap Platform Rtap239461753150626 execv work --windows-registry-check on pid 3708
2025-07-22 10:17:08 [Info] csrss.exe open proc 3708 AliSecCheck.ex
2025-07-22 10:17:09 [Info] csrss.exe open thread 3708 AliSecCheck.ex
2025-07-22 10:17:30 [Info] get meta data success by v2
2025-07-22 10:17:30 [Info] get empty metaserver config
2025-07-22 10:17:30 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-22 10:17:30 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-22 10:17:30 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-22 10:17:30 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-22 10:17:30 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 10:17:30 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 10:17:31 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-22 10:17:31 [Info] download cert compare md5 same
2025-07-22 10:17:31 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 10:17:31 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 10:17:31 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-22 10:17:34 [Info] Done Work --windows-schedule-task-check:1
2025-07-22 10:17:34 [Info] Rtap Platform Rtap239171753150617 Exit:normal exit
2025-07-22 10:17:36 [Info] ClientDisConnectNotify : Rtap239171753150617, id is 0000051C
2025-07-22 10:17:41 [Info] Done Work --windows-registry-check:1
2025-07-22 10:17:41 [Info] Rtap Platform Rtap239461753150626 Exit:normal exit
2025-07-22 10:17:43 [Info] ClientDisConnectNotify : Rtap239461753150626, id is 000001E4
2025-07-22 10:18:27 [Info] GetMessage : T_MSG_CHECK
2025-07-22 10:18:27 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxNTA3MDcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzMTkzOTA3LCJzdWIiOiJSVEFQX0lEWF8xNTg3MzFfMTc1MzE1MDcwNzExMiJ9.bOaKOAjSDLjpi_Cg3_VNu-C8m-sRbUf8vdi4uQoOfCc has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 10:18:37 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 10:18:37 [Info] ipc client:Rtap242431753150717_handler Reg client_name:Rtap242431753150717 on WhiteList
2025-07-22 10:18:37 [Info] start rtap process success, pid is 4380, argument is Rtap242431753150717
2025-07-22 10:18:37 [Info] New ClientConnectNotify : Rtap242431753150717, id is 000004B8
2025-07-22 10:18:38 [Info] ipc client:Rtap242431753150717 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 10:18:38 [Info] Rtap Platform Rtap242431753150717 execv work --windows-driver-version-check on pid 4380
2025-07-22 10:18:39 [Info] csrss.exe open proc 4380 AliSecCheck.ex
2025-07-22 10:18:40 [Info] csrss.exe open thread 4380 AliSecCheck.ex
2025-07-22 10:18:45 [Info] Done Work --windows-driver-version-check:1
2025-07-22 10:18:45 [Info] Rtap Platform Rtap242431753150717 Exit:normal exit
2025-07-22 10:18:47 [Info] ClientDisConnectNotify : Rtap242431753150717, id is 000004B8
2025-07-22 11:02:05 [Info] TotalPhys:2047,AvailPhys:506,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1268,SelfWorkingSet:9932, SelfPageFile:13820
2025-07-22 11:02:05 [Info] CommitTotal:4893,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:506,SystemCache:370,KernelTotal:274,KernelPaged:195,KernelNonpaged:79,PageSize:4096,HandleCount:26982,ProcessCount:53,ThreadCount:736
2025-07-22 11:05:53 [Info] GetMessage : T_MSG_CHECK
2025-07-22 11:05:53 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxNTM1NTMsImlzcyI6IlJUQVAiLCJpc3MiOiJSVEFQIiwiYXVkIjoiUlRBUCIsImV4cCI6MTc1MzE5Njc1Mywic3ViIjoiUlRBUF9JRFhfMTU4NzIwXzE3NTMxNTM1NTMxNjIifQ.jqwRR_F6HaxzmfbsmHK7PRAQRHGgBF72DcqUx9ExDSg has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 11:06:04 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 11:06:04 [Info] ipc client:Rtap7731753153564_handler Reg client_name:Rtap7731753153564 on WhiteList
2025-07-22 11:06:04 [Info] start rtap process success, pid is 4788, argument is Rtap7731753153564
2025-07-22 11:06:04 [Info] New ClientConnectNotify : Rtap7731753153564, id is 000001E4
2025-07-22 11:06:04 [Info] ipc client:Rtap7731753153564 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 11:06:05 [Info] Rtap Platform Rtap7731753153564 execv work --windows-autorun-item-check on pid 4788
2025-07-22 11:06:07 [Info] csrss.exe open proc 4788 AliSecCheck.ex
2025-07-22 11:06:08 [Info] csrss.exe open thread 4788 AliSecCheck.ex
2025-07-22 11:06:20 [Info] Done Work --windows-autorun-item-check:1
2025-07-22 11:06:20 [Info] Rtap Platform Rtap7731753153564 Exit:normal exit
2025-07-22 11:06:22 [Info] ClientDisConnectNotify : Rtap7731753153564, id is 000001E4
2025-07-22 11:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9942","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10008","aliyundun_upload_time":"1753153726","aliyundun_write_pid_times":"0","ipc_send_count":"153","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 12:03:02 [Info] TotalPhys:2047,AvailPhys:502,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1265,SelfWorkingSet:9956, SelfPageFile:13720
2025-07-22 12:03:02 [Info] CommitTotal:4897,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:502,SystemCache:375,KernelTotal:275,KernelPaged:195,KernelNonpaged:79,PageSize:4096,HandleCount:26993,ProcessCount:53,ThreadCount:739
2025-07-22 12:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9930","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9972","aliyundun_upload_time":"1753157330","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 13:03:58 [Info] TotalPhys:2047,AvailPhys:513,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1275,SelfWorkingSet:9884, SelfPageFile:13720
2025-07-22 13:03:58 [Info] CommitTotal:4887,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:513,SystemCache:375,KernelTotal:275,KernelPaged:196,KernelNonpaged:79,PageSize:4096,HandleCount:26977,ProcessCount:53,ThreadCount:733
2025-07-22 13:08:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9844","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9956","aliyundun_upload_time":"1753160933","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 13:34:36 [Info] get meta data success by v2
2025-07-22 13:34:36 [Info] get empty metaserver config
2025-07-22 13:34:36 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-22 13:34:36 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-22 13:34:36 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-22 13:34:36 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-22 13:34:36 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 13:34:36 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 13:34:36 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-22 13:34:36 [Info] download cert compare md5 same
2025-07-22 13:34:36 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 13:34:36 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 13:34:36 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-22 14:04:54 [Info] TotalPhys:2047,AvailPhys:585,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1270,SelfWorkingSet:10040, SelfPageFile:13760
2025-07-22 14:04:54 [Info] CommitTotal:4892,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:585,SystemCache:193,KernelTotal:256,KernelPaged:180,KernelNonpaged:76,PageSize:4096,HandleCount:27271,ProcessCount:53,ThreadCount:755
2025-07-22 14:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9943","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10064","aliyundun_upload_time":"1753164534","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"71","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 14:40:18 [Info] nCurrentClock is 1116055100, nCurrentTime is 1753166418
2025-07-22 14:40:18 [Info] SendMessage T_MSG_LOGIN
2025-07-22 14:40:18 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-22 14:40:18 [Info] begin to enable self guard after reconnect
2025-07-22 14:40:18 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-22 14:40:18 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-22 14:40:18 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-22 14:40:18 [Info] key : cpu, value : 10
2025-07-22 14:40:18 [Info] key : rio, value : 20480
2025-07-22 14:40:18 [Info] key : wio, value : 20480
2025-07-22 14:40:18 [Info] key : cpu_all, value : 0
2025-07-22 14:40:18 [Info] key : max_pid_check, value : 200
2025-07-22 14:40:18 [Info] key : throw_dump, value : 0
2025-07-22 14:40:18 [Info] key : hash_mode, value : 1
2025-07-22 14:40:18 [Info] key : mem, value : 200
2025-07-22 14:40:18 [Info] can not find key max_fd in online conf
2025-07-22 14:40:18 [Info] key : proc_limit, value : 1
2025-07-22 14:40:18 [Info] key : resource_limit_mode, value : 3
2025-07-22 14:40:18 [Info] key : rtap_update_mode, value : 1
2025-07-22 14:40:18 [Info] can not find key debug in online conf
2025-07-22 14:40:18 [Info] can not find key update_mode in online conf
2025-07-22 14:40:18 [Info] can not find key http_mode in online conf
2025-07-22 14:40:18 [Info] can not find key rtap_enable in online conf
2025-07-22 14:40:18 [Info] can not find key rtap_new_agent in online conf
2025-07-22 14:40:18 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-22 14:40:18 [Info] can not find key mem_low_mark in online conf
2025-07-22 14:40:18 [Info] can not find key obnormal_report_interval in online conf
2025-07-22 14:40:18 [Info] key : cache_mode, value : 0
2025-07-22 14:40:18 [Info] key : abnormal_monitor_mode, value : 3
2025-07-22 14:40:18 [Info] key : queue_size_ratio, value : 80
2025-07-22 14:40:18 [Info] queue_size_ratio is 80
2025-07-22 14:40:18 [Info] resource limit mode and max limit cpu is not change
2025-07-22 14:40:18 [Info] set hash mode 1
2025-07-22 14:40:18 [Info] RTAP timeout config:9600000
2025-07-22 14:40:18 [Info] self_guard_mode config is 0
2025-07-22 14:40:19 [Info] GetMessage : T_MSG_CHECK
2025-07-22 14:40:19 [Info] task b0eebc40-be02-4a29-a797-734fd2089d20 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 14:40:31 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 14:40:31 [Info] ipc client:Rtap100231753166431_handler Reg client_name:Rtap100231753166431 on WhiteList
2025-07-22 14:40:31 [Info] start rtap process success, pid is 3240, argument is Rtap100231753166431
2025-07-22 14:40:33 [Info] csrss.exe open proc 3240 AliSecCheck.ex
2025-07-22 14:40:34 [Info] New ClientConnectNotify : Rtap100231753166431, id is 00000504
2025-07-22 14:40:34 [Info] Rtap Platform Rtap100231753166431 execv work --windows-sysinfoext-check on pid 3240
2025-07-22 14:40:34 [Info] ipc client:Rtap100231753166431 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 14:40:34 [Info] csrss.exe open thread 3240 AliSecCheck.ex
2025-07-22 14:40:35 [Info] csrss.exe open thread 3240 AliSecCheck.ex
2025-07-22 14:40:36 [Info] csrss.exe open thread 3240 AliSecCheck.ex
2025-07-22 14:40:37 [Info] csrss.exe open thread 3240 AliSecCheck.ex
2025-07-22 14:40:45 [Info] Done Work --windows-sysinfoext-check:1
2025-07-22 14:40:45 [Info] Rtap Platform Rtap100231753166431 Exit:normal exit
2025-07-22 14:40:47 [Info] ClientDisConnectNotify : Rtap100231753166431, id is 00000504
2025-07-22 15:05:52 [Info] TotalPhys:2047,AvailPhys:565,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1281,SelfWorkingSet:9928, SelfPageFile:13664
2025-07-22 15:05:52 [Info] CommitTotal:4881,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:565,SystemCache:269,KernelTotal:258,KernelPaged:182,KernelNonpaged:75,PageSize:4096,HandleCount:27165,ProcessCount:54,ThreadCount:742
2025-07-22 15:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10010","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10092","aliyundun_upload_time":"1753168142","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"71","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 16:06:48 [Info] TotalPhys:2047,AvailPhys:591,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1279,SelfWorkingSet:9868, SelfPageFile:13624
2025-07-22 16:06:48 [Info] CommitTotal:4883,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:591,SystemCache:295,KernelTotal:258,KernelPaged:183,KernelNonpaged:75,PageSize:4096,HandleCount:26998,ProcessCount:53,ThreadCount:740
2025-07-22 16:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9863","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9948","aliyundun_upload_time":"1753171714","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"71","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 16:51:44 [Info] get meta data success by v2
2025-07-22 16:51:44 [Info] get empty metaserver config
2025-07-22 16:51:44 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-22 16:51:44 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-22 16:51:44 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-22 16:51:44 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-22 16:51:44 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 16:51:44 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 16:51:44 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-22 16:51:44 [Info] download cert compare md5 same
2025-07-22 16:51:44 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 16:51:44 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 16:51:44 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-22 17:07:48 [Info] TotalPhys:2047,AvailPhys:566,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6162,AvailPageFile:1274,SelfWorkingSet:9980, SelfPageFile:13836
2025-07-22 17:07:48 [Info] CommitTotal:4888,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:566,SystemCache:450,KernelTotal:262,KernelPaged:186,KernelNonpaged:75,PageSize:4096,HandleCount:27037,ProcessCount:53,ThreadCount:751
2025-07-22 17:09:05 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9927","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9996","aliyundun_upload_time":"1753175345","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-07-22 18:08:46 [Info] TotalPhys:2047,AvailPhys:576,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1261,SelfWorkingSet:9976, SelfPageFile:13924
2025-07-22 18:08:46 [Info] CommitTotal:4901,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:576,SystemCache:431,KernelTotal:276,KernelPaged:196,KernelNonpaged:80,PageSize:4096,HandleCount:27041,ProcessCount:53,ThreadCount:740
2025-07-22 18:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9937","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9976","aliyundun_upload_time":"1753178931","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"71","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 19:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9874","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9976","aliyundun_upload_time":"1753182537","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 19:09:43 [Info] TotalPhys:2047,AvailPhys:571,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1258,SelfWorkingSet:9864, SelfPageFile:13700
2025-07-22 19:09:43 [Info] CommitTotal:4904,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:571,SystemCache:435,KernelTotal:277,KernelPaged:197,KernelNonpaged:80,PageSize:4096,HandleCount:27000,ProcessCount:53,ThreadCount:736
2025-07-22 19:39:53 [Info] GetMessage : T_MSG_CHECK
2025-07-22 19:39:53 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxODQzOTMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzMjI3NTkzLCJzdWIiOiJSVEFQX0lEWF8xNTg3OTBfMTc1MzE4NDM5Mzc4MSJ9.SE5ptI_Rh-cPFhfcbEhxHAPWrqOTMSZSxeDPFeSMoFA has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 19:40:02 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 19:40:02 [Info] ipc client:Rtap31721753184402_handler Reg client_name:Rtap31721753184402 on WhiteList
2025-07-22 19:40:02 [Info] start rtap process success, pid is 1268, argument is Rtap31721753184402
2025-07-22 19:40:02 [Info] New ClientConnectNotify : Rtap31721753184402, id is 0000053C
2025-07-22 19:40:02 [Info] ipc client:Rtap31721753184402 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 19:40:03 [Info] Rtap Platform Rtap31721753184402 execv work --secnet_rasp_agent on pid 1268
2025-07-22 19:40:04 [Info] csrss.exe open proc 1268 AliSecCheck.ex
2025-07-22 19:40:05 [Info] csrss.exe open thread 1268 AliSecCheck.ex
2025-07-22 19:40:10 [Info] Done Work --secnet_rasp_agent:1
2025-07-22 19:40:10 [Info] Rtap Platform Rtap31721753184402 Exit:normal exit
2025-07-22 19:40:12 [Info] ClientDisConnectNotify : Rtap31721753184402, id is 0000053C
2025-07-22 20:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9865","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9952","aliyundun_upload_time":"1753186143","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 20:09:30 [Info] get meta data success by v2
2025-07-22 20:09:30 [Info] get empty metaserver config
2025-07-22 20:09:30 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-22 20:09:30 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-22 20:09:30 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-22 20:09:30 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-22 20:09:30 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 20:09:30 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 20:09:31 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-22 20:09:31 [Info] download cert compare md5 same
2025-07-22 20:09:31 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 20:09:31 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 20:09:31 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-22 20:09:31 [Info] nCurrentClock is 1134056100, nCurrentTime is 1753186171
2025-07-22 20:09:31 [Info] SendMessage T_MSG_LOGIN
2025-07-22 20:09:31 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-22 20:09:31 [Info] begin to enable self guard after reconnect
2025-07-22 20:09:31 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-22 20:09:31 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-22 20:09:31 [Info] GetMessage : T_MSG_CHECK
2025-07-22 20:09:31 [Info] task 594ced5e-448d-4748-a6a9-60f8ea2aef9d has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 20:09:39 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-22 20:09:39 [Info] key : cpu, value : 10
2025-07-22 20:09:39 [Info] key : rio, value : 20480
2025-07-22 20:09:39 [Info] key : wio, value : 20480
2025-07-22 20:09:39 [Info] key : cpu_all, value : 0
2025-07-22 20:09:39 [Info] key : max_pid_check, value : 200
2025-07-22 20:09:39 [Info] key : throw_dump, value : 0
2025-07-22 20:09:39 [Info] key : hash_mode, value : 1
2025-07-22 20:09:39 [Info] key : mem, value : 200
2025-07-22 20:09:39 [Info] can not find key max_fd in online conf
2025-07-22 20:09:39 [Info] key : proc_limit, value : 1
2025-07-22 20:09:39 [Info] key : resource_limit_mode, value : 3
2025-07-22 20:09:39 [Info] key : rtap_update_mode, value : 1
2025-07-22 20:09:39 [Info] can not find key debug in online conf
2025-07-22 20:09:39 [Info] can not find key update_mode in online conf
2025-07-22 20:09:39 [Info] can not find key http_mode in online conf
2025-07-22 20:09:39 [Info] can not find key rtap_enable in online conf
2025-07-22 20:09:39 [Info] can not find key rtap_new_agent in online conf
2025-07-22 20:09:39 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-22 20:09:39 [Info] can not find key mem_low_mark in online conf
2025-07-22 20:09:39 [Info] can not find key obnormal_report_interval in online conf
2025-07-22 20:09:39 [Info] key : cache_mode, value : 0
2025-07-22 20:09:39 [Info] key : abnormal_monitor_mode, value : 3
2025-07-22 20:09:39 [Info] key : queue_size_ratio, value : 80
2025-07-22 20:09:39 [Info] queue_size_ratio is 80
2025-07-22 20:09:39 [Info] resource limit mode and max limit cpu is not change
2025-07-22 20:09:39 [Info] set hash mode 1
2025-07-22 20:09:39 [Info] RTAP timeout config:9600000
2025-07-22 20:09:39 [Info] self_guard_mode config is 0
2025-07-22 20:09:41 [Info] GetMessage : T_MSG_CHECK
2025-07-22 20:09:41 [Info] task dc853dd7776e4e2a68c6cf82dbf98408 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-22 20:09:42 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 20:09:42 [Info] ipc client:Rtap89851753186182_handler Reg client_name:Rtap89851753186182 on WhiteList
2025-07-22 20:09:43 [Info] start rtap process success, pid is 4368, argument is Rtap89851753186182
2025-07-22 20:09:43 [Info] New ClientConnectNotify : Rtap89851753186182, id is 000004F8
2025-07-22 20:09:43 [Info] ipc client:Rtap89851753186182 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-22 20:09:43 [Info] Rtap Platform Rtap89851753186182 execv work --windows-sysinfoext-check on pid 4368
2025-07-22 20:09:45 [Info] csrss.exe open proc 4368 AliSecCheck.ex
2025-07-22 20:09:46 [Info] csrss.exe open thread 4368 AliSecCheck.ex
2025-07-22 20:09:50 [Info] Done Work --windows-sysinfoext-check:1
2025-07-22 20:09:52 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-22 20:09:52 [Info] Rtap platform Rtap89851753186182 is reuse
2025-07-22 20:09:52 [Info] Rtap Platform Rtap89851753186182 execv work --windows-vul-check on pid 4368
2025-07-22 20:10:00 [Info] Done Work --windows-vul-check:1
2025-07-22 20:10:00 [Info] Rtap Platform Rtap89851753186182 Exit:normal exit
2025-07-22 20:10:02 [Info] ClientDisConnectNotify : Rtap89851753186182, id is 000004F8
2025-07-22 20:10:40 [Info] TotalPhys:2047,AvailPhys:498,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6162,AvailPageFile:1167,SelfWorkingSet:9912, SelfPageFile:13876
2025-07-22 20:10:40 [Info] CommitTotal:4995,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:498,SystemCache:368,KernelTotal:276,KernelPaged:196,KernelNonpaged:80,PageSize:4096,HandleCount:27544,ProcessCount:55,ThreadCount:759
2025-07-22 21:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9898","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10000","aliyundun_upload_time":"1753189718","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 21:11:37 [Info] TotalPhys:2047,AvailPhys:506,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6162,AvailPageFile:1147,SelfWorkingSet:9892, SelfPageFile:13704
2025-07-22 21:11:37 [Info] CommitTotal:5015,CommitLimit:6162,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:506,SystemCache:315,KernelTotal:271,KernelPaged:192,KernelNonpaged:79,PageSize:4096,HandleCount:27145,ProcessCount:53,ThreadCount:743
2025-07-22 21:38:01 [Info] TotalPhys:2047,AvailPhys:6,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6560,AvailPageFile:792,SelfWorkingSet:9872, SelfPageFile:13676
2025-07-22 21:38:01 [Info] CommitTotal:5767,CommitLimit:6560,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:6,SystemCache:4194303,KernelTotal:254,KernelPaged:177,KernelNonpaged:76,PageSize:4096,HandleCount:27387,ProcessCount:55,ThreadCount:750
2025-07-22 22:08:55 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9830","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9900","aliyundun_upload_time":"1753193335","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 22:12:33 [Info] TotalPhys:2047,AvailPhys:571,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6429,AvailPageFile:1444,SelfWorkingSet:9808, SelfPageFile:13564
2025-07-22 22:12:33 [Info] CommitTotal:4985,CommitLimit:6429,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:571,SystemCache:246,KernelTotal:255,KernelPaged:180,KernelNonpaged:75,PageSize:4096,HandleCount:26868,ProcessCount:52,ThreadCount:733
2025-07-22 23:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9900","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9944","aliyundun_upload_time":"1753196939","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-22 23:13:29 [Info] TotalPhys:2047,AvailPhys:574,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6429,AvailPageFile:1446,SelfWorkingSet:9904, SelfPageFile:13572
2025-07-22 23:13:29 [Info] CommitTotal:4983,CommitLimit:6429,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:574,SystemCache:265,KernelTotal:255,KernelPaged:180,KernelNonpaged:74,PageSize:4096,HandleCount:26891,ProcessCount:52,ThreadCount:736
2025-07-22 23:26:38 [Info] get meta data success by v2
2025-07-22 23:26:38 [Info] get empty metaserver config
2025-07-22 23:26:38 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-22 23:26:38 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-22 23:26:38 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-22 23:26:38 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-22 23:26:38 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 23:26:38 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-22 23:26:38 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-22 23:26:38 [Info] download cert compare md5 same
2025-07-22 23:26:38 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 23:26:38 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-22 23:26:38 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-23 00:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9883","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9980","aliyundun_upload_time":"1753200512","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 00:29:12 [Info] TotalPhys:2047,AvailPhys:548,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6604,AvailPageFile:1288,SelfWorkingSet:9848, SelfPageFile:13760
2025-07-29 00:29:12 [Info] CommitTotal:5316,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:548,SystemCache:256,KernelTotal:255,KernelPaged:180,KernelNonpaged:75,PageSize:4096,HandleCount:27289,ProcessCount:53,ThreadCount:743
2025-07-29 01:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9796","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9976","aliyundun_upload_time":"1753722513","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 01:20:06 [Info] GetMessage : T_MSG_CHECK
2025-07-29 01:20:06 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM3MjMyMDYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNzY2NDA2LCJzdWIiOiJSVEFQX0lEWF8xNTkyNzBfMTc1MzcyMzIwNjA0OSJ9.EUELtir3nannDHiNL4gubmOOuZoLyYKo8Lz5irdMQa8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 01:20:17 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 01:20:17 [Info] ipc client:Rtap260121753723217_handler Reg client_name:Rtap260121753723217 on WhiteList
2025-07-29 01:20:17 [Info] start rtap process success, pid is 4428, argument is Rtap260121753723217
2025-07-29 01:20:18 [Info] New ClientConnectNotify : Rtap260121753723217, id is 00000540
2025-07-29 01:20:18 [Info] Rtap Platform Rtap260121753723217 execv work --sca on pid 4428
2025-07-29 01:20:18 [Info] ipc client:Rtap260121753723217 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 01:20:18 [Info] csrss.exe open proc 4428 AliSecCheck.ex
2025-07-29 01:20:19 [Info] csrss.exe open thread 4428 AliSecCheck.ex
2025-07-29 01:23:09 [Info] csrss.exe open thread 4428 AliSecCheck.ex
2025-07-29 01:23:36 [Info] Done Work --sca:1
2025-07-29 01:23:36 [Info] Rtap Platform Rtap260121753723217 Exit:normal exit
2025-07-29 01:23:48 [Info] ClientDisConnectNotify : Rtap260121753723217, id is 00000540
2025-07-29 01:30:10 [Info] TotalPhys:2047,AvailPhys:521,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1291,SelfWorkingSet:9824, SelfPageFile:13572
2025-07-29 01:30:10 [Info] CommitTotal:5313,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:521,SystemCache:272,KernelTotal:256,KernelPaged:180,KernelNonpaged:75,PageSize:4096,HandleCount:27111,ProcessCount:52,ThreadCount:730
2025-07-29 02:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9806","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9852","aliyundun_upload_time":"1753726132","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 02:31:07 [Info] TotalPhys:2047,AvailPhys:521,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1280,SelfWorkingSet:9936, SelfPageFile:13712
2025-07-29 02:31:07 [Info] CommitTotal:5323,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:521,SystemCache:236,KernelTotal:254,KernelPaged:179,KernelNonpaged:74,PageSize:4096,HandleCount:27203,ProcessCount:52,ThreadCount:746
2025-07-29 03:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9831","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9936","aliyundun_upload_time":"1753729738","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 03:29:53 [Info] get meta data success by v2
2025-07-29 03:29:53 [Info] get empty metaserver config
2025-07-29 03:29:53 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-29 03:29:53 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-29 03:29:53 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-29 03:29:53 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-29 03:29:53 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 03:29:53 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 03:29:54 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-29 03:29:54 [Info] download cert compare md5 same
2025-07-29 03:29:54 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 03:29:54 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 03:29:54 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-29 03:32:03 [Info] TotalPhys:2047,AvailPhys:537,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6604,AvailPageFile:1295,SelfWorkingSet:9904, SelfPageFile:13740
2025-07-29 03:32:03 [Info] CommitTotal:5308,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:537,SystemCache:313,KernelTotal:257,KernelPaged:183,KernelNonpaged:74,PageSize:4096,HandleCount:27147,ProcessCount:52,ThreadCount:739
2025-07-29 04:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9860","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9980","aliyundun_upload_time":"1753733325","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 04:33:00 [Info] TotalPhys:2047,AvailPhys:530,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1284,SelfWorkingSet:9828, SelfPageFile:13572
2025-07-29 04:33:00 [Info] CommitTotal:5319,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:530,SystemCache:314,KernelTotal:258,KernelPaged:183,KernelNonpaged:74,PageSize:4096,HandleCount:27033,ProcessCount:52,ThreadCount:732
2025-07-29 05:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9843","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9868","aliyundun_upload_time":"1753736934","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 05:33:57 [Info] TotalPhys:2047,AvailPhys:531,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1290,SelfWorkingSet:9780, SelfPageFile:13684
2025-07-29 05:33:57 [Info] CommitTotal:5313,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:531,SystemCache:339,KernelTotal:258,KernelPaged:183,KernelNonpaged:74,PageSize:4096,HandleCount:27018,ProcessCount:52,ThreadCount:732
2025-07-29 05:41:18 [Info] nCurrentClock is 1638078200, nCurrentTime is 1753738878
2025-07-29 05:41:18 [Info] SendMessage T_MSG_LOGIN
2025-07-29 05:41:19 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-29 05:41:19 [Info] begin to enable self guard after reconnect
2025-07-29 05:41:19 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-29 05:41:19 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-29 05:41:19 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-29 05:41:19 [Info] key : cpu, value : 10
2025-07-29 05:41:19 [Info] key : rio, value : 20480
2025-07-29 05:41:19 [Info] key : wio, value : 20480
2025-07-29 05:41:19 [Info] key : cpu_all, value : 0
2025-07-29 05:41:19 [Info] key : max_pid_check, value : 200
2025-07-29 05:41:19 [Info] key : throw_dump, value : 0
2025-07-29 05:41:19 [Info] key : hash_mode, value : 1
2025-07-29 05:41:19 [Info] key : mem, value : 200
2025-07-29 05:41:19 [Info] can not find key max_fd in online conf
2025-07-29 05:41:19 [Info] key : proc_limit, value : 1
2025-07-29 05:41:19 [Info] key : resource_limit_mode, value : 3
2025-07-29 05:41:19 [Info] key : rtap_update_mode, value : 1
2025-07-29 05:41:19 [Info] can not find key debug in online conf
2025-07-29 05:41:19 [Info] can not find key update_mode in online conf
2025-07-29 05:41:19 [Info] can not find key http_mode in online conf
2025-07-29 05:41:19 [Info] can not find key rtap_enable in online conf
2025-07-29 05:41:19 [Info] can not find key rtap_new_agent in online conf
2025-07-29 05:41:19 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-29 05:41:19 [Info] can not find key mem_low_mark in online conf
2025-07-29 05:41:19 [Info] can not find key obnormal_report_interval in online conf
2025-07-29 05:41:19 [Info] key : cache_mode, value : 0
2025-07-29 05:41:19 [Info] key : abnormal_monitor_mode, value : 3
2025-07-29 05:41:19 [Info] key : queue_size_ratio, value : 80
2025-07-29 05:41:19 [Info] queue_size_ratio is 80
2025-07-29 05:41:19 [Info] resource limit mode and max limit cpu is not change
2025-07-29 05:41:19 [Info] set hash mode 1
2025-07-29 05:41:19 [Info] RTAP timeout config:9600000
2025-07-29 05:41:19 [Info] self_guard_mode config is 0
2025-07-29 05:41:19 [Info] GetMessage : T_MSG_CHECK
2025-07-29 05:41:19 [Info] task 86c5a823-7a3d-4dda-8e93-32a6a9e1dc63 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 05:41:28 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-07-29 05:41:30 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 05:41:30 [Info] ipc client:Rtap116571753738890_handler Reg client_name:Rtap116571753738890 on WhiteList
2025-07-29 05:41:30 [Info] start rtap process success, pid is 3220, argument is Rtap116571753738890
2025-07-29 05:41:30 [Info] New ClientConnectNotify : Rtap116571753738890, id is 000004B8
2025-07-29 05:41:30 [Info] ipc client:Rtap116571753738890 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 05:41:31 [Info] Rtap Platform Rtap116571753738890 execv work --windows-sysinfoext-check on pid 3220
2025-07-29 05:41:31 [Info] csrss.exe open proc 3220 AliSecCheck.ex
2025-07-29 05:41:32 [Info] csrss.exe open thread 3220 AliSecCheck.ex
2025-07-29 05:41:38 [Info] Done Work --windows-sysinfoext-check:1
2025-07-29 05:41:38 [Info] Rtap Platform Rtap116571753738890 Exit:normal exit
2025-07-29 05:41:40 [Info] ClientDisConnectNotify : Rtap116571753738890, id is 000004B8
2025-07-29 06:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9803","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9868","aliyundun_upload_time":"1753740538","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 06:34:54 [Info] TotalPhys:2047,AvailPhys:529,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1290,SelfWorkingSet:9880, SelfPageFile:13708
2025-07-29 06:34:54 [Info] CommitTotal:5314,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:529,SystemCache:337,KernelTotal:258,KernelPaged:183,KernelNonpaged:74,PageSize:4096,HandleCount:27017,ProcessCount:52,ThreadCount:733
2025-07-29 06:47:10 [Info] get meta data success by v2
2025-07-29 06:47:10 [Info] get empty metaserver config
2025-07-29 06:47:10 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-29 06:47:10 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-29 06:47:10 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-29 06:47:10 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-29 06:47:10 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 06:47:10 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 06:47:10 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-29 06:47:10 [Info] download cert compare md5 same
2025-07-29 06:47:10 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 06:47:10 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 06:47:10 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-29 07:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9843","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"9960","aliyundun_upload_time":"1753744132","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-07-29 07:35:54 [Info] TotalPhys:2047,AvailPhys:508,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1280,SelfWorkingSet:9796, SelfPageFile:13604
2025-07-29 07:35:54 [Info] CommitTotal:5323,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:508,SystemCache:332,KernelTotal:261,KernelPaged:184,KernelNonpaged:76,PageSize:4096,HandleCount:26998,ProcessCount:52,ThreadCount:732
2025-07-29 08:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9758","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9828","aliyundun_upload_time":"1753747718","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 08:36:54 [Info] TotalPhys:2047,AvailPhys:489,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1267,SelfWorkingSet:9736, SelfPageFile:13440
2025-07-29 08:36:54 [Info] CommitTotal:5336,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:489,SystemCache:327,KernelTotal:260,KernelPaged:183,KernelNonpaged:76,PageSize:4096,HandleCount:27038,ProcessCount:52,ThreadCount:742
2025-07-29 08:52:27 [Info] GetMessage : T_MSG_CHECK
2025-07-29 08:52:27 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM3NTAzNDcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNzkzNTQ3LCJzdWIiOiJSVEFQX0lEWF8xNTkyNjFfMTc1Mzc1MDM0NzY1NCJ9.jF6Fllwe3LVJeG7z4n7ESqTOCt-DfSUvKqGWcUBVl48 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 08:52:38 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 08:52:38 [Info] ipc client:Rtap163391753750358_handler Reg client_name:Rtap163391753750358 on WhiteList
2025-07-29 08:52:38 [Info] start rtap process success, pid is 2432, argument is Rtap163391753750358
2025-07-29 08:52:38 [Info] New ClientConnectNotify : Rtap163391753750358, id is 000004F8
2025-07-29 08:52:38 [Info] ipc client:Rtap163391753750358 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 08:52:39 [Info] Rtap Platform Rtap163391753750358 execv work --windows-process-check on pid 2432
2025-07-29 08:52:39 [Info] csrss.exe open proc 2432 AliSecCheck.ex
2025-07-29 08:52:40 [Info] csrss.exe open thread 2432 AliSecCheck.ex
2025-07-29 08:53:02 [Info] Done Work --windows-process-check:1
2025-07-29 08:53:02 [Info] Rtap Platform Rtap163391753750358 Exit:normal exit
2025-07-29 08:53:04 [Info] ClientDisConnectNotify : Rtap163391753750358, id is 000004F8
2025-07-29 09:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9838","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10064","aliyundun_upload_time":"1753751343","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 09:37:53 [Info] TotalPhys:2047,AvailPhys:479,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1255,SelfWorkingSet:9968, SelfPageFile:13716
2025-07-29 09:37:53 [Info] CommitTotal:5348,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:479,SystemCache:345,KernelTotal:261,KernelPaged:184,KernelNonpaged:76,PageSize:4096,HandleCount:27010,ProcessCount:52,ThreadCount:733
2025-07-29 09:59:17 [Info] GetMessage : T_MSG_CHECK
2025-07-29 09:59:17 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM3NTQzNTcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNzk3NTU3LCJzdWIiOiJSVEFQX0lEWF8xNTkyNjJfMTc1Mzc1NDM1Nzc5NiJ9.s6-pe4crZTZS8w4gsaED4a4DTALdOymiPTQPDnC1bQA has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 09:59:28 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 09:59:28 [Info] ipc client:Rtap294341753754368_handler Reg client_name:Rtap294341753754368 on WhiteList
2025-07-29 09:59:28 [Info] start rtap process success, pid is 4980, argument is Rtap294341753754368
2025-07-29 09:59:28 [Info] New ClientConnectNotify : Rtap294341753754368, id is 00000540
2025-07-29 09:59:28 [Info] ipc client:Rtap294341753754368 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 09:59:29 [Info] Rtap Platform Rtap294341753754368 execv work --tcp-connect-check on pid 4980
2025-07-29 09:59:30 [Info] csrss.exe open proc 4980 AliSecCheck.ex
2025-07-29 09:59:31 [Info] csrss.exe open thread 4980 AliSecCheck.ex
2025-07-29 09:59:40 [Info] Done Work --tcp-connect-check:1
2025-07-29 09:59:40 [Info] Rtap Platform Rtap294341753754368 Exit:normal exit
2025-07-29 09:59:42 [Info] ClientDisConnectNotify : Rtap294341753754368, id is 00000540
2025-07-29 10:05:52 [Info] get meta data success by v2
2025-07-29 10:05:52 [Info] get empty metaserver config
2025-07-29 10:05:52 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-29 10:05:52 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-29 10:05:52 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-29 10:05:52 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-29 10:05:52 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 10:05:52 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 10:05:53 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-29 10:05:53 [Info] download cert compare md5 same
2025-07-29 10:05:53 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 10:05:53 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 10:05:53 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-29 10:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9940","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10092","aliyundun_upload_time":"1753754921","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 10:16:47 [Info] GetMessage : T_MSG_CHECK
2025-07-29 10:16:47 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM3NTU0MDcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNzk4NjA3LCJzdWIiOiJSVEFQX0lEWF8xNTkyNjRfMTc1Mzc1NTQwNzU0MSJ9.8B5nRm13V1ay8Cp0uP9MtfDlC9b3HT9wS-I7RtwaKBQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 10:16:55 [Info] GetMessage : T_MSG_CHECK
2025-07-29 10:16:55 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM3NTU0MDgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNzk4NjA4LCJzdWIiOiJSVEFQX0lEWF8xNTkyNjlfMTc1Mzc1NTQwODQ1MyJ9.KPOOyWkEefbVwBBVVFnEhyGj8Sg1cs6UR5W_BhytDv4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 10:17:00 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 10:17:00 [Info] ipc client:Rtap1011753755420_handler Reg client_name:Rtap1011753755420 on WhiteList
2025-07-29 10:17:00 [Info] start rtap process success, pid is 3728, argument is Rtap1011753755420
2025-07-29 10:17:00 [Info] New ClientConnectNotify : Rtap1011753755420, id is 000004F8
2025-07-29 10:17:00 [Info] ipc client:Rtap1011753755420 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 10:17:00 [Info] Rtap Platform Rtap1011753755420 execv work --windows-schedule-task-check on pid 3728
2025-07-29 10:17:01 [Info] csrss.exe open proc 3728 AliSecCheck.ex
2025-07-29 10:17:02 [Info] csrss.exe open thread 3728 AliSecCheck.ex
2025-07-29 10:17:05 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 10:17:05 [Info] ipc client:Rtap1171753755425_handler Reg client_name:Rtap1171753755425 on WhiteList
2025-07-29 10:17:05 [Info] start rtap process success, pid is 1516, argument is Rtap1171753755425
2025-07-29 10:17:05 [Info] New ClientConnectNotify : Rtap1171753755425, id is 000001E4
2025-07-29 10:17:05 [Info] ipc client:Rtap1171753755425 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 10:17:06 [Info] Rtap Platform Rtap1171753755425 execv work --windows-registry-check on pid 1516
2025-07-29 10:17:07 [Info] csrss.exe open proc 1516 AliSecCheck.ex
2025-07-29 10:17:08 [Info] csrss.exe open thread 1516 AliSecCheck.ex
2025-07-29 10:17:45 [Info] Done Work --windows-schedule-task-check:1
2025-07-29 10:17:45 [Info] Rtap Platform Rtap1011753755420 Exit:normal exit
2025-07-29 10:17:46 [Info] GetMessage : T_MSG_CHECK
2025-07-29 10:17:46 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM3NTU0NjYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNzk4NjY2LCJzdWIiOiJSVEFQX0lEWF8xNTkyNzdfMTc1Mzc1NTQ2NjYxNyJ9.2vE90jtIdzQhDXJT871CWmesdPAmMj-kgH8POy7DGzw has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 10:17:48 [Info] Done Work --windows-registry-check:1
2025-07-29 10:17:48 [Info] Rtap Platform Rtap1171753755425 Exit:normal exit
2025-07-29 10:17:48 [Info] ClientDisConnectNotify : Rtap1011753755420, id is 000004F8
2025-07-29 10:17:50 [Info] ClientDisConnectNotify : Rtap1171753755425, id is 000001E4
2025-07-29 10:17:56 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 10:17:56 [Info] ipc client:Rtap2841753755476_handler Reg client_name:Rtap2841753755476 on WhiteList
2025-07-29 10:17:56 [Info] start rtap process success, pid is 3212, argument is Rtap2841753755476
2025-07-29 10:17:57 [Info] New ClientConnectNotify : Rtap2841753755476, id is 000004F4
2025-07-29 10:17:57 [Info] ipc client:Rtap2841753755476 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 10:17:57 [Info] Rtap Platform Rtap2841753755476 execv work --windows-driver-version-check on pid 3212
2025-07-29 10:17:59 [Info] csrss.exe open proc 3212 AliSecCheck.ex
2025-07-29 10:18:00 [Info] csrss.exe open thread 3212 AliSecCheck.ex
2025-07-29 10:18:12 [Info] Done Work --windows-driver-version-check:1
2025-07-29 10:18:12 [Info] Rtap Platform Rtap2841753755476 Exit:normal exit
2025-07-29 10:18:15 [Info] ClientDisConnectNotify : Rtap2841753755476, id is 000004F4
2025-07-29 10:38:49 [Info] TotalPhys:2047,AvailPhys:475,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1255,SelfWorkingSet:9848, SelfPageFile:13628
2025-07-29 10:38:49 [Info] CommitTotal:5349,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:475,SystemCache:319,KernelTotal:264,KernelPaged:187,KernelNonpaged:76,PageSize:4096,HandleCount:27006,ProcessCount:52,ThreadCount:733
2025-07-29 11:05:55 [Info] GetMessage : T_MSG_CHECK
2025-07-29 11:05:55 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM3NTgzNTUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzODAxNTU1LCJzdWIiOiJSVEFQX0lEWF8xNTkyNjZfMTc1Mzc1ODM1NTAyNCJ9.7-JM7dyMZYbDzNVEcYfCdNZh8pEQ0wsJL08Fd2Qh_G8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 11:06:05 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 11:06:05 [Info] ipc client:Rtap97181753758365_handler Reg client_name:Rtap97181753758365 on WhiteList
2025-07-29 11:06:05 [Info] start rtap process success, pid is 684, argument is Rtap97181753758365
2025-07-29 11:06:05 [Info] New ClientConnectNotify : Rtap97181753758365, id is 000001E4
2025-07-29 11:06:05 [Info] ipc client:Rtap97181753758365 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 11:06:06 [Info] Rtap Platform Rtap97181753758365 execv work --windows-autorun-item-check on pid 684
2025-07-29 11:06:06 [Info] csrss.exe open proc 684 AliSecCheck.ex
2025-07-29 11:06:07 [Info] csrss.exe open thread 684 AliSecCheck.ex
2025-07-29 11:06:21 [Info] Done Work --windows-autorun-item-check:1
2025-07-29 11:06:21 [Info] Rtap Platform Rtap97181753758365 Exit:normal exit
2025-07-29 11:06:23 [Info] ClientDisConnectNotify : Rtap97181753758365, id is 000001E4
2025-07-29 11:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9889","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10100","aliyundun_upload_time":"1753758537","aliyundun_write_pid_times":"0","ipc_send_count":"154","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 11:11:31 [Info] nCurrentClock is 1656078800, nCurrentTime is 1753758691
2025-07-29 11:11:31 [Info] SendMessage T_MSG_LOGIN
2025-07-29 11:11:31 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-29 11:11:31 [Info] begin to enable self guard after reconnect
2025-07-29 11:11:31 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-29 11:11:32 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-29 11:11:32 [Info] GetMessage : T_MSG_CHECK
2025-07-29 11:11:32 [Info] task ee5f4b78-8fb3-444a-b009-dcd797712ca5 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 11:11:40 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-29 11:11:40 [Info] key : cpu, value : 10
2025-07-29 11:11:40 [Info] key : rio, value : 20480
2025-07-29 11:11:40 [Info] key : wio, value : 20480
2025-07-29 11:11:40 [Info] key : cpu_all, value : 0
2025-07-29 11:11:40 [Info] key : max_pid_check, value : 200
2025-07-29 11:11:40 [Info] key : throw_dump, value : 0
2025-07-29 11:11:40 [Info] key : hash_mode, value : 1
2025-07-29 11:11:40 [Info] key : mem, value : 200
2025-07-29 11:11:40 [Info] can not find key max_fd in online conf
2025-07-29 11:11:40 [Info] key : proc_limit, value : 1
2025-07-29 11:11:40 [Info] key : resource_limit_mode, value : 3
2025-07-29 11:11:40 [Info] key : rtap_update_mode, value : 1
2025-07-29 11:11:40 [Info] can not find key debug in online conf
2025-07-29 11:11:40 [Info] can not find key update_mode in online conf
2025-07-29 11:11:40 [Info] can not find key http_mode in online conf
2025-07-29 11:11:40 [Info] can not find key rtap_enable in online conf
2025-07-29 11:11:40 [Info] can not find key rtap_new_agent in online conf
2025-07-29 11:11:40 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-29 11:11:40 [Info] can not find key mem_low_mark in online conf
2025-07-29 11:11:40 [Info] can not find key obnormal_report_interval in online conf
2025-07-29 11:11:40 [Info] key : cache_mode, value : 0
2025-07-29 11:11:40 [Info] key : abnormal_monitor_mode, value : 3
2025-07-29 11:11:40 [Info] key : queue_size_ratio, value : 80
2025-07-29 11:11:40 [Info] queue_size_ratio is 80
2025-07-29 11:11:40 [Info] resource limit mode and max limit cpu is not change
2025-07-29 11:11:40 [Info] set hash mode 1
2025-07-29 11:11:40 [Info] RTAP timeout config:9600000
2025-07-29 11:11:40 [Info] self_guard_mode config is 0
2025-07-29 11:11:43 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 11:11:43 [Info] ipc client:Rtap108221753758703_handler Reg client_name:Rtap108221753758703 on WhiteList
2025-07-29 11:11:43 [Info] start rtap process success, pid is 3656, argument is Rtap108221753758703
2025-07-29 11:11:43 [Info] New ClientConnectNotify : Rtap108221753758703, id is 000004B8
2025-07-29 11:11:43 [Info] ipc client:Rtap108221753758703 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 11:11:44 [Info] Rtap Platform Rtap108221753758703 execv work --windows-sysinfoext-check on pid 3656
2025-07-29 11:11:45 [Info] csrss.exe open proc 3656 AliSecCheck.ex
2025-07-29 11:11:46 [Info] csrss.exe open thread 3656 AliSecCheck.ex
2025-07-29 11:11:51 [Info] Done Work --windows-sysinfoext-check:1
2025-07-29 11:11:51 [Info] Rtap Platform Rtap108221753758703 Exit:normal exit
2025-07-29 11:11:53 [Info] ClientDisConnectNotify : Rtap108221753758703, id is 000004B8
2025-07-29 11:39:48 [Info] TotalPhys:2047,AvailPhys:465,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1255,SelfWorkingSet:9872, SelfPageFile:13672
2025-07-29 11:39:48 [Info] CommitTotal:5349,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:465,SystemCache:323,KernelTotal:264,KernelPaged:187,KernelNonpaged:76,PageSize:4096,HandleCount:27155,ProcessCount:53,ThreadCount:732
2025-07-29 12:08:48 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9851","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9892","aliyundun_upload_time":"1753762128","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 12:40:45 [Info] TotalPhys:2047,AvailPhys:452,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1245,SelfWorkingSet:9836, SelfPageFile:13632
2025-07-29 12:40:45 [Info] CommitTotal:5358,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:452,SystemCache:328,KernelTotal:264,KernelPaged:187,KernelNonpaged:76,PageSize:4096,HandleCount:26990,ProcessCount:52,ThreadCount:725
2025-07-29 13:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9818","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9856","aliyundun_upload_time":"1753765742","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 13:23:14 [Info] get meta data success by v2
2025-07-29 13:23:14 [Info] get empty metaserver config
2025-07-29 13:23:14 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-29 13:23:14 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-29 13:23:14 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-29 13:23:14 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-29 13:23:14 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 13:23:14 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 13:23:14 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-29 13:23:14 [Info] download cert compare md5 same
2025-07-29 13:23:14 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 13:23:14 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 13:23:14 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-29 13:41:41 [Info] TotalPhys:2047,AvailPhys:469,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1247,SelfWorkingSet:9800, SelfPageFile:13476
2025-07-29 13:41:41 [Info] CommitTotal:5356,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:469,SystemCache:328,KernelTotal:264,KernelPaged:188,KernelNonpaged:76,PageSize:4096,HandleCount:27026,ProcessCount:52,ThreadCount:737
2025-07-29 14:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9831","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9956","aliyundun_upload_time":"1753769315","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 14:42:38 [Info] TotalPhys:2047,AvailPhys:534,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1260,SelfWorkingSet:9976, SelfPageFile:13680
2025-07-29 14:42:38 [Info] CommitTotal:5344,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:534,SystemCache:175,KernelTotal:254,KernelPaged:178,KernelNonpaged:75,PageSize:4096,HandleCount:27125,ProcessCount:52,ThreadCount:736
2025-07-29 15:08:44 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9940","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10008","aliyundun_upload_time":"1753772924","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 15:43:34 [Info] TotalPhys:2047,AvailPhys:531,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1259,SelfWorkingSet:9972, SelfPageFile:13700
2025-07-29 15:43:34 [Info] CommitTotal:5344,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:531,SystemCache:196,KernelTotal:254,KernelPaged:178,KernelNonpaged:75,PageSize:4096,HandleCount:27029,ProcessCount:52,ThreadCount:731
2025-07-29 16:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9971","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10060","aliyundun_upload_time":"1753776534","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 16:40:21 [Info] nCurrentClock is 1674079400, nCurrentTime is 1753778421
2025-07-29 16:40:21 [Info] SendMessage T_MSG_LOGIN
2025-07-29 16:40:21 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-29 16:40:21 [Info] begin to enable self guard after reconnect
2025-07-29 16:40:21 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-29 16:40:22 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-29 16:40:22 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-29 16:40:22 [Info] key : cpu, value : 10
2025-07-29 16:40:22 [Info] key : rio, value : 20480
2025-07-29 16:40:22 [Info] key : wio, value : 20480
2025-07-29 16:40:22 [Info] key : cpu_all, value : 0
2025-07-29 16:40:22 [Info] key : max_pid_check, value : 200
2025-07-29 16:40:22 [Info] key : throw_dump, value : 0
2025-07-29 16:40:22 [Info] key : hash_mode, value : 1
2025-07-29 16:40:22 [Info] key : mem, value : 200
2025-07-29 16:40:22 [Info] can not find key max_fd in online conf
2025-07-29 16:40:22 [Info] key : proc_limit, value : 1
2025-07-29 16:40:22 [Info] key : resource_limit_mode, value : 3
2025-07-29 16:40:22 [Info] key : rtap_update_mode, value : 1
2025-07-29 16:40:22 [Info] can not find key debug in online conf
2025-07-29 16:40:22 [Info] can not find key update_mode in online conf
2025-07-29 16:40:22 [Info] can not find key http_mode in online conf
2025-07-29 16:40:22 [Info] can not find key rtap_enable in online conf
2025-07-29 16:40:22 [Info] can not find key rtap_new_agent in online conf
2025-07-29 16:40:22 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-29 16:40:22 [Info] can not find key mem_low_mark in online conf
2025-07-29 16:40:22 [Info] can not find key obnormal_report_interval in online conf
2025-07-29 16:40:22 [Info] key : cache_mode, value : 0
2025-07-29 16:40:22 [Info] key : abnormal_monitor_mode, value : 3
2025-07-29 16:40:22 [Info] key : queue_size_ratio, value : 80
2025-07-29 16:40:22 [Info] queue_size_ratio is 80
2025-07-29 16:40:22 [Info] resource limit mode and max limit cpu is not change
2025-07-29 16:40:22 [Info] set hash mode 1
2025-07-29 16:40:22 [Info] RTAP timeout config:9600000
2025-07-29 16:40:22 [Info] self_guard_mode config is 0
2025-07-29 16:40:22 [Info] GetMessage : T_MSG_CHECK
2025-07-29 16:40:22 [Info] task cc143361-f7d5-4b8c-a82d-5c5b8c1bccd8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 16:40:32 [Info] get meta data success by v2
2025-07-29 16:40:32 [Info] get empty metaserver config
2025-07-29 16:40:32 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-29 16:40:33 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-29 16:40:33 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-29 16:40:33 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-29 16:40:33 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 16:40:33 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 16:40:33 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-29 16:40:33 [Info] download cert compare md5 same
2025-07-29 16:40:33 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 16:40:33 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 16:40:33 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-29 16:40:35 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 16:40:35 [Info] ipc client:Rtap97221753778435_handler Reg client_name:Rtap97221753778435 on WhiteList
2025-07-29 16:40:35 [Info] start rtap process success, pid is 2460, argument is Rtap97221753778435
2025-07-29 16:40:37 [Info] csrss.exe open proc 2460 AliSecCheck.ex
2025-07-29 16:40:38 [Info] csrss.exe open thread 2460 AliSecCheck.ex
2025-07-29 16:40:39 [Info] csrss.exe open thread 2460 AliSecCheck.ex
2025-07-29 16:40:40 [Info] New ClientConnectNotify : Rtap97221753778435, id is 000001E4
2025-07-29 16:40:40 [Info] csrss.exe open thread 2460 AliSecCheck.ex
2025-07-29 16:40:40 [Info] Rtap Platform Rtap97221753778435 execv work --windows-sysinfoext-check on pid 2460
2025-07-29 16:40:41 [Info] ipc client:Rtap97221753778435 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 16:40:41 [Info] csrss.exe open thread 2460 AliSecCheck.ex
2025-07-29 16:40:59 [Info] Done Work --windows-sysinfoext-check:1
2025-07-29 16:40:59 [Info] Rtap Platform Rtap97221753778435 Exit:normal exit
2025-07-29 16:41:02 [Info] ClientDisConnectNotify : Rtap97221753778435, id is 000001E4
2025-07-29 16:44:33 [Info] TotalPhys:2047,AvailPhys:515,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6604,AvailPageFile:1245,SelfWorkingSet:9924, SelfPageFile:13740
2025-07-29 16:44:33 [Info] CommitTotal:5358,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:515,SystemCache:250,KernelTotal:255,KernelPaged:180,KernelNonpaged:74,PageSize:4096,HandleCount:27208,ProcessCount:53,ThreadCount:743
2025-07-29 17:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9950","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10068","aliyundun_upload_time":"1753780112","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 17:45:29 [Info] TotalPhys:2047,AvailPhys:514,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1238,SelfWorkingSet:9900, SelfPageFile:13664
2025-07-29 17:45:29 [Info] CommitTotal:5366,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:514,SystemCache:346,KernelTotal:258,KernelPaged:183,KernelNonpaged:75,PageSize:4096,HandleCount:27134,ProcessCount:52,ThreadCount:732
2025-07-29 18:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9875","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9912","aliyundun_upload_time":"1753783722","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 18:46:26 [Info] TotalPhys:2047,AvailPhys:352,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1184,SelfWorkingSet:9876, SelfPageFile:13580
2025-07-29 18:46:26 [Info] CommitTotal:5419,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:352,SystemCache:183,KernelTotal:258,KernelPaged:183,KernelNonpaged:75,PageSize:4096,HandleCount:27173,ProcessCount:52,ThreadCount:734
2025-07-29 19:04:51 [Info] GetMessage : T_MSG_CHECK
2025-07-29 19:04:51 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM3ODcwOTEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzODMwMjkxLCJzdWIiOiJSVEFQX0lEWF8xNTkzMzZfMTc1Mzc4NzA5MTcxNyJ9.VFXj92e-OO5TMbOzyxF_nFJ6hDpf5LU4OSfQuYJ5Auc has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 19:05:01 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 19:05:01 [Info] ipc client:Rtap52541753787101_handler Reg client_name:Rtap52541753787101 on WhiteList
2025-07-29 19:05:01 [Info] start rtap process success, pid is 4300, argument is Rtap52541753787101
2025-07-29 19:05:01 [Info] New ClientConnectNotify : Rtap52541753787101, id is 000004B8
2025-07-29 19:05:01 [Info] ipc client:Rtap52541753787101 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 19:05:02 [Info] Rtap Platform Rtap52541753787101 execv work --secnet_rasp_agent on pid 4300
2025-07-29 19:05:03 [Info] csrss.exe open proc 4300 AliSecCheck.ex
2025-07-29 19:05:04 [Info] csrss.exe open thread 4300 AliSecCheck.ex
2025-07-29 19:05:09 [Info] Done Work --secnet_rasp_agent:1
2025-07-29 19:05:09 [Info] Rtap Platform Rtap52541753787101 Exit:normal exit
2025-07-29 19:05:11 [Info] ClientDisConnectNotify : Rtap52541753787101, id is 000004B8
2025-07-29 19:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9860","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9976","aliyundun_upload_time":"1753787339","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 19:47:22 [Info] TotalPhys:2047,AvailPhys:351,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1187,SelfWorkingSet:9876, SelfPageFile:13568
2025-07-29 19:47:22 [Info] CommitTotal:5416,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:351,SystemCache:184,KernelTotal:258,KernelPaged:183,KernelNonpaged:75,PageSize:4096,HandleCount:27151,ProcessCount:52,ThreadCount:731
2025-07-29 19:57:47 [Info] get meta data success by v2
2025-07-29 19:57:47 [Info] get empty metaserver config
2025-07-29 19:57:47 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-29 19:57:47 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-29 19:57:47 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-29 19:57:47 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-29 19:57:47 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 19:57:47 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 19:57:47 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-29 19:57:47 [Info] download cert compare md5 same
2025-07-29 19:57:47 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 19:57:47 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 19:57:47 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-29 20:08:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9904","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10076","aliyundun_upload_time":"1753790911","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 20:48:19 [Info] TotalPhys:2047,AvailPhys:473,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6732,AvailPageFile:1315,SelfWorkingSet:9864, SelfPageFile:13692
2025-07-29 20:48:19 [Info] CommitTotal:5417,CommitLimit:6732,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:473,SystemCache:234,KernelTotal:253,KernelPaged:178,KernelNonpaged:75,PageSize:4096,HandleCount:27568,ProcessCount:53,ThreadCount:763
2025-07-29 21:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9946","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10060","aliyundun_upload_time":"1753794517","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 21:49:16 [Info] TotalPhys:2047,AvailPhys:380,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6732,AvailPageFile:1306,SelfWorkingSet:9888, SelfPageFile:13508
2025-07-29 21:49:16 [Info] CommitTotal:5425,CommitLimit:6732,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:380,SystemCache:166,KernelTotal:254,KernelPaged:178,KernelNonpaged:75,PageSize:4096,HandleCount:27462,ProcessCount:53,ThreadCount:742
2025-07-29 22:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9851","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9916","aliyundun_upload_time":"1753798118","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 22:09:07 [Info] nCurrentClock is 1692079900, nCurrentTime is 1753798147
2025-07-29 22:09:08 [Info] SendMessage T_MSG_LOGIN
2025-07-29 22:09:08 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-29 22:09:08 [Info] begin to enable self guard after reconnect
2025-07-29 22:09:08 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-29 22:09:08 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-29 22:09:08 [Info] GetMessage : T_MSG_CHECK
2025-07-29 22:09:08 [Info] task e8fa9356-08db-4a55-886a-da10379cdc80 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-29 22:09:16 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-29 22:09:16 [Info] key : cpu, value : 10
2025-07-29 22:09:16 [Info] key : rio, value : 20480
2025-07-29 22:09:16 [Info] key : wio, value : 20480
2025-07-29 22:09:16 [Info] key : cpu_all, value : 0
2025-07-29 22:09:16 [Info] key : max_pid_check, value : 200
2025-07-29 22:09:16 [Info] key : throw_dump, value : 0
2025-07-29 22:09:16 [Info] key : hash_mode, value : 1
2025-07-29 22:09:16 [Info] key : mem, value : 200
2025-07-29 22:09:16 [Info] can not find key max_fd in online conf
2025-07-29 22:09:16 [Info] key : proc_limit, value : 1
2025-07-29 22:09:16 [Info] key : resource_limit_mode, value : 3
2025-07-29 22:09:16 [Info] key : rtap_update_mode, value : 1
2025-07-29 22:09:16 [Info] can not find key debug in online conf
2025-07-29 22:09:16 [Info] can not find key update_mode in online conf
2025-07-29 22:09:16 [Info] can not find key http_mode in online conf
2025-07-29 22:09:16 [Info] can not find key rtap_enable in online conf
2025-07-29 22:09:16 [Info] can not find key rtap_new_agent in online conf
2025-07-29 22:09:16 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-29 22:09:16 [Info] can not find key mem_low_mark in online conf
2025-07-29 22:09:16 [Info] can not find key obnormal_report_interval in online conf
2025-07-29 22:09:16 [Info] key : cache_mode, value : 0
2025-07-29 22:09:16 [Info] key : abnormal_monitor_mode, value : 3
2025-07-29 22:09:16 [Info] key : queue_size_ratio, value : 80
2025-07-29 22:09:16 [Info] queue_size_ratio is 80
2025-07-29 22:09:16 [Info] resource limit mode and max limit cpu is not change
2025-07-29 22:09:16 [Info] set hash mode 1
2025-07-29 22:09:16 [Info] RTAP timeout config:9600000
2025-07-29 22:09:16 [Info] self_guard_mode config is 0
2025-07-29 22:09:16 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-07-29 22:09:21 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-29 22:09:21 [Info] ipc client:Rtap86031753798161_handler Reg client_name:Rtap86031753798161 on WhiteList
2025-07-29 22:09:21 [Info] start rtap process success, pid is 1312, argument is Rtap86031753798161
2025-07-29 22:09:22 [Info] system memory usage is 83
2025-07-29 22:09:22 [Info] system memory usage is 83
2025-07-29 22:09:22 [Info] New ClientConnectNotify : Rtap86031753798161, id is 0000051C
2025-07-29 22:09:22 [Info] ipc client:Rtap86031753798161 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-29 22:09:23 [Info] Rtap Platform Rtap86031753798161 execv work --windows-sysinfoext-check on pid 1312
2025-07-29 22:09:23 [Info] csrss.exe open proc 1312 AliSecCheck.ex
2025-07-29 22:09:24 [Info] csrss.exe open thread 1312 AliSecCheck.ex
2025-07-29 22:09:25 [Info] csrss.exe open thread 1312 AliSecCheck.ex
2025-07-29 22:09:26 [Info] csrss.exe open thread 1312 AliSecCheck.ex
2025-07-29 22:09:27 [Info] csrss.exe open thread 1312 AliSecCheck.ex
2025-07-29 22:09:34 [Info] Done Work --windows-sysinfoext-check:1
2025-07-29 22:09:34 [Info] Rtap Platform Rtap86031753798161 Exit:normal exit
2025-07-29 22:09:36 [Info] ClientDisConnectNotify : Rtap86031753798161, id is 0000051C
2025-07-29 22:50:13 [Info] TotalPhys:2047,AvailPhys:373,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6732,AvailPageFile:1305,SelfWorkingSet:9952, SelfPageFile:13656
2025-07-29 22:50:13 [Info] CommitTotal:5426,CommitLimit:6732,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:373,SystemCache:195,KernelTotal:254,KernelPaged:179,KernelNonpaged:74,PageSize:4096,HandleCount:27388,ProcessCount:53,ThreadCount:734
2025-07-29 23:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9982","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10044","aliyundun_upload_time":"1753801730","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-29 23:15:04 [Info] get meta data success by v2
2025-07-29 23:15:04 [Info] get empty metaserver config
2025-07-29 23:15:04 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-29 23:15:04 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-29 23:15:04 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-29 23:15:04 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-29 23:15:04 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 23:15:04 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-29 23:15:04 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-29 23:15:04 [Info] download cert compare md5 same
2025-07-29 23:15:04 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 23:15:04 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-29 23:15:04 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-29 23:51:10 [Info] TotalPhys:2047,AvailPhys:376,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6732,AvailPageFile:1293,SelfWorkingSet:9916, SelfPageFile:13700
2025-07-29 23:51:10 [Info] CommitTotal:5439,CommitLimit:6732,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:376,SystemCache:130,KernelTotal:253,KernelPaged:178,KernelNonpaged:74,PageSize:4096,HandleCount:27526,ProcessCount:53,ThreadCount:753
2025-07-30 00:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9917","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10112","aliyundun_upload_time":"1753805338","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 00:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10010","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10180","aliyundun_upload_time":"1754323723","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 01:07:44 [Info] TotalPhys:2047,AvailPhys:262,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1256,SelfWorkingSet:9948, SelfPageFile:13684
2025-08-05 01:07:44 [Info] CommitTotal:5339,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:262,SystemCache:86,KernelTotal:269,KernelPaged:189,KernelNonpaged:79,PageSize:4096,HandleCount:27264,ProcessCount:52,ThreadCount:730
2025-08-05 01:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9961","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10088","aliyundun_upload_time":"1754327327","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 01:19:27 [Info] GetMessage : T_MSG_CHECK
2025-08-05 01:19:27 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQzMjc5NjcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0MzcxMTY3LCJzdWIiOiJSVEFQX0lEWF8xNTk4MTdfMTc1NDMyNzk2NzUzNyJ9.Eij_ZUpPSplu8U9ntZNTMTLuTSA9qe5SlFCzo2o1Pxc has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 01:19:40 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 01:19:40 [Info] ipc client:Rtap20651754327980_handler Reg client_name:Rtap20651754327980 on WhiteList
2025-08-05 01:19:40 [Info] start rtap process success, pid is 3952, argument is Rtap20651754327980
2025-08-05 01:19:40 [Info] New ClientConnectNotify : Rtap20651754327980, id is 0000051C
2025-08-05 01:19:40 [Info] ipc client:Rtap20651754327980 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 01:19:40 [Info] Rtap Platform Rtap20651754327980 execv work --sca on pid 3952
2025-08-05 01:19:42 [Info] csrss.exe open proc 3952 AliSecCheck.ex
2025-08-05 01:19:43 [Info] csrss.exe open thread 3952 AliSecCheck.ex
2025-08-05 01:19:44 [Info] csrss.exe open thread 3952 AliSecCheck.ex
2025-08-05 01:20:22 [Info] csrss.exe open thread 3952 AliSecCheck.ex
2025-08-05 01:20:44 [Info] Done Work --sca:1
2025-08-05 01:20:44 [Info] Rtap Platform Rtap20651754327980 Exit:normal exit
2025-08-05 01:20:47 [Info] ClientDisConnectNotify : Rtap20651754327980, id is 0000051C
2025-08-05 02:08:40 [Info] TotalPhys:2047,AvailPhys:266,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1266,SelfWorkingSet:10020, SelfPageFile:13816
2025-08-05 02:08:40 [Info] CommitTotal:5329,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:266,SystemCache:65,KernelTotal:269,KernelPaged:189,KernelNonpaged:79,PageSize:4096,HandleCount:27258,ProcessCount:52,ThreadCount:725
2025-08-05 02:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10047","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10136","aliyundun_upload_time":"1754330932","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 02:17:43 [Info] nCurrentClock is 2178097400, nCurrentTime is 1754331463
2025-08-05 02:17:43 [Info] SendMessage T_MSG_LOGIN
2025-08-05 02:17:44 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-05 02:17:44 [Info] begin to enable self guard after reconnect
2025-08-05 02:17:44 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-05 02:17:44 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-05 02:17:44 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-05 02:17:44 [Info] key : cpu, value : 10
2025-08-05 02:17:44 [Info] key : rio, value : 20480
2025-08-05 02:17:44 [Info] key : wio, value : 20480
2025-08-05 02:17:44 [Info] key : cpu_all, value : 0
2025-08-05 02:17:44 [Info] key : max_pid_check, value : 200
2025-08-05 02:17:44 [Info] key : throw_dump, value : 0
2025-08-05 02:17:44 [Info] key : hash_mode, value : 1
2025-08-05 02:17:44 [Info] key : mem, value : 200
2025-08-05 02:17:44 [Info] can not find key max_fd in online conf
2025-08-05 02:17:44 [Info] key : proc_limit, value : 1
2025-08-05 02:17:44 [Info] key : resource_limit_mode, value : 3
2025-08-05 02:17:44 [Info] key : rtap_update_mode, value : 1
2025-08-05 02:17:44 [Info] can not find key debug in online conf
2025-08-05 02:17:44 [Info] can not find key update_mode in online conf
2025-08-05 02:17:44 [Info] can not find key http_mode in online conf
2025-08-05 02:17:44 [Info] can not find key rtap_enable in online conf
2025-08-05 02:17:44 [Info] can not find key rtap_new_agent in online conf
2025-08-05 02:17:44 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-05 02:17:44 [Info] can not find key mem_low_mark in online conf
2025-08-05 02:17:44 [Info] can not find key obnormal_report_interval in online conf
2025-08-05 02:17:44 [Info] key : cache_mode, value : 0
2025-08-05 02:17:44 [Info] key : abnormal_monitor_mode, value : 3
2025-08-05 02:17:44 [Info] key : queue_size_ratio, value : 80
2025-08-05 02:17:44 [Info] queue_size_ratio is 80
2025-08-05 02:17:44 [Info] resource limit mode and max limit cpu is not change
2025-08-05 02:17:44 [Info] set hash mode 1
2025-08-05 02:17:44 [Info] RTAP timeout config:9600000
2025-08-05 02:17:44 [Info] self_guard_mode config is 0
2025-08-05 02:17:44 [Info] GetMessage : T_MSG_CHECK
2025-08-05 02:17:44 [Info] task 61b2db67-affc-43b5-b872-4d4016563077 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 02:17:53 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-05 02:17:54 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 02:17:54 [Info] ipc client:Rtap134751754331474_handler Reg client_name:Rtap134751754331474 on WhiteList
2025-08-05 02:17:54 [Info] start rtap process success, pid is 4736, argument is Rtap134751754331474
2025-08-05 02:17:54 [Info] New ClientConnectNotify : Rtap134751754331474, id is 00000504
2025-08-05 02:17:54 [Info] ipc client:Rtap134751754331474 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 02:17:55 [Info] Rtap Platform Rtap134751754331474 execv work --windows-sysinfoext-check on pid 4736
2025-08-05 02:17:57 [Info] csrss.exe open proc 4736 AliSecCheck.ex
2025-08-05 02:17:58 [Info] csrss.exe open thread 4736 AliSecCheck.ex
2025-08-05 02:18:06 [Info] Done Work --windows-sysinfoext-check:1
2025-08-05 02:18:06 [Info] Rtap Platform Rtap134751754331474 Exit:normal exit
2025-08-05 02:18:08 [Info] ClientDisConnectNotify : Rtap134751754331474, id is 00000504
2025-08-05 03:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9935","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10176","aliyundun_upload_time":"1754334539","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 03:09:39 [Info] TotalPhys:2047,AvailPhys:277,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1278,SelfWorkingSet:9976, SelfPageFile:13792
2025-08-05 03:09:39 [Info] CommitTotal:5316,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:277,SystemCache:69,KernelTotal:265,KernelPaged:187,KernelNonpaged:78,PageSize:4096,HandleCount:27265,ProcessCount:52,ThreadCount:727
2025-08-05 03:23:44 [Info] get meta data success by v2
2025-08-05 03:23:44 [Info] get empty metaserver config
2025-08-05 03:23:44 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-05 03:23:44 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-05 03:23:44 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-05 03:23:44 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-05 03:23:44 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 03:23:44 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 03:23:44 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-05 03:23:44 [Info] download cert compare md5 same
2025-08-05 03:23:44 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 03:23:44 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 03:23:44 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-05 04:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9910","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10128","aliyundun_upload_time":"1754338119","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"56","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 04:10:36 [Info] TotalPhys:2047,AvailPhys:888,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1288,SelfWorkingSet:9736, SelfPageFile:13404
2025-08-05 04:10:36 [Info] CommitTotal:4547,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:888,SystemCache:29,KernelTotal:254,KernelPaged:178,KernelNonpaged:75,PageSize:4096,HandleCount:27133,ProcessCount:52,ThreadCount:738
2025-08-05 05:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9819","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9888","aliyundun_upload_time":"1754341739","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"57","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 05:11:32 [Info] TotalPhys:2047,AvailPhys:875,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1283,SelfWorkingSet:9828, SelfPageFile:13548
2025-08-05 05:11:32 [Info] CommitTotal:4551,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:875,SystemCache:30,KernelTotal:255,KernelPaged:179,KernelNonpaged:75,PageSize:4096,HandleCount:27116,ProcessCount:52,ThreadCount:731
2025-08-05 06:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9719","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9828","aliyundun_upload_time":"1754345318","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"60","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 06:12:29 [Info] TotalPhys:2047,AvailPhys:814,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1220,SelfWorkingSet:9708, SelfPageFile:13408
2025-08-05 06:12:29 [Info] CommitTotal:4615,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:814,SystemCache:53,KernelTotal:256,KernelPaged:179,KernelNonpaged:76,PageSize:4096,HandleCount:27119,ProcessCount:52,ThreadCount:726
2025-08-05 06:41:18 [Info] get meta data success by v2
2025-08-05 06:41:18 [Info] get empty metaserver config
2025-08-05 06:41:18 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-05 06:41:18 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-05 06:41:18 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-05 06:41:18 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-05 06:41:18 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 06:41:18 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 06:41:18 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-05 06:41:18 [Info] download cert compare md5 same
2025-08-05 06:41:18 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 06:41:18 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 06:41:18 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-05 07:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9790","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"9980","aliyundun_upload_time":"1754348936","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"60","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 07:13:27 [Info] TotalPhys:2047,AvailPhys:818,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1226,SelfWorkingSet:9780, SelfPageFile:13468
2025-08-05 07:13:27 [Info] CommitTotal:4608,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:818,SystemCache:61,KernelTotal:255,KernelPaged:179,KernelNonpaged:75,PageSize:4096,HandleCount:27129,ProcessCount:52,ThreadCount:729
2025-08-05 07:46:50 [Info] nCurrentClock is 2196098000, nCurrentTime is 1754351210
2025-08-05 07:46:50 [Info] SendMessage T_MSG_LOGIN
2025-08-05 07:46:50 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-05 07:46:50 [Info] begin to enable self guard after reconnect
2025-08-05 07:46:50 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-05 07:46:50 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-05 07:46:50 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-05 07:46:50 [Info] key : cpu, value : 10
2025-08-05 07:46:50 [Info] key : rio, value : 20480
2025-08-05 07:46:50 [Info] key : wio, value : 20480
2025-08-05 07:46:50 [Info] key : cpu_all, value : 0
2025-08-05 07:46:50 [Info] key : max_pid_check, value : 200
2025-08-05 07:46:50 [Info] key : throw_dump, value : 0
2025-08-05 07:46:50 [Info] key : hash_mode, value : 1
2025-08-05 07:46:50 [Info] key : mem, value : 200
2025-08-05 07:46:50 [Info] can not find key max_fd in online conf
2025-08-05 07:46:50 [Info] key : proc_limit, value : 1
2025-08-05 07:46:50 [Info] key : resource_limit_mode, value : 3
2025-08-05 07:46:50 [Info] key : rtap_update_mode, value : 1
2025-08-05 07:46:50 [Info] can not find key debug in online conf
2025-08-05 07:46:50 [Info] can not find key update_mode in online conf
2025-08-05 07:46:50 [Info] can not find key http_mode in online conf
2025-08-05 07:46:50 [Info] can not find key rtap_enable in online conf
2025-08-05 07:46:50 [Info] can not find key rtap_new_agent in online conf
2025-08-05 07:46:50 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-05 07:46:50 [Info] can not find key mem_low_mark in online conf
2025-08-05 07:46:50 [Info] can not find key obnormal_report_interval in online conf
2025-08-05 07:46:50 [Info] key : cache_mode, value : 0
2025-08-05 07:46:50 [Info] key : abnormal_monitor_mode, value : 3
2025-08-05 07:46:50 [Info] key : queue_size_ratio, value : 80
2025-08-05 07:46:50 [Info] queue_size_ratio is 80
2025-08-05 07:46:50 [Info] resource limit mode and max limit cpu is not change
2025-08-05 07:46:50 [Info] set hash mode 1
2025-08-05 07:46:50 [Info] RTAP timeout config:9600000
2025-08-05 07:46:50 [Info] self_guard_mode config is 0
2025-08-05 07:46:50 [Info] GetMessage : T_MSG_CHECK
2025-08-05 07:46:50 [Info] task dbc87991-3e3d-4b60-859a-b5a9888a6f48 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 07:47:02 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 07:47:02 [Info] ipc client:Rtap124281754351222_handler Reg client_name:Rtap124281754351222 on WhiteList
2025-08-05 07:47:02 [Info] start rtap process success, pid is 2556, argument is Rtap124281754351222
2025-08-05 07:47:03 [Info] New ClientConnectNotify : Rtap124281754351222, id is 0000051C
2025-08-05 07:47:04 [Info] Rtap Platform Rtap124281754351222 execv work --windows-sysinfoext-check on pid 2556
2025-08-05 07:47:04 [Info] ipc client:Rtap124281754351222 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 07:47:05 [Info] csrss.exe open proc 2556 AliSecCheck.ex
2025-08-05 07:47:06 [Info] csrss.exe open thread 2556 AliSecCheck.ex
2025-08-05 07:47:07 [Info] csrss.exe open thread 2556 AliSecCheck.ex
2025-08-05 07:47:08 [Info] csrss.exe open thread 2556 AliSecCheck.ex
2025-08-05 07:47:09 [Info] csrss.exe open thread 2556 AliSecCheck.ex
2025-08-05 07:47:15 [Info] Done Work --windows-sysinfoext-check:1
2025-08-05 07:47:15 [Info] Rtap Platform Rtap124281754351222 Exit:normal exit
2025-08-05 07:47:17 [Info] ClientDisConnectNotify : Rtap124281754351222, id is 0000051C
2025-08-05 08:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9825","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9876","aliyundun_upload_time":"1754352518","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"60","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 08:14:27 [Info] TotalPhys:2047,AvailPhys:738,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1174,SelfWorkingSet:9856, SelfPageFile:13640
2025-08-05 08:14:27 [Info] CommitTotal:4661,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:738,SystemCache:96,KernelTotal:256,KernelPaged:180,KernelNonpaged:75,PageSize:4096,HandleCount:27366,ProcessCount:53,ThreadCount:738
2025-08-05 08:51:51 [Info] GetMessage : T_MSG_CHECK
2025-08-05 08:51:51 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQzNTUxMTEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0Mzk4MzExLCJzdWIiOiJSVEFQX0lEWF8xNTk4MDhfMTc1NDM1NTExMTk0OSJ9.Vl31xwNQCMPiP-Vvc4JL_KaJ2In34drT0NxGFbwNjn8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 08:52:02 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 08:52:02 [Info] ipc client:Rtap251631754355122_handler Reg client_name:Rtap251631754355122 on WhiteList
2025-08-05 08:52:02 [Info] start rtap process success, pid is 3248, argument is Rtap251631754355122
2025-08-05 08:52:02 [Info] New ClientConnectNotify : Rtap251631754355122, id is 00000504
2025-08-05 08:52:02 [Info] ipc client:Rtap251631754355122 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 08:52:03 [Info] Rtap Platform Rtap251631754355122 execv work --windows-process-check on pid 3248
2025-08-05 08:52:04 [Info] csrss.exe open proc 3248 AliSecCheck.ex
2025-08-05 08:52:05 [Info] csrss.exe open thread 3248 AliSecCheck.ex
2025-08-05 08:52:30 [Info] Done Work --windows-process-check:1
2025-08-05 08:52:30 [Info] Rtap Platform Rtap251631754355122 Exit:normal exit
2025-08-05 08:52:32 [Info] ClientDisConnectNotify : Rtap251631754355122, id is 00000504
2025-08-05 09:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9937","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10272","aliyundun_upload_time":"1754356115","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 09:15:26 [Info] TotalPhys:2047,AvailPhys:728,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1141,SelfWorkingSet:10124, SelfPageFile:14040
2025-08-05 09:15:26 [Info] CommitTotal:4694,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:728,SystemCache:241,KernelTotal:286,KernelPaged:200,KernelNonpaged:86,PageSize:4096,HandleCount:27159,ProcessCount:52,ThreadCount:734
2025-08-05 09:59:30 [Info] GetMessage : T_MSG_CHECK
2025-08-05 09:59:30 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQzNTkxNjksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NDAyMzY5LCJzdWIiOiJSVEFQX0lEWF8xNTk4MDlfMTc1NDM1OTE2OTk1OSJ9.z5AiEMX5G6rg4lo2ez-XU1ntsABN3ML-AapIlkRtrq4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 09:59:40 [Info] get meta data success by v2
2025-08-05 09:59:40 [Info] get empty metaserver config
2025-08-05 09:59:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-05 09:59:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-05 09:59:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-05 09:59:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-05 09:59:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 09:59:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 09:59:40 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-05 09:59:40 [Info] download cert compare md5 same
2025-08-05 09:59:40 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 09:59:40 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 09:59:40 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-05 09:59:41 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 09:59:41 [Info] ipc client:Rtap56501754359181_handler Reg client_name:Rtap56501754359181 on WhiteList
2025-08-05 09:59:41 [Info] start rtap process success, pid is 3820, argument is Rtap56501754359181
2025-08-05 09:59:41 [Info] New ClientConnectNotify : Rtap56501754359181, id is 0000051C
2025-08-05 09:59:42 [Info] ipc client:Rtap56501754359181 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 09:59:42 [Info] Rtap Platform Rtap56501754359181 execv work --tcp-connect-check on pid 3820
2025-08-05 09:59:43 [Info] csrss.exe open proc 3820 AliSecCheck.ex
2025-08-05 09:59:44 [Info] csrss.exe open thread 3820 AliSecCheck.ex
2025-08-05 09:59:53 [Info] Done Work --tcp-connect-check:1
2025-08-05 09:59:53 [Info] Rtap Platform Rtap56501754359181 Exit:normal exit
2025-08-05 09:59:55 [Info] ClientDisConnectNotify : Rtap56501754359181, id is 0000051C
2025-08-05 10:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9974","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10124","aliyundun_upload_time":"1754359731","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 10:16:23 [Info] TotalPhys:2047,AvailPhys:739,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:5835,AvailPageFile:1152,SelfWorkingSet:10160, SelfPageFile:14024
2025-08-05 10:16:23 [Info] CommitTotal:4682,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:739,SystemCache:334,KernelTotal:289,KernelPaged:203,KernelNonpaged:85,PageSize:4096,HandleCount:27175,ProcessCount:52,ThreadCount:740
2025-08-05 10:16:25 [Info] GetMessage : T_MSG_CHECK
2025-08-05 10:16:25 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQzNjAxODUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NDAzMzg1LCJzdWIiOiJSVEFQX0lEWF8xNTk4MTZfMTc1NDM2MDE4NTU0NSJ9.Nu2KSRxGIaJDb1fezoFTwD44HyzK8t3IWLqTMRNAsLo has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 10:16:37 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 10:16:37 [Info] ipc client:Rtap89681754360197_handler Reg client_name:Rtap89681754360197 on WhiteList
2025-08-05 10:16:37 [Info] start rtap process success, pid is 4820, argument is Rtap89681754360197
2025-08-05 10:16:37 [Info] New ClientConnectNotify : Rtap89681754360197, id is 000004F4
2025-08-05 10:16:37 [Info] ipc client:Rtap89681754360197 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 10:16:37 [Info] Rtap Platform Rtap89681754360197 execv work --windows-registry-check on pid 4820
2025-08-05 10:16:38 [Info] csrss.exe open proc 4820 AliSecCheck.ex
2025-08-05 10:16:39 [Info] csrss.exe open thread 4820 AliSecCheck.ex
2025-08-05 10:16:40 [Info] GetMessage : T_MSG_CHECK
2025-08-05 10:16:40 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQzNjAyMDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NDAzNDAwLCJzdWIiOiJSVEFQX0lEWF8xNTk4MTFfMTc1NDM2MDIwMDIwNiJ9.HMRQMXjXYxFyQT18fnEy11HNlITiuEyP0kYtWKh-YD8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 10:16:50 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 10:16:50 [Info] ipc client:Rtap90111754360210_handler Reg client_name:Rtap90111754360210 on WhiteList
2025-08-05 10:16:50 [Info] start rtap process success, pid is 4952, argument is Rtap90111754360210
2025-08-05 10:16:50 [Info] New ClientConnectNotify : Rtap90111754360210, id is 00000504
2025-08-05 10:16:50 [Info] ipc client:Rtap90111754360210 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 10:16:51 [Info] Rtap Platform Rtap90111754360210 execv work --windows-schedule-task-check on pid 4952
2025-08-05 10:16:51 [Info] csrss.exe open proc 4952 AliSecCheck.ex
2025-08-05 10:16:52 [Info] csrss.exe open thread 4952 AliSecCheck.ex
2025-08-05 10:17:14 [Info] Done Work --windows-registry-check:1
2025-08-05 10:17:14 [Info] Rtap Platform Rtap89681754360197 Exit:normal exit
2025-08-05 10:17:16 [Info] ClientDisConnectNotify : Rtap89681754360197, id is 000004F4
2025-08-05 10:17:28 [Info] Done Work --windows-schedule-task-check:1
2025-08-05 10:17:28 [Info] Rtap Platform Rtap90111754360210 Exit:normal exit
2025-08-05 10:17:30 [Info] ClientDisConnectNotify : Rtap90111754360210, id is 00000504
2025-08-05 10:17:59 [Info] GetMessage : T_MSG_CHECK
2025-08-05 10:17:59 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQzNjAyNzksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NDAzNDc5LCJzdWIiOiJSVEFQX0lEWF8xNTk4MjRfMTc1NDM2MDI3OTgwMyJ9.odF3rIcX08qlaWwIpVu4x2IMdmR6LljpvtI2UV73QBM has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 10:18:09 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 10:18:09 [Info] ipc client:Rtap92691754360289_handler Reg client_name:Rtap92691754360289 on WhiteList
2025-08-05 10:18:09 [Info] start rtap process success, pid is 3724, argument is Rtap92691754360289
2025-08-05 10:18:09 [Info] New ClientConnectNotify : Rtap92691754360289, id is 000004DC
2025-08-05 10:18:09 [Info] ipc client:Rtap92691754360289 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 10:18:09 [Info] Rtap Platform Rtap92691754360289 execv work --windows-driver-version-check on pid 3724
2025-08-05 10:18:12 [Info] csrss.exe open proc 3724 AliSecCheck.ex
2025-08-05 10:18:13 [Info] csrss.exe open thread 3724 AliSecCheck.ex
2025-08-05 10:18:16 [Info] Done Work --windows-driver-version-check:1
2025-08-05 10:18:16 [Info] Rtap Platform Rtap92691754360289 Exit:normal exit
2025-08-05 10:18:19 [Info] ClientDisConnectNotify : Rtap92691754360289, id is 000004DC
2025-08-05 11:05:53 [Info] GetMessage : T_MSG_CHECK
2025-08-05 11:05:53 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQzNjMxNTMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NDA2MzUzLCJzdWIiOiJSVEFQX0lEWF8xNTk4MTNfMTc1NDM2MzE1MzQ0MSJ9.6gmZ9BVhD86_-DlUgRRwcPP2tTqpUAAvvgdpzsql4WQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 11:06:05 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 11:06:05 [Info] ipc client:Rtap186601754363165_handler Reg client_name:Rtap186601754363165 on WhiteList
2025-08-05 11:06:05 [Info] start rtap process success, pid is 4420, argument is Rtap186601754363165
2025-08-05 11:06:05 [Info] New ClientConnectNotify : Rtap186601754363165, id is 00000504
2025-08-05 11:06:05 [Info] ipc client:Rtap186601754363165 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 11:06:06 [Info] Rtap Platform Rtap186601754363165 execv work --windows-autorun-item-check on pid 4420
2025-08-05 11:06:07 [Info] csrss.exe open proc 4420 AliSecCheck.ex
2025-08-05 11:06:08 [Info] csrss.exe open thread 4420 AliSecCheck.ex
2025-08-05 11:06:21 [Info] Done Work --windows-autorun-item-check:1
2025-08-05 11:06:21 [Info] Rtap Platform Rtap186601754363165 Exit:normal exit
2025-08-05 11:06:23 [Info] ClientDisConnectNotify : Rtap186601754363165, id is 00000504
2025-08-05 11:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10051","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10268","aliyundun_upload_time":"1754363312","aliyundun_write_pid_times":"0","ipc_send_count":"152","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 11:17:20 [Info] TotalPhys:2047,AvailPhys:725,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1138,SelfWorkingSet:10164, SelfPageFile:14076
2025-08-05 11:17:20 [Info] CommitTotal:4696,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:725,SystemCache:387,KernelTotal:292,KernelPaged:206,KernelNonpaged:86,PageSize:4096,HandleCount:27139,ProcessCount:52,ThreadCount:730
2025-08-05 12:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10054","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10164","aliyundun_upload_time":"1754366937","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 12:18:17 [Info] TotalPhys:2047,AvailPhys:678,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1096,SelfWorkingSet:9900, SelfPageFile:13536
2025-08-05 12:18:17 [Info] CommitTotal:4738,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:678,SystemCache:391,KernelTotal:293,KernelPaged:206,KernelNonpaged:86,PageSize:4096,HandleCount:27177,ProcessCount:52,ThreadCount:734
2025-08-05 13:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9997","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10088","aliyundun_upload_time":"1754370542","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 13:16:53 [Info] nCurrentClock is 2214098500, nCurrentTime is 1754371013
2025-08-05 13:16:53 [Info] SendMessage T_MSG_LOGIN
2025-08-05 13:16:53 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-05 13:16:53 [Info] begin to enable self guard after reconnect
2025-08-05 13:16:53 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-05 13:16:53 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-05 13:16:53 [Info] GetMessage : T_MSG_CHECK
2025-08-05 13:16:53 [Info] task c738f3b4-d16c-4658-a54f-da8b9c0775dc has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 13:17:01 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-05 13:17:01 [Info] key : cpu, value : 10
2025-08-05 13:17:01 [Info] key : rio, value : 20480
2025-08-05 13:17:01 [Info] key : wio, value : 20480
2025-08-05 13:17:01 [Info] key : cpu_all, value : 0
2025-08-05 13:17:01 [Info] key : max_pid_check, value : 200
2025-08-05 13:17:01 [Info] key : throw_dump, value : 0
2025-08-05 13:17:01 [Info] key : hash_mode, value : 1
2025-08-05 13:17:01 [Info] key : mem, value : 200
2025-08-05 13:17:01 [Info] can not find key max_fd in online conf
2025-08-05 13:17:01 [Info] key : proc_limit, value : 1
2025-08-05 13:17:01 [Info] key : resource_limit_mode, value : 3
2025-08-05 13:17:01 [Info] key : rtap_update_mode, value : 1
2025-08-05 13:17:01 [Info] can not find key debug in online conf
2025-08-05 13:17:01 [Info] can not find key update_mode in online conf
2025-08-05 13:17:01 [Info] can not find key http_mode in online conf
2025-08-05 13:17:01 [Info] can not find key rtap_enable in online conf
2025-08-05 13:17:01 [Info] can not find key rtap_new_agent in online conf
2025-08-05 13:17:01 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-05 13:17:01 [Info] can not find key mem_low_mark in online conf
2025-08-05 13:17:01 [Info] can not find key obnormal_report_interval in online conf
2025-08-05 13:17:01 [Info] key : cache_mode, value : 0
2025-08-05 13:17:01 [Info] key : abnormal_monitor_mode, value : 3
2025-08-05 13:17:01 [Info] key : queue_size_ratio, value : 80
2025-08-05 13:17:01 [Info] queue_size_ratio is 80
2025-08-05 13:17:01 [Info] resource limit mode and max limit cpu is not change
2025-08-05 13:17:01 [Info] set hash mode 1
2025-08-05 13:17:01 [Info] RTAP timeout config:9600000
2025-08-05 13:17:01 [Info] self_guard_mode config is 0
2025-08-05 13:17:06 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 13:17:06 [Info] ipc client:Rtap115631754371026_handler Reg client_name:Rtap115631754371026 on WhiteList
2025-08-05 13:17:06 [Info] start rtap process success, pid is 3276, argument is Rtap115631754371026
2025-08-05 13:17:06 [Info] New ClientConnectNotify : Rtap115631754371026, id is 000004B8
2025-08-05 13:17:06 [Info] ipc client:Rtap115631754371026 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 13:17:06 [Info] Rtap Platform Rtap115631754371026 execv work --windows-sysinfoext-check on pid 3276
2025-08-05 13:17:07 [Info] csrss.exe open proc 3276 AliSecCheck.ex
2025-08-05 13:17:08 [Info] csrss.exe open thread 3276 AliSecCheck.ex
2025-08-05 13:17:13 [Info] get meta data success by v2
2025-08-05 13:17:13 [Info] get empty metaserver config
2025-08-05 13:17:13 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-05 13:17:13 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-05 13:17:13 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-05 13:17:13 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-05 13:17:13 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 13:17:13 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 13:17:13 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-05 13:17:13 [Info] download cert compare md5 same
2025-08-05 13:17:13 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 13:17:13 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 13:17:13 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-05 13:17:14 [Info] Done Work --windows-sysinfoext-check:1
2025-08-05 13:17:14 [Info] Rtap Platform Rtap115631754371026 Exit:normal exit
2025-08-05 13:17:16 [Info] ClientDisConnectNotify : Rtap115631754371026, id is 000004B8
2025-08-05 13:19:16 [Info] TotalPhys:2047,AvailPhys:666,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:5835,AvailPageFile:1082,SelfWorkingSet:10112, SelfPageFile:14028
2025-08-05 13:19:16 [Info] CommitTotal:4752,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:666,SystemCache:387,KernelTotal:293,KernelPaged:206,KernelNonpaged:86,PageSize:4096,HandleCount:27373,ProcessCount:53,ThreadCount:745
2025-08-05 14:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9901","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"10112","aliyundun_upload_time":"1754374121","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 14:20:13 [Info] TotalPhys:2047,AvailPhys:667,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1081,SelfWorkingSet:10004, SelfPageFile:13892
2025-08-05 14:20:13 [Info] CommitTotal:4753,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:667,SystemCache:391,KernelTotal:294,KernelPaged:207,KernelNonpaged:87,PageSize:4096,HandleCount:27148,ProcessCount:52,ThreadCount:729
2025-08-05 15:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9953","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10012","aliyundun_upload_time":"1754377729","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 15:21:09 [Info] TotalPhys:2047,AvailPhys:655,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1068,SelfWorkingSet:10016, SelfPageFile:13712
2025-08-05 15:21:09 [Info] CommitTotal:4767,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:655,SystemCache:394,KernelTotal:295,KernelPaged:208,KernelNonpaged:87,PageSize:4096,HandleCount:27148,ProcessCount:52,ThreadCount:727
2025-08-05 16:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9970","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10024","aliyundun_upload_time":"1754381339","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 16:22:06 [Info] TotalPhys:2047,AvailPhys:650,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5835,AvailPageFile:1080,SelfWorkingSet:10012, SelfPageFile:13736
2025-08-05 16:22:06 [Info] CommitTotal:4754,CommitLimit:5835,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:650,SystemCache:395,KernelTotal:294,KernelPaged:208,KernelNonpaged:86,PageSize:4096,HandleCount:27144,ProcessCount:52,ThreadCount:728
2025-08-05 16:34:36 [Info] get meta data success by v2
2025-08-05 16:34:36 [Info] get empty metaserver config
2025-08-05 16:34:36 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-05 16:34:36 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-05 16:34:36 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-05 16:34:36 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-05 16:34:36 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 16:34:36 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 16:34:37 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-05 16:34:37 [Info] download cert compare md5 same
2025-08-05 16:34:37 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 16:34:37 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 16:34:37 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-05 17:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9991","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"10152","aliyundun_upload_time":"1754384917","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 17:23:03 [Info] TotalPhys:2047,AvailPhys:622,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6203,AvailPageFile:1406,SelfWorkingSet:9996, SelfPageFile:13724
2025-08-05 17:23:03 [Info] CommitTotal:4796,CommitLimit:6203,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:622,SystemCache:141,KernelTotal:275,KernelPaged:192,KernelNonpaged:82,PageSize:4096,HandleCount:27450,ProcessCount:52,ThreadCount:752
2025-08-05 18:08:48 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9961","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10056","aliyundun_upload_time":"1754388528","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 18:24:00 [Info] TotalPhys:2047,AvailPhys:648,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6203,AvailPageFile:1434,SelfWorkingSet:9904, SelfPageFile:13620
2025-08-05 18:24:00 [Info] CommitTotal:4769,CommitLimit:6203,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:648,SystemCache:260,KernelTotal:277,KernelPaged:196,KernelNonpaged:81,PageSize:4096,HandleCount:27182,ProcessCount:52,ThreadCount:735
2025-08-05 18:45:56 [Info] nCurrentClock is 2232099000, nCurrentTime is 1754390756
2025-08-05 18:45:56 [Info] SendMessage T_MSG_LOGIN
2025-08-05 18:45:56 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-05 18:45:56 [Info] begin to enable self guard after reconnect
2025-08-05 18:45:56 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-05 18:45:57 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-05 18:45:57 [Info] GetMessage : T_MSG_CHECK
2025-08-05 18:45:57 [Info] task eb88e42f-d1f8-4cb0-9bd3-b6007e43cc9c has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 18:46:05 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-05 18:46:05 [Info] key : cpu, value : 10
2025-08-05 18:46:05 [Info] key : rio, value : 20480
2025-08-05 18:46:05 [Info] key : wio, value : 20480
2025-08-05 18:46:05 [Info] key : cpu_all, value : 0
2025-08-05 18:46:05 [Info] key : max_pid_check, value : 200
2025-08-05 18:46:05 [Info] key : throw_dump, value : 0
2025-08-05 18:46:05 [Info] key : hash_mode, value : 1
2025-08-05 18:46:05 [Info] key : mem, value : 200
2025-08-05 18:46:05 [Info] can not find key max_fd in online conf
2025-08-05 18:46:05 [Info] key : proc_limit, value : 1
2025-08-05 18:46:05 [Info] key : resource_limit_mode, value : 3
2025-08-05 18:46:05 [Info] key : rtap_update_mode, value : 1
2025-08-05 18:46:05 [Info] can not find key debug in online conf
2025-08-05 18:46:05 [Info] can not find key update_mode in online conf
2025-08-05 18:46:05 [Info] can not find key http_mode in online conf
2025-08-05 18:46:05 [Info] can not find key rtap_enable in online conf
2025-08-05 18:46:05 [Info] can not find key rtap_new_agent in online conf
2025-08-05 18:46:05 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-05 18:46:05 [Info] can not find key mem_low_mark in online conf
2025-08-05 18:46:05 [Info] can not find key obnormal_report_interval in online conf
2025-08-05 18:46:05 [Info] key : cache_mode, value : 0
2025-08-05 18:46:05 [Info] key : abnormal_monitor_mode, value : 3
2025-08-05 18:46:05 [Info] key : queue_size_ratio, value : 80
2025-08-05 18:46:05 [Info] queue_size_ratio is 80
2025-08-05 18:46:05 [Info] resource limit mode and max limit cpu is not change
2025-08-05 18:46:05 [Info] set hash mode 1
2025-08-05 18:46:05 [Info] RTAP timeout config:9600000
2025-08-05 18:46:05 [Info] self_guard_mode config is 0
2025-08-05 18:46:05 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-05 18:46:10 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 18:46:10 [Info] ipc client:Rtap105031754390770_handler Reg client_name:Rtap105031754390770 on WhiteList
2025-08-05 18:46:10 [Info] start rtap process success, pid is 4380, argument is Rtap105031754390770
2025-08-05 18:46:11 [Info] New ClientConnectNotify : Rtap105031754390770, id is 00000504
2025-08-05 18:46:11 [Info] Rtap Platform Rtap105031754390770 execv work --windows-sysinfoext-check on pid 4380
2025-08-05 18:46:11 [Info] ipc client:Rtap105031754390770 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 18:46:12 [Info] csrss.exe open proc 4380 AliSecCheck.ex
2025-08-05 18:46:13 [Info] csrss.exe open thread 4380 AliSecCheck.ex
2025-08-05 18:46:14 [Info] csrss.exe open thread 4380 AliSecCheck.ex
2025-08-05 18:46:15 [Info] csrss.exe open thread 4380 AliSecCheck.ex
2025-08-05 18:46:16 [Info] csrss.exe open thread 4380 AliSecCheck.ex
2025-08-05 18:46:22 [Info] Done Work --windows-sysinfoext-check:1
2025-08-05 18:46:22 [Info] Rtap Platform Rtap105031754390770 Exit:normal exit
2025-08-05 18:46:24 [Info] ClientDisConnectNotify : Rtap105031754390770, id is 00000504
2025-08-05 19:02:34 [Info] GetMessage : T_MSG_CHECK
2025-08-05 19:02:34 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQzOTE3NTQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NDM0OTU0LCJzdWIiOiJSVEFQX0lEWF8xNTk4ODNfMTc1NDM5MTc1NDAzNCJ9.gLQWsSS_RVG7ax2QX_ob5LXew8yCl1n6OEgoeaLK-Uw has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 19:02:45 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 19:02:45 [Info] ipc client:Rtap137521754391765_handler Reg client_name:Rtap137521754391765 on WhiteList
2025-08-05 19:02:45 [Info] start rtap process success, pid is 3084, argument is Rtap137521754391765
2025-08-05 19:02:45 [Info] New ClientConnectNotify : Rtap137521754391765, id is 0000051C
2025-08-05 19:02:45 [Info] ipc client:Rtap137521754391765 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 19:02:46 [Info] Rtap Platform Rtap137521754391765 execv work --secnet_rasp_agent on pid 3084
2025-08-05 19:02:48 [Info] csrss.exe open proc 3084 AliSecCheck.ex
2025-08-05 19:02:49 [Info] csrss.exe open thread 3084 AliSecCheck.ex
2025-08-05 19:02:53 [Info] Done Work --secnet_rasp_agent:1
2025-08-05 19:02:53 [Info] Rtap Platform Rtap137521754391765 Exit:normal exit
2025-08-05 19:02:55 [Info] ClientDisConnectNotify : Rtap137521754391765, id is 0000051C
2025-08-05 19:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9933","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10048","aliyundun_upload_time":"1754392142","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 19:15:11 [Info] GetMessage : T_MSG_CHECK
2025-08-05 19:15:11 [Info] task 2b3d2319feda7a18104104c3b6c6b073 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-05 19:15:20 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-05 19:15:20 [Info] ipc client:Rtap162181754392520_handler Reg client_name:Rtap162181754392520 on WhiteList
2025-08-05 19:15:20 [Info] start rtap process success, pid is 4880, argument is Rtap162181754392520
2025-08-05 19:15:20 [Info] New ClientConnectNotify : Rtap162181754392520, id is 00000504
2025-08-05 19:15:21 [Info] Rtap Platform Rtap162181754392520 execv work --windows-vul-check on pid 4880
2025-08-05 19:15:22 [Info] ipc client:Rtap162181754392520 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-05 19:15:23 [Info] csrss.exe open proc 4880 AliSecCheck.ex
2025-08-05 19:15:24 [Info] csrss.exe open thread 4880 AliSecCheck.ex
2025-08-05 19:15:40 [Info] Done Work --windows-vul-check:1
2025-08-05 19:15:40 [Info] Rtap Platform Rtap162181754392520 Exit:normal exit
2025-08-05 19:15:43 [Info] ClientDisConnectNotify : Rtap162181754392520, id is 00000504
2025-08-05 19:24:58 [Info] TotalPhys:2047,AvailPhys:651,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6203,AvailPageFile:1428,SelfWorkingSet:9932, SelfPageFile:13704
2025-08-05 19:24:58 [Info] CommitTotal:4775,CommitLimit:6203,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:651,SystemCache:306,KernelTotal:278,KernelPaged:196,KernelNonpaged:81,PageSize:4096,HandleCount:27205,ProcessCount:52,ThreadCount:736
2025-08-05 19:52:02 [Info] get meta data success by v2
2025-08-05 19:52:02 [Info] get empty metaserver config
2025-08-05 19:52:02 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-05 19:52:02 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-05 19:52:02 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-05 19:52:02 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-05 19:52:02 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 19:52:02 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 19:52:03 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-05 19:52:03 [Info] download cert compare md5 same
2025-08-05 19:52:03 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 19:52:03 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 19:52:03 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-05 20:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9945","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10048","aliyundun_upload_time":"1754395718","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 20:25:55 [Info] TotalPhys:2047,AvailPhys:537,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6203,AvailPageFile:1278,SelfWorkingSet:9932, SelfPageFile:13660
2025-08-05 20:25:55 [Info] CommitTotal:4925,CommitLimit:6203,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:537,SystemCache:310,KernelTotal:278,KernelPaged:196,KernelNonpaged:81,PageSize:4096,HandleCount:27243,ProcessCount:52,ThreadCount:736
2025-08-05 21:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9948","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10012","aliyundun_upload_time":"1754399334","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 21:26:52 [Info] TotalPhys:2047,AvailPhys:501,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6203,AvailPageFile:1237,SelfWorkingSet:10000, SelfPageFile:13736
2025-08-05 21:26:52 [Info] CommitTotal:4966,CommitLimit:6203,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:501,SystemCache:252,KernelTotal:277,KernelPaged:196,KernelNonpaged:81,PageSize:4096,HandleCount:27522,ProcessCount:53,ThreadCount:739
2025-08-05 22:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9984","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10036","aliyundun_upload_time":"1754402923","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-05 22:27:49 [Info] TotalPhys:2047,AvailPhys:469,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6203,AvailPageFile:1204,SelfWorkingSet:10024, SelfPageFile:13752
2025-08-05 22:27:49 [Info] CommitTotal:4998,CommitLimit:6203,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:469,SystemCache:252,KernelTotal:278,KernelPaged:196,KernelNonpaged:81,PageSize:4096,HandleCount:27507,ProcessCount:53,ThreadCount:737
2025-08-05 23:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10014","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10092","aliyundun_upload_time":"1754406534","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-08-05 23:09:23 [Info] get meta data success by v2
2025-08-05 23:09:23 [Info] get empty metaserver config
2025-08-05 23:09:23 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-05 23:09:23 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-05 23:09:23 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-05 23:09:23 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-05 23:09:23 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 23:09:23 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-05 23:09:24 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-05 23:09:24 [Info] download cert compare md5 same
2025-08-05 23:09:24 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 23:09:24 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-05 23:09:24 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-05 23:28:48 [Info] TotalPhys:2047,AvailPhys:448,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6203,AvailPageFile:1209,SelfWorkingSet:10140, SelfPageFile:14020
2025-08-05 23:28:48 [Info] CommitTotal:4994,CommitLimit:6203,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:448,SystemCache:281,KernelTotal:278,KernelPaged:196,KernelNonpaged:81,PageSize:4096,HandleCount:27534,ProcessCount:53,ThreadCount:740
2025-08-06 00:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10084","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10164","aliyundun_upload_time":"1754410117","aliyundun_write_pid_times":"0","ipc_send_count":"132","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-06 00:15:33 [Info] nCurrentClock is 2250099600, nCurrentTime is 1754410533
2025-08-06 00:15:33 [Info] SendMessage T_MSG_LOGIN
2025-08-06 00:15:33 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-06 00:15:33 [Info] begin to enable self guard after reconnect
2025-08-06 00:15:33 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-06 00:15:33 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-06 00:15:33 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-06 00:15:33 [Info] key : cpu, value : 10
2025-08-06 00:15:33 [Info] key : rio, value : 20480
2025-08-06 00:15:33 [Info] key : wio, value : 20480
2025-08-06 00:15:33 [Info] key : cpu_all, value : 0
2025-08-06 00:15:33 [Info] key : max_pid_check, value : 200
2025-08-06 00:15:33 [Info] key : throw_dump, value : 0
2025-08-06 00:15:33 [Info] key : hash_mode, value : 1
2025-08-06 00:15:33 [Info] key : mem, value : 200
2025-08-06 00:15:33 [Info] can not find key max_fd in online conf
2025-08-06 00:15:33 [Info] key : proc_limit, value : 1
2025-08-06 00:15:33 [Info] key : resource_limit_mode, value : 3
2025-08-06 00:15:33 [Info] key : rtap_update_mode, value : 1
2025-08-06 00:15:33 [Info] can not find key debug in online conf
2025-08-06 00:15:33 [Info] can not find key update_mode in online conf
2025-08-06 00:15:33 [Info] can not find key http_mode in online conf
2025-08-06 00:15:33 [Info] can not find key rtap_enable in online conf
2025-08-06 00:15:33 [Info] can not find key rtap_new_agent in online conf
2025-08-06 00:15:33 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-06 00:15:33 [Info] can not find key mem_low_mark in online conf
2025-08-06 00:15:33 [Info] can not find key obnormal_report_interval in online conf
2025-08-06 00:15:33 [Info] key : cache_mode, value : 0
2025-08-06 00:15:33 [Info] key : abnormal_monitor_mode, value : 3
2025-08-06 00:15:33 [Info] key : queue_size_ratio, value : 80
2025-08-06 00:15:33 [Info] queue_size_ratio is 80
2025-08-06 00:15:33 [Info] resource limit mode and max limit cpu is not change
2025-08-06 00:15:33 [Info] set hash mode 1
2025-08-06 00:15:33 [Info] RTAP timeout config:9600000
2025-08-06 00:15:33 [Info] self_guard_mode config is 0
2025-08-06 00:15:34 [Info] GetMessage : T_MSG_CHECK
2025-08-06 00:15:34 [Info] task 48df5cba-df06-427c-9593-a5e29751285c has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-06 00:15:45 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-06 00:15:45 [Info] ipc client:Rtap95441754410545_handler Reg client_name:Rtap95441754410545 on WhiteList
2025-08-06 00:15:45 [Info] start rtap process success, pid is 4480, argument is Rtap95441754410545
2025-08-06 00:15:45 [Info] New ClientConnectNotify : Rtap95441754410545, id is 0000051C
2025-08-06 00:15:45 [Info] ipc client:Rtap95441754410545 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-06 00:15:45 [Info] Rtap Platform Rtap95441754410545 execv work --windows-sysinfoext-check on pid 4480
2025-08-06 00:15:47 [Info] csrss.exe open proc 4480 AliSecCheck.ex
2025-08-06 00:15:48 [Info] csrss.exe open thread 4480 AliSecCheck.ex
2025-08-06 00:15:53 [Info] Done Work --windows-sysinfoext-check:1
2025-08-06 00:15:53 [Info] Rtap Platform Rtap95441754410545 Exit:normal exit
2025-08-06 00:15:55 [Info] ClientDisConnectNotify : Rtap95441754410545, id is 0000051C
2025-08-12 00:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9917","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10016","aliyundun_upload_time":"1754928523","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 00:45:35 [Info] TotalPhys:2047,AvailPhys:469,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6629,AvailPageFile:1359,SelfWorkingSet:9852, SelfPageFile:13628
2025-08-12 00:45:35 [Info] CommitTotal:5269,CommitLimit:6629,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:469,SystemCache:202,KernelTotal:259,KernelPaged:182,KernelNonpaged:77,PageSize:4096,HandleCount:27759,ProcessCount:53,ThreadCount:737
2025-08-12 01:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9855","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9896","aliyundun_upload_time":"1754932129","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 01:18:48 [Info] GetMessage : T_MSG_CHECK
2025-08-12 01:18:48 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ5MzI3MjgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0OTc1OTI4LCJzdWIiOiJSVEFQX0lEWF8xNjAzNjRfMTc1NDkzMjcyODA0NyJ9.I5pV2R3Yh6UxEzHY5zFCw0HR0c_td8YU9I6Jn8Ltk1w has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 01:18:59 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 01:18:59 [Info] ipc client:Rtap108731754932739_handler Reg client_name:Rtap108731754932739 on WhiteList
2025-08-12 01:18:59 [Info] start rtap process success, pid is 1220, argument is Rtap108731754932739
2025-08-12 01:18:59 [Info] New ClientConnectNotify : Rtap108731754932739, id is 00000540
2025-08-12 01:18:59 [Info] ipc client:Rtap108731754932739 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 01:18:59 [Info] Rtap Platform Rtap108731754932739 execv work --sca on pid 1220
2025-08-12 01:19:01 [Info] csrss.exe open proc 1220 AliSecCheck.ex
2025-08-12 01:19:02 [Info] csrss.exe open thread 1220 AliSecCheck.ex
2025-08-12 01:19:42 [Info] csrss.exe open thread 1220 AliSecCheck.ex
2025-08-12 01:20:03 [Info] Done Work --sca:1
2025-08-12 01:20:03 [Info] Rtap Platform Rtap108731754932739 Exit:normal exit
2025-08-12 01:20:05 [Info] ClientDisConnectNotify : Rtap108731754932739, id is 00000540
2025-08-12 01:46:32 [Info] TotalPhys:2047,AvailPhys:290,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6629,AvailPageFile:1315,SelfWorkingSet:9920, SelfPageFile:13576
2025-08-12 01:46:32 [Info] CommitTotal:5313,CommitLimit:6629,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:290,SystemCache:79,KernelTotal:260,KernelPaged:182,KernelNonpaged:77,PageSize:4096,HandleCount:27822,ProcessCount:53,ThreadCount:738
2025-08-12 02:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9906","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9980","aliyundun_upload_time":"1754935742","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 02:47:28 [Info] TotalPhys:2047,AvailPhys:731,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1155,SelfWorkingSet:10116, SelfPageFile:14084
2025-08-12 02:47:28 [Info] CommitTotal:4730,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:731,SystemCache:4194303,KernelTotal:256,KernelPaged:179,KernelNonpaged:77,PageSize:4096,HandleCount:27630,ProcessCount:53,ThreadCount:739
2025-08-12 03:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10033","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10120","aliyundun_upload_time":"1754939314","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 03:19:37 [Info] get meta data success by v2
2025-08-12 03:19:37 [Info] get empty metaserver config
2025-08-12 03:19:37 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-12 03:19:37 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-12 03:19:37 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-12 03:19:37 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-12 03:19:37 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 03:19:37 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 03:19:37 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-12 03:19:37 [Info] download cert compare md5 same
2025-08-12 03:19:37 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 03:19:37 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 03:19:38 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-12 03:48:24 [Info] TotalPhys:2047,AvailPhys:723,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1146,SelfWorkingSet:9820, SelfPageFile:13552
2025-08-12 03:48:24 [Info] CommitTotal:4738,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:723,SystemCache:66,KernelTotal:259,KernelPaged:182,KernelNonpaged:77,PageSize:4096,HandleCount:27621,ProcessCount:53,ThreadCount:734
2025-08-12 04:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9919","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10084","aliyundun_upload_time":"1754942919","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 04:24:58 [Info] nCurrentClock is 2736122000, nCurrentTime is 1754943898
2025-08-12 04:24:58 [Info] SendMessage T_MSG_LOGIN
2025-08-12 04:24:58 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-12 04:24:58 [Info] begin to enable self guard after reconnect
2025-08-12 04:24:58 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-12 04:24:58 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-12 04:24:58 [Info] GetMessage : T_MSG_CHECK
2025-08-12 04:24:58 [Info] task f0eb2b53-7bb4-4156-9f05-1b4ce020adfd has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 04:25:07 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-12 04:25:07 [Info] key : cpu, value : 10
2025-08-12 04:25:07 [Info] key : rio, value : 20480
2025-08-12 04:25:07 [Info] key : wio, value : 20480
2025-08-12 04:25:07 [Info] key : cpu_all, value : 0
2025-08-12 04:25:07 [Info] key : max_pid_check, value : 200
2025-08-12 04:25:07 [Info] key : throw_dump, value : 0
2025-08-12 04:25:07 [Info] key : hash_mode, value : 1
2025-08-12 04:25:07 [Info] key : mem, value : 200
2025-08-12 04:25:07 [Info] can not find key max_fd in online conf
2025-08-12 04:25:07 [Info] key : proc_limit, value : 1
2025-08-12 04:25:07 [Info] key : resource_limit_mode, value : 3
2025-08-12 04:25:07 [Info] key : rtap_update_mode, value : 1
2025-08-12 04:25:07 [Info] can not find key debug in online conf
2025-08-12 04:25:07 [Info] can not find key update_mode in online conf
2025-08-12 04:25:07 [Info] can not find key http_mode in online conf
2025-08-12 04:25:07 [Info] can not find key rtap_enable in online conf
2025-08-12 04:25:07 [Info] can not find key rtap_new_agent in online conf
2025-08-12 04:25:07 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-12 04:25:07 [Info] can not find key mem_low_mark in online conf
2025-08-12 04:25:07 [Info] can not find key obnormal_report_interval in online conf
2025-08-12 04:25:07 [Info] key : cache_mode, value : 0
2025-08-12 04:25:07 [Info] key : abnormal_monitor_mode, value : 3
2025-08-12 04:25:07 [Info] key : queue_size_ratio, value : 80
2025-08-12 04:25:07 [Info] queue_size_ratio is 80
2025-08-12 04:25:07 [Info] resource limit mode and max limit cpu is not change
2025-08-12 04:25:07 [Info] set hash mode 1
2025-08-12 04:25:07 [Info] RTAP timeout config:9600000
2025-08-12 04:25:07 [Info] self_guard_mode config is 0
2025-08-12 04:25:07 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 04:25:07 [Info] ipc client:Rtap145751754943907_handler Reg client_name:Rtap145751754943907 on WhiteList
2025-08-12 04:25:07 [Info] start rtap process success, pid is 4328, argument is Rtap145751754943907
2025-08-12 04:25:11 [Info] csrss.exe open proc 4328 AliSecCheck.ex
2025-08-12 04:25:12 [Info] New ClientConnectNotify : Rtap145751754943907, id is 000004DC
2025-08-12 04:25:12 [Info] ipc client:Rtap145751754943907 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 04:25:12 [Info] csrss.exe open thread 4328 AliSecCheck.ex
2025-08-12 04:25:12 [Info] Rtap Platform Rtap145751754943907 execv work --windows-sysinfoext-check on pid 4328
2025-08-12 04:25:13 [Info] csrss.exe open thread 4328 AliSecCheck.ex
2025-08-12 04:25:14 [Info] csrss.exe open thread 4328 AliSecCheck.ex
2025-08-12 04:25:23 [Info] Done Work --windows-sysinfoext-check:1
2025-08-12 04:25:23 [Info] Rtap Platform Rtap145751754943907 Exit:normal exit
2025-08-12 04:25:25 [Info] ClientDisConnectNotify : Rtap145751754943907, id is 000004DC
2025-08-12 04:49:23 [Info] TotalPhys:2047,AvailPhys:698,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1127,SelfWorkingSet:9928, SelfPageFile:13972
2025-08-12 04:49:23 [Info] CommitTotal:4758,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:698,SystemCache:146,KernelTotal:260,KernelPaged:182,KernelNonpaged:77,PageSize:4096,HandleCount:27649,ProcessCount:53,ThreadCount:745
2025-08-12 05:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9955","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10044","aliyundun_upload_time":"1754946541","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"65","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 05:50:20 [Info] TotalPhys:2047,AvailPhys:680,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1107,SelfWorkingSet:9900, SelfPageFile:13556
2025-08-12 05:50:20 [Info] CommitTotal:4778,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:680,SystemCache:166,KernelTotal:261,KernelPaged:183,KernelNonpaged:78,PageSize:4096,HandleCount:27578,ProcessCount:53,ThreadCount:734
2025-08-12 06:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9878","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"9960","aliyundun_upload_time":"1754950115","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 06:36:54 [Info] get meta data success by v2
2025-08-12 06:36:54 [Info] get empty metaserver config
2025-08-12 06:36:54 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-12 06:36:55 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-12 06:36:55 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-12 06:36:55 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-12 06:36:55 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 06:36:55 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 06:36:55 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-12 06:36:55 [Info] download cert compare md5 same
2025-08-12 06:36:55 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 06:36:55 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 06:36:55 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-12 06:51:16 [Info] TotalPhys:2047,AvailPhys:681,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5885,AvailPageFile:1110,SelfWorkingSet:9980, SelfPageFile:13668
2025-08-12 06:51:16 [Info] CommitTotal:4775,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:681,SystemCache:192,KernelTotal:262,KernelPaged:185,KernelNonpaged:77,PageSize:4096,HandleCount:27568,ProcessCount:53,ThreadCount:738
2025-08-12 07:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9968","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10100","aliyundun_upload_time":"1754953720","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 07:52:13 [Info] TotalPhys:2047,AvailPhys:683,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1110,SelfWorkingSet:9940, SelfPageFile:13592
2025-08-12 07:52:13 [Info] CommitTotal:4774,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:683,SystemCache:194,KernelTotal:262,KernelPaged:184,KernelNonpaged:77,PageSize:4096,HandleCount:27633,ProcessCount:53,ThreadCount:737
2025-08-12 08:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9927","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"9988","aliyundun_upload_time":"1754957325","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 08:51:20 [Info] GetMessage : T_MSG_CHECK
2025-08-12 08:51:20 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ5NTk4ODAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MDAzMDgwLCJzdWIiOiJSVEFQX0lEWF8xNjAzNTVfMTc1NDk1OTg4MDU1MyJ9.FQBeuEN9WBwi9sdTpNYVdfsD8x_XkYg8lqfU0rFfkOc has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 08:51:30 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 08:51:30 [Info] ipc client:Rtap12331754959890_handler Reg client_name:Rtap12331754959890 on WhiteList
2025-08-12 08:51:30 [Info] start rtap process success, pid is 1244, argument is Rtap12331754959890
2025-08-12 08:51:30 [Info] New ClientConnectNotify : Rtap12331754959890, id is 00000504
2025-08-12 08:51:30 [Info] ipc client:Rtap12331754959890 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 08:51:30 [Info] Rtap Platform Rtap12331754959890 execv work --windows-process-check on pid 1244
2025-08-12 08:51:32 [Info] csrss.exe open proc 1244 AliSecCheck.ex
2025-08-12 08:51:33 [Info] csrss.exe open thread 1244 AliSecCheck.ex
2025-08-12 08:51:58 [Info] Done Work --windows-process-check:1
2025-08-12 08:51:58 [Info] Rtap Platform Rtap12331754959890 Exit:normal exit
2025-08-12 08:52:00 [Info] ClientDisConnectNotify : Rtap12331754959890, id is 00000504
2025-08-12 08:53:13 [Info] TotalPhys:2047,AvailPhys:641,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1098,SelfWorkingSet:10224, SelfPageFile:13888
2025-08-12 08:53:13 [Info] CommitTotal:4786,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:641,SystemCache:299,KernelTotal:280,KernelPaged:197,KernelNonpaged:83,PageSize:4096,HandleCount:27629,ProcessCount:53,ThreadCount:734
2025-08-12 09:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10062","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10228","aliyundun_upload_time":"1754960920","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 09:54:10 [Info] TotalPhys:2047,AvailPhys:629,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1079,SelfWorkingSet:10156, SelfPageFile:13868
2025-08-12 09:54:10 [Info] CommitTotal:4805,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:629,SystemCache:361,KernelTotal:295,KernelPaged:206,KernelNonpaged:88,PageSize:4096,HandleCount:27574,ProcessCount:53,ThreadCount:730
2025-08-12 09:54:47 [Info] nCurrentClock is 2754122500, nCurrentTime is 1754963687
2025-08-12 09:54:47 [Info] SendMessage T_MSG_LOGIN
2025-08-12 09:54:47 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-12 09:54:47 [Info] begin to enable self guard after reconnect
2025-08-12 09:54:47 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-12 09:54:47 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-12 09:54:48 [Info] GetMessage : T_MSG_CHECK
2025-08-12 09:54:48 [Info] task fb76e8cd-7206-4993-855a-e2bcdf602653 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 09:54:56 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-12 09:54:56 [Info] key : cpu, value : 10
2025-08-12 09:54:56 [Info] key : rio, value : 20480
2025-08-12 09:54:56 [Info] key : wio, value : 20480
2025-08-12 09:54:56 [Info] key : cpu_all, value : 0
2025-08-12 09:54:56 [Info] key : max_pid_check, value : 200
2025-08-12 09:54:56 [Info] key : throw_dump, value : 0
2025-08-12 09:54:56 [Info] key : hash_mode, value : 1
2025-08-12 09:54:56 [Info] key : mem, value : 200
2025-08-12 09:54:56 [Info] can not find key max_fd in online conf
2025-08-12 09:54:56 [Info] key : proc_limit, value : 1
2025-08-12 09:54:56 [Info] key : resource_limit_mode, value : 3
2025-08-12 09:54:56 [Info] key : rtap_update_mode, value : 1
2025-08-12 09:54:56 [Info] can not find key debug in online conf
2025-08-12 09:54:56 [Info] can not find key update_mode in online conf
2025-08-12 09:54:56 [Info] can not find key http_mode in online conf
2025-08-12 09:54:56 [Info] can not find key rtap_enable in online conf
2025-08-12 09:54:56 [Info] can not find key rtap_new_agent in online conf
2025-08-12 09:54:56 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-12 09:54:56 [Info] can not find key mem_low_mark in online conf
2025-08-12 09:54:56 [Info] can not find key obnormal_report_interval in online conf
2025-08-12 09:54:56 [Info] key : cache_mode, value : 0
2025-08-12 09:54:56 [Info] key : abnormal_monitor_mode, value : 3
2025-08-12 09:54:56 [Info] key : queue_size_ratio, value : 80
2025-08-12 09:54:56 [Info] queue_size_ratio is 80
2025-08-12 09:54:56 [Info] resource limit mode and max limit cpu is not change
2025-08-12 09:54:56 [Info] set hash mode 1
2025-08-12 09:54:56 [Info] RTAP timeout config:9600000
2025-08-12 09:54:56 [Info] self_guard_mode config is 0
2025-08-12 09:54:58 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 09:54:58 [Info] ipc client:Rtap136691754963698_handler Reg client_name:Rtap136691754963698 on WhiteList
2025-08-12 09:54:58 [Info] start rtap process success, pid is 2460, argument is Rtap136691754963698
2025-08-12 09:55:00 [Info] New ClientConnectNotify : Rtap136691754963698, id is 0000051C
2025-08-12 09:55:00 [Info] Rtap Platform Rtap136691754963698 execv work --windows-sysinfoext-check on pid 2460
2025-08-12 09:55:01 [Info] ipc client:Rtap136691754963698 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 09:55:01 [Info] csrss.exe open proc 2460 AliSecCheck.ex
2025-08-12 09:55:02 [Info] csrss.exe open thread 2460 AliSecCheck.ex
2025-08-12 09:55:07 [Info] Done Work --windows-sysinfoext-check:1
2025-08-12 09:55:07 [Info] Rtap Platform Rtap136691754963698 Exit:normal exit
2025-08-12 09:55:09 [Info] ClientDisConnectNotify : Rtap136691754963698, id is 0000051C
2025-08-12 09:55:12 [Info] get meta data success by v2
2025-08-12 09:55:12 [Info] get empty metaserver config
2025-08-12 09:55:12 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-12 09:55:12 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-12 09:55:12 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-12 09:55:12 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-12 09:55:12 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 09:55:12 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 09:55:13 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-12 09:55:13 [Info] download cert compare md5 same
2025-08-12 09:55:13 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 09:55:13 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 09:55:13 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-12 09:58:51 [Info] GetMessage : T_MSG_CHECK
2025-08-12 09:58:51 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ5NjM5MzEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MDA3MTMxLCJzdWIiOiJSVEFQX0lEWF8xNjAzNTZfMTc1NDk2MzkzMTM4MSJ9.LedxMFned7-iOcoPGNhWCtBFmzSbjGTiZ_Y2ezZaL7U has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 09:59:03 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 09:59:03 [Info] ipc client:Rtap144691754963943_handler Reg client_name:Rtap144691754963943 on WhiteList
2025-08-12 09:59:03 [Info] start rtap process success, pid is 720, argument is Rtap144691754963943
2025-08-12 09:59:03 [Info] New ClientConnectNotify : Rtap144691754963943, id is 00000504
2025-08-12 09:59:03 [Info] ipc client:Rtap144691754963943 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 09:59:03 [Info] Rtap Platform Rtap144691754963943 execv work --tcp-connect-check on pid 720
2025-08-12 09:59:04 [Info] csrss.exe open proc 720 AliSecCheck.ex
2025-08-12 09:59:05 [Info] csrss.exe open thread 720 AliSecCheck.ex
2025-08-12 09:59:10 [Info] Done Work --tcp-connect-check:1
2025-08-12 09:59:10 [Info] Rtap Platform Rtap144691754963943 Exit:normal exit
2025-08-12 09:59:13 [Info] ClientDisConnectNotify : Rtap144691754963943, id is 00000504
2025-08-12 10:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10138","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10228","aliyundun_upload_time":"1754964537","aliyundun_write_pid_times":"0","ipc_send_count":"149","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 10:16:35 [Info] GetMessage : T_MSG_CHECK
2025-08-12 10:16:35 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ5NjQ5OTUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MDA4MTk1LCJzdWIiOiJSVEFQX0lEWF8xNjAzNThfMTc1NDk2NDk5NTY2OCJ9.9heSzX8mflbgo_disKOJ3CKYZZFkbY97BiQua0WfKT4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 10:16:43 [Info] GetMessage : T_MSG_CHECK
2025-08-12 10:16:43 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ5NjQ5OTYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MDA4MTk2LCJzdWIiOiJSVEFQX0lEWF8xNjAzNjNfMTc1NDk2NDk5Njg0NyJ9.eLmAkGsdlkdpL5dYJd7Zj3WoOQIdccDE1zufiwk9ZgU has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 10:16:47 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 10:16:47 [Info] ipc client:Rtap179431754965007_handler Reg client_name:Rtap179431754965007 on WhiteList
2025-08-12 10:16:47 [Info] start rtap process success, pid is 4016, argument is Rtap179431754965007
2025-08-12 10:16:47 [Info] New ClientConnectNotify : Rtap179431754965007, id is 000004F8
2025-08-12 10:16:47 [Info] ipc client:Rtap179431754965007 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 10:16:47 [Info] Rtap Platform Rtap179431754965007 execv work --windows-schedule-task-check on pid 4016
2025-08-12 10:16:48 [Info] csrss.exe open proc 4016 AliSecCheck.ex
2025-08-12 10:16:49 [Info] csrss.exe open thread 4016 AliSecCheck.ex
2025-08-12 10:16:56 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 10:16:56 [Info] ipc client:Rtap179731754965016_handler Reg client_name:Rtap179731754965016 on WhiteList
2025-08-12 10:16:56 [Info] start rtap process success, pid is 3632, argument is Rtap179731754965016
2025-08-12 10:16:56 [Info] New ClientConnectNotify : Rtap179731754965016, id is 000004DC
2025-08-12 10:16:56 [Info] ipc client:Rtap179731754965016 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 10:16:56 [Info] Rtap Platform Rtap179731754965016 execv work --windows-registry-check on pid 3632
2025-08-12 10:16:58 [Info] csrss.exe open proc 3632 AliSecCheck.ex
2025-08-12 10:16:59 [Info] csrss.exe open thread 3632 AliSecCheck.ex
2025-08-12 10:17:24 [Info] Done Work --windows-schedule-task-check:1
2025-08-12 10:17:24 [Info] Rtap Platform Rtap179431754965007 Exit:normal exit
2025-08-12 10:17:26 [Info] ClientDisConnectNotify : Rtap179431754965007, id is 000004F8
2025-08-12 10:17:30 [Info] Done Work --windows-registry-check:1
2025-08-12 10:17:30 [Info] Rtap Platform Rtap179731754965016 Exit:normal exit
2025-08-12 10:17:32 [Info] ClientDisConnectNotify : Rtap179731754965016, id is 000004DC
2025-08-12 10:17:44 [Info] GetMessage : T_MSG_CHECK
2025-08-12 10:17:44 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ5NjUwNjQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MDA4MjY0LCJzdWIiOiJSVEFQX0lEWF8xNjAzNzFfMTc1NDk2NTA2NDY1NSJ9.qZI08UI_RVjTMK6UHiD1tyCZXIniaHuqcZ8I9EGu8pQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 10:17:54 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 10:17:54 [Info] ipc client:Rtap181621754965074_handler Reg client_name:Rtap181621754965074 on WhiteList
2025-08-12 10:17:54 [Info] start rtap process success, pid is 4832, argument is Rtap181621754965074
2025-08-12 10:17:54 [Info] New ClientConnectNotify : Rtap181621754965074, id is 0000051C
2025-08-12 10:17:54 [Info] ipc client:Rtap181621754965074 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 10:17:55 [Info] Rtap Platform Rtap181621754965074 execv work --windows-driver-version-check on pid 4832
2025-08-12 10:17:57 [Info] csrss.exe open proc 4832 AliSecCheck.ex
2025-08-12 10:17:58 [Info] csrss.exe open thread 4832 AliSecCheck.ex
2025-08-12 10:18:02 [Info] Done Work --windows-driver-version-check:1
2025-08-12 10:18:02 [Info] Rtap Platform Rtap181621754965074 Exit:normal exit
2025-08-12 10:18:04 [Info] ClientDisConnectNotify : Rtap181621754965074, id is 0000051C
2025-08-12 10:55:09 [Info] TotalPhys:2047,AvailPhys:626,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1075,SelfWorkingSet:9988, SelfPageFile:13840
2025-08-12 10:55:09 [Info] CommitTotal:4810,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:626,SystemCache:370,KernelTotal:295,KernelPaged:207,KernelNonpaged:88,PageSize:4096,HandleCount:27605,ProcessCount:53,ThreadCount:740
2025-08-12 11:05:59 [Info] GetMessage : T_MSG_CHECK
2025-08-12 11:05:59 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ5Njc5NTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MDExMTU5LCJzdWIiOiJSVEFQX0lEWF8xNjAzNjBfMTc1NDk2Nzk1OTE5MyJ9.pODL79hI4mOf1vO3Hog5_EIFoyQCJXL1X711QnjWzfQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 11:06:10 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 11:06:10 [Info] ipc client:Rtap276191754967970_handler Reg client_name:Rtap276191754967970 on WhiteList
2025-08-12 11:06:10 [Info] start rtap process success, pid is 2764, argument is Rtap276191754967970
2025-08-12 11:06:10 [Info] New ClientConnectNotify : Rtap276191754967970, id is 000004DC
2025-08-12 11:06:11 [Info] ipc client:Rtap276191754967970 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 11:06:11 [Info] Rtap Platform Rtap276191754967970 execv work --windows-autorun-item-check on pid 2764
2025-08-12 11:06:13 [Info] csrss.exe open proc 2764 AliSecCheck.ex
2025-08-12 11:06:14 [Info] csrss.exe open thread 2764 AliSecCheck.ex
2025-08-12 11:06:26 [Info] Done Work --windows-autorun-item-check:1
2025-08-12 11:06:26 [Info] Rtap Platform Rtap276191754967970 Exit:normal exit
2025-08-12 11:06:28 [Info] ClientDisConnectNotify : Rtap276191754967970, id is 000004DC
2025-08-12 11:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10045","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10244","aliyundun_upload_time":"1754968116","aliyundun_write_pid_times":"0","ipc_send_count":"152","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 11:56:06 [Info] TotalPhys:2047,AvailPhys:624,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1072,SelfWorkingSet:9992, SelfPageFile:13848
2025-08-12 11:56:06 [Info] CommitTotal:4813,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:624,SystemCache:370,KernelTotal:296,KernelPaged:207,KernelNonpaged:88,PageSize:4096,HandleCount:27595,ProcessCount:53,ThreadCount:739
2025-08-12 12:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10030","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10104","aliyundun_upload_time":"1754971722","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 12:57:02 [Info] TotalPhys:2047,AvailPhys:616,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1066,SelfWorkingSet:9920, SelfPageFile:13768
2025-08-12 12:57:02 [Info] CommitTotal:4819,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:616,SystemCache:373,KernelTotal:297,KernelPaged:208,KernelNonpaged:88,PageSize:4096,HandleCount:27604,ProcessCount:53,ThreadCount:740
2025-08-12 13:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9944","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10032","aliyundun_upload_time":"1754975330","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 13:12:27 [Info] get meta data success by v2
2025-08-12 13:12:27 [Info] get empty metaserver config
2025-08-12 13:12:27 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-12 13:12:27 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-12 13:12:27 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-12 13:12:27 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-12 13:12:27 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 13:12:27 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 13:12:27 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-12 13:12:27 [Info] download cert compare md5 same
2025-08-12 13:12:27 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 13:12:27 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 13:12:27 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-12 13:57:59 [Info] TotalPhys:2047,AvailPhys:614,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5885,AvailPageFile:1065,SelfWorkingSet:10044, SelfPageFile:14032
2025-08-12 13:57:59 [Info] CommitTotal:4819,CommitLimit:5885,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:614,SystemCache:380,KernelTotal:298,KernelPaged:209,KernelNonpaged:89,PageSize:4096,HandleCount:27580,ProcessCount:53,ThreadCount:730
2025-08-12 14:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10056","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10176","aliyundun_upload_time":"1754978938","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-08-12 14:58:55 [Info] TotalPhys:2047,AvailPhys:641,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6173,AvailPageFile:1377,SelfWorkingSet:9908, SelfPageFile:13652
2025-08-12 14:58:55 [Info] CommitTotal:4796,CommitLimit:6173,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:641,SystemCache:123,KernelTotal:275,KernelPaged:193,KernelNonpaged:82,PageSize:4096,HandleCount:27711,ProcessCount:53,ThreadCount:743
2025-08-12 15:08:44 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10000","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10092","aliyundun_upload_time":"1754982524","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 15:23:37 [Info] nCurrentClock is 2772123100, nCurrentTime is 1754983417
2025-08-12 15:23:37 [Info] SendMessage T_MSG_LOGIN
2025-08-12 15:23:37 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-12 15:23:37 [Info] begin to enable self guard after reconnect
2025-08-12 15:23:37 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-12 15:23:37 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-12 15:23:37 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-12 15:23:37 [Info] key : cpu, value : 10
2025-08-12 15:23:37 [Info] key : rio, value : 20480
2025-08-12 15:23:37 [Info] key : wio, value : 20480
2025-08-12 15:23:37 [Info] key : cpu_all, value : 0
2025-08-12 15:23:37 [Info] key : max_pid_check, value : 200
2025-08-12 15:23:37 [Info] key : throw_dump, value : 0
2025-08-12 15:23:37 [Info] key : hash_mode, value : 1
2025-08-12 15:23:37 [Info] key : mem, value : 200
2025-08-12 15:23:37 [Info] can not find key max_fd in online conf
2025-08-12 15:23:37 [Info] key : proc_limit, value : 1
2025-08-12 15:23:37 [Info] key : resource_limit_mode, value : 3
2025-08-12 15:23:37 [Info] key : rtap_update_mode, value : 1
2025-08-12 15:23:37 [Info] can not find key debug in online conf
2025-08-12 15:23:37 [Info] can not find key update_mode in online conf
2025-08-12 15:23:37 [Info] can not find key http_mode in online conf
2025-08-12 15:23:37 [Info] can not find key rtap_enable in online conf
2025-08-12 15:23:37 [Info] can not find key rtap_new_agent in online conf
2025-08-12 15:23:37 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-12 15:23:37 [Info] can not find key mem_low_mark in online conf
2025-08-12 15:23:37 [Info] can not find key obnormal_report_interval in online conf
2025-08-12 15:23:37 [Info] key : cache_mode, value : 0
2025-08-12 15:23:37 [Info] key : abnormal_monitor_mode, value : 3
2025-08-12 15:23:37 [Info] key : queue_size_ratio, value : 80
2025-08-12 15:23:37 [Info] queue_size_ratio is 80
2025-08-12 15:23:37 [Info] resource limit mode and max limit cpu is not change
2025-08-12 15:23:37 [Info] set hash mode 1
2025-08-12 15:23:37 [Info] RTAP timeout config:9600000
2025-08-12 15:23:37 [Info] self_guard_mode config is 0
2025-08-12 15:23:37 [Info] GetMessage : T_MSG_CHECK
2025-08-12 15:23:37 [Info] task 6d74d249-848e-441f-b002-93b55f01ab53 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 15:23:47 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-12 15:23:52 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 15:23:52 [Info] ipc client:Rtap125751754983432_handler Reg client_name:Rtap125751754983432 on WhiteList
2025-08-12 15:23:52 [Info] start rtap process success, pid is 176, argument is Rtap125751754983432
2025-08-12 15:23:53 [Info] csrss.exe open proc 176 AliSecCheck.ex
2025-08-12 15:23:53 [Info] New ClientConnectNotify : Rtap125751754983432, id is 0000051C
2025-08-12 15:23:53 [Info] Rtap Platform Rtap125751754983432 execv work --windows-sysinfoext-check on pid 176
2025-08-12 15:23:53 [Info] ipc client:Rtap125751754983432 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 15:23:54 [Info] csrss.exe open thread 176 AliSecCheck.ex
2025-08-12 15:23:55 [Info] csrss.exe open thread 176 AliSecCheck.ex
2025-08-12 15:23:56 [Info] csrss.exe open thread 176 AliSecCheck.ex
2025-08-12 15:23:57 [Info] csrss.exe open thread 176 AliSecCheck.ex
2025-08-12 15:24:04 [Info] Done Work --windows-sysinfoext-check:1
2025-08-12 15:24:04 [Info] Rtap Platform Rtap125751754983432 Exit:normal exit
2025-08-12 15:24:06 [Info] ClientDisConnectNotify : Rtap125751754983432, id is 0000051C
2025-08-12 15:59:55 [Info] TotalPhys:2047,AvailPhys:641,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6173,AvailPageFile:1381,SelfWorkingSet:9992, SelfPageFile:13748
2025-08-12 15:59:55 [Info] CommitTotal:4791,CommitLimit:6173,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:641,SystemCache:172,KernelTotal:274,KernelPaged:192,KernelNonpaged:81,PageSize:4096,HandleCount:27606,ProcessCount:53,ThreadCount:737
2025-08-12 16:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9992","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10044","aliyundun_upload_time":"1754986142","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 16:29:48 [Info] get meta data success by v2
2025-08-12 16:29:48 [Info] get empty metaserver config
2025-08-12 16:29:48 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-12 16:29:48 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-12 16:29:48 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-12 16:29:48 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-12 16:29:48 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 16:29:48 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 16:29:48 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-12 16:29:48 [Info] download cert compare md5 same
2025-08-12 16:29:48 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 16:29:48 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 16:29:48 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-12 17:00:51 [Info] TotalPhys:2047,AvailPhys:636,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6173,AvailPageFile:1372,SelfWorkingSet:10156, SelfPageFile:14092
2025-08-12 17:00:51 [Info] CommitTotal:4801,CommitLimit:6173,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:636,SystemCache:186,KernelTotal:275,KernelPaged:193,KernelNonpaged:81,PageSize:4096,HandleCount:27657,ProcessCount:53,ThreadCount:751
2025-08-12 17:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10128","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10212","aliyundun_upload_time":"1754989714","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 18:01:48 [Info] TotalPhys:2047,AvailPhys:581,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6173,AvailPageFile:1322,SelfWorkingSet:10132, SelfPageFile:13832
2025-08-12 18:01:48 [Info] CommitTotal:4851,CommitLimit:6173,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:581,SystemCache:294,KernelTotal:278,KernelPaged:196,KernelNonpaged:81,PageSize:4096,HandleCount:27565,ProcessCount:53,ThreadCount:738
2025-08-12 18:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10099","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10132","aliyundun_upload_time":"1754993325","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"71","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 19:02:44 [Info] TotalPhys:2047,AvailPhys:546,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6173,AvailPageFile:1281,SelfWorkingSet:9988, SelfPageFile:13744
2025-08-12 19:02:44 [Info] CommitTotal:4891,CommitLimit:6173,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:546,SystemCache:296,KernelTotal:277,KernelPaged:195,KernelNonpaged:82,PageSize:4096,HandleCount:27544,ProcessCount:53,ThreadCount:736
2025-08-12 19:03:20 [Info] GetMessage : T_MSG_CHECK
2025-08-12 19:03:20 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ5OTY1OTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MDM5Nzk5LCJzdWIiOiJSVEFQX0lEWF8xNjA0MzBfMTc1NDk5NjU5OTk0OCJ9.bamFaUoqk46J8ePXCuUNannAvNpb0ixWV997jwo1iAU has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 19:03:32 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 19:03:32 [Info] ipc client:Rtap228481754996612_handler Reg client_name:Rtap228481754996612 on WhiteList
2025-08-12 19:03:32 [Info] start rtap process success, pid is 3376, argument is Rtap228481754996612
2025-08-12 19:03:32 [Info] New ClientConnectNotify : Rtap228481754996612, id is 00000540
2025-08-12 19:03:32 [Info] ipc client:Rtap228481754996612 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 19:03:32 [Info] Rtap Platform Rtap228481754996612 execv work --secnet_rasp_agent on pid 3376
2025-08-12 19:03:34 [Info] csrss.exe open proc 3376 AliSecCheck.ex
2025-08-12 19:03:35 [Info] csrss.exe open thread 3376 AliSecCheck.ex
2025-08-12 19:03:36 [Info] csrss.exe open thread 3376 AliSecCheck.ex
2025-08-12 19:03:39 [Info] Done Work --secnet_rasp_agent:1
2025-08-12 19:03:39 [Info] Rtap Platform Rtap228481754996612 Exit:normal exit
2025-08-12 19:03:42 [Info] ClientDisConnectNotify : Rtap228481754996612, id is 00000540
2025-08-12 19:08:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10008","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10144","aliyundun_upload_time":"1754996933","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 19:47:01 [Info] get meta data success by v2
2025-08-12 19:47:01 [Info] get empty metaserver config
2025-08-12 19:47:01 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-12 19:47:02 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-12 19:47:02 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-12 19:47:02 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-12 19:47:02 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 19:47:02 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 19:47:02 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-12 19:47:02 [Info] download cert compare md5 same
2025-08-12 19:47:02 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 19:47:02 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 19:47:02 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-12 20:03:41 [Info] TotalPhys:2047,AvailPhys:516,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6173,AvailPageFile:1244,SelfWorkingSet:10228, SelfPageFile:14164
2025-08-12 20:03:41 [Info] CommitTotal:4929,CommitLimit:6173,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:516,SystemCache:306,KernelTotal:278,KernelPaged:196,KernelNonpaged:81,PageSize:4096,HandleCount:27590,ProcessCount:53,ThreadCount:744
2025-08-12 20:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10118","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10280","aliyundun_upload_time":"1755000542","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 20:52:23 [Info] nCurrentClock is 2790123600, nCurrentTime is 1755003143
2025-08-12 20:52:23 [Info] SendMessage T_MSG_LOGIN
2025-08-12 20:52:23 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-12 20:52:24 [Info] begin to enable self guard after reconnect
2025-08-12 20:52:24 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-12 20:52:24 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-12 20:52:24 [Info] GetMessage : T_MSG_CHECK
2025-08-12 20:52:24 [Info] task 234e6c31-8ac9-4be3-ab9d-66abf8e1c3cd has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-12 20:52:32 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-12 20:52:32 [Info] key : cpu, value : 10
2025-08-12 20:52:32 [Info] key : rio, value : 20480
2025-08-12 20:52:32 [Info] key : wio, value : 20480
2025-08-12 20:52:32 [Info] key : cpu_all, value : 0
2025-08-12 20:52:32 [Info] key : max_pid_check, value : 200
2025-08-12 20:52:32 [Info] key : throw_dump, value : 0
2025-08-12 20:52:32 [Info] key : hash_mode, value : 1
2025-08-12 20:52:32 [Info] key : mem, value : 200
2025-08-12 20:52:32 [Info] can not find key max_fd in online conf
2025-08-12 20:52:32 [Info] key : proc_limit, value : 1
2025-08-12 20:52:32 [Info] key : resource_limit_mode, value : 3
2025-08-12 20:52:32 [Info] key : rtap_update_mode, value : 1
2025-08-12 20:52:32 [Info] can not find key debug in online conf
2025-08-12 20:52:32 [Info] can not find key update_mode in online conf
2025-08-12 20:52:32 [Info] can not find key http_mode in online conf
2025-08-12 20:52:32 [Info] can not find key rtap_enable in online conf
2025-08-12 20:52:32 [Info] can not find key rtap_new_agent in online conf
2025-08-12 20:52:32 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-12 20:52:32 [Info] can not find key mem_low_mark in online conf
2025-08-12 20:52:32 [Info] can not find key obnormal_report_interval in online conf
2025-08-12 20:52:32 [Info] key : cache_mode, value : 0
2025-08-12 20:52:32 [Info] key : abnormal_monitor_mode, value : 3
2025-08-12 20:52:32 [Info] key : queue_size_ratio, value : 80
2025-08-12 20:52:32 [Info] queue_size_ratio is 80
2025-08-12 20:52:32 [Info] resource limit mode and max limit cpu is not change
2025-08-12 20:52:32 [Info] set hash mode 1
2025-08-12 20:52:32 [Info] RTAP timeout config:9600000
2025-08-12 20:52:32 [Info] self_guard_mode config is 0
2025-08-12 20:52:39 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-12 20:52:39 [Info] ipc client:Rtap114601755003159_handler Reg client_name:Rtap114601755003159 on WhiteList
2025-08-12 20:52:39 [Info] start rtap process success, pid is 4224, argument is Rtap114601755003159
2025-08-12 20:52:39 [Info] New ClientConnectNotify : Rtap114601755003159, id is 000004D8
2025-08-12 20:52:40 [Info] ipc client:Rtap114601755003159 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-12 20:52:40 [Info] Rtap Platform Rtap114601755003159 execv work --windows-sysinfoext-check on pid 4224
2025-08-12 20:52:42 [Info] csrss.exe open proc 4224 AliSecCheck.ex
2025-08-12 20:52:43 [Info] csrss.exe open thread 4224 AliSecCheck.ex
2025-08-12 20:52:47 [Info] Done Work --windows-sysinfoext-check:1
2025-08-12 20:52:47 [Info] Rtap Platform Rtap114601755003159 Exit:normal exit
2025-08-12 20:52:49 [Info] ClientDisConnectNotify : Rtap114601755003159, id is 000004D8
2025-08-12 21:04:40 [Info] TotalPhys:2047,AvailPhys:485,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6173,AvailPageFile:1198,SelfWorkingSet:10072, SelfPageFile:13964
2025-08-12 21:04:40 [Info] CommitTotal:4974,CommitLimit:6173,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:485,SystemCache:214,KernelTotal:278,KernelPaged:196,KernelNonpaged:82,PageSize:4096,HandleCount:27487,ProcessCount:53,ThreadCount:739
2025-08-12 21:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10142","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10232","aliyundun_upload_time":"1755004132","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 22:05:37 [Info] TotalPhys:2047,AvailPhys:491,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6173,AvailPageFile:1202,SelfWorkingSet:9996, SelfPageFile:13904
2025-08-12 22:05:37 [Info] CommitTotal:4970,CommitLimit:6173,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:491,SystemCache:216,KernelTotal:278,KernelPaged:196,KernelNonpaged:81,PageSize:4096,HandleCount:27457,ProcessCount:52,ThreadCount:734
2025-08-12 22:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10010","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10124","aliyundun_upload_time":"1755007737","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-12 23:04:19 [Info] get meta data success by v2
2025-08-12 23:04:19 [Info] get empty metaserver config
2025-08-12 23:04:19 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-12 23:04:20 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-12 23:04:20 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-12 23:04:20 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-12 23:04:20 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 23:04:20 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-12 23:04:20 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-12 23:04:20 [Info] download cert compare md5 same
2025-08-12 23:04:20 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 23:04:20 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-12 23:04:20 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-12 23:06:33 [Info] TotalPhys:2047,AvailPhys:494,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6173,AvailPageFile:1207,SelfWorkingSet:10136, SelfPageFile:14000
2025-08-12 23:06:33 [Info] CommitTotal:4966,CommitLimit:6173,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:494,SystemCache:218,KernelTotal:278,KernelPaged:196,KernelNonpaged:81,PageSize:4096,HandleCount:27460,ProcessCount:52,ThreadCount:739
2025-08-12 23:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10041","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10172","aliyundun_upload_time":"1755011343","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-13 00:07:30 [Info] TotalPhys:2047,AvailPhys:476,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6173,AvailPageFile:1188,SelfWorkingSet:10060, SelfPageFile:13832
2025-08-13 00:07:30 [Info] CommitTotal:4984,CommitLimit:6173,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:476,SystemCache:220,KernelTotal:278,KernelPaged:196,KernelNonpaged:82,PageSize:4096,HandleCount:27464,ProcessCount:52,ThreadCount:734
2025-08-13 00:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9976","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10140","aliyundun_upload_time":"1755014915","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 00:23:07 [Info] TotalPhys:2047,AvailPhys:487,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6572,AvailPageFile:1350,SelfWorkingSet:9920, SelfPageFile:13724
2025-08-19 00:23:07 [Info] CommitTotal:5222,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:487,SystemCache:156,KernelTotal:260,KernelPaged:182,KernelNonpaged:78,PageSize:4096,HandleCount:27507,ProcessCount:52,ThreadCount:731
2025-08-19 00:57:43 [Info] nCurrentClock is 3276141000, nCurrentTime is 1755536263
2025-08-19 00:57:43 [Info] SendMessage T_MSG_LOGIN
2025-08-19 00:57:43 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-19 00:57:43 [Info] begin to enable self guard after reconnect
2025-08-19 00:57:43 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-19 00:57:43 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-19 00:57:43 [Info] GetMessage : T_MSG_CHECK
2025-08-19 00:57:43 [Info] task e7ab6572-478e-41cd-b1eb-bc9270dac375 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 00:57:52 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-19 00:57:52 [Info] key : cpu, value : 10
2025-08-19 00:57:52 [Info] key : rio, value : 20480
2025-08-19 00:57:52 [Info] key : wio, value : 20480
2025-08-19 00:57:52 [Info] key : cpu_all, value : 0
2025-08-19 00:57:52 [Info] key : max_pid_check, value : 200
2025-08-19 00:57:52 [Info] key : throw_dump, value : 0
2025-08-19 00:57:52 [Info] key : hash_mode, value : 1
2025-08-19 00:57:52 [Info] key : mem, value : 200
2025-08-19 00:57:52 [Info] can not find key max_fd in online conf
2025-08-19 00:57:52 [Info] key : proc_limit, value : 1
2025-08-19 00:57:52 [Info] key : resource_limit_mode, value : 3
2025-08-19 00:57:52 [Info] key : rtap_update_mode, value : 1
2025-08-19 00:57:52 [Info] can not find key debug in online conf
2025-08-19 00:57:52 [Info] can not find key update_mode in online conf
2025-08-19 00:57:52 [Info] can not find key http_mode in online conf
2025-08-19 00:57:52 [Info] can not find key rtap_enable in online conf
2025-08-19 00:57:52 [Info] can not find key rtap_new_agent in online conf
2025-08-19 00:57:52 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-19 00:57:52 [Info] can not find key mem_low_mark in online conf
2025-08-19 00:57:52 [Info] can not find key obnormal_report_interval in online conf
2025-08-19 00:57:52 [Info] key : cache_mode, value : 0
2025-08-19 00:57:52 [Info] key : abnormal_monitor_mode, value : 3
2025-08-19 00:57:52 [Info] key : queue_size_ratio, value : 80
2025-08-19 00:57:52 [Info] queue_size_ratio is 80
2025-08-19 00:57:52 [Info] resource limit mode and max limit cpu is not change
2025-08-19 00:57:52 [Info] set hash mode 1
2025-08-19 00:57:52 [Info] RTAP timeout config:9600000
2025-08-19 00:57:52 [Info] self_guard_mode config is 0
2025-08-19 00:57:56 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 00:57:56 [Info] ipc client:Rtap156911755536276_handler Reg client_name:Rtap156911755536276 on WhiteList
2025-08-19 00:57:56 [Info] start rtap process success, pid is 4596, argument is Rtap156911755536276
2025-08-19 00:57:56 [Info] New ClientConnectNotify : Rtap156911755536276, id is 000004DC
2025-08-19 00:57:56 [Info] ipc client:Rtap156911755536276 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 00:57:57 [Info] Rtap Platform Rtap156911755536276 execv work --windows-sysinfoext-check on pid 4596
2025-08-19 00:57:57 [Info] csrss.exe open proc 4596 AliSecCheck.ex
2025-08-19 00:57:58 [Info] csrss.exe open thread 4596 AliSecCheck.ex
2025-08-19 00:58:04 [Info] Done Work --windows-sysinfoext-check:1
2025-08-19 00:58:04 [Info] Rtap Platform Rtap156911755536276 Exit:normal exit
2025-08-19 00:58:06 [Info] ClientDisConnectNotify : Rtap156911755536276, id is 000004DC
2025-08-19 01:08:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9938","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10056","aliyundun_upload_time":"1755536933","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 01:18:07 [Info] GetMessage : T_MSG_CHECK
2025-08-19 01:18:07 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU1Mzc0ODcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1NTgwNjg3LCJzdWIiOiJSVEFQX0lEWF8xNjA5MTFfMTc1NTUzNzQ4Nzc4NCJ9.Tq-8Srv7yS66EE8vmxsF9R2mtHsovXGqtSx50iM048w has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 01:18:18 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 01:18:18 [Info] ipc client:Rtap196821755537498_handler Reg client_name:Rtap196821755537498 on WhiteList
2025-08-19 01:18:18 [Info] start rtap process success, pid is 1476, argument is Rtap196821755537498
2025-08-19 01:18:19 [Info] New ClientConnectNotify : Rtap196821755537498, id is 000004B8
2025-08-19 01:18:19 [Info] ipc client:Rtap196821755537498 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 01:18:19 [Info] Rtap Platform Rtap196821755537498 execv work --sca on pid 1476
2025-08-19 01:18:20 [Info] csrss.exe open proc 1476 AliSecCheck.ex
2025-08-19 01:18:21 [Info] csrss.exe open thread 1476 AliSecCheck.ex
2025-08-19 01:19:07 [Info] csrss.exe open thread 1476 AliSecCheck.ex
2025-08-19 01:19:27 [Info] Done Work --sca:1
2025-08-19 01:19:27 [Info] Rtap Platform Rtap196821755537498 Exit:normal exit
2025-08-19 01:19:29 [Info] ClientDisConnectNotify : Rtap196821755537498, id is 000004B8
2025-08-19 01:24:06 [Info] TotalPhys:2047,AvailPhys:466,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6572,AvailPageFile:1334,SelfWorkingSet:10008, SelfPageFile:13784
2025-08-19 01:24:06 [Info] CommitTotal:5238,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:466,SystemCache:142,KernelTotal:260,KernelPaged:181,KernelNonpaged:78,PageSize:4096,HandleCount:27713,ProcessCount:53,ThreadCount:749
2025-08-19 02:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10035","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10148","aliyundun_upload_time":"1755540512","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 02:25:03 [Info] TotalPhys:2047,AvailPhys:279,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6572,AvailPageFile:1219,SelfWorkingSet:10128, SelfPageFile:14112
2025-08-19 02:25:03 [Info] CommitTotal:5353,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:279,SystemCache:27,KernelTotal:261,KernelPaged:182,KernelNonpaged:78,PageSize:4096,HandleCount:27511,ProcessCount:52,ThreadCount:734
2025-08-19 03:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10134","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10184","aliyundun_upload_time":"1755544116","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-08-19 03:09:50 [Info] get meta data success by v2
2025-08-19 03:09:50 [Info] get empty metaserver config
2025-08-19 03:09:50 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-19 03:09:50 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-19 03:09:50 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-19 03:09:50 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-19 03:09:50 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 03:09:50 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 03:09:50 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-19 03:09:50 [Info] download cert compare md5 same
2025-08-19 03:09:50 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 03:09:50 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 03:09:50 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-19 03:26:01 [Info] TotalPhys:2047,AvailPhys:239,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6572,AvailPageFile:1219,SelfWorkingSet:10208, SelfPageFile:14272
2025-08-19 03:26:01 [Info] CommitTotal:5353,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:239,SystemCache:4194303,KernelTotal:261,KernelPaged:182,KernelNonpaged:78,PageSize:4096,HandleCount:27584,ProcessCount:52,ThreadCount:746
2025-08-19 04:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10182","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10268","aliyundun_upload_time":"1755547715","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 04:27:00 [Info] TotalPhys:2047,AvailPhys:244,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6572,AvailPageFile:1206,SelfWorkingSet:10116, SelfPageFile:14088
2025-08-19 04:27:00 [Info] CommitTotal:5366,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:244,SystemCache:3,KernelTotal:265,KernelPaged:184,KernelNonpaged:80,PageSize:4096,HandleCount:27502,ProcessCount:52,ThreadCount:730
2025-08-19 05:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10141","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10212","aliyundun_upload_time":"1755551329","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 05:27:57 [Info] TotalPhys:2047,AvailPhys:289,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6572,AvailPageFile:1208,SelfWorkingSet:10128, SelfPageFile:14104
2025-08-19 05:27:57 [Info] CommitTotal:5364,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:289,SystemCache:4194303,KernelTotal:265,KernelPaged:185,KernelNonpaged:80,PageSize:4096,HandleCount:27857,ProcessCount:53,ThreadCount:758
2025-08-19 06:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10149","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10204","aliyundun_upload_time":"1755554937","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 06:27:08 [Info] nCurrentClock is 3294141500, nCurrentTime is 1755556028
2025-08-19 06:27:08 [Info] SendMessage T_MSG_LOGIN
2025-08-19 06:27:08 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-19 06:27:08 [Info] begin to enable self guard after reconnect
2025-08-19 06:27:09 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-19 06:27:09 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-19 06:27:09 [Info] GetMessage : T_MSG_CHECK
2025-08-19 06:27:09 [Info] task 745249ff-4ba7-4f66-beb0-366d0285acc2 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 06:27:17 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-19 06:27:17 [Info] key : cpu, value : 10
2025-08-19 06:27:17 [Info] key : rio, value : 20480
2025-08-19 06:27:17 [Info] key : wio, value : 20480
2025-08-19 06:27:17 [Info] key : cpu_all, value : 0
2025-08-19 06:27:17 [Info] key : max_pid_check, value : 200
2025-08-19 06:27:17 [Info] key : throw_dump, value : 0
2025-08-19 06:27:17 [Info] key : hash_mode, value : 1
2025-08-19 06:27:17 [Info] key : mem, value : 200
2025-08-19 06:27:17 [Info] can not find key max_fd in online conf
2025-08-19 06:27:17 [Info] key : proc_limit, value : 1
2025-08-19 06:27:17 [Info] key : resource_limit_mode, value : 3
2025-08-19 06:27:17 [Info] key : rtap_update_mode, value : 1
2025-08-19 06:27:17 [Info] can not find key debug in online conf
2025-08-19 06:27:17 [Info] can not find key update_mode in online conf
2025-08-19 06:27:17 [Info] can not find key http_mode in online conf
2025-08-19 06:27:17 [Info] can not find key rtap_enable in online conf
2025-08-19 06:27:17 [Info] can not find key rtap_new_agent in online conf
2025-08-19 06:27:17 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-19 06:27:17 [Info] can not find key mem_low_mark in online conf
2025-08-19 06:27:17 [Info] can not find key obnormal_report_interval in online conf
2025-08-19 06:27:17 [Info] key : cache_mode, value : 0
2025-08-19 06:27:17 [Info] key : abnormal_monitor_mode, value : 3
2025-08-19 06:27:17 [Info] key : queue_size_ratio, value : 80
2025-08-19 06:27:17 [Info] queue_size_ratio is 80
2025-08-19 06:27:17 [Info] resource limit mode and max limit cpu is not change
2025-08-19 06:27:17 [Info] set hash mode 1
2025-08-19 06:27:17 [Info] RTAP timeout config:9600000
2025-08-19 06:27:17 [Info] self_guard_mode config is 0
2025-08-19 06:27:23 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 06:27:23 [Info] ipc client:Rtap147061755556043_handler Reg client_name:Rtap147061755556043 on WhiteList
2025-08-19 06:27:23 [Info] start rtap process success, pid is 3732, argument is Rtap147061755556043
2025-08-19 06:27:24 [Info] system memory usage is 85
2025-08-19 06:27:24 [Info] New ClientConnectNotify : Rtap147061755556043, id is 000004DC
2025-08-19 06:27:24 [Info] csrss.exe open proc 3732 AliSecCheck.ex
2025-08-19 06:27:24 [Info] Rtap Platform Rtap147061755556043 execv work --windows-sysinfoext-check on pid 3732
2025-08-19 06:27:25 [Info] ipc client:Rtap147061755556043 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 06:27:25 [Info] csrss.exe open thread 3732 AliSecCheck.ex
2025-08-19 06:27:27 [Info] csrss.exe open thread 3732 AliSecCheck.ex
2025-08-19 06:27:28 [Info] csrss.exe open thread 3732 AliSecCheck.ex
2025-08-19 06:27:29 [Info] csrss.exe open thread 3732 AliSecCheck.ex
2025-08-19 06:27:36 [Info] Done Work --windows-sysinfoext-check:1
2025-08-19 06:27:36 [Info] Rtap Platform Rtap147061755556043 Exit:normal exit
2025-08-19 06:27:38 [Info] ClientDisConnectNotify : Rtap147061755556043, id is 000004DC
2025-08-19 06:27:41 [Info] get meta data success by v2
2025-08-19 06:27:41 [Info] get empty metaserver config
2025-08-19 06:27:41 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-19 06:27:41 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-19 06:27:41 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-19 06:27:41 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-19 06:27:41 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 06:27:41 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 06:27:42 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-19 06:27:42 [Info] download cert compare md5 same
2025-08-19 06:27:42 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 06:27:42 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 06:27:42 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-19 06:28:56 [Info] TotalPhys:2047,AvailPhys:319,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6572,AvailPageFile:1221,SelfWorkingSet:10056, SelfPageFile:13856
2025-08-19 06:28:56 [Info] CommitTotal:5351,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:319,SystemCache:4194303,KernelTotal:266,KernelPaged:186,KernelNonpaged:80,PageSize:4096,HandleCount:28091,ProcessCount:54,ThreadCount:754
2025-08-19 07:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10074","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10136","aliyundun_upload_time":"1755558513","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 07:29:52 [Info] TotalPhys:2047,AvailPhys:321,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6572,AvailPageFile:1223,SelfWorkingSet:10124, SelfPageFile:14028
2025-08-19 07:29:52 [Info] CommitTotal:5349,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:321,SystemCache:4194303,KernelTotal:266,KernelPaged:185,KernelNonpaged:80,PageSize:4096,HandleCount:27586,ProcessCount:52,ThreadCount:722
2025-08-19 08:08:48 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10121","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10196","aliyundun_upload_time":"1755562128","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 08:30:51 [Info] TotalPhys:2047,AvailPhys:286,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6572,AvailPageFile:1215,SelfWorkingSet:10004, SelfPageFile:13968
2025-08-19 08:30:51 [Info] CommitTotal:5357,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:286,SystemCache:4,KernelTotal:265,KernelPaged:185,KernelNonpaged:80,PageSize:4096,HandleCount:27693,ProcessCount:52,ThreadCount:731
2025-08-19 08:50:41 [Info] GetMessage : T_MSG_CHECK
2025-08-19 08:50:41 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU1NjQ2NDEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1NjA3ODQxLCJzdWIiOiJSVEFQX0lEWF8xNjA5MDJfMTc1NTU2NDY0MTcyOSJ9.-5gTYqtMIxK2-a4EO5LGonB2d3SLGKYiHfsW9oWVq10 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 08:50:52 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 08:50:52 [Info] ipc client:Rtap100511755564652_handler Reg client_name:Rtap100511755564652 on WhiteList
2025-08-19 08:50:52 [Info] start rtap process success, pid is 3344, argument is Rtap100511755564652
2025-08-19 08:50:52 [Info] New ClientConnectNotify : Rtap100511755564652, id is 0000051C
2025-08-19 08:50:52 [Info] ipc client:Rtap100511755564652 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 08:50:53 [Info] Rtap Platform Rtap100511755564652 execv work --windows-process-check on pid 3344
2025-08-19 08:50:54 [Info] csrss.exe open proc 3344 AliSecCheck.ex
2025-08-19 08:50:55 [Info] csrss.exe open thread 3344 AliSecCheck.ex
2025-08-19 08:51:16 [Info] Done Work --windows-process-check:1
2025-08-19 08:51:16 [Info] Rtap Platform Rtap100511755564652 Exit:normal exit
2025-08-19 08:51:18 [Info] ClientDisConnectNotify : Rtap100511755564652, id is 0000051C
2025-08-19 09:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10068","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10164","aliyundun_upload_time":"1755565718","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 09:31:50 [Info] TotalPhys:2047,AvailPhys:323,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6572,AvailPageFile:1232,SelfWorkingSet:10148, SelfPageFile:13840
2025-08-19 09:31:50 [Info] CommitTotal:5340,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:323,SystemCache:11,KernelTotal:265,KernelPaged:185,KernelNonpaged:80,PageSize:4096,HandleCount:27650,ProcessCount:52,ThreadCount:728
2025-08-19 09:45:51 [Info] get meta data success by v2
2025-08-19 09:45:51 [Info] get empty metaserver config
2025-08-19 09:45:51 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-19 09:45:52 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-19 09:45:52 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-19 09:45:52 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-19 09:45:52 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 09:45:52 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 09:45:52 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-19 09:45:52 [Info] download cert compare md5 same
2025-08-19 09:45:52 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 09:45:52 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 09:45:52 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-19 09:56:26 [Info] GetMessage : T_MSG_CHECK
2025-08-19 09:56:26 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU1Njg1ODYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1NjExNzg2LCJzdWIiOiJSVEFQX0lEWF8xNjA5MDNfMTc1NTU2ODU4NjQxMSJ9.nlGs7xLJKVWIxJTfscLZjAkq0x_Fv9mHykUK2QfcCIg has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 09:56:37 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 09:56:37 [Info] ipc client:Rtap229341755568597_handler Reg client_name:Rtap229341755568597 on WhiteList
2025-08-19 09:56:37 [Info] start rtap process success, pid is 4244, argument is Rtap229341755568597
2025-08-19 09:56:37 [Info] New ClientConnectNotify : Rtap229341755568597, id is 00000548
2025-08-19 09:56:37 [Info] ipc client:Rtap229341755568597 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 09:56:38 [Info] Rtap Platform Rtap229341755568597 execv work --tcp-connect-check on pid 4244
2025-08-19 09:56:40 [Info] csrss.exe open proc 4244 AliSecCheck.ex
2025-08-19 09:56:41 [Info] csrss.exe open thread 4244 AliSecCheck.ex
2025-08-19 09:56:45 [Info] Done Work --tcp-connect-check:1
2025-08-19 09:56:45 [Info] Rtap Platform Rtap229341755568597 Exit:normal exit
2025-08-19 09:56:47 [Info] ClientDisConnectNotify : Rtap229341755568597, id is 00000548
2025-08-19 10:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10190","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10360","aliyundun_upload_time":"1755569329","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 10:16:06 [Info] GetMessage : T_MSG_CHECK
2025-08-19 10:16:06 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU1Njk3NjYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1NjEyOTY2LCJzdWIiOiJSVEFQX0lEWF8xNjA5MTBfMTc1NTU2OTc2NjE0MCJ9.XAn1DpMqPSntAjFghLO-n07pEs2UL6YpPr_p-oKtA0Y has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 10:16:19 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 10:16:19 [Info] ipc client:Rtap267941755569779_handler Reg client_name:Rtap267941755569779 on WhiteList
2025-08-19 10:16:19 [Info] start rtap process success, pid is 4716, argument is Rtap267941755569779
2025-08-19 10:16:19 [Info] New ClientConnectNotify : Rtap267941755569779, id is 000004D8
2025-08-19 10:16:19 [Info] ipc client:Rtap267941755569779 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 10:16:19 [Info] Rtap Platform Rtap267941755569779 execv work --windows-registry-check on pid 4716
2025-08-19 10:16:20 [Info] csrss.exe open proc 4716 AliSecCheck.ex
2025-08-19 10:16:21 [Info] csrss.exe open thread 4716 AliSecCheck.ex
2025-08-19 10:16:21 [Info] GetMessage : T_MSG_CHECK
2025-08-19 10:16:21 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU1Njk3ODEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1NjEyOTgxLCJzdWIiOiJSVEFQX0lEWF8xNjA5MDVfMTc1NTU2OTc4MTY5MiJ9.SM2uysj52Tuy1wVz7Swzdf1hctyz7cVJdv48RREtcsQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 10:16:32 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 10:16:32 [Info] ipc client:Rtap268371755569792_handler Reg client_name:Rtap268371755569792 on WhiteList
2025-08-19 10:16:32 [Info] start rtap process success, pid is 1048, argument is Rtap268371755569792
2025-08-19 10:16:32 [Info] New ClientConnectNotify : Rtap268371755569792, id is 00000504
2025-08-19 10:16:32 [Info] ipc client:Rtap268371755569792 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 10:16:33 [Info] Rtap Platform Rtap268371755569792 execv work --windows-schedule-task-check on pid 1048
2025-08-19 10:16:33 [Info] csrss.exe open proc 1048 AliSecCheck.ex
2025-08-19 10:16:34 [Info] csrss.exe open thread 1048 AliSecCheck.ex
2025-08-19 10:16:56 [Info] Done Work --windows-registry-check:1
2025-08-19 10:16:56 [Info] Rtap Platform Rtap267941755569779 Exit:normal exit
2025-08-19 10:16:58 [Info] ClientDisConnectNotify : Rtap267941755569779, id is 000004D8
2025-08-19 10:17:06 [Info] Done Work --windows-schedule-task-check:1
2025-08-19 10:17:06 [Info] Rtap Platform Rtap268371755569792 Exit:normal exit
2025-08-19 10:17:08 [Info] ClientDisConnectNotify : Rtap268371755569792, id is 00000504
2025-08-19 10:17:30 [Info] GetMessage : T_MSG_CHECK
2025-08-19 10:17:30 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU1Njk4NTAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1NjEzMDUwLCJzdWIiOiJSVEFQX0lEWF8xNjA5MThfMTc1NTU2OTg1MDQ0NyJ9.ingz4up03GRGt28PCHHWVYYHyrF8Djm6aJumWAnF9x8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 10:17:42 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 10:17:42 [Info] ipc client:Rtap270651755569862_handler Reg client_name:Rtap270651755569862 on WhiteList
2025-08-19 10:17:42 [Info] start rtap process success, pid is 4464, argument is Rtap270651755569862
2025-08-19 10:17:43 [Info] New ClientConnectNotify : Rtap270651755569862, id is 000004B8
2025-08-19 10:17:43 [Info] ipc client:Rtap270651755569862 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 10:17:43 [Info] Rtap Platform Rtap270651755569862 execv work --windows-driver-version-check on pid 4464
2025-08-19 10:17:44 [Info] csrss.exe open proc 4464 AliSecCheck.ex
2025-08-19 10:17:45 [Info] csrss.exe open thread 4464 AliSecCheck.ex
2025-08-19 10:17:50 [Info] Done Work --windows-driver-version-check:1
2025-08-19 10:17:50 [Info] Rtap Platform Rtap270651755569862 Exit:normal exit
2025-08-19 10:17:52 [Info] ClientDisConnectNotify : Rtap270651755569862, id is 000004B8
2025-08-19 10:32:47 [Info] TotalPhys:2047,AvailPhys:328,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6572,AvailPageFile:1235,SelfWorkingSet:10032, SelfPageFile:13724
2025-08-19 10:32:47 [Info] CommitTotal:5337,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:328,SystemCache:23,KernelTotal:268,KernelPaged:188,KernelNonpaged:79,PageSize:4096,HandleCount:27618,ProcessCount:52,ThreadCount:733
2025-08-19 11:05:43 [Info] GetMessage : T_MSG_CHECK
2025-08-19 11:05:43 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU1NzI3NDMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1NjE1OTQzLCJzdWIiOiJSVEFQX0lEWF8xNjA5MDdfMTc1NTU3Mjc0MzgxNCJ9.3qvoMuYiQZlz0YqmttEzU_WpMAo2E1G8e11OFqyW8Ak has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 11:05:55 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 11:05:55 [Info] ipc client:Rtap37441755572755_handler Reg client_name:Rtap37441755572755 on WhiteList
2025-08-19 11:05:55 [Info] start rtap process success, pid is 3888, argument is Rtap37441755572755
2025-08-19 11:05:55 [Info] New ClientConnectNotify : Rtap37441755572755, id is 00000504
2025-08-19 11:05:55 [Info] ipc client:Rtap37441755572755 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 11:05:56 [Info] Rtap Platform Rtap37441755572755 execv work --windows-autorun-item-check on pid 3888
2025-08-19 11:05:58 [Info] csrss.exe open proc 3888 AliSecCheck.ex
2025-08-19 11:05:59 [Info] csrss.exe open thread 3888 AliSecCheck.ex
2025-08-19 11:06:11 [Info] Done Work --windows-autorun-item-check:1
2025-08-19 11:06:11 [Info] Rtap Platform Rtap37441755572755 Exit:normal exit
2025-08-19 11:06:13 [Info] ClientDisConnectNotify : Rtap37441755572755, id is 00000504
2025-08-19 11:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10097","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10348","aliyundun_upload_time":"1755572916","aliyundun_write_pid_times":"0","ipc_send_count":"151","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 11:33:44 [Info] TotalPhys:2047,AvailPhys:308,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6572,AvailPageFile:1216,SelfWorkingSet:10024, SelfPageFile:13760
2025-08-19 11:33:44 [Info] CommitTotal:5356,CommitLimit:6572,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:308,SystemCache:29,KernelTotal:267,KernelPaged:187,KernelNonpaged:79,PageSize:4096,HandleCount:27655,ProcessCount:52,ThreadCount:733
2025-08-19 11:56:55 [Info] nCurrentClock is 3312142000, nCurrentTime is 1755575815
2025-08-19 11:56:55 [Info] SendMessage T_MSG_LOGIN
2025-08-19 11:56:56 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-19 11:56:56 [Info] begin to enable self guard after reconnect
2025-08-19 11:56:56 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-19 11:56:56 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-19 11:56:56 [Info] GetMessage : T_MSG_CHECK
2025-08-19 11:56:56 [Info] task 0523c664-3997-43ff-a190-7752483787b3 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 11:57:04 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-19 11:57:04 [Info] key : cpu, value : 10
2025-08-19 11:57:04 [Info] key : rio, value : 20480
2025-08-19 11:57:04 [Info] key : wio, value : 20480
2025-08-19 11:57:04 [Info] key : cpu_all, value : 0
2025-08-19 11:57:04 [Info] key : max_pid_check, value : 200
2025-08-19 11:57:04 [Info] key : throw_dump, value : 0
2025-08-19 11:57:04 [Info] key : hash_mode, value : 1
2025-08-19 11:57:04 [Info] key : mem, value : 200
2025-08-19 11:57:04 [Info] can not find key max_fd in online conf
2025-08-19 11:57:04 [Info] key : proc_limit, value : 1
2025-08-19 11:57:04 [Info] key : resource_limit_mode, value : 3
2025-08-19 11:57:04 [Info] key : rtap_update_mode, value : 1
2025-08-19 11:57:04 [Info] can not find key debug in online conf
2025-08-19 11:57:04 [Info] can not find key update_mode in online conf
2025-08-19 11:57:04 [Info] can not find key http_mode in online conf
2025-08-19 11:57:04 [Info] can not find key rtap_enable in online conf
2025-08-19 11:57:04 [Info] can not find key rtap_new_agent in online conf
2025-08-19 11:57:04 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-19 11:57:04 [Info] can not find key mem_low_mark in online conf
2025-08-19 11:57:04 [Info] can not find key obnormal_report_interval in online conf
2025-08-19 11:57:04 [Info] key : cache_mode, value : 0
2025-08-19 11:57:04 [Info] key : abnormal_monitor_mode, value : 3
2025-08-19 11:57:04 [Info] key : queue_size_ratio, value : 80
2025-08-19 11:57:04 [Info] queue_size_ratio is 80
2025-08-19 11:57:04 [Info] resource limit mode and max limit cpu is not change
2025-08-19 11:57:04 [Info] set hash mode 1
2025-08-19 11:57:04 [Info] RTAP timeout config:9600000
2025-08-19 11:57:04 [Info] self_guard_mode config is 0
2025-08-19 11:57:04 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-19 11:57:09 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 11:57:09 [Info] ipc client:Rtap137831755575829_handler Reg client_name:Rtap137831755575829 on WhiteList
2025-08-19 11:57:09 [Info] start rtap process success, pid is 4436, argument is Rtap137831755575829
2025-08-19 11:57:12 [Info] csrss.exe open proc 4436 AliSecCheck.ex
2025-08-19 11:57:13 [Info] csrss.exe open thread 4436 AliSecCheck.ex
2025-08-19 11:57:14 [Info] csrss.exe open thread 4436 AliSecCheck.ex
2025-08-19 11:57:15 [Info] csrss.exe open thread 4436 AliSecCheck.ex
2025-08-19 11:57:15 [Info] New ClientConnectNotify : Rtap137831755575829, id is 000004B8
2025-08-19 11:57:15 [Info] ipc client:Rtap137831755575829 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 11:57:16 [Info] Rtap Platform Rtap137831755575829 execv work --windows-sysinfoext-check on pid 4436
2025-08-19 11:57:27 [Info] Done Work --windows-sysinfoext-check:1
2025-08-19 11:57:27 [Info] Rtap Platform Rtap137831755575829 Exit:normal exit
2025-08-19 11:57:29 [Info] ClientDisConnectNotify : Rtap137831755575829, id is 000004B8
2025-08-19 12:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10006","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10172","aliyundun_upload_time":"1755576534","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 12:34:43 [Info] TotalPhys:2047,AvailPhys:752,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6636,AvailPageFile:1293,SelfWorkingSet:10128, SelfPageFile:13888
2025-08-19 12:34:43 [Info] CommitTotal:5343,CommitLimit:6636,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:752,SystemCache:127,KernelTotal:260,KernelPaged:181,KernelNonpaged:78,PageSize:4096,HandleCount:27645,ProcessCount:52,ThreadCount:730
2025-08-19 13:03:15 [Info] get meta data success by v2
2025-08-19 13:03:15 [Info] get empty metaserver config
2025-08-19 13:03:15 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-19 13:03:15 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-19 13:03:15 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-19 13:03:15 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-19 13:03:15 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 13:03:15 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 13:03:15 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-19 13:03:15 [Info] download cert compare md5 same
2025-08-19 13:03:15 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 13:03:15 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 13:03:15 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-19 13:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10010","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10128","aliyundun_upload_time":"1755580142","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"63","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 13:35:40 [Info] TotalPhys:2047,AvailPhys:749,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6636,AvailPageFile:1289,SelfWorkingSet:9960, SelfPageFile:13632
2025-08-19 13:35:40 [Info] CommitTotal:5347,CommitLimit:6636,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:749,SystemCache:145,KernelTotal:259,KernelPaged:181,KernelNonpaged:78,PageSize:4096,HandleCount:27734,ProcessCount:52,ThreadCount:743
2025-08-19 14:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9983","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10112","aliyundun_upload_time":"1755583717","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"63","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 14:36:36 [Info] TotalPhys:2047,AvailPhys:747,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6636,AvailPageFile:1288,SelfWorkingSet:9992, SelfPageFile:13616
2025-08-19 14:36:36 [Info] CommitTotal:5347,CommitLimit:6636,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:747,SystemCache:161,KernelTotal:260,KernelPaged:181,KernelNonpaged:78,PageSize:4096,HandleCount:27649,ProcessCount:52,ThreadCount:734
2025-08-19 15:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9998","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10040","aliyundun_upload_time":"1755587326","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"63","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 15:37:33 [Info] TotalPhys:2047,AvailPhys:734,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6636,AvailPageFile:1285,SelfWorkingSet:10052, SelfPageFile:13688
2025-08-19 15:37:33 [Info] CommitTotal:5351,CommitLimit:6636,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:734,SystemCache:182,KernelTotal:260,KernelPaged:181,KernelNonpaged:79,PageSize:4096,HandleCount:27629,ProcessCount:52,ThreadCount:741
2025-08-19 16:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10023","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10064","aliyundun_upload_time":"1755590934","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 16:20:31 [Info] get meta data success by v2
2025-08-19 16:20:31 [Info] get empty metaserver config
2025-08-19 16:20:31 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-19 16:20:31 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-19 16:20:31 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-19 16:20:31 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-19 16:20:31 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 16:20:31 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 16:20:31 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-19 16:20:31 [Info] download cert compare md5 same
2025-08-19 16:20:31 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 16:20:31 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 16:20:31 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-19 16:38:29 [Info] TotalPhys:2047,AvailPhys:730,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6636,AvailPageFile:1281,SelfWorkingSet:10064, SelfPageFile:13896
2025-08-19 16:38:29 [Info] CommitTotal:5354,CommitLimit:6636,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:730,SystemCache:186,KernelTotal:260,KernelPaged:181,KernelNonpaged:78,PageSize:4096,HandleCount:27532,ProcessCount:52,ThreadCount:734
2025-08-19 17:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10050","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10120","aliyundun_upload_time":"1755594543","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 17:25:49 [Info] nCurrentClock is 3330143500, nCurrentTime is 1755595549
2025-08-19 17:25:49 [Info] SendMessage T_MSG_LOGIN
2025-08-19 17:25:49 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-19 17:25:49 [Info] begin to enable self guard after reconnect
2025-08-19 17:25:49 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-19 17:25:49 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-19 17:25:49 [Info] GetMessage : T_MSG_CHECK
2025-08-19 17:25:49 [Info] task 558c60a2-1795-4355-8404-242489e52b8f has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 17:25:57 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-19 17:25:57 [Info] key : cpu, value : 10
2025-08-19 17:25:57 [Info] key : rio, value : 20480
2025-08-19 17:25:57 [Info] key : wio, value : 20480
2025-08-19 17:25:57 [Info] key : cpu_all, value : 0
2025-08-19 17:25:57 [Info] key : max_pid_check, value : 200
2025-08-19 17:25:57 [Info] key : throw_dump, value : 0
2025-08-19 17:25:57 [Info] key : hash_mode, value : 1
2025-08-19 17:25:57 [Info] key : mem, value : 200
2025-08-19 17:25:57 [Info] can not find key max_fd in online conf
2025-08-19 17:25:57 [Info] key : proc_limit, value : 1
2025-08-19 17:25:57 [Info] key : resource_limit_mode, value : 3
2025-08-19 17:25:57 [Info] key : rtap_update_mode, value : 1
2025-08-19 17:25:57 [Info] can not find key debug in online conf
2025-08-19 17:25:57 [Info] can not find key update_mode in online conf
2025-08-19 17:25:57 [Info] can not find key http_mode in online conf
2025-08-19 17:25:57 [Info] can not find key rtap_enable in online conf
2025-08-19 17:25:57 [Info] can not find key rtap_new_agent in online conf
2025-08-19 17:25:57 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-19 17:25:57 [Info] can not find key mem_low_mark in online conf
2025-08-19 17:25:57 [Info] can not find key obnormal_report_interval in online conf
2025-08-19 17:25:57 [Info] key : cache_mode, value : 0
2025-08-19 17:25:57 [Info] key : abnormal_monitor_mode, value : 3
2025-08-19 17:25:57 [Info] key : queue_size_ratio, value : 80
2025-08-19 17:25:57 [Info] queue_size_ratio is 80
2025-08-19 17:25:57 [Info] resource limit mode and max limit cpu is not change
2025-08-19 17:25:57 [Info] set hash mode 1
2025-08-19 17:25:57 [Info] RTAP timeout config:9600000
2025-08-19 17:25:57 [Info] self_guard_mode config is 0
2025-08-19 17:26:03 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 17:26:03 [Info] ipc client:Rtap126901755595563_handler Reg client_name:Rtap126901755595563 on WhiteList
2025-08-19 17:26:03 [Info] start rtap process success, pid is 4564, argument is Rtap126901755595563
2025-08-19 17:26:03 [Info] New ClientConnectNotify : Rtap126901755595563, id is 00000504
2025-08-19 17:26:03 [Info] ipc client:Rtap126901755595563 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 17:26:03 [Info] Rtap Platform Rtap126901755595563 execv work --windows-sysinfoext-check on pid 4564
2025-08-19 17:26:05 [Info] csrss.exe open proc 4564 AliSecCheck.ex
2025-08-19 17:26:06 [Info] csrss.exe open thread 4564 AliSecCheck.ex
2025-08-19 17:26:11 [Info] Done Work --windows-sysinfoext-check:1
2025-08-19 17:26:11 [Info] Rtap Platform Rtap126901755595563 Exit:normal exit
2025-08-19 17:26:13 [Info] ClientDisConnectNotify : Rtap126901755595563, id is 00000504
2025-08-19 17:39:29 [Info] TotalPhys:2047,AvailPhys:734,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6636,AvailPageFile:1284,SelfWorkingSet:10028, SelfPageFile:13716
2025-08-19 17:39:29 [Info] CommitTotal:5352,CommitLimit:6636,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:734,SystemCache:264,KernelTotal:264,KernelPaged:185,KernelNonpaged:78,PageSize:4096,HandleCount:27725,ProcessCount:53,ThreadCount:747
2025-08-19 18:08:44 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10028","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10176","aliyundun_upload_time":"1755598124","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"63","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 18:40:26 [Info] TotalPhys:2047,AvailPhys:728,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6636,AvailPageFile:1289,SelfWorkingSet:9960, SelfPageFile:13708
2025-08-19 18:40:26 [Info] CommitTotal:5347,CommitLimit:6636,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:728,SystemCache:270,KernelTotal:263,KernelPaged:184,KernelNonpaged:78,PageSize:4096,HandleCount:27530,ProcessCount:52,ThreadCount:727
2025-08-19 18:58:22 [Info] GetMessage : T_MSG_CHECK
2025-08-19 18:58:22 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU2MDExMDIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1NjQ0MzAyLCJzdWIiOiJSVEFQX0lEWF8xNjA5NzdfMTc1NTYwMTEwMjE3NCJ9.EAn6ZdB0bYDatBYs6duIYEhrw1-2oTGfIhbUbr4k30s has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 18:58:33 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 18:58:33 [Info] ipc client:Rtap308141755601113_handler Reg client_name:Rtap308141755601113 on WhiteList
2025-08-19 18:58:33 [Info] start rtap process success, pid is 1784, argument is Rtap308141755601113
2025-08-19 18:58:33 [Info] New ClientConnectNotify : Rtap308141755601113, id is 000004B8
2025-08-19 18:58:33 [Info] ipc client:Rtap308141755601113 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 18:58:33 [Info] Rtap Platform Rtap308141755601113 execv work --secnet_rasp_agent on pid 1784
2025-08-19 18:58:36 [Info] csrss.exe open proc 1784 AliSecCheck.ex
2025-08-19 18:58:37 [Info] csrss.exe open thread 1784 AliSecCheck.ex
2025-08-19 18:58:38 [Info] csrss.exe open thread 1784 AliSecCheck.ex
2025-08-19 18:58:40 [Info] Done Work --secnet_rasp_agent:1
2025-08-19 18:58:40 [Info] Rtap Platform Rtap308141755601113 Exit:normal exit
2025-08-19 18:58:42 [Info] ClientDisConnectNotify : Rtap308141755601113, id is 000004B8
2025-08-19 19:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9977","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10048","aliyundun_upload_time":"1755601743","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"65","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 19:37:55 [Info] get meta data success by v2
2025-08-19 19:37:55 [Info] get empty metaserver config
2025-08-19 19:37:55 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-19 19:37:55 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-19 19:37:55 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-19 19:37:55 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-19 19:37:55 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 19:37:55 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 19:37:55 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-19 19:37:55 [Info] download cert compare md5 same
2025-08-19 19:37:55 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 19:37:55 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 19:37:55 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-19 19:41:22 [Info] TotalPhys:2047,AvailPhys:683,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6636,AvailPageFile:1269,SelfWorkingSet:10144, SelfPageFile:14044
2025-08-19 19:41:22 [Info] CommitTotal:5366,CommitLimit:6636,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:683,SystemCache:272,KernelTotal:264,KernelPaged:185,KernelNonpaged:78,PageSize:4096,HandleCount:27570,ProcessCount:52,ThreadCount:728
2025-08-19 20:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9982","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10144","aliyundun_upload_time":"1755605317","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 20:42:19 [Info] TotalPhys:2047,AvailPhys:672,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6700,AvailPageFile:1342,SelfWorkingSet:10124, SelfPageFile:13828
2025-08-19 20:42:19 [Info] CommitTotal:5358,CommitLimit:6700,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:672,SystemCache:151,KernelTotal:259,KernelPaged:180,KernelNonpaged:78,PageSize:4096,HandleCount:27992,ProcessCount:53,ThreadCount:759
2025-08-19 21:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10021","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10136","aliyundun_upload_time":"1755608925","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 21:43:16 [Info] TotalPhys:2047,AvailPhys:672,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6700,AvailPageFile:1347,SelfWorkingSet:9968, SelfPageFile:13752
2025-08-19 21:43:16 [Info] CommitTotal:5353,CommitLimit:6700,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:672,SystemCache:177,KernelTotal:259,KernelPaged:180,KernelNonpaged:78,PageSize:4096,HandleCount:27802,ProcessCount:53,ThreadCount:735
2025-08-19 22:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10020","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10060","aliyundun_upload_time":"1755612530","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 22:44:13 [Info] TotalPhys:2047,AvailPhys:633,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6700,AvailPageFile:1334,SelfWorkingSet:10036, SelfPageFile:13632
2025-08-19 22:44:13 [Info] CommitTotal:5366,CommitLimit:6700,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:633,SystemCache:197,KernelTotal:260,KernelPaged:181,KernelNonpaged:78,PageSize:4096,HandleCount:27801,ProcessCount:53,ThreadCount:736
2025-08-19 22:54:49 [Info] nCurrentClock is 3348144100, nCurrentTime is 1755615289
2025-08-19 22:54:49 [Info] SendMessage T_MSG_LOGIN
2025-08-19 22:54:49 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-19 22:54:49 [Info] begin to enable self guard after reconnect
2025-08-19 22:54:49 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-19 22:54:50 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-19 22:54:50 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-19 22:54:50 [Info] key : cpu, value : 10
2025-08-19 22:54:50 [Info] key : rio, value : 20480
2025-08-19 22:54:50 [Info] key : wio, value : 20480
2025-08-19 22:54:50 [Info] key : cpu_all, value : 0
2025-08-19 22:54:50 [Info] key : max_pid_check, value : 200
2025-08-19 22:54:50 [Info] key : throw_dump, value : 0
2025-08-19 22:54:50 [Info] key : hash_mode, value : 1
2025-08-19 22:54:50 [Info] key : mem, value : 200
2025-08-19 22:54:50 [Info] can not find key max_fd in online conf
2025-08-19 22:54:50 [Info] key : proc_limit, value : 1
2025-08-19 22:54:50 [Info] key : resource_limit_mode, value : 3
2025-08-19 22:54:50 [Info] key : rtap_update_mode, value : 1
2025-08-19 22:54:50 [Info] can not find key debug in online conf
2025-08-19 22:54:50 [Info] can not find key update_mode in online conf
2025-08-19 22:54:50 [Info] can not find key http_mode in online conf
2025-08-19 22:54:50 [Info] can not find key rtap_enable in online conf
2025-08-19 22:54:50 [Info] can not find key rtap_new_agent in online conf
2025-08-19 22:54:50 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-19 22:54:50 [Info] can not find key mem_low_mark in online conf
2025-08-19 22:54:50 [Info] can not find key obnormal_report_interval in online conf
2025-08-19 22:54:50 [Info] key : cache_mode, value : 0
2025-08-19 22:54:50 [Info] key : abnormal_monitor_mode, value : 3
2025-08-19 22:54:50 [Info] key : queue_size_ratio, value : 80
2025-08-19 22:54:50 [Info] queue_size_ratio is 80
2025-08-19 22:54:50 [Info] resource limit mode and max limit cpu is not change
2025-08-19 22:54:50 [Info] set hash mode 1
2025-08-19 22:54:50 [Info] RTAP timeout config:9600000
2025-08-19 22:54:50 [Info] self_guard_mode config is 0
2025-08-19 22:54:50 [Info] GetMessage : T_MSG_CHECK
2025-08-19 22:54:50 [Info] task 5a60608a-9557-4897-ac2f-8742f890154c has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 22:55:00 [Info] GetMessage : T_MSG_CHECK
2025-08-19 22:55:00 [Info] task 39c80e014234a3e2e2acd6dc9cf008d6 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-19 22:55:04 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 22:55:04 [Info] ipc client:Rtap116201755615304_handler Reg client_name:Rtap116201755615304 on WhiteList
2025-08-19 22:55:04 [Info] start rtap process success, pid is 3592, argument is Rtap116201755615304
2025-08-19 22:55:05 [Info] New ClientConnectNotify : Rtap116201755615304, id is 00000504
2025-08-19 22:55:05 [Info] ipc client:Rtap116201755615304 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 22:55:05 [Info] Rtap Platform Rtap116201755615304 execv work --windows-sysinfoext-check on pid 3592
2025-08-19 22:55:06 [Info] csrss.exe open proc 3592 AliSecCheck.ex
2025-08-19 22:55:07 [Info] csrss.exe open thread 3592 AliSecCheck.ex
2025-08-19 22:55:08 [Info] csrss.exe open thread 3592 AliSecCheck.ex
2025-08-19 22:55:09 [Info] csrss.exe open thread 3592 AliSecCheck.ex
2025-08-19 22:55:10 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-19 22:55:10 [Info] ipc client:Rtap116391755615310_handler Reg client_name:Rtap116391755615310 on WhiteList
2025-08-19 22:55:10 [Info] start rtap process success, pid is 2408, argument is Rtap116391755615310
2025-08-19 22:55:10 [Info] New ClientConnectNotify : Rtap116391755615310, id is 0000051C
2025-08-19 22:55:10 [Info] csrss.exe open thread 3592 AliSecCheck.ex
2025-08-19 22:55:10 [Info] ipc client:Rtap116391755615310 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-19 22:55:11 [Info] Rtap Platform Rtap116391755615310 execv work --windows-vul-check on pid 2408
2025-08-19 22:55:13 [Info] csrss.exe open proc 2408 AliSecCheck.ex
2025-08-19 22:55:14 [Info] csrss.exe open thread 2408 AliSecCheck.ex
2025-08-19 22:55:18 [Info] Done Work --windows-sysinfoext-check:1
2025-08-19 22:55:18 [Info] Rtap Platform Rtap116201755615304 Exit:normal exit
2025-08-19 22:55:20 [Info] ClientDisConnectNotify : Rtap116201755615304, id is 00000504
2025-08-19 22:55:20 [Info] Done Work --windows-vul-check:1
2025-08-19 22:55:20 [Info] Rtap Platform Rtap116391755615310 Exit:normal exit
2025-08-19 22:55:22 [Info] ClientDisConnectNotify : Rtap116391755615310, id is 0000051C
2025-08-19 22:55:22 [Info] get meta data success by v2
2025-08-19 22:55:22 [Info] get empty metaserver config
2025-08-19 22:55:22 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-19 22:55:23 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-19 22:55:23 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-19 22:55:23 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-19 22:55:23 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 22:55:23 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-19 22:55:23 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-19 22:55:23 [Info] download cert compare md5 same
2025-08-19 22:55:23 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 22:55:23 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-19 22:55:23 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-19 23:08:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10048","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10176","aliyundun_upload_time":"1755616111","aliyundun_write_pid_times":"0","ipc_send_count":"149","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-19 23:45:13 [Info] TotalPhys:2047,AvailPhys:541,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6700,AvailPageFile:1279,SelfWorkingSet:10060, SelfPageFile:13772
2025-08-19 23:45:13 [Info] CommitTotal:5421,CommitLimit:6700,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:541,SystemCache:190,KernelTotal:260,KernelPaged:182,KernelNonpaged:78,PageSize:4096,HandleCount:27825,ProcessCount:53,ThreadCount:741
2025-08-26 01:02:35 [Info] TotalPhys:2047,AvailPhys:335,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6585,AvailPageFile:1340,SelfWorkingSet:10096, SelfPageFile:13764
2025-08-26 01:02:35 [Info] CommitTotal:5244,CommitLimit:6585,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:335,SystemCache:4194303,KernelTotal:257,KernelPaged:184,KernelNonpaged:73,PageSize:4096,HandleCount:27923,ProcessCount:53,ThreadCount:733
2025-08-26 01:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10018","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10096","aliyundun_upload_time":"1756141725","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 01:16:41 [Info] GetMessage : T_MSG_CHECK
2025-08-26 01:16:41 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTYxNDIyMDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2MTg1NDAwLCJzdWIiOiJSVEFQX0lEWF8xNjE0NThfMTc1NjE0MjIwMDkwOCJ9.2XL4m0U5QlzJgj2aPbrwUf1kXrijjMJjLen_1a0Z2Dw has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 01:16:53 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 01:16:53 [Info] ipc client:Rtap283471756142213_handler Reg client_name:Rtap283471756142213 on WhiteList
2025-08-26 01:16:53 [Info] start rtap process success, pid is 4464, argument is Rtap283471756142213
2025-08-26 01:16:53 [Info] New ClientConnectNotify : Rtap283471756142213, id is 0000053C
2025-08-26 01:16:53 [Info] ipc client:Rtap283471756142213 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 01:16:53 [Info] Rtap Platform Rtap283471756142213 execv work --sca on pid 4464
2025-08-26 01:16:54 [Info] csrss.exe open proc 4464 AliSecCheck.ex
2025-08-26 01:16:55 [Info] csrss.exe open thread 4464 AliSecCheck.ex
2025-08-26 01:16:56 [Info] csrss.exe open thread 4464 AliSecCheck.ex
2025-08-26 01:17:36 [Info] csrss.exe open thread 4464 AliSecCheck.ex
2025-08-26 01:17:57 [Info] Done Work --sca:1
2025-08-26 01:17:57 [Info] Rtap Platform Rtap283471756142213 Exit:normal exit
2025-08-26 01:17:59 [Info] ClientDisConnectNotify : Rtap283471756142213, id is 0000053C
2025-08-26 02:03:31 [Info] TotalPhys:2047,AvailPhys:246,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6585,AvailPageFile:1252,SelfWorkingSet:9972, SelfPageFile:13692
2025-08-26 02:03:31 [Info] CommitTotal:5332,CommitLimit:6585,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:246,SystemCache:4194303,KernelTotal:256,KernelPaged:183,KernelNonpaged:72,PageSize:4096,HandleCount:27893,ProcessCount:53,ThreadCount:729
2025-08-26 02:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9980","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10112","aliyundun_upload_time":"1756145342","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"88","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 03:04:26 [Info] nCurrentClock is 3834160100, nCurrentTime is 1756148666
2025-08-26 03:04:26 [Info] SendMessage T_MSG_LOGIN
2025-08-26 03:04:26 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-26 03:04:26 [Info] begin to enable self guard after reconnect
2025-08-26 03:04:26 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-26 03:04:27 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-26 03:04:27 [Info] GetMessage : T_MSG_CHECK
2025-08-26 03:04:27 [Info] task 379a595c-4ba8-42b7-a46c-d1c35f80fd02 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 03:04:27 [Info] TotalPhys:2047,AvailPhys:231,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6585,AvailPageFile:1253,SelfWorkingSet:9988, SelfPageFile:14140
2025-08-26 03:04:27 [Info] CommitTotal:5331,CommitLimit:6585,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:231,SystemCache:4194303,KernelTotal:256,KernelPaged:183,KernelNonpaged:72,PageSize:4096,HandleCount:27961,ProcessCount:53,ThreadCount:750
2025-08-26 03:04:35 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-26 03:04:35 [Info] key : cpu, value : 10
2025-08-26 03:04:35 [Info] key : rio, value : 20480
2025-08-26 03:04:35 [Info] key : wio, value : 20480
2025-08-26 03:04:35 [Info] key : cpu_all, value : 0
2025-08-26 03:04:35 [Info] key : max_pid_check, value : 200
2025-08-26 03:04:35 [Info] key : throw_dump, value : 0
2025-08-26 03:04:35 [Info] key : hash_mode, value : 1
2025-08-26 03:04:35 [Info] key : mem, value : 200
2025-08-26 03:04:35 [Info] can not find key max_fd in online conf
2025-08-26 03:04:35 [Info] key : proc_limit, value : 1
2025-08-26 03:04:35 [Info] key : resource_limit_mode, value : 3
2025-08-26 03:04:35 [Info] key : rtap_update_mode, value : 1
2025-08-26 03:04:35 [Info] can not find key debug in online conf
2025-08-26 03:04:35 [Info] can not find key update_mode in online conf
2025-08-26 03:04:35 [Info] can not find key http_mode in online conf
2025-08-26 03:04:35 [Info] can not find key rtap_enable in online conf
2025-08-26 03:04:35 [Info] can not find key rtap_new_agent in online conf
2025-08-26 03:04:35 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-26 03:04:35 [Info] can not find key mem_low_mark in online conf
2025-08-26 03:04:35 [Info] can not find key obnormal_report_interval in online conf
2025-08-26 03:04:35 [Info] key : cache_mode, value : 0
2025-08-26 03:04:35 [Info] key : abnormal_monitor_mode, value : 3
2025-08-26 03:04:35 [Info] key : queue_size_ratio, value : 80
2025-08-26 03:04:35 [Info] queue_size_ratio is 80
2025-08-26 03:04:35 [Info] resource limit mode and max limit cpu is not change
2025-08-26 03:04:35 [Info] set hash mode 1
2025-08-26 03:04:35 [Info] RTAP timeout config:9600000
2025-08-26 03:04:35 [Info] self_guard_mode config is 0
2025-08-26 03:04:42 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 03:04:42 [Info] ipc client:Rtap167041756148682_handler Reg client_name:Rtap167041756148682 on WhiteList
2025-08-26 03:04:42 [Info] start rtap process success, pid is 2136, argument is Rtap167041756148682
2025-08-26 03:04:43 [Info] New ClientConnectNotify : Rtap167041756148682, id is 00000540
2025-08-26 03:04:43 [Info] ipc client:Rtap167041756148682 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 03:04:43 [Info] Rtap Platform Rtap167041756148682 execv work --windows-sysinfoext-check on pid 2136
2025-08-26 03:04:43 [Info] csrss.exe open proc 2136 AliSecCheck.ex
2025-08-26 03:04:44 [Info] csrss.exe open thread 2136 AliSecCheck.ex
2025-08-26 03:04:45 [Info] csrss.exe open thread 2136 AliSecCheck.ex
2025-08-26 03:04:54 [Info] Done Work --windows-sysinfoext-check:1
2025-08-26 03:04:54 [Info] Rtap Platform Rtap167041756148682 Exit:normal exit
2025-08-26 03:04:56 [Info] ClientDisConnectNotify : Rtap167041756148682, id is 00000540
2025-08-26 03:05:16 [Info] get meta data success by v2
2025-08-26 03:05:16 [Info] get empty metaserver config
2025-08-26 03:05:16 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-26 03:05:16 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-26 03:05:16 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-26 03:05:16 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-26 03:05:16 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 03:05:16 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 03:05:16 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-26 03:05:16 [Info] download cert compare md5 same
2025-08-26 03:05:16 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 03:05:16 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 03:05:16 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-26 03:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9859","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"10016","aliyundun_upload_time":"1756148920","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"88","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 04:05:28 [Info] TotalPhys:2047,AvailPhys:258,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6585,AvailPageFile:1263,SelfWorkingSet:9848, SelfPageFile:13624
2025-08-26 04:05:28 [Info] CommitTotal:5321,CommitLimit:6585,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:258,SystemCache:4194303,KernelTotal:256,KernelPaged:184,KernelNonpaged:72,PageSize:4096,HandleCount:27902,ProcessCount:53,ThreadCount:739
2025-08-26 04:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9886","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10020","aliyundun_upload_time":"1756152525","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 05:06:25 [Info] TotalPhys:2047,AvailPhys:186,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6585,AvailPageFile:1214,SelfWorkingSet:9820, SelfPageFile:13588
2025-08-26 05:06:25 [Info] CommitTotal:5370,CommitLimit:6585,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:186,SystemCache:4194303,KernelTotal:256,KernelPaged:183,KernelNonpaged:72,PageSize:4096,HandleCount:27917,ProcessCount:53,ThreadCount:740
2025-08-26 05:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9782","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9964","aliyundun_upload_time":"1756156134","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"89","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 06:07:21 [Info] TotalPhys:2047,AvailPhys:1037,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5714,AvailPageFile:1253,SelfWorkingSet:9880, SelfPageFile:13612
2025-08-26 06:07:21 [Info] CommitTotal:4460,CommitLimit:5714,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:1037,SystemCache:4194303,KernelTotal:253,KernelPaged:180,KernelNonpaged:72,PageSize:4096,HandleCount:27734,ProcessCount:53,ThreadCount:748
2025-08-26 06:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9848","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9960","aliyundun_upload_time":"1756159740","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"49","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 06:22:27 [Info] get meta data success by v2
2025-08-26 06:22:27 [Info] get empty metaserver config
2025-08-26 06:22:27 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-26 06:22:27 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-26 06:22:27 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-26 06:22:27 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-26 06:22:27 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 06:22:27 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 06:22:27 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-26 06:22:27 [Info] download cert compare md5 same
2025-08-26 06:22:27 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 06:22:27 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 06:22:27 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-26 07:08:18 [Info] TotalPhys:2047,AvailPhys:901,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5714,AvailPageFile:1126,SelfWorkingSet:9952, SelfPageFile:13636
2025-08-26 07:08:18 [Info] CommitTotal:4587,CommitLimit:5714,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:901,SystemCache:4194303,KernelTotal:253,KernelPaged:180,KernelNonpaged:72,PageSize:4096,HandleCount:27743,ProcessCount:53,ThreadCount:742
2025-08-26 07:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9951","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10024","aliyundun_upload_time":"1756163313","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"56","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 08:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9904","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9960","aliyundun_upload_time":"1756166918","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"56","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 08:09:14 [Info] TotalPhys:2047,AvailPhys:890,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5714,AvailPageFile:1118,SelfWorkingSet:9916, SelfPageFile:13608
2025-08-26 08:09:14 [Info] CommitTotal:4595,CommitLimit:5714,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:890,SystemCache:4194303,KernelTotal:253,KernelPaged:180,KernelNonpaged:72,PageSize:4096,HandleCount:27728,ProcessCount:53,ThreadCount:736
2025-08-26 08:33:40 [Info] nCurrentClock is 3852160600, nCurrentTime is 1756168420
2025-08-26 08:33:40 [Info] SendMessage T_MSG_LOGIN
2025-08-26 08:33:40 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-26 08:33:40 [Info] begin to enable self guard after reconnect
2025-08-26 08:33:40 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-26 08:33:40 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-26 08:33:40 [Info] GetMessage : T_MSG_CHECK
2025-08-26 08:33:40 [Info] task 989f9af6-7f34-446a-9931-403178de85be has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 08:33:49 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-26 08:33:49 [Info] key : cpu, value : 10
2025-08-26 08:33:49 [Info] key : rio, value : 20480
2025-08-26 08:33:49 [Info] key : wio, value : 20480
2025-08-26 08:33:49 [Info] key : cpu_all, value : 0
2025-08-26 08:33:49 [Info] key : max_pid_check, value : 200
2025-08-26 08:33:49 [Info] key : throw_dump, value : 0
2025-08-26 08:33:49 [Info] key : hash_mode, value : 1
2025-08-26 08:33:49 [Info] key : mem, value : 200
2025-08-26 08:33:49 [Info] can not find key max_fd in online conf
2025-08-26 08:33:49 [Info] key : proc_limit, value : 1
2025-08-26 08:33:49 [Info] key : resource_limit_mode, value : 3
2025-08-26 08:33:49 [Info] key : rtap_update_mode, value : 1
2025-08-26 08:33:49 [Info] can not find key debug in online conf
2025-08-26 08:33:49 [Info] can not find key update_mode in online conf
2025-08-26 08:33:49 [Info] can not find key http_mode in online conf
2025-08-26 08:33:49 [Info] can not find key rtap_enable in online conf
2025-08-26 08:33:49 [Info] can not find key rtap_new_agent in online conf
2025-08-26 08:33:49 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-26 08:33:49 [Info] can not find key mem_low_mark in online conf
2025-08-26 08:33:49 [Info] can not find key obnormal_report_interval in online conf
2025-08-26 08:33:49 [Info] key : cache_mode, value : 0
2025-08-26 08:33:49 [Info] key : abnormal_monitor_mode, value : 3
2025-08-26 08:33:49 [Info] key : queue_size_ratio, value : 80
2025-08-26 08:33:49 [Info] queue_size_ratio is 80
2025-08-26 08:33:49 [Info] resource limit mode and max limit cpu is not change
2025-08-26 08:33:49 [Info] set hash mode 1
2025-08-26 08:33:49 [Info] RTAP timeout config:9600000
2025-08-26 08:33:49 [Info] self_guard_mode config is 0
2025-08-26 08:33:49 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-26 08:33:54 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 08:33:54 [Info] ipc client:Rtap156691756168434_handler Reg client_name:Rtap156691756168434 on WhiteList
2025-08-26 08:33:54 [Info] start rtap process success, pid is 4220, argument is Rtap156691756168434
2025-08-26 08:33:55 [Info] New ClientConnectNotify : Rtap156691756168434, id is 000004F4
2025-08-26 08:33:55 [Info] Rtap Platform Rtap156691756168434 execv work --windows-sysinfoext-check on pid 4220
2025-08-26 08:33:55 [Info] ipc client:Rtap156691756168434 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 08:33:57 [Info] csrss.exe open proc 4220 AliSecCheck.ex
2025-08-26 08:33:58 [Info] csrss.exe open thread 4220 AliSecCheck.ex
2025-08-26 08:33:59 [Info] csrss.exe open thread 4220 AliSecCheck.ex
2025-08-26 08:34:00 [Info] csrss.exe open thread 4220 AliSecCheck.ex
2025-08-26 08:34:06 [Info] Done Work --windows-sysinfoext-check:1
2025-08-26 08:34:06 [Info] Rtap Platform Rtap156691756168434 Exit:normal exit
2025-08-26 08:34:09 [Info] ClientDisConnectNotify : Rtap156691756168434, id is 000004F4
2025-08-26 08:50:19 [Info] GetMessage : T_MSG_CHECK
2025-08-26 08:50:19 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTYxNjk0MTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2MjEyNjE5LCJzdWIiOiJSVEFQX0lEWF8xNjE0NDlfMTc1NjE2OTQxOTU3MCJ9.0IMWWoEjtwJNd8Ts7Xpt4-caYf6_q5x_Erb4c-3_7gE has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 08:50:30 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 08:50:30 [Info] ipc client:Rtap189221756169430_handler Reg client_name:Rtap189221756169430 on WhiteList
2025-08-26 08:50:30 [Info] start rtap process success, pid is 4240, argument is Rtap189221756169430
2025-08-26 08:50:30 [Info] New ClientConnectNotify : Rtap189221756169430, id is 0000053C
2025-08-26 08:50:31 [Info] ipc client:Rtap189221756169430 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 08:50:31 [Info] Rtap Platform Rtap189221756169430 execv work --windows-process-check on pid 4240
2025-08-26 08:50:32 [Info] csrss.exe open proc 4240 AliSecCheck.ex
2025-08-26 08:50:33 [Info] csrss.exe open thread 4240 AliSecCheck.ex
2025-08-26 08:50:58 [Info] Done Work --windows-process-check:1
2025-08-26 08:50:58 [Info] Rtap Platform Rtap189221756169430 Exit:normal exit
2025-08-26 08:51:00 [Info] ClientDisConnectNotify : Rtap189221756169430, id is 0000053C
2025-08-26 09:08:48 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9986","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10164","aliyundun_upload_time":"1756170528","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 09:10:19 [Info] TotalPhys:2047,AvailPhys:671,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5714,AvailPageFile:957,SelfWorkingSet:10016, SelfPageFile:13984
2025-08-26 09:10:19 [Info] CommitTotal:4757,CommitLimit:5714,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:671,SystemCache:60,KernelTotal:289,KernelPaged:205,KernelNonpaged:83,PageSize:4096,HandleCount:27748,ProcessCount:53,ThreadCount:732
2025-08-26 09:40:51 [Info] get meta data success by v2
2025-08-26 09:40:51 [Info] get empty metaserver config
2025-08-26 09:40:51 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-26 09:40:51 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-26 09:40:51 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-26 09:40:51 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-26 09:40:51 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 09:40:51 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 09:40:51 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-26 09:40:51 [Info] download cert compare md5 same
2025-08-26 09:40:51 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 09:40:51 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 09:40:51 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-26 09:58:04 [Info] GetMessage : T_MSG_CHECK
2025-08-26 09:58:04 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTYxNzM0ODQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2MjE2Njg0LCJzdWIiOiJSVEFQX0lEWF8xNjE0NTBfMTc1NjE3MzQ4NDA0OCJ9.CByMQ_n-7NEH9Y7rN5JFW1lkqI7CXk2fLDho2vwHKlw has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 09:58:14 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 09:58:14 [Info] ipc client:Rtap321931756173494_handler Reg client_name:Rtap321931756173494 on WhiteList
2025-08-26 09:58:14 [Info] start rtap process success, pid is 4176, argument is Rtap321931756173494
2025-08-26 09:58:14 [Info] New ClientConnectNotify : Rtap321931756173494, id is 00000540
2025-08-26 09:58:14 [Info] ipc client:Rtap321931756173494 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 09:58:15 [Info] Rtap Platform Rtap321931756173494 execv work --tcp-connect-check on pid 4176
2025-08-26 09:58:15 [Info] csrss.exe open proc 4176 AliSecCheck.ex
2025-08-26 09:58:16 [Info] csrss.exe open thread 4176 AliSecCheck.ex
2025-08-26 09:58:26 [Info] Done Work --tcp-connect-check:1
2025-08-26 09:58:26 [Info] Rtap Platform Rtap321931756173494 Exit:normal exit
2025-08-26 09:58:28 [Info] ClientDisConnectNotify : Rtap321931756173494, id is 00000540
2025-08-26 10:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10173","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"10324","aliyundun_upload_time":"1756174126","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 10:11:16 [Info] TotalPhys:2047,AvailPhys:645,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5714,AvailPageFile:903,SelfWorkingSet:10228, SelfPageFile:14140
2025-08-26 10:11:16 [Info] CommitTotal:4810,CommitLimit:5714,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:645,SystemCache:184,KernelTotal:298,KernelPaged:213,KernelNonpaged:85,PageSize:4096,HandleCount:27759,ProcessCount:53,ThreadCount:735
2025-08-26 10:16:06 [Info] GetMessage : T_MSG_CHECK
2025-08-26 10:16:06 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTYxNzQ1NjYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2MjE3NzY2LCJzdWIiOiJSVEFQX0lEWF8xNjE0NTJfMTc1NjE3NDU2NjcyNiJ9.-lBUiLyHRaQvKX41RSJWs8UfNkyCDrOKXqSobti_JCQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 10:16:15 [Info] GetMessage : T_MSG_CHECK
2025-08-26 10:16:15 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTYxNzQ1NzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2MjE3Nzc1LCJzdWIiOiJSVEFQX0lEWF8xNjE0NTdfMTc1NjE3NDU3NTQ1MiJ9.dJUAokojugyciEWLPGi3jZrk3AMr74IcWA6Fbr5kh-4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 10:16:18 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 10:16:18 [Info] ipc client:Rtap29651756174578_handler Reg client_name:Rtap29651756174578 on WhiteList
2025-08-26 10:16:18 [Info] start rtap process success, pid is 5000, argument is Rtap29651756174578
2025-08-26 10:16:18 [Info] New ClientConnectNotify : Rtap29651756174578, id is 00000504
2025-08-26 10:16:18 [Info] ipc client:Rtap29651756174578 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 10:16:19 [Info] Rtap Platform Rtap29651756174578 execv work --windows-schedule-task-check on pid 5000
2025-08-26 10:16:21 [Info] csrss.exe open proc 5000 AliSecCheck.ex
2025-08-26 10:16:22 [Info] csrss.exe open thread 5000 AliSecCheck.ex
2025-08-26 10:16:27 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 10:16:27 [Info] ipc client:Rtap29941756174587_handler Reg client_name:Rtap29941756174587 on WhiteList
2025-08-26 10:16:27 [Info] start rtap process success, pid is 4604, argument is Rtap29941756174587
2025-08-26 10:16:27 [Info] New ClientConnectNotify : Rtap29941756174587, id is 00000548
2025-08-26 10:16:28 [Info] ipc client:Rtap29941756174587 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 10:16:28 [Info] Rtap Platform Rtap29941756174587 execv work --windows-registry-check on pid 4604
2025-08-26 10:16:29 [Info] csrss.exe open proc 4604 AliSecCheck.ex
2025-08-26 10:16:30 [Info] csrss.exe open thread 4604 AliSecCheck.ex
2025-08-26 10:16:59 [Info] Done Work --windows-schedule-task-check:1
2025-08-26 10:16:59 [Info] Rtap Platform Rtap29651756174578 Exit:normal exit
2025-08-26 10:17:02 [Info] ClientDisConnectNotify : Rtap29651756174578, id is 00000504
2025-08-26 10:17:06 [Info] Done Work --windows-registry-check:1
2025-08-26 10:17:06 [Info] Rtap Platform Rtap29941756174587 Exit:normal exit
2025-08-26 10:17:08 [Info] ClientDisConnectNotify : Rtap29941756174587, id is 00000548
2025-08-26 10:17:32 [Info] GetMessage : T_MSG_CHECK
2025-08-26 10:17:32 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTYxNzQ2NTIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2MjE3ODUyLCJzdWIiOiJSVEFQX0lEWF8xNjE0NjVfMTc1NjE3NDY1Mjg1OCJ9.3mBsHUErwjQknnFywGCGbTVPpVEYrFaSPp2I2p2bTQ0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 10:17:42 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 10:17:42 [Info] ipc client:Rtap32391756174662_handler Reg client_name:Rtap32391756174662 on WhiteList
2025-08-26 10:17:42 [Info] start rtap process success, pid is 4248, argument is Rtap32391756174662
2025-08-26 10:17:43 [Info] New ClientConnectNotify : Rtap32391756174662, id is 000004F4
2025-08-26 10:17:43 [Info] Rtap Platform Rtap32391756174662 execv work --windows-driver-version-check on pid 4248
2025-08-26 10:17:44 [Info] ipc client:Rtap32391756174662 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 10:17:45 [Info] csrss.exe open proc 4248 AliSecCheck.ex
2025-08-26 10:17:46 [Info] csrss.exe open thread 4248 AliSecCheck.ex
2025-08-26 10:17:50 [Info] Done Work --windows-driver-version-check:1
2025-08-26 10:17:50 [Info] Rtap Platform Rtap32391756174662 Exit:normal exit
2025-08-26 10:17:52 [Info] ClientDisConnectNotify : Rtap32391756174662, id is 000004F4
2025-08-26 11:05:43 [Info] GetMessage : T_MSG_CHECK
2025-08-26 11:05:43 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTYxNzc1NDIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2MjIwNzQyLCJzdWIiOiJSVEFQX0lEWF8xNjE0NTRfMTc1NjE3NzU0MjkyNCJ9.Gq1PuNVgB013kvoZVXh7oo5le0En0YkO0LyVxx-J6NI has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 11:05:55 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 11:05:55 [Info] ipc client:Rtap126871756177555_handler Reg client_name:Rtap126871756177555 on WhiteList
2025-08-26 11:05:55 [Info] start rtap process success, pid is 4308, argument is Rtap126871756177555
2025-08-26 11:05:55 [Info] New ClientConnectNotify : Rtap126871756177555, id is 00000548
2025-08-26 11:05:55 [Info] ipc client:Rtap126871756177555 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 11:05:55 [Info] Rtap Platform Rtap126871756177555 execv work --windows-autorun-item-check on pid 4308
2025-08-26 11:05:56 [Info] csrss.exe open proc 4308 AliSecCheck.ex
2025-08-26 11:05:57 [Info] csrss.exe open thread 4308 AliSecCheck.ex
2025-08-26 11:06:10 [Info] Done Work --windows-autorun-item-check:1
2025-08-26 11:06:10 [Info] Rtap Platform Rtap126871756177555 Exit:normal exit
2025-08-26 11:06:13 [Info] ClientDisConnectNotify : Rtap126871756177555, id is 00000548
2025-08-26 11:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10219","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10300","aliyundun_upload_time":"1756177736","aliyundun_write_pid_times":"0","ipc_send_count":"153","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 11:12:12 [Info] TotalPhys:2047,AvailPhys:632,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5714,AvailPageFile:892,SelfWorkingSet:10104, SelfPageFile:13916
2025-08-26 11:12:12 [Info] CommitTotal:4821,CommitLimit:5714,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:632,SystemCache:195,KernelTotal:299,KernelPaged:213,KernelNonpaged:85,PageSize:4096,HandleCount:27750,ProcessCount:53,ThreadCount:734
2025-08-26 12:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10217","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10252","aliyundun_upload_time":"1756181313","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 12:13:09 [Info] TotalPhys:2047,AvailPhys:627,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5714,AvailPageFile:893,SelfWorkingSet:10252, SelfPageFile:14080
2025-08-26 12:13:09 [Info] CommitTotal:4820,CommitLimit:5714,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:627,SystemCache:202,KernelTotal:300,KernelPaged:214,KernelNonpaged:86,PageSize:4096,HandleCount:27771,ProcessCount:53,ThreadCount:735
2025-08-26 12:58:07 [Info] get meta data success by v2
2025-08-26 12:58:07 [Info] get empty metaserver config
2025-08-26 12:58:07 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-26 12:58:07 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-26 12:58:07 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-26 12:58:07 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-26 12:58:07 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 12:58:07 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 12:58:08 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-26 12:58:08 [Info] download cert compare md5 same
2025-08-26 12:58:08 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 12:58:08 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 12:58:08 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-26 13:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10094","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10252","aliyundun_upload_time":"1756184917","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 13:14:06 [Info] TotalPhys:2047,AvailPhys:674,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6208,AvailPageFile:1409,SelfWorkingSet:10112, SelfPageFile:13952
2025-08-26 13:14:06 [Info] CommitTotal:4799,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:674,SystemCache:4194303,KernelTotal:276,KernelPaged:197,KernelNonpaged:79,PageSize:4096,HandleCount:27940,ProcessCount:53,ThreadCount:746
2025-08-26 14:03:07 [Info] nCurrentClock is 3870161100, nCurrentTime is 1756188187
2025-08-26 14:03:07 [Info] SendMessage T_MSG_LOGIN
2025-08-26 14:03:07 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-26 14:03:07 [Info] begin to enable self guard after reconnect
2025-08-26 14:03:07 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-26 14:03:07 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-26 14:03:08 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-26 14:03:08 [Info] key : cpu, value : 10
2025-08-26 14:03:08 [Info] key : rio, value : 20480
2025-08-26 14:03:08 [Info] key : wio, value : 20480
2025-08-26 14:03:08 [Info] key : cpu_all, value : 0
2025-08-26 14:03:08 [Info] key : max_pid_check, value : 200
2025-08-26 14:03:08 [Info] key : throw_dump, value : 0
2025-08-26 14:03:08 [Info] key : hash_mode, value : 1
2025-08-26 14:03:08 [Info] key : mem, value : 200
2025-08-26 14:03:08 [Info] can not find key max_fd in online conf
2025-08-26 14:03:08 [Info] key : proc_limit, value : 1
2025-08-26 14:03:08 [Info] key : resource_limit_mode, value : 3
2025-08-26 14:03:08 [Info] key : rtap_update_mode, value : 1
2025-08-26 14:03:08 [Info] can not find key debug in online conf
2025-08-26 14:03:08 [Info] can not find key update_mode in online conf
2025-08-26 14:03:08 [Info] can not find key http_mode in online conf
2025-08-26 14:03:08 [Info] can not find key rtap_enable in online conf
2025-08-26 14:03:08 [Info] can not find key rtap_new_agent in online conf
2025-08-26 14:03:08 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-26 14:03:08 [Info] can not find key mem_low_mark in online conf
2025-08-26 14:03:08 [Info] can not find key obnormal_report_interval in online conf
2025-08-26 14:03:08 [Info] key : cache_mode, value : 0
2025-08-26 14:03:08 [Info] key : abnormal_monitor_mode, value : 3
2025-08-26 14:03:08 [Info] key : queue_size_ratio, value : 80
2025-08-26 14:03:08 [Info] queue_size_ratio is 80
2025-08-26 14:03:08 [Info] resource limit mode and max limit cpu is not change
2025-08-26 14:03:08 [Info] set hash mode 1
2025-08-26 14:03:08 [Info] RTAP timeout config:9600000
2025-08-26 14:03:08 [Info] self_guard_mode config is 0
2025-08-26 14:03:08 [Info] GetMessage : T_MSG_CHECK
2025-08-26 14:03:08 [Info] task fa557007-6c0b-46f0-b4c0-1078f17f2794 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 14:03:18 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 14:03:18 [Info] ipc client:Rtap146741756188198_handler Reg client_name:Rtap146741756188198 on WhiteList
2025-08-26 14:03:18 [Info] start rtap process success, pid is 1572, argument is Rtap146741756188198
2025-08-26 14:03:19 [Info] New ClientConnectNotify : Rtap146741756188198, id is 000004F4
2025-08-26 14:03:19 [Info] Rtap Platform Rtap146741756188198 execv work --windows-sysinfoext-check on pid 1572
2025-08-26 14:03:19 [Info] ipc client:Rtap146741756188198 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 14:03:20 [Info] csrss.exe open proc 1572 AliSecCheck.ex
2025-08-26 14:03:21 [Info] csrss.exe open thread 1572 AliSecCheck.ex
2025-08-26 14:03:22 [Info] csrss.exe open thread 1572 AliSecCheck.ex
2025-08-26 14:03:23 [Info] csrss.exe open thread 1572 AliSecCheck.ex
2025-08-26 14:03:25 [Info] csrss.exe open thread 1572 AliSecCheck.ex
2025-08-26 14:03:30 [Info] Done Work --windows-sysinfoext-check:1
2025-08-26 14:03:30 [Info] Rtap Platform Rtap146741756188198 Exit:normal exit
2025-08-26 14:03:32 [Info] ClientDisConnectNotify : Rtap146741756188198, id is 000004F4
2025-08-26 14:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10079","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10156","aliyundun_upload_time":"1756188531","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 14:15:05 [Info] TotalPhys:2047,AvailPhys:681,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6208,AvailPageFile:1403,SelfWorkingSet:10080, SelfPageFile:14088
2025-08-26 14:15:05 [Info] CommitTotal:4804,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:681,SystemCache:2,KernelTotal:276,KernelPaged:197,KernelNonpaged:79,PageSize:4096,HandleCount:28117,ProcessCount:54,ThreadCount:751
2025-08-26 15:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10046","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10112","aliyundun_upload_time":"1756192141","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 15:16:01 [Info] TotalPhys:2047,AvailPhys:689,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6208,AvailPageFile:1415,SelfWorkingSet:10100, SelfPageFile:13936
2025-08-26 15:16:01 [Info] CommitTotal:4792,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:689,SystemCache:28,KernelTotal:276,KernelPaged:196,KernelNonpaged:79,PageSize:4096,HandleCount:27904,ProcessCount:53,ThreadCount:741
2025-08-26 16:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10071","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10108","aliyundun_upload_time":"1756195716","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 16:15:27 [Info] get meta data success by v2
2025-08-26 16:15:27 [Info] get empty metaserver config
2025-08-26 16:15:27 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-26 16:15:27 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-26 16:15:27 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-26 16:15:27 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-26 16:15:27 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 16:15:27 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 16:15:27 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-26 16:15:27 [Info] download cert compare md5 same
2025-08-26 16:15:27 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 16:15:27 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 16:15:27 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-26 16:16:58 [Info] TotalPhys:2047,AvailPhys:681,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6208,AvailPageFile:1406,SelfWorkingSet:10140, SelfPageFile:14056
2025-08-26 16:16:58 [Info] CommitTotal:4801,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:681,SystemCache:35,KernelTotal:276,KernelPaged:197,KernelNonpaged:79,PageSize:4096,HandleCount:27901,ProcessCount:53,ThreadCount:741
2025-08-26 17:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10062","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10140","aliyundun_upload_time":"1756199325","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 17:17:54 [Info] TotalPhys:2047,AvailPhys:670,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6208,AvailPageFile:1395,SelfWorkingSet:10104, SelfPageFile:13868
2025-08-26 17:17:54 [Info] CommitTotal:4812,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:670,SystemCache:132,KernelTotal:279,KernelPaged:200,KernelNonpaged:79,PageSize:4096,HandleCount:27924,ProcessCount:53,ThreadCount:744
2025-08-26 18:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10103","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10176","aliyundun_upload_time":"1756202934","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 18:18:51 [Info] TotalPhys:2047,AvailPhys:676,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6208,AvailPageFile:1400,SelfWorkingSet:10192, SelfPageFile:13936
2025-08-26 18:18:51 [Info] CommitTotal:4807,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:676,SystemCache:134,KernelTotal:279,KernelPaged:200,KernelNonpaged:79,PageSize:4096,HandleCount:27875,ProcessCount:53,ThreadCount:737
2025-08-26 18:55:09 [Info] GetMessage : T_MSG_CHECK
2025-08-26 18:55:09 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTYyMDU3MDksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2MjQ4OTA5LCJzdWIiOiJSVEFQX0lEWF8xNjE1MjRfMTc1NjIwNTcwOTg1MSJ9.BbeU2MAGKwwnSLaDRYm1CCpfIrXCN-u9O3ZAytgVwEM has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 18:55:21 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 18:55:21 [Info] ipc client:Rtap63611756205721_handler Reg client_name:Rtap63611756205721 on WhiteList
2025-08-26 18:55:21 [Info] start rtap process success, pid is 2556, argument is Rtap63611756205721
2025-08-26 18:55:21 [Info] New ClientConnectNotify : Rtap63611756205721, id is 00000540
2025-08-26 18:55:21 [Info] ipc client:Rtap63611756205721 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 18:55:22 [Info] Rtap Platform Rtap63611756205721 execv work --secnet_rasp_agent on pid 2556
2025-08-26 18:55:23 [Info] csrss.exe open proc 2556 AliSecCheck.ex
2025-08-26 18:55:24 [Info] csrss.exe open thread 2556 AliSecCheck.ex
2025-08-26 18:55:25 [Info] csrss.exe open thread 2556 AliSecCheck.ex
2025-08-26 18:55:29 [Info] Done Work --secnet_rasp_agent:1
2025-08-26 18:55:29 [Info] Rtap Platform Rtap63611756205721 Exit:normal exit
2025-08-26 18:55:31 [Info] ClientDisConnectNotify : Rtap63611756205721, id is 00000540
2025-08-26 19:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10096","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10192","aliyundun_upload_time":"1756206542","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 19:19:47 [Info] TotalPhys:2047,AvailPhys:671,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6208,AvailPageFile:1397,SelfWorkingSet:10224, SelfPageFile:13936
2025-08-26 19:19:47 [Info] CommitTotal:4810,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:671,SystemCache:141,KernelTotal:279,KernelPaged:200,KernelNonpaged:79,PageSize:4096,HandleCount:27856,ProcessCount:53,ThreadCount:733
2025-08-26 19:32:00 [Info] nCurrentClock is 3888161800, nCurrentTime is 1756207920
2025-08-26 19:32:00 [Info] SendMessage T_MSG_LOGIN
2025-08-26 19:32:00 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-26 19:32:00 [Info] begin to enable self guard after reconnect
2025-08-26 19:32:00 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-26 19:32:00 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-26 19:32:00 [Info] GetMessage : T_MSG_CHECK
2025-08-26 19:32:00 [Info] task 7bec1604-f16b-412b-9269-f0a7a20efa56 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-26 19:32:08 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-26 19:32:08 [Info] key : cpu, value : 10
2025-08-26 19:32:08 [Info] key : rio, value : 20480
2025-08-26 19:32:08 [Info] key : wio, value : 20480
2025-08-26 19:32:08 [Info] key : cpu_all, value : 0
2025-08-26 19:32:08 [Info] key : max_pid_check, value : 200
2025-08-26 19:32:08 [Info] key : throw_dump, value : 0
2025-08-26 19:32:08 [Info] key : hash_mode, value : 1
2025-08-26 19:32:08 [Info] key : mem, value : 200
2025-08-26 19:32:08 [Info] can not find key max_fd in online conf
2025-08-26 19:32:08 [Info] key : proc_limit, value : 1
2025-08-26 19:32:08 [Info] key : resource_limit_mode, value : 3
2025-08-26 19:32:08 [Info] key : rtap_update_mode, value : 1
2025-08-26 19:32:08 [Info] can not find key debug in online conf
2025-08-26 19:32:08 [Info] can not find key update_mode in online conf
2025-08-26 19:32:08 [Info] can not find key http_mode in online conf
2025-08-26 19:32:08 [Info] can not find key rtap_enable in online conf
2025-08-26 19:32:08 [Info] can not find key rtap_new_agent in online conf
2025-08-26 19:32:08 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-26 19:32:08 [Info] can not find key mem_low_mark in online conf
2025-08-26 19:32:08 [Info] can not find key obnormal_report_interval in online conf
2025-08-26 19:32:08 [Info] key : cache_mode, value : 0
2025-08-26 19:32:08 [Info] key : abnormal_monitor_mode, value : 3
2025-08-26 19:32:08 [Info] key : queue_size_ratio, value : 80
2025-08-26 19:32:08 [Info] queue_size_ratio is 80
2025-08-26 19:32:08 [Info] resource limit mode and max limit cpu is not change
2025-08-26 19:32:08 [Info] set hash mode 1
2025-08-26 19:32:08 [Info] RTAP timeout config:9600000
2025-08-26 19:32:08 [Info] self_guard_mode config is 0
2025-08-26 19:32:15 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-26 19:32:15 [Info] ipc client:Rtap135911756207935_handler Reg client_name:Rtap135911756207935 on WhiteList
2025-08-26 19:32:15 [Info] start rtap process success, pid is 3660, argument is Rtap135911756207935
2025-08-26 19:32:15 [Info] New ClientConnectNotify : Rtap135911756207935, id is 000004B8
2025-08-26 19:32:16 [Info] ipc client:Rtap135911756207935 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-26 19:32:16 [Info] Rtap Platform Rtap135911756207935 execv work --windows-sysinfoext-check on pid 3660
2025-08-26 19:32:18 [Info] csrss.exe open proc 3660 AliSecCheck.ex
2025-08-26 19:32:19 [Info] csrss.exe open thread 3660 AliSecCheck.ex
2025-08-26 19:32:23 [Info] Done Work --windows-sysinfoext-check:1
2025-08-26 19:32:23 [Info] Rtap Platform Rtap135911756207935 Exit:normal exit
2025-08-26 19:32:25 [Info] ClientDisConnectNotify : Rtap135911756207935, id is 000004B8
2025-08-26 19:32:49 [Info] get meta data success by v2
2025-08-26 19:32:49 [Info] get empty metaserver config
2025-08-26 19:32:49 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-26 19:32:49 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-26 19:32:49 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-26 19:32:49 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-26 19:32:49 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 19:32:49 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 19:32:49 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-26 19:32:49 [Info] download cert compare md5 same
2025-08-26 19:32:49 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 19:32:49 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 19:32:49 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-26 20:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10147","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10240","aliyundun_upload_time":"1756210112","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-08-26 20:20:55 [Info] TotalPhys:2047,AvailPhys:671,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6208,AvailPageFile:1401,SelfWorkingSet:10180, SelfPageFile:13932
2025-08-26 20:20:55 [Info] CommitTotal:4806,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:671,SystemCache:242,KernelTotal:279,KernelPaged:200,KernelNonpaged:79,PageSize:4096,HandleCount:27908,ProcessCount:53,ThreadCount:745
2025-08-26 21:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10178","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10244","aliyundun_upload_time":"1756213723","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 21:21:52 [Info] TotalPhys:2047,AvailPhys:666,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6208,AvailPageFile:1401,SelfWorkingSet:10096, SelfPageFile:13872
2025-08-26 21:21:52 [Info] CommitTotal:4806,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:666,SystemCache:144,KernelTotal:280,KernelPaged:200,KernelNonpaged:79,PageSize:4096,HandleCount:27630,ProcessCount:52,ThreadCount:735
2025-08-26 22:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10104","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10216","aliyundun_upload_time":"1756217332","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 22:22:48 [Info] TotalPhys:2047,AvailPhys:655,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6208,AvailPageFile:1391,SelfWorkingSet:10160, SelfPageFile:13936
2025-08-26 22:22:48 [Info] CommitTotal:4816,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:655,SystemCache:144,KernelTotal:280,KernelPaged:201,KernelNonpaged:79,PageSize:4096,HandleCount:27623,ProcessCount:52,ThreadCount:730
2025-08-26 22:50:58 [Info] get meta data success by v2
2025-08-26 22:50:58 [Info] get empty metaserver config
2025-08-26 22:50:58 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-26 22:50:58 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-26 22:50:58 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-26 22:50:58 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-26 22:50:58 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 22:50:58 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-26 22:50:58 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-26 22:50:58 [Info] download cert compare md5 same
2025-08-26 22:50:58 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 22:50:58 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-26 22:50:58 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-26 23:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10172","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10304","aliyundun_upload_time":"1756220934","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-26 23:23:45 [Info] TotalPhys:2047,AvailPhys:661,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6208,AvailPageFile:1397,SelfWorkingSet:10240, SelfPageFile:13936
2025-08-26 23:23:45 [Info] CommitTotal:4811,CommitLimit:6208,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:661,SystemCache:146,KernelTotal:279,KernelPaged:200,KernelNonpaged:79,PageSize:4096,HandleCount:27671,ProcessCount:52,ThreadCount:741
2025-08-27 00:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10186","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10244","aliyundun_upload_time":"1756224543","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 00:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9924","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9980","aliyundun_upload_time":"1756742914","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 00:41:16 [Info] TotalPhys:2047,AvailPhys:524,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1408,SelfWorkingSet:9880, SelfPageFile:13672
2025-09-02 00:41:16 [Info] CommitTotal:5071,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:524,SystemCache:4194303,KernelTotal:256,KernelPaged:182,KernelNonpaged:74,PageSize:4096,HandleCount:27983,ProcessCount:52,ThreadCount:737
2025-09-02 01:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9909","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9956","aliyundun_upload_time":"1756746527","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 01:17:37 [Info] GetMessage : T_MSG_CHECK
2025-09-02 01:17:37 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY3NDcwNTcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2NzkwMjU3LCJzdWIiOiJSVEFQX0lEWF8xNjIwMDVfMTc1Njc0NzA1NzI1NyJ9.uHI9pyq9tHXiUp7OrWKWY5-mmms_O1-UloI3eSDxIhY has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 01:17:47 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 01:17:47 [Info] ipc client:Rtap46971756747067_handler Reg client_name:Rtap46971756747067 on WhiteList
2025-09-02 01:17:47 [Info] start rtap process success, pid is 2640, argument is Rtap46971756747067
2025-09-02 01:17:47 [Info] New ClientConnectNotify : Rtap46971756747067, id is 00000548
2025-09-02 01:17:47 [Info] ipc client:Rtap46971756747067 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 01:17:47 [Info] Rtap Platform Rtap46971756747067 execv work --sca on pid 2640
2025-09-02 01:17:49 [Info] csrss.exe open proc 2640 AliSecCheck.ex
2025-09-02 01:17:50 [Info] csrss.exe open thread 2640 AliSecCheck.ex
2025-09-02 01:18:31 [Info] csrss.exe open thread 2640 AliSecCheck.ex
2025-09-02 01:18:51 [Info] Done Work --sca:1
2025-09-02 01:18:51 [Info] Rtap Platform Rtap46971756747067 Exit:normal exit
2025-09-02 01:18:54 [Info] ClientDisConnectNotify : Rtap46971756747067, id is 00000548
2025-09-02 01:42:13 [Info] TotalPhys:2047,AvailPhys:533,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1423,SelfWorkingSet:9936, SelfPageFile:13728
2025-09-02 01:42:13 [Info] CommitTotal:5056,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:533,SystemCache:26,KernelTotal:257,KernelPaged:183,KernelNonpaged:74,PageSize:4096,HandleCount:27959,ProcessCount:52,ThreadCount:731
2025-09-02 02:08:55 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9886","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9936","aliyundun_upload_time":"1756750135","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 02:43:10 [Info] TotalPhys:2047,AvailPhys:532,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1419,SelfWorkingSet:9916, SelfPageFile:13656
2025-09-02 02:43:10 [Info] CommitTotal:5060,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:532,SystemCache:32,KernelTotal:256,KernelPaged:182,KernelNonpaged:73,PageSize:4096,HandleCount:27982,ProcessCount:52,ThreadCount:729
2025-09-02 02:59:53 [Info] get meta data success by v2
2025-09-02 02:59:53 [Info] get empty metaserver config
2025-09-02 02:59:53 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-02 02:59:53 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-02 02:59:53 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-02 02:59:53 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-02 02:59:53 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 02:59:53 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 02:59:53 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-02 02:59:53 [Info] download cert compare md5 same
2025-09-02 02:59:53 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 02:59:53 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 02:59:53 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-02 03:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9952","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10208","aliyundun_upload_time":"1756753741","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 03:44:07 [Info] TotalPhys:2047,AvailPhys:521,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1417,SelfWorkingSet:9924, SelfPageFile:13720
2025-09-02 03:44:07 [Info] CommitTotal:5062,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:521,SystemCache:67,KernelTotal:260,KernelPaged:186,KernelNonpaged:73,PageSize:4096,HandleCount:27997,ProcessCount:52,ThreadCount:742
2025-09-02 04:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9983","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10080","aliyundun_upload_time":"1756757315","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 04:45:03 [Info] TotalPhys:2047,AvailPhys:517,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1416,SelfWorkingSet:10016, SelfPageFile:13828
2025-09-02 04:45:03 [Info] CommitTotal:5063,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:517,SystemCache:90,KernelTotal:261,KernelPaged:187,KernelNonpaged:74,PageSize:4096,HandleCount:27993,ProcessCount:52,ThreadCount:736
2025-09-02 05:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9999","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10016","aliyundun_upload_time":"1756760938","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 05:10:31 [Info] nCurrentClock is 4392182100, nCurrentTime is 1756761031
2025-09-02 05:10:31 [Info] SendMessage T_MSG_LOGIN
2025-09-02 05:10:32 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-02 05:10:32 [Info] begin to enable self guard after reconnect
2025-09-02 05:10:32 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-02 05:10:32 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-02 05:10:32 [Info] GetMessage : T_MSG_CHECK
2025-09-02 05:10:32 [Info] task b3a8dc17-e647-4d73-b4c0-eb4ef362ac61 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 05:10:40 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-02 05:10:40 [Info] key : cpu, value : 10
2025-09-02 05:10:40 [Info] key : rio, value : 20480
2025-09-02 05:10:40 [Info] key : wio, value : 20480
2025-09-02 05:10:40 [Info] key : cpu_all, value : 0
2025-09-02 05:10:40 [Info] key : max_pid_check, value : 200
2025-09-02 05:10:40 [Info] key : throw_dump, value : 0
2025-09-02 05:10:40 [Info] key : hash_mode, value : 1
2025-09-02 05:10:40 [Info] key : mem, value : 200
2025-09-02 05:10:40 [Info] can not find key max_fd in online conf
2025-09-02 05:10:40 [Info] key : proc_limit, value : 1
2025-09-02 05:10:40 [Info] key : resource_limit_mode, value : 3
2025-09-02 05:10:40 [Info] key : rtap_update_mode, value : 1
2025-09-02 05:10:40 [Info] can not find key debug in online conf
2025-09-02 05:10:40 [Info] can not find key update_mode in online conf
2025-09-02 05:10:40 [Info] can not find key http_mode in online conf
2025-09-02 05:10:40 [Info] can not find key rtap_enable in online conf
2025-09-02 05:10:40 [Info] can not find key rtap_new_agent in online conf
2025-09-02 05:10:40 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-02 05:10:40 [Info] can not find key mem_low_mark in online conf
2025-09-02 05:10:40 [Info] can not find key obnormal_report_interval in online conf
2025-09-02 05:10:40 [Info] key : cache_mode, value : 0
2025-09-02 05:10:40 [Info] key : abnormal_monitor_mode, value : 3
2025-09-02 05:10:40 [Info] key : queue_size_ratio, value : 80
2025-09-02 05:10:40 [Info] queue_size_ratio is 80
2025-09-02 05:10:40 [Info] resource limit mode and max limit cpu is not change
2025-09-02 05:10:40 [Info] set hash mode 1
2025-09-02 05:10:40 [Info] RTAP timeout config:9600000
2025-09-02 05:10:40 [Info] self_guard_mode config is 0
2025-09-02 05:10:41 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-09-02 05:10:46 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 05:10:46 [Info] ipc client:Rtap175791756761046_handler Reg client_name:Rtap175791756761046 on WhiteList
2025-09-02 05:10:46 [Info] start rtap process success, pid is 4060, argument is Rtap175791756761046
2025-09-02 05:10:47 [Info] New ClientConnectNotify : Rtap175791756761046, id is 000004D8
2025-09-02 05:10:47 [Info] ipc client:Rtap175791756761046 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 05:10:47 [Info] Rtap Platform Rtap175791756761046 execv work --windows-sysinfoext-check on pid 4060
2025-09-02 05:10:49 [Info] csrss.exe open proc 4060 AliSecCheck.ex
2025-09-02 05:10:50 [Info] csrss.exe open thread 4060 AliSecCheck.ex
2025-09-02 05:10:54 [Info] Done Work --windows-sysinfoext-check:1
2025-09-02 05:10:54 [Info] Rtap Platform Rtap175791756761046 Exit:normal exit
2025-09-02 05:10:56 [Info] ClientDisConnectNotify : Rtap175791756761046, id is 000004D8
2025-09-02 05:46:04 [Info] TotalPhys:2047,AvailPhys:376,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1402,SelfWorkingSet:9976, SelfPageFile:13872
2025-09-02 05:46:04 [Info] CommitTotal:5077,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:376,SystemCache:4194303,KernelTotal:257,KernelPaged:183,KernelNonpaged:74,PageSize:4096,HandleCount:28404,ProcessCount:53,ThreadCount:760
2025-09-02 06:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9946","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10024","aliyundun_upload_time":"1756764519","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 06:17:16 [Info] get meta data success by v2
2025-09-02 06:17:16 [Info] get empty metaserver config
2025-09-02 06:17:16 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-02 06:17:16 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-02 06:17:16 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-02 06:17:16 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-02 06:17:16 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 06:17:16 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 06:17:16 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-02 06:17:16 [Info] download cert compare md5 same
2025-09-02 06:17:16 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 06:17:16 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 06:17:16 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-02 06:47:01 [Info] TotalPhys:2047,AvailPhys:378,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1410,SelfWorkingSet:9992, SelfPageFile:13836
2025-09-02 06:47:01 [Info] CommitTotal:5070,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:378,SystemCache:4194303,KernelTotal:257,KernelPaged:183,KernelNonpaged:74,PageSize:4096,HandleCount:28294,ProcessCount:53,ThreadCount:739
2025-09-02 07:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9990","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10044","aliyundun_upload_time":"1756768129","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 07:47:57 [Info] TotalPhys:2047,AvailPhys:379,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1411,SelfWorkingSet:9960, SelfPageFile:13780
2025-09-02 07:47:57 [Info] CommitTotal:5069,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:379,SystemCache:4194303,KernelTotal:258,KernelPaged:183,KernelNonpaged:74,PageSize:4096,HandleCount:28252,ProcessCount:53,ThreadCount:741
2025-09-02 08:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9989","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10032","aliyundun_upload_time":"1756771736","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 08:48:57 [Info] TotalPhys:2047,AvailPhys:375,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1408,SelfWorkingSet:10000, SelfPageFile:13884
2025-09-02 08:48:57 [Info] CommitTotal:5071,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:375,SystemCache:4194303,KernelTotal:258,KernelPaged:184,KernelNonpaged:74,PageSize:4096,HandleCount:28267,ProcessCount:53,ThreadCount:745
2025-09-02 08:49:48 [Info] GetMessage : T_MSG_CHECK
2025-09-02 08:49:48 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY3NzQxODgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2ODE3Mzg4LCJzdWIiOiJSVEFQX0lEWF8xNjE5OTZfMTc1Njc3NDE4ODg5NiJ9.yQab64lyt8CBwXA8fWmWYQ9PXUKzVtkh8JYkecKfMnc has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 08:50:01 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 08:50:01 [Info] ipc client:Rtap277701756774201_handler Reg client_name:Rtap277701756774201 on WhiteList
2025-09-02 08:50:01 [Info] start rtap process success, pid is 4312, argument is Rtap277701756774201
2025-09-02 08:50:02 [Info] system memory usage is 81
2025-09-02 08:50:02 [Info] system memory usage is 81
2025-09-02 08:50:02 [Info] New ClientConnectNotify : Rtap277701756774201, id is 00000540
2025-09-02 08:50:03 [Info] csrss.exe open proc 4312 AliSecCheck.ex
2025-09-02 08:50:03 [Info] Rtap Platform Rtap277701756774201 execv work --windows-process-check on pid 4312
2025-09-02 08:50:03 [Info] ipc client:Rtap277701756774201 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 08:50:04 [Info] csrss.exe open thread 4312 AliSecCheck.ex
2025-09-02 08:50:30 [Info] Done Work --windows-process-check:1
2025-09-02 08:50:30 [Info] Rtap Platform Rtap277701756774201 Exit:normal exit
2025-09-02 08:50:32 [Info] ClientDisConnectNotify : Rtap277701756774201, id is 00000540
2025-09-02 09:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10038","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10188","aliyundun_upload_time":"1756775321","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 09:35:17 [Info] get meta data success by v2
2025-09-02 09:35:17 [Info] get empty metaserver config
2025-09-02 09:35:17 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-02 09:35:18 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-02 09:35:18 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-02 09:35:18 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-02 09:35:18 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 09:35:18 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 09:35:18 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-02 09:35:18 [Info] download cert compare md5 same
2025-09-02 09:35:18 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 09:35:18 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 09:35:18 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-02 09:49:56 [Info] TotalPhys:2047,AvailPhys:377,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6480,AvailPageFile:1404,SelfWorkingSet:10216, SelfPageFile:14064
2025-09-02 09:49:56 [Info] CommitTotal:5075,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:377,SystemCache:4194303,KernelTotal:260,KernelPaged:185,KernelNonpaged:74,PageSize:4096,HandleCount:28239,ProcessCount:53,ThreadCount:739
2025-09-02 09:57:36 [Info] GetMessage : T_MSG_CHECK
2025-09-02 09:57:36 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY3NzgyNTUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2ODIxNDU1LCJzdWIiOiJSVEFQX0lEWF8xNjE5OTdfMTc1Njc3ODI1NTg2NCJ9.9p06GwIpneYKTfyChkIchrdzP5S7KS-IB8ucWhIhuQo has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 09:57:44 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 09:57:44 [Info] ipc client:Rtap82701756778264_handler Reg client_name:Rtap82701756778264 on WhiteList
2025-09-02 09:57:44 [Info] start rtap process success, pid is 4700, argument is Rtap82701756778264
2025-09-02 09:57:45 [Info] New ClientConnectNotify : Rtap82701756778264, id is 000001E4
2025-09-02 09:57:45 [Info] ipc client:Rtap82701756778264 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 09:57:45 [Info] Rtap Platform Rtap82701756778264 execv work --tcp-connect-check on pid 4700
2025-09-02 09:57:47 [Info] csrss.exe open proc 4700 AliSecCheck.ex
2025-09-02 09:57:48 [Info] csrss.exe open thread 4700 AliSecCheck.ex
2025-09-02 09:57:56 [Info] Done Work --tcp-connect-check:1
2025-09-02 09:57:56 [Info] Rtap Platform Rtap82701756778264 Exit:normal exit
2025-09-02 09:57:58 [Info] ClientDisConnectNotify : Rtap82701756778264, id is 000001E4
2025-09-02 10:08:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10153","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10260","aliyundun_upload_time":"1756778933","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-09-02 10:16:02 [Info] GetMessage : T_MSG_CHECK
2025-09-02 10:16:02 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY3NzkzNjIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2ODIyNTYyLCJzdWIiOiJSVEFQX0lEWF8xNjE5OTlfMTc1Njc3OTM2MjczNiJ9.oxdw3LptdmdQ7kvqpKvVVuQoCwlrsci47MM0hw0jmS8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 10:16:11 [Info] GetMessage : T_MSG_CHECK
2025-09-02 10:16:11 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY3NzkzNjMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2ODIyNTYzLCJzdWIiOiJSVEFQX0lEWF8xNjIwMDRfMTc1Njc3OTM2MzY4MyJ9.cNrDHhKwjqwJLdvCKxwsXobbsyQs2Lkcdy_RLv9iiAA has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 10:16:15 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 10:16:15 [Info] ipc client:Rtap118981756779375_handler Reg client_name:Rtap118981756779375 on WhiteList
2025-09-02 10:16:15 [Info] start rtap process success, pid is 2260, argument is Rtap118981756779375
2025-09-02 10:16:15 [Info] New ClientConnectNotify : Rtap118981756779375, id is 000004F8
2025-09-02 10:16:15 [Info] ipc client:Rtap118981756779375 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 10:16:16 [Info] Rtap Platform Rtap118981756779375 execv work --windows-schedule-task-check on pid 2260
2025-09-02 10:16:18 [Info] csrss.exe open proc 2260 AliSecCheck.ex
2025-09-02 10:16:19 [Info] csrss.exe open thread 2260 AliSecCheck.ex
2025-09-02 10:16:20 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 10:16:20 [Info] ipc client:Rtap119141756779380_handler Reg client_name:Rtap119141756779380 on WhiteList
2025-09-02 10:16:20 [Info] start rtap process success, pid is 1756, argument is Rtap119141756779380
2025-09-02 10:16:20 [Info] New ClientConnectNotify : Rtap119141756779380, id is 000001E4
2025-09-02 10:16:20 [Info] ipc client:Rtap119141756779380 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 10:16:21 [Info] Rtap Platform Rtap119141756779380 execv work --windows-registry-check on pid 1756
2025-09-02 10:16:22 [Info] csrss.exe open proc 1756 AliSecCheck.ex
2025-09-02 10:16:23 [Info] csrss.exe open thread 1756 AliSecCheck.ex
2025-09-02 10:16:52 [Info] Done Work --windows-schedule-task-check:1
2025-09-02 10:16:52 [Info] Rtap Platform Rtap118981756779375 Exit:normal exit
2025-09-02 10:16:54 [Info] ClientDisConnectNotify : Rtap118981756779375, id is 000004F8
2025-09-02 10:16:59 [Info] Done Work --windows-registry-check:1
2025-09-02 10:16:59 [Info] Rtap Platform Rtap119141756779380 Exit:normal exit
2025-09-02 10:17:01 [Info] ClientDisConnectNotify : Rtap119141756779380, id is 000001E4
2025-09-02 10:17:30 [Info] GetMessage : T_MSG_CHECK
2025-09-02 10:17:30 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY3Nzk0NTAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2ODIyNjUwLCJzdWIiOiJSVEFQX0lEWF8xNjIwMTJfMTc1Njc3OTQ1MDg5OSJ9.ponFJSY4rz3Xat6tB9rSDuZBCw3vIoc5vhFxraLSpDQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 10:17:43 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 10:17:43 [Info] ipc client:Rtap121851756779463_handler Reg client_name:Rtap121851756779463 on WhiteList
2025-09-02 10:17:43 [Info] start rtap process success, pid is 724, argument is Rtap121851756779463
2025-09-02 10:17:43 [Info] New ClientConnectNotify : Rtap121851756779463, id is 00000540
2025-09-02 10:17:43 [Info] ipc client:Rtap121851756779463 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 10:17:44 [Info] Rtap Platform Rtap121851756779463 execv work --windows-driver-version-check on pid 724
2025-09-02 10:17:45 [Info] csrss.exe open proc 724 AliSecCheck.ex
2025-09-02 10:17:46 [Info] csrss.exe open thread 724 AliSecCheck.ex
2025-09-02 10:17:51 [Info] Done Work --windows-driver-version-check:1
2025-09-02 10:17:51 [Info] Rtap Platform Rtap121851756779463 Exit:normal exit
2025-09-02 10:17:53 [Info] ClientDisConnectNotify : Rtap121851756779463, id is 00000540
2025-09-02 10:40:55 [Info] nCurrentClock is 4410186000, nCurrentTime is 1756780855
2025-09-02 10:40:55 [Info] SendMessage T_MSG_LOGIN
2025-09-02 10:40:56 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-02 10:40:56 [Info] begin to enable self guard after reconnect
2025-09-02 10:40:56 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-02 10:40:56 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-02 10:40:56 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-02 10:40:56 [Info] key : cpu, value : 10
2025-09-02 10:40:56 [Info] key : rio, value : 20480
2025-09-02 10:40:56 [Info] key : wio, value : 20480
2025-09-02 10:40:56 [Info] key : cpu_all, value : 0
2025-09-02 10:40:56 [Info] key : max_pid_check, value : 200
2025-09-02 10:40:56 [Info] key : throw_dump, value : 0
2025-09-02 10:40:56 [Info] key : hash_mode, value : 1
2025-09-02 10:40:56 [Info] key : mem, value : 200
2025-09-02 10:40:56 [Info] can not find key max_fd in online conf
2025-09-02 10:40:56 [Info] key : proc_limit, value : 1
2025-09-02 10:40:56 [Info] key : resource_limit_mode, value : 3
2025-09-02 10:40:56 [Info] key : rtap_update_mode, value : 1
2025-09-02 10:40:56 [Info] can not find key debug in online conf
2025-09-02 10:40:56 [Info] can not find key update_mode in online conf
2025-09-02 10:40:56 [Info] can not find key http_mode in online conf
2025-09-02 10:40:56 [Info] can not find key rtap_enable in online conf
2025-09-02 10:40:56 [Info] can not find key rtap_new_agent in online conf
2025-09-02 10:40:56 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-02 10:40:56 [Info] can not find key mem_low_mark in online conf
2025-09-02 10:40:56 [Info] can not find key obnormal_report_interval in online conf
2025-09-02 10:40:56 [Info] key : cache_mode, value : 0
2025-09-02 10:40:56 [Info] key : abnormal_monitor_mode, value : 3
2025-09-02 10:40:56 [Info] key : queue_size_ratio, value : 80
2025-09-02 10:40:56 [Info] queue_size_ratio is 80
2025-09-02 10:40:56 [Info] resource limit mode and max limit cpu is not change
2025-09-02 10:40:56 [Info] set hash mode 1
2025-09-02 10:40:56 [Info] RTAP timeout config:9600000
2025-09-02 10:40:56 [Info] self_guard_mode config is 0
2025-09-02 10:40:56 [Info] GetMessage : T_MSG_CHECK
2025-09-02 10:40:56 [Info] task f28528b5-2f9c-4882-9312-a5253332ebee has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 10:41:10 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 10:41:10 [Info] ipc client:Rtap167801756780870_handler Reg client_name:Rtap167801756780870 on WhiteList
2025-09-02 10:41:10 [Info] start rtap process success, pid is 4000, argument is Rtap167801756780870
2025-09-02 10:41:10 [Info] New ClientConnectNotify : Rtap167801756780870, id is 000001E4
2025-09-02 10:41:10 [Info] ipc client:Rtap167801756780870 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 10:41:11 [Info] Rtap Platform Rtap167801756780870 execv work --windows-sysinfoext-check on pid 4000
2025-09-02 10:41:11 [Info] csrss.exe open proc 4000 AliSecCheck.ex
2025-09-02 10:41:12 [Info] csrss.exe open thread 4000 AliSecCheck.ex
2025-09-02 10:41:22 [Info] Done Work --windows-sysinfoext-check:1
2025-09-02 10:41:22 [Info] Rtap Platform Rtap167801756780870 Exit:normal exit
2025-09-02 10:41:24 [Info] ClientDisConnectNotify : Rtap167801756780870, id is 000001E4
2025-09-02 10:51:03 [Info] TotalPhys:2047,AvailPhys:380,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1402,SelfWorkingSet:10164, SelfPageFile:14108
2025-09-02 10:51:03 [Info] CommitTotal:5078,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:380,SystemCache:4194303,KernelTotal:264,KernelPaged:188,KernelNonpaged:76,PageSize:4096,HandleCount:28382,ProcessCount:54,ThreadCount:737
2025-09-02 11:05:38 [Info] GetMessage : T_MSG_CHECK
2025-09-02 11:05:38 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY3ODIzMzgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2ODI1NTM4LCJzdWIiOiJSVEFQX0lEWF8xNjIwMDFfMTc1Njc4MjMzODQ5MCJ9.HDbfDleumb0H6U8Jw6giFkQ8Jx8vZ-MoBpbeNgPL71c has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 11:05:48 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 11:05:48 [Info] ipc client:Rtap216061756782348_handler Reg client_name:Rtap216061756782348 on WhiteList
2025-09-02 11:05:48 [Info] start rtap process success, pid is 2300, argument is Rtap216061756782348
2025-09-02 11:05:48 [Info] New ClientConnectNotify : Rtap216061756782348, id is 00000540
2025-09-02 11:05:48 [Info] ipc client:Rtap216061756782348 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 11:05:49 [Info] Rtap Platform Rtap216061756782348 execv work --windows-autorun-item-check on pid 2300
2025-09-02 11:05:50 [Info] csrss.exe open proc 2300 AliSecCheck.ex
2025-09-02 11:05:51 [Info] csrss.exe open thread 2300 AliSecCheck.ex
2025-09-02 11:06:04 [Info] Done Work --windows-autorun-item-check:1
2025-09-02 11:06:04 [Info] Rtap Platform Rtap216061756782348 Exit:normal exit
2025-09-02 11:06:06 [Info] ClientDisConnectNotify : Rtap216061756782348, id is 00000540
2025-09-02 11:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10118","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10260","aliyundun_upload_time":"1756782541","aliyundun_write_pid_times":"0","ipc_send_count":"162","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 11:51:59 [Info] TotalPhys:2047,AvailPhys:390,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1405,SelfWorkingSet:10060, SelfPageFile:13728
2025-09-02 11:51:59 [Info] CommitTotal:5075,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:390,SystemCache:4194303,KernelTotal:265,KernelPaged:189,KernelNonpaged:75,PageSize:4096,HandleCount:28222,ProcessCount:53,ThreadCount:731
2025-09-02 12:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10064","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10184","aliyundun_upload_time":"1756786115","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 12:52:55 [Info] TotalPhys:2047,AvailPhys:627,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1419,SelfWorkingSet:10120, SelfPageFile:13884
2025-09-02 12:52:55 [Info] CommitTotal:5061,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:627,SystemCache:4194303,KernelTotal:255,KernelPaged:181,KernelNonpaged:74,PageSize:4096,HandleCount:28231,ProcessCount:53,ThreadCount:733
2025-09-02 12:53:20 [Info] get meta data success by v2
2025-09-02 12:53:20 [Info] get empty metaserver config
2025-09-02 12:53:20 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-02 12:53:20 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-02 12:53:20 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-02 12:53:20 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-02 12:53:20 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 12:53:20 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 12:53:20 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-02 12:53:20 [Info] download cert compare md5 same
2025-09-02 12:53:20 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 12:53:20 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 12:53:20 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-02 13:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10102","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10236","aliyundun_upload_time":"1756789721","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 13:53:52 [Info] TotalPhys:2047,AvailPhys:558,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1407,SelfWorkingSet:10000, SelfPageFile:13736
2025-09-02 13:53:52 [Info] CommitTotal:5072,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:558,SystemCache:4194303,KernelTotal:256,KernelPaged:182,KernelNonpaged:74,PageSize:4096,HandleCount:28237,ProcessCount:53,ThreadCount:734
2025-09-02 14:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9998","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10064","aliyundun_upload_time":"1756793322","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 14:54:48 [Info] TotalPhys:2047,AvailPhys:549,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1401,SelfWorkingSet:10008, SelfPageFile:13764
2025-09-02 14:54:48 [Info] CommitTotal:5079,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:549,SystemCache:4194303,KernelTotal:256,KernelPaged:182,KernelNonpaged:74,PageSize:4096,HandleCount:28283,ProcessCount:53,ThreadCount:737
2025-09-02 15:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9980","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10032","aliyundun_upload_time":"1756796926","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 15:55:45 [Info] TotalPhys:2047,AvailPhys:539,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1395,SelfWorkingSet:9992, SelfPageFile:13644
2025-09-02 15:55:45 [Info] CommitTotal:5085,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:539,SystemCache:4194303,KernelTotal:256,KernelPaged:182,KernelNonpaged:74,PageSize:4096,HandleCount:28263,ProcessCount:53,ThreadCount:739
2025-09-02 16:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9995","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10056","aliyundun_upload_time":"1756800534","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 16:09:45 [Info] nCurrentClock is 4428186500, nCurrentTime is 1756800585
2025-09-02 16:09:45 [Info] SendMessage T_MSG_LOGIN
2025-09-02 16:09:46 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-02 16:09:46 [Info] begin to enable self guard after reconnect
2025-09-02 16:09:46 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-02 16:09:46 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-02 16:09:46 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-02 16:09:46 [Info] key : cpu, value : 10
2025-09-02 16:09:46 [Info] key : rio, value : 20480
2025-09-02 16:09:46 [Info] key : wio, value : 20480
2025-09-02 16:09:46 [Info] key : cpu_all, value : 0
2025-09-02 16:09:46 [Info] key : max_pid_check, value : 200
2025-09-02 16:09:46 [Info] key : throw_dump, value : 0
2025-09-02 16:09:46 [Info] key : hash_mode, value : 1
2025-09-02 16:09:46 [Info] key : mem, value : 200
2025-09-02 16:09:46 [Info] can not find key max_fd in online conf
2025-09-02 16:09:46 [Info] key : proc_limit, value : 1
2025-09-02 16:09:46 [Info] key : resource_limit_mode, value : 3
2025-09-02 16:09:46 [Info] key : rtap_update_mode, value : 1
2025-09-02 16:09:46 [Info] can not find key debug in online conf
2025-09-02 16:09:46 [Info] can not find key update_mode in online conf
2025-09-02 16:09:46 [Info] can not find key http_mode in online conf
2025-09-02 16:09:46 [Info] can not find key rtap_enable in online conf
2025-09-02 16:09:46 [Info] can not find key rtap_new_agent in online conf
2025-09-02 16:09:46 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-02 16:09:46 [Info] can not find key mem_low_mark in online conf
2025-09-02 16:09:46 [Info] can not find key obnormal_report_interval in online conf
2025-09-02 16:09:46 [Info] key : cache_mode, value : 0
2025-09-02 16:09:46 [Info] key : abnormal_monitor_mode, value : 3
2025-09-02 16:09:46 [Info] key : queue_size_ratio, value : 80
2025-09-02 16:09:46 [Info] queue_size_ratio is 80
2025-09-02 16:09:46 [Info] resource limit mode and max limit cpu is not change
2025-09-02 16:09:46 [Info] set hash mode 1
2025-09-02 16:09:46 [Info] RTAP timeout config:9600000
2025-09-02 16:09:46 [Info] self_guard_mode config is 0
2025-09-02 16:09:46 [Info] GetMessage : T_MSG_CHECK
2025-09-02 16:09:46 [Info] task 37b1f238-4ad3-4442-8475-762df6ce2166 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 16:09:58 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 16:09:58 [Info] ipc client:Rtap156671756800598_handler Reg client_name:Rtap156671756800598 on WhiteList
2025-09-02 16:09:58 [Info] start rtap process success, pid is 4004, argument is Rtap156671756800598
2025-09-02 16:09:59 [Info] csrss.exe open proc 4004 AliSecCheck.ex
2025-09-02 16:10:00 [Info] csrss.exe open thread 4004 AliSecCheck.ex
2025-09-02 16:10:01 [Info] csrss.exe open thread 4004 AliSecCheck.ex
2025-09-02 16:10:02 [Info] csrss.exe open thread 4004 AliSecCheck.ex
2025-09-02 16:10:05 [Info] New ClientConnectNotify : Rtap156671756800598, id is 000004D8
2025-09-02 16:10:05 [Info] Rtap Platform Rtap156671756800598 execv work --windows-sysinfoext-check on pid 4004
2025-09-02 16:10:05 [Info] ipc client:Rtap156671756800598 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 16:10:33 [Info] Done Work --windows-sysinfoext-check:1
2025-09-02 16:10:33 [Info] Rtap Platform Rtap156671756800598 Exit:normal exit
2025-09-02 16:10:36 [Info] ClientDisConnectNotify : Rtap156671756800598, id is 000004D8
2025-09-02 16:10:41 [Info] get meta data success by v2
2025-09-02 16:10:41 [Info] get empty metaserver config
2025-09-02 16:10:41 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-02 16:10:41 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-02 16:10:41 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-02 16:10:41 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-02 16:10:41 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 16:10:41 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 16:10:41 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-02 16:10:41 [Info] download cert compare md5 same
2025-09-02 16:10:41 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 16:10:41 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 16:10:41 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-02 16:56:46 [Info] TotalPhys:2047,AvailPhys:538,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1401,SelfWorkingSet:10096, SelfPageFile:13988
2025-09-02 16:56:46 [Info] CommitTotal:5079,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:538,SystemCache:23,KernelTotal:257,KernelPaged:182,KernelNonpaged:74,PageSize:4096,HandleCount:28222,ProcessCount:53,ThreadCount:735
2025-09-02 17:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10100","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10304","aliyundun_upload_time":"1756804116","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 17:57:43 [Info] TotalPhys:2047,AvailPhys:544,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1401,SelfWorkingSet:9972, SelfPageFile:13748
2025-09-02 17:57:43 [Info] CommitTotal:5078,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:544,SystemCache:52,KernelTotal:260,KernelPaged:185,KernelNonpaged:74,PageSize:4096,HandleCount:28228,ProcessCount:53,ThreadCount:741
2025-09-02 18:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9973","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10140","aliyundun_upload_time":"1756807725","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 18:52:41 [Info] GetMessage : T_MSG_CHECK
2025-09-02 18:52:41 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY4MTAzNjEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2ODUzNTYxLCJzdWIiOiJSVEFQX0lEWF8xNjIwNzFfMTc1NjgxMDM2MTQ0OSJ9.MAXCMEdiSXC8OpEE3HMW8bjywp5y21CIet3zIfi0NAY has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 18:52:52 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 18:52:52 [Info] ipc client:Rtap148171756810372_handler Reg client_name:Rtap148171756810372 on WhiteList
2025-09-02 18:52:52 [Info] start rtap process success, pid is 3104, argument is Rtap148171756810372
2025-09-02 18:52:52 [Info] New ClientConnectNotify : Rtap148171756810372, id is 00000548
2025-09-02 18:52:52 [Info] ipc client:Rtap148171756810372 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 18:52:52 [Info] Rtap Platform Rtap148171756810372 execv work --secnet_rasp_agent on pid 3104
2025-09-02 18:52:55 [Info] csrss.exe open proc 3104 AliSecCheck.ex
2025-09-02 18:52:56 [Info] csrss.exe open thread 3104 AliSecCheck.ex
2025-09-02 18:52:57 [Info] csrss.exe open thread 3104 AliSecCheck.ex
2025-09-02 18:53:00 [Info] Done Work --secnet_rasp_agent:1
2025-09-02 18:53:00 [Info] Rtap Platform Rtap148171756810372 Exit:normal exit
2025-09-02 18:53:02 [Info] ClientDisConnectNotify : Rtap148171756810372, id is 00000548
2025-09-02 18:58:39 [Info] TotalPhys:2047,AvailPhys:543,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1396,SelfWorkingSet:10024, SelfPageFile:13888
2025-09-02 18:58:39 [Info] CommitTotal:5084,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:543,SystemCache:58,KernelTotal:260,KernelPaged:186,KernelNonpaged:74,PageSize:4096,HandleCount:28215,ProcessCount:53,ThreadCount:740
2025-09-02 19:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10008","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10024","aliyundun_upload_time":"1756811334","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 19:27:58 [Info] get meta data success by v2
2025-09-02 19:27:58 [Info] get empty metaserver config
2025-09-02 19:27:58 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-02 19:27:58 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-02 19:27:58 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-02 19:27:58 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-02 19:27:58 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 19:27:58 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 19:27:59 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-02 19:27:59 [Info] download cert compare md5 same
2025-09-02 19:27:59 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 19:27:59 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 19:27:59 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-02 19:59:35 [Info] TotalPhys:2047,AvailPhys:538,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1396,SelfWorkingSet:10048, SelfPageFile:13724
2025-09-02 19:59:35 [Info] CommitTotal:5083,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:538,SystemCache:58,KernelTotal:260,KernelPaged:185,KernelNonpaged:74,PageSize:4096,HandleCount:28196,ProcessCount:53,ThreadCount:736
2025-09-02 20:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10047","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10104","aliyundun_upload_time":"1756814912","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 21:00:32 [Info] TotalPhys:2047,AvailPhys:531,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1394,SelfWorkingSet:10116, SelfPageFile:13828
2025-09-02 21:00:32 [Info] CommitTotal:5086,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:531,SystemCache:4194303,KernelTotal:257,KernelPaged:182,KernelNonpaged:74,PageSize:4096,HandleCount:28204,ProcessCount:53,ThreadCount:737
2025-09-02 21:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10072","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10132","aliyundun_upload_time":"1756818520","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 21:38:41 [Info] nCurrentClock is 4446187000, nCurrentTime is 1756820321
2025-09-02 21:38:41 [Info] SendMessage T_MSG_LOGIN
2025-09-02 21:38:41 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-02 21:38:41 [Info] begin to enable self guard after reconnect
2025-09-02 21:38:41 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-02 21:38:41 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-02 21:38:42 [Info] GetMessage : T_MSG_CHECK
2025-09-02 21:38:42 [Info] task 370a5b36-90a1-44ac-af84-ea40cf462340 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 21:38:50 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-02 21:38:50 [Info] key : cpu, value : 10
2025-09-02 21:38:50 [Info] key : rio, value : 20480
2025-09-02 21:38:50 [Info] key : wio, value : 20480
2025-09-02 21:38:50 [Info] key : cpu_all, value : 0
2025-09-02 21:38:50 [Info] key : max_pid_check, value : 200
2025-09-02 21:38:50 [Info] key : throw_dump, value : 0
2025-09-02 21:38:50 [Info] key : hash_mode, value : 1
2025-09-02 21:38:50 [Info] key : mem, value : 200
2025-09-02 21:38:50 [Info] can not find key max_fd in online conf
2025-09-02 21:38:50 [Info] key : proc_limit, value : 1
2025-09-02 21:38:50 [Info] key : resource_limit_mode, value : 3
2025-09-02 21:38:50 [Info] key : rtap_update_mode, value : 1
2025-09-02 21:38:50 [Info] can not find key debug in online conf
2025-09-02 21:38:50 [Info] can not find key update_mode in online conf
2025-09-02 21:38:50 [Info] can not find key http_mode in online conf
2025-09-02 21:38:50 [Info] can not find key rtap_enable in online conf
2025-09-02 21:38:50 [Info] can not find key rtap_new_agent in online conf
2025-09-02 21:38:50 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-02 21:38:50 [Info] can not find key mem_low_mark in online conf
2025-09-02 21:38:50 [Info] can not find key obnormal_report_interval in online conf
2025-09-02 21:38:50 [Info] key : cache_mode, value : 0
2025-09-02 21:38:50 [Info] key : abnormal_monitor_mode, value : 3
2025-09-02 21:38:50 [Info] key : queue_size_ratio, value : 80
2025-09-02 21:38:50 [Info] queue_size_ratio is 80
2025-09-02 21:38:50 [Info] resource limit mode and max limit cpu is not change
2025-09-02 21:38:50 [Info] set hash mode 1
2025-09-02 21:38:50 [Info] RTAP timeout config:9600000
2025-09-02 21:38:50 [Info] self_guard_mode config is 0
2025-09-02 21:38:50 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-09-02 21:38:50 [Info] GetMessage : T_MSG_CHECK
2025-09-02 21:38:50 [Info] task 96c21750a8ebb003533453d5605492e2 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-02 21:38:57 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 21:38:57 [Info] ipc client:Rtap145901756820337_handler Reg client_name:Rtap145901756820337 on WhiteList
2025-09-02 21:38:57 [Info] start rtap process success, pid is 1968, argument is Rtap145901756820337
2025-09-02 21:38:57 [Info] New ClientConnectNotify : Rtap145901756820337, id is 000004B8
2025-09-02 21:38:57 [Info] ipc client:Rtap145901756820337 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 21:38:58 [Info] Rtap Platform Rtap145901756820337 execv work --windows-sysinfoext-check on pid 1968
2025-09-02 21:38:59 [Info] csrss.exe open proc 1968 AliSecCheck.ex
2025-09-02 21:39:01 [Info] csrss.exe open thread 1968 AliSecCheck.ex
2025-09-02 21:39:02 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-02 21:39:02 [Info] ipc client:Rtap146071756820342_handler Reg client_name:Rtap146071756820342 on WhiteList
2025-09-02 21:39:02 [Info] start rtap process success, pid is 2024, argument is Rtap146071756820342
2025-09-02 21:39:02 [Info] New ClientConnectNotify : Rtap146071756820342, id is 000004D8
2025-09-02 21:39:03 [Info] ipc client:Rtap146071756820342 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-02 21:39:03 [Info] Rtap Platform Rtap146071756820342 execv work --windows-vul-check on pid 2024
2025-09-02 21:39:05 [Info] csrss.exe open proc 2024 AliSecCheck.ex
2025-09-02 21:39:06 [Info] csrss.exe open thread 2024 AliSecCheck.ex
2025-09-02 21:39:06 [Info] Done Work --windows-sysinfoext-check:1
2025-09-02 21:39:06 [Info] Rtap Platform Rtap145901756820337 Exit:normal exit
2025-09-02 21:39:08 [Info] ClientDisConnectNotify : Rtap145901756820337, id is 000004B8
2025-09-02 21:39:12 [Info] Done Work --windows-vul-check:1
2025-09-02 21:39:12 [Info] Rtap Platform Rtap146071756820342 Exit:normal exit
2025-09-02 21:39:14 [Info] ClientDisConnectNotify : Rtap146071756820342, id is 000004D8
2025-09-02 22:01:32 [Info] TotalPhys:2047,AvailPhys:527,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1393,SelfWorkingSet:9856, SelfPageFile:13764
2025-09-02 22:01:32 [Info] CommitTotal:5086,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:527,SystemCache:4194303,KernelTotal:257,KernelPaged:182,KernelNonpaged:74,PageSize:4096,HandleCount:28243,ProcessCount:54,ThreadCount:745
2025-09-02 22:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9890","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10124","aliyundun_upload_time":"1756822121","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-02 22:45:21 [Info] get meta data success by v2
2025-09-02 22:45:21 [Info] get empty metaserver config
2025-09-02 22:45:21 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-02 22:45:21 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-02 22:45:21 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-02 22:45:21 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-02 22:45:21 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 22:45:21 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-02 22:45:22 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-02 22:45:22 [Info] download cert compare md5 same
2025-09-02 22:45:22 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 22:45:22 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-02 22:45:22 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-02 23:02:29 [Info] TotalPhys:2047,AvailPhys:526,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1392,SelfWorkingSet:9924, SelfPageFile:13784
2025-09-02 23:02:29 [Info] CommitTotal:5087,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:526,SystemCache:4194303,KernelTotal:258,KernelPaged:183,KernelNonpaged:74,PageSize:4096,HandleCount:28095,ProcessCount:53,ThreadCount:740
2025-09-02 23:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9929","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9980","aliyundun_upload_time":"1756825727","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-03 00:03:25 [Info] TotalPhys:2047,AvailPhys:505,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6480,AvailPageFile:1387,SelfWorkingSet:10040, SelfPageFile:13856
2025-09-03 00:03:25 [Info] CommitTotal:5093,CommitLimit:6480,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:505,SystemCache:15,KernelTotal:260,KernelPaged:185,KernelNonpaged:74,PageSize:4096,HandleCount:28091,ProcessCount:53,ThreadCount:742
2025-09-03 00:08:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9931","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10040","aliyundun_upload_time":"1756829333","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 00:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10156","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"2","aliyundun_max_mem":"10348","aliyundun_upload_time":"1757347715","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-09-09 00:20:39 [Info] TotalPhys:2047,AvailPhys:675,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1176,SelfWorkingSet:10156, SelfPageFile:13908
2025-09-09 00:20:39 [Info] CommitTotal:5370,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:675,SystemCache:4194303,KernelTotal:263,KernelPaged:186,KernelNonpaged:77,PageSize:4096,HandleCount:28018,ProcessCount:52,ThreadCount:727
2025-09-09 01:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10143","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10172","aliyundun_upload_time":"1757351342","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 01:17:57 [Info] GetMessage : T_MSG_CHECK
2025-09-09 01:17:57 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTczNTE4NzcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3Mzk1MDc3LCJzdWIiOiJSVEFQX0lEWF8xNjI1NTJfMTc1NzM1MTg3NzIwNSJ9.QQEsqQulfSJ8e8CrHGA1sURZwOxhlDoH1dEf2x3O8dM has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 01:18:06 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 01:18:06 [Info] ipc client:Rtap137021757351886_handler Reg client_name:Rtap137021757351886 on WhiteList
2025-09-09 01:18:06 [Info] start rtap process success, pid is 4888, argument is Rtap137021757351886
2025-09-09 01:18:06 [Info] New ClientConnectNotify : Rtap137021757351886, id is 000004F8
2025-09-09 01:18:06 [Info] ipc client:Rtap137021757351886 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 01:18:07 [Info] Rtap Platform Rtap137021757351886 execv work --sca on pid 4888
2025-09-09 01:18:09 [Info] csrss.exe open proc 4888 AliSecCheck.ex
2025-09-09 01:18:10 [Info] csrss.exe open thread 4888 AliSecCheck.ex
2025-09-09 01:18:50 [Info] csrss.exe open thread 4888 AliSecCheck.ex
2025-09-09 01:19:11 [Info] Done Work --sca:1
2025-09-09 01:19:11 [Info] Rtap Platform Rtap137021757351886 Exit:normal exit
2025-09-09 01:19:13 [Info] ClientDisConnectNotify : Rtap137021757351886, id is 000004F8
2025-09-09 01:21:36 [Info] TotalPhys:2047,AvailPhys:481,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1142,SelfWorkingSet:10136, SelfPageFile:13860
2025-09-09 01:21:36 [Info] CommitTotal:5404,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:481,SystemCache:12,KernelTotal:263,KernelPaged:186,KernelNonpaged:76,PageSize:4096,HandleCount:28171,ProcessCount:53,ThreadCount:747
2025-09-09 01:51:37 [Info] nCurrentClock is 4932212800, nCurrentTime is 1757353897
2025-09-09 01:51:37 [Info] SendMessage T_MSG_LOGIN
2025-09-09 01:51:37 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-09 01:51:37 [Info] begin to enable self guard after reconnect
2025-09-09 01:51:37 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-09 01:51:37 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-09 01:51:37 [Info] GetMessage : T_MSG_CHECK
2025-09-09 01:51:37 [Info] task 8e94cb0d-6503-434f-ae2c-9873c14ccb26 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 01:51:45 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-09 01:51:45 [Info] key : cpu, value : 10
2025-09-09 01:51:45 [Info] key : rio, value : 20480
2025-09-09 01:51:45 [Info] key : wio, value : 20480
2025-09-09 01:51:45 [Info] key : cpu_all, value : 0
2025-09-09 01:51:45 [Info] key : max_pid_check, value : 200
2025-09-09 01:51:45 [Info] key : throw_dump, value : 0
2025-09-09 01:51:45 [Info] key : hash_mode, value : 1
2025-09-09 01:51:45 [Info] key : mem, value : 200
2025-09-09 01:51:45 [Info] can not find key max_fd in online conf
2025-09-09 01:51:45 [Info] key : proc_limit, value : 1
2025-09-09 01:51:45 [Info] key : resource_limit_mode, value : 3
2025-09-09 01:51:45 [Info] key : rtap_update_mode, value : 1
2025-09-09 01:51:45 [Info] can not find key debug in online conf
2025-09-09 01:51:45 [Info] can not find key update_mode in online conf
2025-09-09 01:51:45 [Info] can not find key http_mode in online conf
2025-09-09 01:51:45 [Info] can not find key rtap_enable in online conf
2025-09-09 01:51:45 [Info] can not find key rtap_new_agent in online conf
2025-09-09 01:51:45 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-09 01:51:45 [Info] can not find key mem_low_mark in online conf
2025-09-09 01:51:45 [Info] can not find key obnormal_report_interval in online conf
2025-09-09 01:51:45 [Info] key : cache_mode, value : 0
2025-09-09 01:51:45 [Info] key : abnormal_monitor_mode, value : 3
2025-09-09 01:51:45 [Info] key : queue_size_ratio, value : 80
2025-09-09 01:51:45 [Info] queue_size_ratio is 80
2025-09-09 01:51:45 [Info] resource limit mode and max limit cpu is not change
2025-09-09 01:51:45 [Info] set hash mode 1
2025-09-09 01:51:45 [Info] RTAP timeout config:9600000
2025-09-09 01:51:45 [Info] self_guard_mode config is 0
2025-09-09 01:51:45 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-09-09 01:51:52 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 01:51:52 [Info] ipc client:Rtap203181757353912_handler Reg client_name:Rtap203181757353912 on WhiteList
2025-09-09 01:51:52 [Info] start rtap process success, pid is 3752, argument is Rtap203181757353912
2025-09-09 01:51:52 [Info] New ClientConnectNotify : Rtap203181757353912, id is 0000053C
2025-09-09 01:51:52 [Info] ipc client:Rtap203181757353912 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 01:51:53 [Info] Rtap Platform Rtap203181757353912 execv work --windows-sysinfoext-check on pid 3752
2025-09-09 01:51:55 [Info] csrss.exe open proc 3752 AliSecCheck.ex
2025-09-09 01:51:56 [Info] csrss.exe open thread 3752 AliSecCheck.ex
2025-09-09 01:52:00 [Info] Done Work --windows-sysinfoext-check:1
2025-09-09 01:52:00 [Info] Rtap Platform Rtap203181757353912 Exit:normal exit
2025-09-09 01:52:02 [Info] ClientDisConnectNotify : Rtap203181757353912, id is 0000053C
2025-09-09 02:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10140","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10188","aliyundun_upload_time":"1757354929","aliyundun_write_pid_times":"0","ipc_send_count":"152","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 02:22:36 [Info] TotalPhys:2047,AvailPhys:485,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1150,SelfWorkingSet:10084, SelfPageFile:13840
2025-09-09 02:22:36 [Info] CommitTotal:5397,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:485,SystemCache:9,KernelTotal:263,KernelPaged:186,KernelNonpaged:76,PageSize:4096,HandleCount:28172,ProcessCount:53,ThreadCount:735
2025-09-09 02:58:13 [Info] get meta data success by v2
2025-09-09 02:58:13 [Info] get empty metaserver config
2025-09-09 02:58:13 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-09 02:58:13 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-09 02:58:13 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-09 02:58:13 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-09 02:58:13 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 02:58:13 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 02:58:13 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-09 02:58:13 [Info] download cert compare md5 same
2025-09-09 02:58:13 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 02:58:13 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 02:58:13 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-09 03:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10110","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10196","aliyundun_upload_time":"1757358534","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 03:23:33 [Info] TotalPhys:2047,AvailPhys:476,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1143,SelfWorkingSet:10208, SelfPageFile:13976
2025-09-09 03:23:33 [Info] CommitTotal:5403,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:476,SystemCache:21,KernelTotal:266,KernelPaged:189,KernelNonpaged:76,PageSize:4096,HandleCount:28049,ProcessCount:52,ThreadCount:738
2025-09-09 04:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10186","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10232","aliyundun_upload_time":"1757362113","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 04:24:30 [Info] TotalPhys:2047,AvailPhys:481,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1142,SelfWorkingSet:10080, SelfPageFile:13780
2025-09-09 04:24:30 [Info] CommitTotal:5404,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:481,SystemCache:10,KernelTotal:266,KernelPaged:189,KernelNonpaged:76,PageSize:4096,HandleCount:28012,ProcessCount:52,ThreadCount:733
2025-09-09 05:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10083","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10228","aliyundun_upload_time":"1757365717","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 05:25:27 [Info] TotalPhys:2047,AvailPhys:473,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1135,SelfWorkingSet:10192, SelfPageFile:13976
2025-09-09 05:25:27 [Info] CommitTotal:5411,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:473,SystemCache:11,KernelTotal:266,KernelPaged:189,KernelNonpaged:76,PageSize:4096,HandleCount:28039,ProcessCount:52,ThreadCount:737
2025-09-09 06:08:44 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10156","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10216","aliyundun_upload_time":"1757369324","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 06:15:36 [Info] get meta data success by v2
2025-09-09 06:15:36 [Info] get empty metaserver config
2025-09-09 06:15:36 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-09 06:15:36 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-09 06:15:36 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-09 06:15:36 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-09 06:15:36 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 06:15:36 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 06:15:36 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-09 06:15:36 [Info] download cert compare md5 same
2025-09-09 06:15:36 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 06:15:36 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 06:15:36 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-09 06:26:23 [Info] TotalPhys:2047,AvailPhys:462,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6547,AvailPageFile:1135,SelfWorkingSet:10272, SelfPageFile:14120
2025-09-09 06:26:23 [Info] CommitTotal:5411,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:462,SystemCache:4194303,KernelTotal:263,KernelPaged:186,KernelNonpaged:77,PageSize:4096,HandleCount:28038,ProcessCount:52,ThreadCount:736
2025-09-09 07:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10165","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10296","aliyundun_upload_time":"1757372936","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 07:20:38 [Info] nCurrentClock is 4950213300, nCurrentTime is 1757373638
2025-09-09 07:20:38 [Info] SendMessage T_MSG_LOGIN
2025-09-09 07:20:39 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-09 07:20:39 [Info] begin to enable self guard after reconnect
2025-09-09 07:20:39 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-09 07:20:39 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-09 07:20:39 [Info] GetMessage : T_MSG_CHECK
2025-09-09 07:20:39 [Info] task 645894c3-409d-46a5-9124-ea2db9dafbb0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 07:20:47 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-09 07:20:47 [Info] key : cpu, value : 10
2025-09-09 07:20:47 [Info] key : rio, value : 20480
2025-09-09 07:20:47 [Info] key : wio, value : 20480
2025-09-09 07:20:47 [Info] key : cpu_all, value : 0
2025-09-09 07:20:47 [Info] key : max_pid_check, value : 200
2025-09-09 07:20:47 [Info] key : throw_dump, value : 0
2025-09-09 07:20:47 [Info] key : hash_mode, value : 1
2025-09-09 07:20:47 [Info] key : mem, value : 200
2025-09-09 07:20:47 [Info] can not find key max_fd in online conf
2025-09-09 07:20:47 [Info] key : proc_limit, value : 1
2025-09-09 07:20:47 [Info] key : resource_limit_mode, value : 3
2025-09-09 07:20:47 [Info] key : rtap_update_mode, value : 1
2025-09-09 07:20:47 [Info] can not find key debug in online conf
2025-09-09 07:20:47 [Info] can not find key update_mode in online conf
2025-09-09 07:20:47 [Info] can not find key http_mode in online conf
2025-09-09 07:20:47 [Info] can not find key rtap_enable in online conf
2025-09-09 07:20:47 [Info] can not find key rtap_new_agent in online conf
2025-09-09 07:20:47 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-09 07:20:47 [Info] can not find key mem_low_mark in online conf
2025-09-09 07:20:47 [Info] can not find key obnormal_report_interval in online conf
2025-09-09 07:20:47 [Info] key : cache_mode, value : 0
2025-09-09 07:20:47 [Info] key : abnormal_monitor_mode, value : 3
2025-09-09 07:20:47 [Info] key : queue_size_ratio, value : 80
2025-09-09 07:20:47 [Info] queue_size_ratio is 80
2025-09-09 07:20:47 [Info] resource limit mode and max limit cpu is not change
2025-09-09 07:20:47 [Info] set hash mode 1
2025-09-09 07:20:47 [Info] RTAP timeout config:9600000
2025-09-09 07:20:47 [Info] self_guard_mode config is 0
2025-09-09 07:20:54 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 07:20:54 [Info] ipc client:Rtap192511757373654_handler Reg client_name:Rtap192511757373654 on WhiteList
2025-09-09 07:20:54 [Info] start rtap process success, pid is 4484, argument is Rtap192511757373654
2025-09-09 07:20:54 [Info] New ClientConnectNotify : Rtap192511757373654, id is 000001E4
2025-09-09 07:20:55 [Info] ipc client:Rtap192511757373654 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 07:20:55 [Info] Rtap Platform Rtap192511757373654 execv work --windows-sysinfoext-check on pid 4484
2025-09-09 07:20:57 [Info] csrss.exe open proc 4484 AliSecCheck.ex
2025-09-09 07:20:58 [Info] csrss.exe open thread 4484 AliSecCheck.ex
2025-09-09 07:20:59 [Info] csrss.exe open thread 4484 AliSecCheck.ex
2025-09-09 07:21:02 [Info] Done Work --windows-sysinfoext-check:1
2025-09-09 07:21:02 [Info] Rtap Platform Rtap192511757373654 Exit:normal exit
2025-09-09 07:21:06 [Info] ClientDisConnectNotify : Rtap192511757373654, id is 000001E4
2025-09-09 07:27:25 [Info] TotalPhys:2047,AvailPhys:467,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1136,SelfWorkingSet:10232, SelfPageFile:14260
2025-09-09 07:27:25 [Info] CommitTotal:5410,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:467,SystemCache:4194303,KernelTotal:263,KernelPaged:186,KernelNonpaged:77,PageSize:4096,HandleCount:28222,ProcessCount:53,ThreadCount:744
2025-09-09 08:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10207","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10252","aliyundun_upload_time":"1757376520","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 08:28:24 [Info] TotalPhys:2047,AvailPhys:453,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1138,SelfWorkingSet:10180, SelfPageFile:13928
2025-09-09 08:28:24 [Info] CommitTotal:5408,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:453,SystemCache:4194303,KernelTotal:264,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:28034,ProcessCount:52,ThreadCount:736
2025-09-09 08:49:35 [Info] GetMessage : T_MSG_CHECK
2025-09-09 08:49:35 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTczNzg5NzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NDIyMTc1LCJzdWIiOiJSVEFQX0lEWF8xNjI1NDNfMTc1NzM3ODk3NTY1MyJ9.I-VKMXjiXItB4goJeyNJMsGSg75knFsegowWaZvb-YI has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 08:49:45 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 08:49:45 [Info] ipc client:Rtap38921757378985_handler Reg client_name:Rtap38921757378985 on WhiteList
2025-09-09 08:49:45 [Info] start rtap process success, pid is 2196, argument is Rtap38921757378985
2025-09-09 08:49:45 [Info] New ClientConnectNotify : Rtap38921757378985, id is 000004F8
2025-09-09 08:49:45 [Info] ipc client:Rtap38921757378985 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 08:49:45 [Info] Rtap Platform Rtap38921757378985 execv work --windows-process-check on pid 2196
2025-09-09 08:49:47 [Info] csrss.exe open proc 2196 AliSecCheck.ex
2025-09-09 08:49:48 [Info] csrss.exe open thread 2196 AliSecCheck.ex
2025-09-09 08:50:09 [Info] Done Work --windows-process-check:1
2025-09-09 08:50:09 [Info] Rtap Platform Rtap38921757378985 Exit:normal exit
2025-09-09 08:50:11 [Info] ClientDisConnectNotify : Rtap38921757378985, id is 000004F8
2025-09-09 09:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10230","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10316","aliyundun_upload_time":"1757380112","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 09:29:23 [Info] TotalPhys:2047,AvailPhys:463,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1137,SelfWorkingSet:9980, SelfPageFile:13652
2025-09-09 09:29:23 [Info] CommitTotal:5409,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:463,SystemCache:29,KernelTotal:277,KernelPaged:195,KernelNonpaged:81,PageSize:4096,HandleCount:28020,ProcessCount:52,ThreadCount:731
2025-09-09 09:33:59 [Info] get meta data success by v2
2025-09-09 09:33:59 [Info] get empty metaserver config
2025-09-09 09:33:59 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-09 09:33:59 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-09 09:33:59 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-09 09:33:59 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-09 09:33:59 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 09:33:59 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 09:33:59 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-09 09:33:59 [Info] download cert compare md5 same
2025-09-09 09:33:59 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 09:33:59 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 09:33:59 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-09 09:56:49 [Info] GetMessage : T_MSG_CHECK
2025-09-09 09:56:49 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTczODMwMDksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NDI2MjA5LCJzdWIiOiJSVEFQX0lEWF8xNjI1NDRfMTc1NzM4MzAwOTg0NyJ9.aOvXtx-hU9Y0X1LgfGoXFdXYLO9Na0q1vXNn7bFjilM has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 09:56:59 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 09:56:59 [Info] ipc client:Rtap170651757383019_handler Reg client_name:Rtap170651757383019 on WhiteList
2025-09-09 09:56:59 [Info] start rtap process success, pid is 3848, argument is Rtap170651757383019
2025-09-09 09:57:00 [Info] New ClientConnectNotify : Rtap170651757383019, id is 0000053C
2025-09-09 09:57:00 [Info] ipc client:Rtap170651757383019 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 09:57:00 [Info] Rtap Platform Rtap170651757383019 execv work --tcp-connect-check on pid 3848
2025-09-09 09:57:02 [Info] csrss.exe open proc 3848 AliSecCheck.ex
2025-09-09 09:57:03 [Info] csrss.exe open thread 3848 AliSecCheck.ex
2025-09-09 09:57:11 [Info] Done Work --tcp-connect-check:1
2025-09-09 09:57:11 [Info] Rtap Platform Rtap170651757383019 Exit:normal exit
2025-09-09 09:57:13 [Info] ClientDisConnectNotify : Rtap170651757383019, id is 0000053C
2025-09-09 10:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10151","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10316","aliyundun_upload_time":"1757383725","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 10:15:43 [Info] GetMessage : T_MSG_CHECK
2025-09-09 10:15:43 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTczODQxNDMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NDI3MzQzLCJzdWIiOiJSVEFQX0lEWF8xNjI1NDZfMTc1NzM4NDE0Mzg0OSJ9.Vj3SzRqJwTkdV02ei2E0A7cbqtC0U6wK1Ed33_mDM4c has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 10:15:53 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 10:15:53 [Info] ipc client:Rtap207681757384153_handler Reg client_name:Rtap207681757384153 on WhiteList
2025-09-09 10:15:53 [Info] start rtap process success, pid is 1376, argument is Rtap207681757384153
2025-09-09 10:15:53 [Info] New ClientConnectNotify : Rtap207681757384153, id is 000004F4
2025-09-09 10:15:53 [Info] ipc client:Rtap207681757384153 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 10:15:53 [Info] Rtap Platform Rtap207681757384153 execv work --windows-schedule-task-check on pid 1376
2025-09-09 10:15:54 [Info] csrss.exe open proc 1376 AliSecCheck.ex
2025-09-09 10:15:55 [Info] csrss.exe open thread 1376 AliSecCheck.ex
2025-09-09 10:15:59 [Info] GetMessage : T_MSG_CHECK
2025-09-09 10:15:59 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTczODQxNTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NDI3MzU5LCJzdWIiOiJSVEFQX0lEWF8xNjI1NTFfMTc1NzM4NDE1OTM5NSJ9.1OKKAfa9ls7HPzaaAFo8Mpfs28tQBz-YQadVdhqOFs8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 10:16:10 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 10:16:10 [Info] ipc client:Rtap208241757384170_handler Reg client_name:Rtap208241757384170 on WhiteList
2025-09-09 10:16:10 [Info] start rtap process success, pid is 3736, argument is Rtap208241757384170
2025-09-09 10:16:10 [Info] New ClientConnectNotify : Rtap208241757384170, id is 0000053C
2025-09-09 10:16:10 [Info] ipc client:Rtap208241757384170 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 10:16:11 [Info] Rtap Platform Rtap208241757384170 execv work --windows-registry-check on pid 3736
2025-09-09 10:16:12 [Info] csrss.exe open proc 3736 AliSecCheck.ex
2025-09-09 10:16:13 [Info] csrss.exe open thread 3736 AliSecCheck.ex
2025-09-09 10:16:30 [Info] Done Work --windows-schedule-task-check:1
2025-09-09 10:16:30 [Info] Rtap Platform Rtap207681757384153 Exit:normal exit
2025-09-09 10:16:32 [Info] ClientDisConnectNotify : Rtap207681757384153, id is 000004F4
2025-09-09 10:16:44 [Info] Done Work --windows-registry-check:1
2025-09-09 10:16:44 [Info] Rtap Platform Rtap208241757384170 Exit:normal exit
2025-09-09 10:16:46 [Info] ClientDisConnectNotify : Rtap208241757384170, id is 0000053C
2025-09-09 10:17:10 [Info] GetMessage : T_MSG_CHECK
2025-09-09 10:17:10 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTczODQyMzAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NDI3NDMwLCJzdWIiOiJSVEFQX0lEWF8xNjI1NTlfMTc1NzM4NDIzMDQ0MiJ9.M1zRiU1PCjitnbe_i-nvFfELGMRcLqkpt6cqov9iYao has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 10:17:21 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 10:17:21 [Info] ipc client:Rtap210551757384241_handler Reg client_name:Rtap210551757384241 on WhiteList
2025-09-09 10:17:21 [Info] start rtap process success, pid is 4000, argument is Rtap210551757384241
2025-09-09 10:17:21 [Info] New ClientConnectNotify : Rtap210551757384241, id is 000004F8
2025-09-09 10:17:21 [Info] ipc client:Rtap210551757384241 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 10:17:21 [Info] Rtap Platform Rtap210551757384241 execv work --windows-driver-version-check on pid 4000
2025-09-09 10:17:23 [Info] csrss.exe open proc 4000 AliSecCheck.ex
2025-09-09 10:17:24 [Info] csrss.exe open thread 4000 AliSecCheck.ex
2025-09-09 10:17:28 [Info] Done Work --windows-driver-version-check:1
2025-09-09 10:17:28 [Info] Rtap Platform Rtap210551757384241 Exit:normal exit
2025-09-09 10:17:30 [Info] ClientDisConnectNotify : Rtap210551757384241, id is 000004F8
2025-09-09 10:30:20 [Info] TotalPhys:2047,AvailPhys:451,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1125,SelfWorkingSet:10168, SelfPageFile:14180
2025-09-09 10:30:20 [Info] CommitTotal:5421,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:451,SystemCache:4194303,KernelTotal:269,KernelPaged:191,KernelNonpaged:77,PageSize:4096,HandleCount:28022,ProcessCount:52,ThreadCount:732
2025-09-09 11:05:36 [Info] GetMessage : T_MSG_CHECK
2025-09-09 11:05:36 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTczODcxMzYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NDMwMzM2LCJzdWIiOiJSVEFQX0lEWF8xNjI1NDhfMTc1NzM4NzEzNjA2NiJ9.69mb18IHuNmDuAH51gQR1w4laiESx168LozWjBsLCD8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 11:05:45 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 11:05:45 [Info] ipc client:Rtap305391757387145_handler Reg client_name:Rtap305391757387145 on WhiteList
2025-09-09 11:05:45 [Info] start rtap process success, pid is 4884, argument is Rtap305391757387145
2025-09-09 11:05:45 [Info] New ClientConnectNotify : Rtap305391757387145, id is 0000053C
2025-09-09 11:05:45 [Info] ipc client:Rtap305391757387145 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 11:05:46 [Info] Rtap Platform Rtap305391757387145 execv work --windows-autorun-item-check on pid 4884
2025-09-09 11:05:47 [Info] csrss.exe open proc 4884 AliSecCheck.ex
2025-09-09 11:05:48 [Info] csrss.exe open thread 4884 AliSecCheck.ex
2025-09-09 11:06:01 [Info] Done Work --windows-autorun-item-check:1
2025-09-09 11:06:01 [Info] Rtap Platform Rtap305391757387145 Exit:normal exit
2025-09-09 11:06:03 [Info] ClientDisConnectNotify : Rtap305391757387145, id is 0000053C
2025-09-09 11:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10158","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10276","aliyundun_upload_time":"1757387337","aliyundun_write_pid_times":"0","ipc_send_count":"155","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 11:31:17 [Info] TotalPhys:2047,AvailPhys:458,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1127,SelfWorkingSet:10084, SelfPageFile:14076
2025-09-09 11:31:17 [Info] CommitTotal:5419,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:458,SystemCache:4194303,KernelTotal:269,KernelPaged:191,KernelNonpaged:77,PageSize:4096,HandleCount:28083,ProcessCount:52,ThreadCount:735
2025-09-09 12:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10087","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10140","aliyundun_upload_time":"1757390934","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 12:32:14 [Info] TotalPhys:2047,AvailPhys:440,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1111,SelfWorkingSet:10132, SelfPageFile:14148
2025-09-09 12:32:14 [Info] CommitTotal:5435,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:440,SystemCache:4194303,KernelTotal:269,KernelPaged:191,KernelNonpaged:77,PageSize:4096,HandleCount:28080,ProcessCount:52,ThreadCount:737
2025-09-09 12:50:33 [Info] nCurrentClock is 4968213900, nCurrentTime is 1757393433
2025-09-09 12:50:33 [Info] SendMessage T_MSG_LOGIN
2025-09-09 12:50:33 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-09 12:50:33 [Info] begin to enable self guard after reconnect
2025-09-09 12:50:33 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-09 12:50:33 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-09 12:50:33 [Info] GetMessage : T_MSG_CHECK
2025-09-09 12:50:33 [Info] task bd582723-f50d-4488-978c-5bf59d349f35 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 12:50:42 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-09 12:50:42 [Info] key : cpu, value : 10
2025-09-09 12:50:42 [Info] key : rio, value : 20480
2025-09-09 12:50:42 [Info] key : wio, value : 20480
2025-09-09 12:50:42 [Info] key : cpu_all, value : 0
2025-09-09 12:50:42 [Info] key : max_pid_check, value : 200
2025-09-09 12:50:42 [Info] key : throw_dump, value : 0
2025-09-09 12:50:42 [Info] key : hash_mode, value : 1
2025-09-09 12:50:42 [Info] key : mem, value : 200
2025-09-09 12:50:42 [Info] can not find key max_fd in online conf
2025-09-09 12:50:42 [Info] key : proc_limit, value : 1
2025-09-09 12:50:42 [Info] key : resource_limit_mode, value : 3
2025-09-09 12:50:42 [Info] key : rtap_update_mode, value : 1
2025-09-09 12:50:42 [Info] can not find key debug in online conf
2025-09-09 12:50:42 [Info] can not find key update_mode in online conf
2025-09-09 12:50:42 [Info] can not find key http_mode in online conf
2025-09-09 12:50:42 [Info] can not find key rtap_enable in online conf
2025-09-09 12:50:42 [Info] can not find key rtap_new_agent in online conf
2025-09-09 12:50:42 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-09 12:50:42 [Info] can not find key mem_low_mark in online conf
2025-09-09 12:50:42 [Info] can not find key obnormal_report_interval in online conf
2025-09-09 12:50:42 [Info] key : cache_mode, value : 0
2025-09-09 12:50:42 [Info] key : abnormal_monitor_mode, value : 3
2025-09-09 12:50:42 [Info] key : queue_size_ratio, value : 80
2025-09-09 12:50:42 [Info] queue_size_ratio is 80
2025-09-09 12:50:42 [Info] resource limit mode and max limit cpu is not change
2025-09-09 12:50:42 [Info] set hash mode 1
2025-09-09 12:50:42 [Info] RTAP timeout config:9600000
2025-09-09 12:50:42 [Info] self_guard_mode config is 0
2025-09-09 12:50:50 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 12:50:50 [Info] ipc client:Rtap183601757393450_handler Reg client_name:Rtap183601757393450 on WhiteList
2025-09-09 12:50:50 [Info] start rtap process success, pid is 1320, argument is Rtap183601757393450
2025-09-09 12:50:50 [Info] New ClientConnectNotify : Rtap183601757393450, id is 000004F8
2025-09-09 12:50:50 [Info] ipc client:Rtap183601757393450 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 12:50:50 [Info] Rtap Platform Rtap183601757393450 execv work --windows-sysinfoext-check on pid 1320
2025-09-09 12:50:51 [Info] csrss.exe open proc 1320 AliSecCheck.ex
2025-09-09 12:50:52 [Info] csrss.exe open thread 1320 AliSecCheck.ex
2025-09-09 12:50:57 [Info] Done Work --windows-sysinfoext-check:1
2025-09-09 12:50:57 [Info] Rtap Platform Rtap183601757393450 Exit:normal exit
2025-09-09 12:51:00 [Info] ClientDisConnectNotify : Rtap183601757393450, id is 000004F8
2025-09-09 12:51:27 [Info] get meta data success by v2
2025-09-09 12:51:27 [Info] get empty metaserver config
2025-09-09 12:51:27 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-09 12:51:28 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-09 12:51:28 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-09 12:51:28 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-09 12:51:28 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 12:51:28 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 12:51:28 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-09 12:51:28 [Info] download cert compare md5 same
2025-09-09 12:51:28 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 12:51:28 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 12:51:28 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-09 13:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10127","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10224","aliyundun_upload_time":"1757394517","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 13:33:14 [Info] TotalPhys:2047,AvailPhys:444,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6547,AvailPageFile:1115,SelfWorkingSet:10220, SelfPageFile:14264
2025-09-09 13:33:14 [Info] CommitTotal:5431,CommitLimit:6547,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:444,SystemCache:4194303,KernelTotal:269,KernelPaged:192,KernelNonpaged:77,PageSize:4096,HandleCount:28108,ProcessCount:52,ThreadCount:744
2025-09-09 14:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10155","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10220","aliyundun_upload_time":"1757398125","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 14:34:11 [Info] TotalPhys:2047,AvailPhys:506,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6611,AvailPageFile:1180,SelfWorkingSet:10088, SelfPageFile:14244
2025-09-09 14:34:11 [Info] CommitTotal:5430,CommitLimit:6611,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:506,SystemCache:4194303,KernelTotal:258,KernelPaged:180,KernelNonpaged:77,PageSize:4096,HandleCount:28796,ProcessCount:54,ThreadCount:780
2025-09-09 15:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10088","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10220","aliyundun_upload_time":"1757401734","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 15:35:08 [Info] TotalPhys:2047,AvailPhys:1037,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5851,AvailPageFile:1318,SelfWorkingSet:9992, SelfPageFile:14172
2025-09-09 15:35:08 [Info] CommitTotal:4532,CommitLimit:5851,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:1037,SystemCache:4194303,KernelTotal:257,KernelPaged:180,KernelNonpaged:76,PageSize:4096,HandleCount:27767,ProcessCount:52,ThreadCount:734
2025-09-09 16:08:44 [Info] get meta data success by v2
2025-09-09 16:08:44 [Info] get empty metaserver config
2025-09-09 16:08:44 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-09 16:08:44 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-09 16:08:44 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-09 16:08:44 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-09 16:08:44 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 16:08:44 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 16:08:45 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-09 16:08:45 [Info] download cert compare md5 same
2025-09-09 16:08:45 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 16:08:45 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 16:08:45 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-09 16:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10048","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10152","aliyundun_upload_time":"1757405343","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"49","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 16:36:05 [Info] TotalPhys:2047,AvailPhys:1021,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5851,AvailPageFile:1303,SelfWorkingSet:9952, SelfPageFile:14108
2025-09-09 16:36:05 [Info] CommitTotal:4548,CommitLimit:5851,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:1021,SystemCache:4194303,KernelTotal:257,KernelPaged:180,KernelNonpaged:76,PageSize:4096,HandleCount:27771,ProcessCount:52,ThreadCount:734
2025-09-09 17:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9980","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10068","aliyundun_upload_time":"1757408919","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"50","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 17:37:01 [Info] TotalPhys:2047,AvailPhys:1007,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5851,AvailPageFile:1296,SelfWorkingSet:10088, SelfPageFile:14272
2025-09-09 17:37:01 [Info] CommitTotal:4554,CommitLimit:5851,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:1007,SystemCache:4194303,KernelTotal:260,KernelPaged:183,KernelNonpaged:76,PageSize:4096,HandleCount:27780,ProcessCount:52,ThreadCount:735
2025-09-09 18:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10059","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10100","aliyundun_upload_time":"1757412530","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"57","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 18:19:32 [Info] nCurrentClock is 4986216800, nCurrentTime is 1757413172
2025-09-09 18:19:32 [Info] SendMessage T_MSG_LOGIN
2025-09-09 18:19:32 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-09 18:19:32 [Info] begin to enable self guard after reconnect
2025-09-09 18:19:32 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-09 18:19:32 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-09 18:19:33 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-09 18:19:33 [Info] key : cpu, value : 10
2025-09-09 18:19:33 [Info] key : rio, value : 20480
2025-09-09 18:19:33 [Info] key : wio, value : 20480
2025-09-09 18:19:33 [Info] key : cpu_all, value : 0
2025-09-09 18:19:33 [Info] key : max_pid_check, value : 200
2025-09-09 18:19:33 [Info] key : throw_dump, value : 0
2025-09-09 18:19:33 [Info] key : hash_mode, value : 1
2025-09-09 18:19:33 [Info] key : mem, value : 200
2025-09-09 18:19:33 [Info] can not find key max_fd in online conf
2025-09-09 18:19:33 [Info] key : proc_limit, value : 1
2025-09-09 18:19:33 [Info] key : resource_limit_mode, value : 3
2025-09-09 18:19:33 [Info] key : rtap_update_mode, value : 1
2025-09-09 18:19:33 [Info] can not find key debug in online conf
2025-09-09 18:19:33 [Info] can not find key update_mode in online conf
2025-09-09 18:19:33 [Info] can not find key http_mode in online conf
2025-09-09 18:19:33 [Info] can not find key rtap_enable in online conf
2025-09-09 18:19:33 [Info] can not find key rtap_new_agent in online conf
2025-09-09 18:19:33 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-09 18:19:33 [Info] can not find key mem_low_mark in online conf
2025-09-09 18:19:33 [Info] can not find key obnormal_report_interval in online conf
2025-09-09 18:19:33 [Info] key : cache_mode, value : 0
2025-09-09 18:19:33 [Info] key : abnormal_monitor_mode, value : 3
2025-09-09 18:19:33 [Info] key : queue_size_ratio, value : 80
2025-09-09 18:19:33 [Info] queue_size_ratio is 80
2025-09-09 18:19:33 [Info] resource limit mode and max limit cpu is not change
2025-09-09 18:19:33 [Info] set hash mode 1
2025-09-09 18:19:33 [Info] RTAP timeout config:9600000
2025-09-09 18:19:33 [Info] self_guard_mode config is 0
2025-09-09 18:19:33 [Info] GetMessage : T_MSG_CHECK
2025-09-09 18:19:33 [Info] task 3c099dd1-79c2-4ec1-b722-da5871cfb974 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 18:19:44 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-09-09 18:19:48 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 18:19:48 [Info] ipc client:Rtap172801757413188_handler Reg client_name:Rtap172801757413188 on WhiteList
2025-09-09 18:19:48 [Info] start rtap process success, pid is 3404, argument is Rtap172801757413188
2025-09-09 18:19:49 [Info] New ClientConnectNotify : Rtap172801757413188, id is 00000548
2025-09-09 18:19:49 [Info] Rtap Platform Rtap172801757413188 execv work --windows-sysinfoext-check on pid 3404
2025-09-09 18:19:50 [Info] ipc client:Rtap172801757413188 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 18:19:50 [Info] csrss.exe open proc 3404 AliSecCheck.ex
2025-09-09 18:19:51 [Info] csrss.exe open thread 3404 AliSecCheck.ex
2025-09-09 18:19:53 [Info] csrss.exe open thread 3404 AliSecCheck.ex
2025-09-09 18:19:54 [Info] csrss.exe open thread 3404 AliSecCheck.ex
2025-09-09 18:20:01 [Info] Done Work --windows-sysinfoext-check:1
2025-09-09 18:20:01 [Info] Rtap Platform Rtap172801757413188 Exit:normal exit
2025-09-09 18:20:03 [Info] ClientDisConnectNotify : Rtap172801757413188, id is 00000548
2025-09-09 18:38:04 [Info] TotalPhys:2047,AvailPhys:855,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5851,AvailPageFile:1083,SelfWorkingSet:9936, SelfPageFile:14108
2025-09-09 18:38:04 [Info] CommitTotal:4768,CommitLimit:5851,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:855,SystemCache:4194303,KernelTotal:261,KernelPaged:184,KernelNonpaged:76,PageSize:4096,HandleCount:28208,ProcessCount:53,ThreadCount:746
2025-09-09 18:54:06 [Info] GetMessage : T_MSG_CHECK
2025-09-09 18:54:06 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc0MTUyNDYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NDU4NDQ2LCJzdWIiOiJSVEFQX0lEWF8xNjI2MThfMTc1NzQxNTI0NjIxNiJ9.GsJDQ_Z_SqzlP_A88wDPdvCEaZoMXB95ZvU4blVW2I4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 18:54:17 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 18:54:17 [Info] ipc client:Rtap240371757415257_handler Reg client_name:Rtap240371757415257 on WhiteList
2025-09-09 18:54:17 [Info] start rtap process success, pid is 2444, argument is Rtap240371757415257
2025-09-09 18:54:17 [Info] New ClientConnectNotify : Rtap240371757415257, id is 0000053C
2025-09-09 18:54:17 [Info] ipc client:Rtap240371757415257 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 18:54:17 [Info] Rtap Platform Rtap240371757415257 execv work --secnet_rasp_agent on pid 2444
2025-09-09 18:54:18 [Info] csrss.exe open proc 2444 AliSecCheck.ex
2025-09-09 18:54:19 [Info] csrss.exe open thread 2444 AliSecCheck.ex
2025-09-09 18:54:22 [Info] csrss.exe open thread 2444 AliSecCheck.ex
2025-09-09 18:54:24 [Info] Done Work --secnet_rasp_agent:1
2025-09-09 18:54:24 [Info] Rtap Platform Rtap240371757415257 Exit:normal exit
2025-09-09 18:54:26 [Info] ClientDisConnectNotify : Rtap240371757415257, id is 0000053C
2025-09-09 19:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10017","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"2","aliyundun_max_mem":"10124","aliyundun_upload_time":"1757416127","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"57","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 19:26:15 [Info] get meta data success by v2
2025-09-09 19:26:15 [Info] get empty metaserver config
2025-09-09 19:26:15 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-09 19:26:15 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-09 19:26:15 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-09 19:26:15 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-09 19:26:15 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 19:26:15 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 19:26:15 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-09 19:26:15 [Info] download cert compare md5 same
2025-09-09 19:26:15 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 19:26:15 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 19:26:15 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-09 19:39:01 [Info] TotalPhys:2047,AvailPhys:844,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:5851,AvailPageFile:1070,SelfWorkingSet:9968, SelfPageFile:14224
2025-09-09 19:39:01 [Info] CommitTotal:4781,CommitLimit:5851,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:844,SystemCache:4194303,KernelTotal:260,KernelPaged:184,KernelNonpaged:76,PageSize:4096,HandleCount:27911,ProcessCount:52,ThreadCount:739
2025-09-09 20:08:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9974","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10108","aliyundun_upload_time":"1757419733","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"59","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 20:39:57 [Info] TotalPhys:2047,AvailPhys:825,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6201,AvailPageFile:1420,SelfWorkingSet:10092, SelfPageFile:14180
2025-09-09 20:39:57 [Info] CommitTotal:4781,CommitLimit:6201,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:825,SystemCache:2,KernelTotal:257,KernelPaged:181,KernelNonpaged:76,PageSize:4096,HandleCount:28510,ProcessCount:53,ThreadCount:770
2025-09-09 21:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9990","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10092","aliyundun_upload_time":"1757423339","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"60","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 21:40:54 [Info] TotalPhys:2047,AvailPhys:793,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6201,AvailPageFile:1408,SelfWorkingSet:9988, SelfPageFile:13768
2025-09-09 21:40:54 [Info] CommitTotal:4792,CommitLimit:6201,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:793,SystemCache:47,KernelTotal:258,KernelPaged:182,KernelNonpaged:76,PageSize:4096,HandleCount:28264,ProcessCount:53,ThreadCount:741
2025-09-09 22:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9972","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10068","aliyundun_upload_time":"1757426918","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"60","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 22:41:50 [Info] TotalPhys:2047,AvailPhys:797,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6201,AvailPageFile:1403,SelfWorkingSet:9988, SelfPageFile:13748
2025-09-09 22:41:50 [Info] CommitTotal:4798,CommitLimit:6201,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:797,SystemCache:59,KernelTotal:258,KernelPaged:182,KernelNonpaged:76,PageSize:4096,HandleCount:28253,ProcessCount:53,ThreadCount:737
2025-09-09 22:43:34 [Info] get meta data success by v2
2025-09-09 22:43:34 [Info] get empty metaserver config
2025-09-09 22:43:34 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-09 22:43:34 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-09 22:43:34 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-09 22:43:34 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-09 22:43:34 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 22:43:34 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-09 22:43:35 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-09 22:43:35 [Info] download cert compare md5 same
2025-09-09 22:43:35 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 22:43:35 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-09 22:43:35 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-09 23:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10064","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10172","aliyundun_upload_time":"1757430526","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"60","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-09 23:42:47 [Info] TotalPhys:2047,AvailPhys:799,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6201,AvailPageFile:1406,SelfWorkingSet:10032, SelfPageFile:14140
2025-09-09 23:42:47 [Info] CommitTotal:4795,CommitLimit:6201,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:799,SystemCache:70,KernelTotal:259,KernelPaged:182,KernelNonpaged:76,PageSize:4096,HandleCount:28261,ProcessCount:53,ThreadCount:738
2025-09-09 23:48:35 [Info] nCurrentClock is 5004221500, nCurrentTime is 1757432915
2025-09-09 23:48:35 [Info] SendMessage T_MSG_LOGIN
2025-09-09 23:48:36 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-09 23:48:36 [Info] begin to enable self guard after reconnect
2025-09-09 23:48:36 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-09 23:48:36 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-09 23:48:36 [Info] GetMessage : T_MSG_CHECK
2025-09-09 23:48:36 [Info] task b5e0ca58-cbdb-4d7e-9bea-ccb4f71a8943 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-09 23:48:44 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-09 23:48:44 [Info] key : cpu, value : 10
2025-09-09 23:48:44 [Info] key : rio, value : 20480
2025-09-09 23:48:44 [Info] key : wio, value : 20480
2025-09-09 23:48:44 [Info] key : cpu_all, value : 0
2025-09-09 23:48:44 [Info] key : max_pid_check, value : 200
2025-09-09 23:48:44 [Info] key : throw_dump, value : 0
2025-09-09 23:48:44 [Info] key : hash_mode, value : 1
2025-09-09 23:48:44 [Info] key : mem, value : 200
2025-09-09 23:48:44 [Info] can not find key max_fd in online conf
2025-09-09 23:48:44 [Info] key : proc_limit, value : 1
2025-09-09 23:48:44 [Info] key : resource_limit_mode, value : 3
2025-09-09 23:48:44 [Info] key : rtap_update_mode, value : 1
2025-09-09 23:48:44 [Info] can not find key debug in online conf
2025-09-09 23:48:44 [Info] can not find key update_mode in online conf
2025-09-09 23:48:44 [Info] can not find key http_mode in online conf
2025-09-09 23:48:44 [Info] can not find key rtap_enable in online conf
2025-09-09 23:48:44 [Info] can not find key rtap_new_agent in online conf
2025-09-09 23:48:44 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-09 23:48:44 [Info] can not find key mem_low_mark in online conf
2025-09-09 23:48:44 [Info] can not find key obnormal_report_interval in online conf
2025-09-09 23:48:44 [Info] key : cache_mode, value : 0
2025-09-09 23:48:44 [Info] key : abnormal_monitor_mode, value : 3
2025-09-09 23:48:44 [Info] key : queue_size_ratio, value : 80
2025-09-09 23:48:44 [Info] queue_size_ratio is 80
2025-09-09 23:48:44 [Info] resource limit mode and max limit cpu is not change
2025-09-09 23:48:44 [Info] set hash mode 1
2025-09-09 23:48:44 [Info] RTAP timeout config:9600000
2025-09-09 23:48:44 [Info] self_guard_mode config is 0
2025-09-09 23:48:48 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-09 23:48:48 [Info] ipc client:Rtap162071757432928_handler Reg client_name:Rtap162071757432928 on WhiteList
2025-09-09 23:48:48 [Info] start rtap process success, pid is 3116, argument is Rtap162071757432928
2025-09-09 23:48:52 [Info] csrss.exe open proc 3116 AliSecCheck.ex
2025-09-09 23:48:53 [Info] csrss.exe open thread 3116 AliSecCheck.ex
2025-09-09 23:48:53 [Info] New ClientConnectNotify : Rtap162071757432928, id is 00000548
2025-09-09 23:48:53 [Info] Rtap Platform Rtap162071757432928 execv work --windows-sysinfoext-check on pid 3116
2025-09-09 23:48:54 [Info] ipc client:Rtap162071757432928 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-09 23:48:54 [Info] csrss.exe open thread 3116 AliSecCheck.ex
2025-09-09 23:48:55 [Info] csrss.exe open thread 3116 AliSecCheck.ex
2025-09-09 23:49:09 [Info] Done Work --windows-sysinfoext-check:1
2025-09-09 23:49:09 [Info] Rtap Platform Rtap162071757432928 Exit:normal exit
2025-09-09 23:49:11 [Info] ClientDisConnectNotify : Rtap162071757432928, id is 00000548
2025-09-10 00:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10075","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10152","aliyundun_upload_time":"1757434138","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"62","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 00:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10385","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10436","aliyundun_upload_time":"1757952522","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 01:01:26 [Info] TotalPhys:2047,AvailPhys:512,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1331,SelfWorkingSet:10384, SelfPageFile:14240
2025-09-16 01:01:26 [Info] CommitTotal:5333,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:512,SystemCache:4194303,KernelTotal:264,KernelPaged:184,KernelNonpaged:79,PageSize:4096,HandleCount:28394,ProcessCount:53,ThreadCount:735
2025-09-16 01:08:55 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10371","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10384","aliyundun_upload_time":"1757956135","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 01:15:36 [Info] GetMessage : T_MSG_CHECK
2025-09-16 01:15:36 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc5NTY1MzYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3OTk5NzM2LCJzdWIiOiJSVEFQX0lEWF8xNjMxMDVfMTc1Nzk1NjUzNjc4OSJ9.AeD3GxIipKO6NdiXgO1BEg8CxzSnEloQbmg3ZcWe1qs has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 01:15:45 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 01:15:45 [Info] ipc client:Rtap221841757956545_handler Reg client_name:Rtap221841757956545 on WhiteList
2025-09-16 01:15:45 [Info] start rtap process success, pid is 2752, argument is Rtap221841757956545
2025-09-16 01:15:45 [Info] New ClientConnectNotify : Rtap221841757956545, id is 000004F4
2025-09-16 01:15:45 [Info] ipc client:Rtap221841757956545 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 01:15:46 [Info] Rtap Platform Rtap221841757956545 execv work --sca on pid 2752
2025-09-16 01:15:46 [Info] csrss.exe open proc 2752 AliSecCheck.ex
2025-09-16 01:15:47 [Info] csrss.exe open thread 2752 AliSecCheck.ex
2025-09-16 01:16:30 [Info] csrss.exe open thread 2752 AliSecCheck.ex
2025-09-16 01:16:50 [Info] Done Work --sca:1
2025-09-16 01:16:50 [Info] Rtap Platform Rtap221841757956545 Exit:normal exit
2025-09-16 01:16:52 [Info] ClientDisConnectNotify : Rtap221841757956545, id is 000004F4
2025-09-16 02:02:23 [Info] TotalPhys:2047,AvailPhys:511,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1336,SelfWorkingSet:10280, SelfPageFile:14204
2025-09-16 02:02:23 [Info] CommitTotal:5329,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:511,SystemCache:4194303,KernelTotal:263,KernelPaged:184,KernelNonpaged:79,PageSize:4096,HandleCount:28372,ProcessCount:53,ThreadCount:733
2025-09-16 02:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10258","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10432","aliyundun_upload_time":"1757959739","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 02:58:08 [Info] get meta data success by v2
2025-09-16 02:58:08 [Info] get empty metaserver config
2025-09-16 02:58:08 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-16 02:58:08 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-16 02:58:08 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-16 02:58:08 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-16 02:58:08 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 02:58:08 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 02:58:08 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-16 02:58:08 [Info] download cert compare md5 same
2025-09-16 02:58:08 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 02:58:08 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 02:58:08 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-16 03:03:19 [Info] TotalPhys:2047,AvailPhys:509,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6665,AvailPageFile:1337,SelfWorkingSet:10340, SelfPageFile:14336
2025-09-16 03:03:19 [Info] CommitTotal:5327,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:509,SystemCache:4194303,KernelTotal:266,KernelPaged:187,KernelNonpaged:78,PageSize:4096,HandleCount:28408,ProcessCount:53,ThreadCount:738
2025-09-16 03:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10328","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10480","aliyundun_upload_time":"1757963312","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 04:03:10 [Info] nCurrentClock is 5490236500, nCurrentTime is 1757966590
2025-09-16 04:03:10 [Info] SendMessage T_MSG_LOGIN
2025-09-16 04:03:10 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-16 04:03:10 [Info] begin to enable self guard after reconnect
2025-09-16 04:03:10 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-16 04:03:10 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-16 04:03:10 [Info] GetMessage : T_MSG_CHECK
2025-09-16 04:03:10 [Info] task 8834ebb4-d422-4915-99e0-2f14d7bbf79f has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 04:03:18 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-16 04:03:18 [Info] key : cpu, value : 10
2025-09-16 04:03:18 [Info] key : rio, value : 20480
2025-09-16 04:03:18 [Info] key : wio, value : 20480
2025-09-16 04:03:18 [Info] key : cpu_all, value : 0
2025-09-16 04:03:18 [Info] key : max_pid_check, value : 200
2025-09-16 04:03:18 [Info] key : throw_dump, value : 0
2025-09-16 04:03:18 [Info] key : hash_mode, value : 1
2025-09-16 04:03:18 [Info] key : mem, value : 200
2025-09-16 04:03:18 [Info] can not find key max_fd in online conf
2025-09-16 04:03:18 [Info] key : proc_limit, value : 1
2025-09-16 04:03:18 [Info] key : resource_limit_mode, value : 3
2025-09-16 04:03:18 [Info] key : rtap_update_mode, value : 1
2025-09-16 04:03:18 [Info] can not find key debug in online conf
2025-09-16 04:03:18 [Info] can not find key update_mode in online conf
2025-09-16 04:03:18 [Info] can not find key http_mode in online conf
2025-09-16 04:03:18 [Info] can not find key rtap_enable in online conf
2025-09-16 04:03:18 [Info] can not find key rtap_new_agent in online conf
2025-09-16 04:03:18 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-16 04:03:18 [Info] can not find key mem_low_mark in online conf
2025-09-16 04:03:18 [Info] can not find key obnormal_report_interval in online conf
2025-09-16 04:03:18 [Info] key : cache_mode, value : 0
2025-09-16 04:03:18 [Info] key : abnormal_monitor_mode, value : 3
2025-09-16 04:03:18 [Info] key : queue_size_ratio, value : 80
2025-09-16 04:03:18 [Info] queue_size_ratio is 80
2025-09-16 04:03:18 [Info] resource limit mode and max limit cpu is not change
2025-09-16 04:03:18 [Info] set hash mode 1
2025-09-16 04:03:18 [Info] RTAP timeout config:9600000
2025-09-16 04:03:18 [Info] self_guard_mode config is 0
2025-09-16 04:03:25 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 04:03:25 [Info] ipc client:Rtap222671757966605_handler Reg client_name:Rtap222671757966605 on WhiteList
2025-09-16 04:03:25 [Info] start rtap process success, pid is 1268, argument is Rtap222671757966605
2025-09-16 04:03:25 [Info] New ClientConnectNotify : Rtap222671757966605, id is 0000051C
2025-09-16 04:03:25 [Info] ipc client:Rtap222671757966605 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 04:03:26 [Info] Rtap Platform Rtap222671757966605 execv work --windows-sysinfoext-check on pid 1268
2025-09-16 04:03:28 [Info] csrss.exe open proc 1268 AliSecCheck.ex
2025-09-16 04:03:29 [Info] csrss.exe open thread 1268 AliSecCheck.ex
2025-09-16 04:03:30 [Info] csrss.exe open thread 1268 AliSecCheck.ex
2025-09-16 04:03:33 [Info] Done Work --windows-sysinfoext-check:1
2025-09-16 04:03:33 [Info] Rtap Platform Rtap222671757966605 Exit:normal exit
2025-09-16 04:03:35 [Info] ClientDisConnectNotify : Rtap222671757966605, id is 0000051C
2025-09-16 04:04:21 [Info] TotalPhys:2047,AvailPhys:232,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1279,SelfWorkingSet:10296, SelfPageFile:14172
2025-09-16 04:04:21 [Info] CommitTotal:5385,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:232,SystemCache:4194303,KernelTotal:264,KernelPaged:185,KernelNonpaged:79,PageSize:4096,HandleCount:28920,ProcessCount:55,ThreadCount:767
2025-09-16 04:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10307","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10404","aliyundun_upload_time":"1757966934","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 05:05:18 [Info] TotalPhys:2047,AvailPhys:279,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1296,SelfWorkingSet:10404, SelfPageFile:14272
2025-09-16 05:05:18 [Info] CommitTotal:5368,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:279,SystemCache:4194303,KernelTotal:263,KernelPaged:184,KernelNonpaged:78,PageSize:4096,HandleCount:28372,ProcessCount:53,ThreadCount:735
2025-09-16 05:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10390","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10404","aliyundun_upload_time":"1757970515","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 06:06:15 [Info] TotalPhys:2047,AvailPhys:280,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1301,SelfWorkingSet:10252, SelfPageFile:14172
2025-09-16 06:06:15 [Info] CommitTotal:5364,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:280,SystemCache:4194303,KernelTotal:263,KernelPaged:184,KernelNonpaged:78,PageSize:4096,HandleCount:28379,ProcessCount:53,ThreadCount:734
2025-09-16 06:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10263","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10404","aliyundun_upload_time":"1757974131","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 06:15:42 [Info] get meta data success by v2
2025-09-16 06:15:42 [Info] get empty metaserver config
2025-09-16 06:15:42 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-16 06:15:42 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-16 06:15:42 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-16 06:15:42 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-16 06:15:42 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 06:15:42 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 06:15:42 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-16 06:15:42 [Info] download cert compare md5 same
2025-09-16 06:15:42 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 06:15:42 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 06:15:42 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-16 07:07:12 [Info] TotalPhys:2047,AvailPhys:275,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1292,SelfWorkingSet:10196, SelfPageFile:14132
2025-09-16 07:07:12 [Info] CommitTotal:5372,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:275,SystemCache:4194303,KernelTotal:264,KernelPaged:185,KernelNonpaged:78,PageSize:4096,HandleCount:28392,ProcessCount:53,ThreadCount:737
2025-09-16 07:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10252","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10376","aliyundun_upload_time":"1757977737","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 08:08:09 [Info] TotalPhys:2047,AvailPhys:276,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1296,SelfWorkingSet:10176, SelfPageFile:13768
2025-09-16 08:08:09 [Info] CommitTotal:5369,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:276,SystemCache:4194303,KernelTotal:264,KernelPaged:185,KernelNonpaged:78,PageSize:4096,HandleCount:28384,ProcessCount:53,ThreadCount:738
2025-09-16 08:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10293","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10368","aliyundun_upload_time":"1757981315","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 08:49:01 [Info] GetMessage : T_MSG_CHECK
2025-09-16 08:49:01 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc5ODM3NDEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU4MDI2OTQxLCJzdWIiOiJSVEFQX0lEWF8xNjMwOTZfMTc1Nzk4Mzc0MTY0NiJ9.bniM6l0h1_VAg65R5mLdQlDm2cqYEDfWuCOyoa7Uh9c has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 08:49:11 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 08:49:11 [Info] ipc client:Rtap127231757983751_handler Reg client_name:Rtap127231757983751 on WhiteList
2025-09-16 08:49:11 [Info] start rtap process success, pid is 4392, argument is Rtap127231757983751
2025-09-16 08:49:11 [Info] New ClientConnectNotify : Rtap127231757983751, id is 00000504
2025-09-16 08:49:11 [Info] ipc client:Rtap127231757983751 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 08:49:12 [Info] Rtap Platform Rtap127231757983751 execv work --windows-process-check on pid 4392
2025-09-16 08:49:14 [Info] csrss.exe open proc 4392 AliSecCheck.ex
2025-09-16 08:49:15 [Info] csrss.exe open thread 4392 AliSecCheck.ex
2025-09-16 08:49:39 [Info] Done Work --windows-process-check:1
2025-09-16 08:49:39 [Info] Rtap Platform Rtap127231757983751 Exit:normal exit
2025-09-16 08:49:41 [Info] ClientDisConnectNotify : Rtap127231757983751, id is 00000504
2025-09-16 09:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10244","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10324","aliyundun_upload_time":"1757984919","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"89","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 09:09:09 [Info] TotalPhys:2047,AvailPhys:214,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1286,SelfWorkingSet:10260, SelfPageFile:13756
2025-09-16 09:09:09 [Info] CommitTotal:5378,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:214,SystemCache:4194303,KernelTotal:263,KernelPaged:184,KernelNonpaged:78,PageSize:4096,HandleCount:28369,ProcessCount:53,ThreadCount:732
2025-09-16 09:33:23 [Info] nCurrentClock is 5508237100, nCurrentTime is 1757986403
2025-09-16 09:33:23 [Info] SendMessage T_MSG_LOGIN
2025-09-16 09:33:23 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-16 09:33:23 [Info] begin to enable self guard after reconnect
2025-09-16 09:33:23 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-16 09:33:23 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-16 09:33:24 [Info] GetMessage : T_MSG_CHECK
2025-09-16 09:33:24 [Info] task e2bf3c91-5ee1-49e6-bd32-d546bf2a35a3 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 09:33:32 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-16 09:33:32 [Info] key : cpu, value : 10
2025-09-16 09:33:32 [Info] key : rio, value : 20480
2025-09-16 09:33:32 [Info] key : wio, value : 20480
2025-09-16 09:33:32 [Info] key : cpu_all, value : 0
2025-09-16 09:33:32 [Info] key : max_pid_check, value : 200
2025-09-16 09:33:32 [Info] key : throw_dump, value : 0
2025-09-16 09:33:32 [Info] key : hash_mode, value : 1
2025-09-16 09:33:32 [Info] key : mem, value : 200
2025-09-16 09:33:32 [Info] can not find key max_fd in online conf
2025-09-16 09:33:32 [Info] key : proc_limit, value : 1
2025-09-16 09:33:32 [Info] key : resource_limit_mode, value : 3
2025-09-16 09:33:32 [Info] key : rtap_update_mode, value : 1
2025-09-16 09:33:32 [Info] can not find key debug in online conf
2025-09-16 09:33:32 [Info] can not find key update_mode in online conf
2025-09-16 09:33:32 [Info] can not find key http_mode in online conf
2025-09-16 09:33:32 [Info] can not find key rtap_enable in online conf
2025-09-16 09:33:32 [Info] can not find key rtap_new_agent in online conf
2025-09-16 09:33:32 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-16 09:33:32 [Info] can not find key mem_low_mark in online conf
2025-09-16 09:33:32 [Info] can not find key obnormal_report_interval in online conf
2025-09-16 09:33:32 [Info] key : cache_mode, value : 0
2025-09-16 09:33:32 [Info] key : abnormal_monitor_mode, value : 3
2025-09-16 09:33:32 [Info] key : queue_size_ratio, value : 80
2025-09-16 09:33:32 [Info] queue_size_ratio is 80
2025-09-16 09:33:32 [Info] resource limit mode and max limit cpu is not change
2025-09-16 09:33:32 [Info] set hash mode 1
2025-09-16 09:33:32 [Info] RTAP timeout config:9600000
2025-09-16 09:33:32 [Info] self_guard_mode config is 0
2025-09-16 09:33:40 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 09:33:40 [Info] ipc client:Rtap214391757986420_handler Reg client_name:Rtap214391757986420 on WhiteList
2025-09-16 09:33:40 [Info] start rtap process success, pid is 4468, argument is Rtap214391757986420
2025-09-16 09:33:40 [Info] New ClientConnectNotify : Rtap214391757986420, id is 00000548
2025-09-16 09:33:40 [Info] ipc client:Rtap214391757986420 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 09:33:41 [Info] Rtap Platform Rtap214391757986420 execv work --windows-sysinfoext-check on pid 4468
2025-09-16 09:33:41 [Info] csrss.exe open proc 4468 AliSecCheck.ex
2025-09-16 09:33:42 [Info] csrss.exe open thread 4468 AliSecCheck.ex
2025-09-16 09:33:48 [Info] Done Work --windows-sysinfoext-check:1
2025-09-16 09:33:48 [Info] Rtap Platform Rtap214391757986420 Exit:normal exit
2025-09-16 09:33:50 [Info] ClientDisConnectNotify : Rtap214391757986420, id is 00000548
2025-09-16 09:34:22 [Info] get meta data success by v2
2025-09-16 09:34:22 [Info] get empty metaserver config
2025-09-16 09:34:22 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-16 09:34:22 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-16 09:34:22 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-16 09:34:22 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-16 09:34:22 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 09:34:22 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 09:34:22 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-16 09:34:22 [Info] download cert compare md5 same
2025-09-16 09:34:22 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 09:34:22 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 09:34:22 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-16 09:57:08 [Info] GetMessage : T_MSG_CHECK
2025-09-16 09:57:08 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc5ODc4MjgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU4MDMxMDI4LCJzdWIiOiJSVEFQX0lEWF8xNjMwOTdfMTc1Nzk4NzgyODI3MyJ9.5ek2dknlRL0R2mZ1jaW7EI7RoRubVkuRfbw5kV1auAU has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 09:57:17 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 09:57:17 [Info] ipc client:Rtap260661757987837_handler Reg client_name:Rtap260661757987837 on WhiteList
2025-09-16 09:57:17 [Info] start rtap process success, pid is 2456, argument is Rtap260661757987837
2025-09-16 09:57:17 [Info] New ClientConnectNotify : Rtap260661757987837, id is 000001E4
2025-09-16 09:57:18 [Info] ipc client:Rtap260661757987837 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 09:57:18 [Info] Rtap Platform Rtap260661757987837 execv work --tcp-connect-check on pid 2456
2025-09-16 09:57:19 [Info] csrss.exe open proc 2456 AliSecCheck.ex
2025-09-16 09:57:20 [Info] csrss.exe open thread 2456 AliSecCheck.ex
2025-09-16 09:57:29 [Info] Done Work --tcp-connect-check:1
2025-09-16 09:57:29 [Info] Rtap Platform Rtap260661757987837 Exit:normal exit
2025-09-16 09:57:31 [Info] ClientDisConnectNotify : Rtap260661757987837, id is 000001E4
2025-09-16 10:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10338","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10452","aliyundun_upload_time":"1757988543","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"88","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 10:10:12 [Info] TotalPhys:2047,AvailPhys:240,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1292,SelfWorkingSet:10452, SelfPageFile:14200
2025-09-16 10:10:12 [Info] CommitTotal:5373,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:240,SystemCache:4194303,KernelTotal:264,KernelPaged:185,KernelNonpaged:78,PageSize:4096,HandleCount:28384,ProcessCount:53,ThreadCount:744
2025-09-16 10:15:59 [Info] GetMessage : T_MSG_CHECK
2025-09-16 10:15:59 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc5ODg5NTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU4MDMyMTU5LCJzdWIiOiJSVEFQX0lEWF8xNjMxMDRfMTc1Nzk4ODk1OTIxMiJ9.hxH_soPBS_wCZQOK_kJSlW0q-OHQpRbt3o0lAfBe0Mw has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 10:16:07 [Info] GetMessage : T_MSG_CHECK
2025-09-16 10:16:07 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc5ODg5NjUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU4MDMyMTY1LCJzdWIiOiJSVEFQX0lEWF8xNjMwOTlfMTc1Nzk4ODk2NTEzMSJ9.lXrMErpH_kVRyW7kzedFbo3-_BiN0s-2U1fi0imyDsY has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 10:16:11 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 10:16:11 [Info] ipc client:Rtap297691757988971_handler Reg client_name:Rtap297691757988971 on WhiteList
2025-09-16 10:16:11 [Info] start rtap process success, pid is 3348, argument is Rtap297691757988971
2025-09-16 10:16:11 [Info] New ClientConnectNotify : Rtap297691757988971, id is 0000051C
2025-09-16 10:16:11 [Info] ipc client:Rtap297691757988971 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 10:16:11 [Info] Rtap Platform Rtap297691757988971 execv work --windows-registry-check on pid 3348
2025-09-16 10:16:13 [Info] csrss.exe open proc 3348 AliSecCheck.ex
2025-09-16 10:16:14 [Info] csrss.exe open thread 3348 AliSecCheck.ex
2025-09-16 10:16:16 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 10:16:16 [Info] ipc client:Rtap297861757988976_handler Reg client_name:Rtap297861757988976 on WhiteList
2025-09-16 10:16:16 [Info] start rtap process success, pid is 3336, argument is Rtap297861757988976
2025-09-16 10:16:16 [Info] New ClientConnectNotify : Rtap297861757988976, id is 000001E4
2025-09-16 10:16:16 [Info] ipc client:Rtap297861757988976 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 10:16:17 [Info] Rtap Platform Rtap297861757988976 execv work --windows-schedule-task-check on pid 3336
2025-09-16 10:16:18 [Info] csrss.exe open proc 3336 AliSecCheck.ex
2025-09-16 10:16:19 [Info] csrss.exe open thread 3336 AliSecCheck.ex
2025-09-16 10:16:48 [Info] Done Work --windows-registry-check:1
2025-09-16 10:16:48 [Info] Rtap Platform Rtap297691757988971 Exit:normal exit
2025-09-16 10:16:50 [Info] ClientDisConnectNotify : Rtap297691757988971, id is 0000051C
2025-09-16 10:16:54 [Info] Done Work --windows-schedule-task-check:1
2025-09-16 10:16:54 [Info] Rtap Platform Rtap297861757988976 Exit:normal exit
2025-09-16 10:16:56 [Info] ClientDisConnectNotify : Rtap297861757988976, id is 000001E4
2025-09-16 10:17:24 [Info] GetMessage : T_MSG_CHECK
2025-09-16 10:17:24 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc5ODkwNDQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU4MDMyMjQ0LCJzdWIiOiJSVEFQX0lEWF8xNjMxMTJfMTc1Nzk4OTA0NDM0OSJ9.3HAlaIW7Fge4yBOfvQ4zx2kn2d85DsdFO3Hq86vNiCw has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 10:17:35 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 10:17:35 [Info] ipc client:Rtap300441757989055_handler Reg client_name:Rtap300441757989055 on WhiteList
2025-09-16 10:17:35 [Info] start rtap process success, pid is 2752, argument is Rtap300441757989055
2025-09-16 10:17:35 [Info] New ClientConnectNotify : Rtap300441757989055, id is 00000504
2025-09-16 10:17:35 [Info] ipc client:Rtap300441757989055 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 10:17:35 [Info] Rtap Platform Rtap300441757989055 execv work --windows-driver-version-check on pid 2752
2025-09-16 10:17:37 [Info] csrss.exe open proc 2752 AliSecCheck.ex
2025-09-16 10:17:38 [Info] csrss.exe open thread 2752 AliSecCheck.ex
2025-09-16 10:17:42 [Info] Done Work --windows-driver-version-check:1
2025-09-16 10:17:42 [Info] Rtap Platform Rtap300441757989055 Exit:normal exit
2025-09-16 10:17:45 [Info] ClientDisConnectNotify : Rtap300441757989055, id is 00000504
2025-09-16 11:05:35 [Info] GetMessage : T_MSG_CHECK
2025-09-16 11:05:35 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc5OTE5MzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU4MDM1MTM1LCJzdWIiOiJSVEFQX0lEWF8xNjMxMDFfMTc1Nzk5MTkzNTI4MCJ9.QZZ8_e4XSLNnhTs2hRkElzC9s4ngtrz3EqMmGA9OkEA has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 11:05:47 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 11:05:47 [Info] ipc client:Rtap67201757991947_handler Reg client_name:Rtap67201757991947 on WhiteList
2025-09-16 11:05:47 [Info] start rtap process success, pid is 4712, argument is Rtap67201757991947
2025-09-16 11:05:48 [Info] system memory usage is 88
2025-09-16 11:05:48 [Info] system memory usage is 88
2025-09-16 11:05:48 [Info] csrss.exe open proc 4712 AliSecCheck.ex
2025-09-16 11:05:48 [Info] New ClientConnectNotify : Rtap67201757991947, id is 000001E4
2025-09-16 11:05:49 [Info] Rtap Platform Rtap67201757991947 execv work --windows-autorun-item-check on pid 4712
2025-09-16 11:05:49 [Info] csrss.exe open thread 4712 AliSecCheck.ex
2025-09-16 11:05:49 [Info] ipc client:Rtap67201757991947 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 11:06:08 [Info] Done Work --windows-autorun-item-check:1
2025-09-16 11:06:08 [Info] Rtap Platform Rtap67201757991947 Exit:normal exit
2025-09-16 11:06:10 [Info] ClientDisConnectNotify : Rtap67201757991947, id is 000001E4
2025-09-16 11:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10456","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10692","aliyundun_upload_time":"1757992118","aliyundun_write_pid_times":"0","ipc_send_count":"153","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 11:11:09 [Info] TotalPhys:2047,AvailPhys:261,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1307,SelfWorkingSet:10304, SelfPageFile:13836
2025-09-16 11:11:09 [Info] CommitTotal:5357,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:261,SystemCache:4194303,KernelTotal:264,KernelPaged:185,KernelNonpaged:78,PageSize:4096,HandleCount:28283,ProcessCount:53,ThreadCount:734
2025-09-16 12:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10386","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10468","aliyundun_upload_time":"1757995730","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"88","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 12:12:06 [Info] TotalPhys:2047,AvailPhys:244,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1299,SelfWorkingSet:10480, SelfPageFile:14028
2025-09-16 12:12:06 [Info] CommitTotal:5365,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:244,SystemCache:4194303,KernelTotal:265,KernelPaged:186,KernelNonpaged:78,PageSize:4096,HandleCount:28302,ProcessCount:53,ThreadCount:739
2025-09-16 12:51:42 [Info] get meta data success by v2
2025-09-16 12:51:42 [Info] get empty metaserver config
2025-09-16 12:51:42 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-16 12:51:42 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-16 12:51:42 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-16 12:51:42 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-16 12:51:42 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 12:51:42 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 12:51:42 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-16 12:51:42 [Info] download cert compare md5 same
2025-09-16 12:51:42 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 12:51:42 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 12:51:42 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-16 13:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10334","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10512","aliyundun_upload_time":"1757999340","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"88","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 13:13:02 [Info] TotalPhys:2047,AvailPhys:233,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1286,SelfWorkingSet:10308, SelfPageFile:13852
2025-09-16 13:13:02 [Info] CommitTotal:5379,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:233,SystemCache:4194303,KernelTotal:265,KernelPaged:186,KernelNonpaged:78,PageSize:4096,HandleCount:28294,ProcessCount:53,ThreadCount:732
2025-09-16 14:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10359","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10396","aliyundun_upload_time":"1758002918","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"88","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 14:13:59 [Info] TotalPhys:2047,AvailPhys:249,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1295,SelfWorkingSet:10320, SelfPageFile:13888
2025-09-16 14:13:59 [Info] CommitTotal:5369,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:249,SystemCache:4194303,KernelTotal:267,KernelPaged:188,KernelNonpaged:78,PageSize:4096,HandleCount:28304,ProcessCount:53,ThreadCount:736
2025-09-16 15:02:25 [Info] nCurrentClock is 5526237600, nCurrentTime is 1758006145
2025-09-16 15:02:25 [Info] SendMessage T_MSG_LOGIN
2025-09-16 15:02:25 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-16 15:02:25 [Info] begin to enable self guard after reconnect
2025-09-16 15:02:26 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-16 15:02:26 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-16 15:02:26 [Info] GetMessage : T_MSG_CHECK
2025-09-16 15:02:26 [Info] task 073e090c-dc76-4d9a-92db-ea6628dc4aac has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 15:02:34 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-16 15:02:34 [Info] key : cpu, value : 10
2025-09-16 15:02:34 [Info] key : rio, value : 20480
2025-09-16 15:02:34 [Info] key : wio, value : 20480
2025-09-16 15:02:34 [Info] key : cpu_all, value : 0
2025-09-16 15:02:34 [Info] key : max_pid_check, value : 200
2025-09-16 15:02:34 [Info] key : throw_dump, value : 0
2025-09-16 15:02:34 [Info] key : hash_mode, value : 1
2025-09-16 15:02:34 [Info] key : mem, value : 200
2025-09-16 15:02:34 [Info] can not find key max_fd in online conf
2025-09-16 15:02:34 [Info] key : proc_limit, value : 1
2025-09-16 15:02:34 [Info] key : resource_limit_mode, value : 3
2025-09-16 15:02:34 [Info] key : rtap_update_mode, value : 1
2025-09-16 15:02:34 [Info] can not find key debug in online conf
2025-09-16 15:02:34 [Info] can not find key update_mode in online conf
2025-09-16 15:02:34 [Info] can not find key http_mode in online conf
2025-09-16 15:02:34 [Info] can not find key rtap_enable in online conf
2025-09-16 15:02:34 [Info] can not find key rtap_new_agent in online conf
2025-09-16 15:02:34 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-16 15:02:34 [Info] can not find key mem_low_mark in online conf
2025-09-16 15:02:34 [Info] can not find key obnormal_report_interval in online conf
2025-09-16 15:02:34 [Info] key : cache_mode, value : 0
2025-09-16 15:02:34 [Info] key : abnormal_monitor_mode, value : 3
2025-09-16 15:02:34 [Info] key : queue_size_ratio, value : 80
2025-09-16 15:02:34 [Info] queue_size_ratio is 80
2025-09-16 15:02:34 [Info] resource limit mode and max limit cpu is not change
2025-09-16 15:02:34 [Info] set hash mode 1
2025-09-16 15:02:34 [Info] RTAP timeout config:9600000
2025-09-16 15:02:34 [Info] self_guard_mode config is 0
2025-09-16 15:02:34 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-09-16 15:02:38 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 15:02:38 [Info] ipc client:Rtap203591758006158_handler Reg client_name:Rtap203591758006158 on WhiteList
2025-09-16 15:02:38 [Info] start rtap process success, pid is 4668, argument is Rtap203591758006158
2025-09-16 15:02:42 [Info] csrss.exe open proc 4668 AliSecCheck.ex
2025-09-16 15:02:43 [Info] New ClientConnectNotify : Rtap203591758006158, id is 00000504
2025-09-16 15:02:43 [Info] ipc client:Rtap203591758006158 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 15:02:43 [Info] Rtap Platform Rtap203591758006158 execv work --windows-sysinfoext-check on pid 4668
2025-09-16 15:02:43 [Info] csrss.exe open thread 4668 AliSecCheck.ex
2025-09-16 15:02:44 [Info] csrss.exe open thread 4668 AliSecCheck.ex
2025-09-16 15:02:45 [Info] csrss.exe open thread 4668 AliSecCheck.ex
2025-09-16 15:02:46 [Info] csrss.exe open thread 4668 AliSecCheck.ex
2025-09-16 15:02:54 [Info] Done Work --windows-sysinfoext-check:1
2025-09-16 15:02:54 [Info] Rtap Platform Rtap203591758006158 Exit:normal exit
2025-09-16 15:02:56 [Info] ClientDisConnectNotify : Rtap203591758006158, id is 00000504
2025-09-16 15:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10315","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10408","aliyundun_upload_time":"1758006534","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"62","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 15:14:59 [Info] TotalPhys:2047,AvailPhys:768,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1295,SelfWorkingSet:10316, SelfPageFile:13884
2025-09-16 15:14:59 [Info] CommitTotal:5369,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:768,SystemCache:4194303,KernelTotal:261,KernelPaged:183,KernelNonpaged:78,PageSize:4096,HandleCount:28550,ProcessCount:54,ThreadCount:750
2025-09-16 16:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10318","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10340","aliyundun_upload_time":"1758010142","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"62","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-09-16 16:09:09 [Info] get meta data success by v2
2025-09-16 16:09:09 [Info] get empty metaserver config
2025-09-16 16:09:09 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-16 16:09:09 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-16 16:09:09 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-16 16:09:09 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-16 16:09:09 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 16:09:09 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 16:09:09 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-16 16:09:09 [Info] download cert compare md5 same
2025-09-16 16:09:09 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 16:09:09 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 16:09:09 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-16 16:15:56 [Info] TotalPhys:2047,AvailPhys:764,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6665,AvailPageFile:1299,SelfWorkingSet:10404, SelfPageFile:14360
2025-09-16 16:15:56 [Info] CommitTotal:5365,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:764,SystemCache:4194303,KernelTotal:261,KernelPaged:183,KernelNonpaged:78,PageSize:4096,HandleCount:28355,ProcessCount:53,ThreadCount:742
2025-09-16 17:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10300","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10408","aliyundun_upload_time":"1758013737","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"63","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 17:16:57 [Info] TotalPhys:2047,AvailPhys:735,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1286,SelfWorkingSet:10384, SelfPageFile:13948
2025-09-16 17:16:57 [Info] CommitTotal:5379,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:735,SystemCache:4194303,KernelTotal:267,KernelPaged:188,KernelNonpaged:78,PageSize:4096,HandleCount:28447,ProcessCount:53,ThreadCount:744
2025-09-16 18:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10281","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10384","aliyundun_upload_time":"1758017316","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 18:17:54 [Info] TotalPhys:2047,AvailPhys:733,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1292,SelfWorkingSet:10276, SelfPageFile:13828
2025-09-16 18:17:54 [Info] CommitTotal:5372,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:733,SystemCache:4194303,KernelTotal:267,KernelPaged:188,KernelNonpaged:78,PageSize:4096,HandleCount:28406,ProcessCount:53,ThreadCount:736
2025-09-16 19:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10197","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10276","aliyundun_upload_time":"1758020926","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 19:18:51 [Info] TotalPhys:2047,AvailPhys:727,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1286,SelfWorkingSet:10148, SelfPageFile:13780
2025-09-16 19:18:51 [Info] CommitTotal:5379,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:727,SystemCache:4194303,KernelTotal:267,KernelPaged:188,KernelNonpaged:78,PageSize:4096,HandleCount:28408,ProcessCount:53,ThreadCount:739
2025-09-16 19:27:06 [Info] get meta data success by v2
2025-09-16 19:27:06 [Info] get empty metaserver config
2025-09-16 19:27:06 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-16 19:27:06 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-16 19:27:06 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-16 19:27:06 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-16 19:27:06 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 19:27:06 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 19:27:07 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-16 19:27:07 [Info] download cert compare md5 same
2025-09-16 19:27:07 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 19:27:07 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 19:27:07 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-16 19:27:28 [Info] GetMessage : T_MSG_CHECK
2025-09-16 19:27:28 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTgwMjIwNDgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU4MDY1MjQ4LCJzdWIiOiJSVEFQX0lEWF8xNjMxNzFfMTc1ODAyMjA0ODY5NyJ9.AI37bJXSlomNsSSuTmzzeUdy1UVoaDvrs4vVwXalUEU has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 19:27:37 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 19:27:37 [Info] ipc client:Rtap67421758022057_handler Reg client_name:Rtap67421758022057 on WhiteList
2025-09-16 19:27:38 [Info] start rtap process success, pid is 2632, argument is Rtap67421758022057
2025-09-16 19:27:38 [Info] New ClientConnectNotify : Rtap67421758022057, id is 0000051C
2025-09-16 19:27:38 [Info] ipc client:Rtap67421758022057 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 19:27:38 [Info] Rtap Platform Rtap67421758022057 execv work --secnet_rasp_agent on pid 2632
2025-09-16 19:27:40 [Info] csrss.exe open proc 2632 AliSecCheck.ex
2025-09-16 19:27:41 [Info] csrss.exe open thread 2632 AliSecCheck.ex
2025-09-16 19:27:42 [Info] csrss.exe open thread 2632 AliSecCheck.ex
2025-09-16 19:27:45 [Info] Done Work --secnet_rasp_agent:1
2025-09-16 19:27:45 [Info] Rtap Platform Rtap67421758022057 Exit:normal exit
2025-09-16 19:27:47 [Info] ClientDisConnectNotify : Rtap67421758022057, id is 0000051C
2025-09-16 20:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10329","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"10428","aliyundun_upload_time":"1758024537","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"63","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 20:19:48 [Info] TotalPhys:2047,AvailPhys:745,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1391,SelfWorkingSet:10436, SelfPageFile:14268
2025-09-16 20:19:48 [Info] CommitTotal:4806,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:745,SystemCache:4194303,KernelTotal:258,KernelPaged:179,KernelNonpaged:78,PageSize:4096,HandleCount:28243,ProcessCount:53,ThreadCount:743
2025-09-16 20:32:01 [Info] nCurrentClock is 5544238100, nCurrentTime is 1758025921
2025-09-16 20:32:01 [Info] SendMessage T_MSG_LOGIN
2025-09-16 20:32:01 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-16 20:32:01 [Info] begin to enable self guard after reconnect
2025-09-16 20:32:02 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-16 20:32:02 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-16 20:32:02 [Info] GetMessage : T_MSG_CHECK
2025-09-16 20:32:02 [Info] task 317da1f8-7ad8-4c63-9142-a37211b8383c has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 20:32:10 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-16 20:32:10 [Info] key : cpu, value : 10
2025-09-16 20:32:10 [Info] key : rio, value : 20480
2025-09-16 20:32:10 [Info] key : wio, value : 20480
2025-09-16 20:32:10 [Info] key : cpu_all, value : 0
2025-09-16 20:32:10 [Info] key : max_pid_check, value : 200
2025-09-16 20:32:10 [Info] key : throw_dump, value : 0
2025-09-16 20:32:10 [Info] key : hash_mode, value : 1
2025-09-16 20:32:10 [Info] key : mem, value : 200
2025-09-16 20:32:10 [Info] can not find key max_fd in online conf
2025-09-16 20:32:10 [Info] key : proc_limit, value : 1
2025-09-16 20:32:10 [Info] key : resource_limit_mode, value : 3
2025-09-16 20:32:10 [Info] key : rtap_update_mode, value : 1
2025-09-16 20:32:10 [Info] can not find key debug in online conf
2025-09-16 20:32:10 [Info] can not find key update_mode in online conf
2025-09-16 20:32:10 [Info] can not find key http_mode in online conf
2025-09-16 20:32:10 [Info] can not find key rtap_enable in online conf
2025-09-16 20:32:10 [Info] can not find key rtap_new_agent in online conf
2025-09-16 20:32:10 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-16 20:32:10 [Info] can not find key mem_low_mark in online conf
2025-09-16 20:32:10 [Info] can not find key obnormal_report_interval in online conf
2025-09-16 20:32:10 [Info] key : cache_mode, value : 0
2025-09-16 20:32:10 [Info] key : abnormal_monitor_mode, value : 3
2025-09-16 20:32:10 [Info] key : queue_size_ratio, value : 80
2025-09-16 20:32:10 [Info] queue_size_ratio is 80
2025-09-16 20:32:10 [Info] resource limit mode and max limit cpu is not change
2025-09-16 20:32:10 [Info] set hash mode 1
2025-09-16 20:32:10 [Info] RTAP timeout config:9600000
2025-09-16 20:32:10 [Info] self_guard_mode config is 0
2025-09-16 20:32:10 [Info] GetMessage : T_MSG_CHECK
2025-09-16 20:32:10 [Info] task dc84e08e81bcdaf650a1efda7b75c102 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-16 20:32:18 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 20:32:18 [Info] ipc client:Rtap194161758025938_handler Reg client_name:Rtap194161758025938 on WhiteList
2025-09-16 20:32:18 [Info] start rtap process success, pid is 4468, argument is Rtap194161758025938
2025-09-16 20:32:19 [Info] New ClientConnectNotify : Rtap194161758025938, id is 000004F4
2025-09-16 20:32:19 [Info] Rtap Platform Rtap194161758025938 execv work --windows-sysinfoext-check on pid 4468
2025-09-16 20:32:19 [Info] ipc client:Rtap194161758025938 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 20:32:20 [Info] csrss.exe open proc 4468 AliSecCheck.ex
2025-09-16 20:32:21 [Info] csrss.exe open thread 4468 AliSecCheck.ex
2025-09-16 20:32:22 [Info] csrss.exe open thread 4468 AliSecCheck.ex
2025-09-16 20:32:23 [Info] csrss.exe open thread 4468 AliSecCheck.ex
2025-09-16 20:32:24 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-16 20:32:24 [Info] ipc client:Rtap194351758025944_handler Reg client_name:Rtap194351758025944 on WhiteList
2025-09-16 20:32:24 [Info] start rtap process success, pid is 1532, argument is Rtap194351758025944
2025-09-16 20:32:24 [Info] New ClientConnectNotify : Rtap194351758025944, id is 000004D8
2025-09-16 20:32:24 [Info] ipc client:Rtap194351758025944 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-16 20:32:24 [Info] Rtap Platform Rtap194351758025944 execv work --windows-vul-check on pid 1532
2025-09-16 20:32:24 [Info] csrss.exe open thread 4468 AliSecCheck.ex
2025-09-16 20:32:26 [Info] csrss.exe open proc 1532 AliSecCheck.ex
2025-09-16 20:32:27 [Info] Done Work --windows-sysinfoext-check:1
2025-09-16 20:32:27 [Info] Rtap Platform Rtap194161758025938 Exit:normal exit
2025-09-16 20:32:27 [Info] csrss.exe open thread 1532 AliSecCheck.ex
2025-09-16 20:32:29 [Info] ClientDisConnectNotify : Rtap194161758025938, id is 000004F4
2025-09-16 20:32:34 [Info] Done Work --windows-vul-check:1
2025-09-16 20:32:34 [Info] Rtap Platform Rtap194351758025944 Exit:normal exit
2025-09-16 20:32:36 [Info] ClientDisConnectNotify : Rtap194351758025944, id is 000004D8
2025-09-16 21:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10376","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10436","aliyundun_upload_time":"1758028119","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 21:20:49 [Info] TotalPhys:2047,AvailPhys:729,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1387,SelfWorkingSet:10476, SelfPageFile:14268
2025-09-16 21:20:49 [Info] CommitTotal:4810,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:729,SystemCache:4194303,KernelTotal:262,KernelPaged:183,KernelNonpaged:78,PageSize:4096,HandleCount:27962,ProcessCount:52,ThreadCount:733
2025-09-16 22:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10459","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10492","aliyundun_upload_time":"1758031729","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 22:21:46 [Info] TotalPhys:2047,AvailPhys:716,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1375,SelfWorkingSet:10492, SelfPageFile:14208
2025-09-16 22:21:46 [Info] CommitTotal:4822,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:716,SystemCache:4194303,KernelTotal:262,KernelPaged:184,KernelNonpaged:78,PageSize:4096,HandleCount:28037,ProcessCount:52,ThreadCount:735
2025-09-16 22:44:36 [Info] get meta data success by v2
2025-09-16 22:44:36 [Info] get empty metaserver config
2025-09-16 22:44:36 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-16 22:44:36 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-16 22:44:36 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-16 22:44:36 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-16 22:44:36 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 22:44:36 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-16 22:44:36 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-16 22:44:36 [Info] download cert compare md5 same
2025-09-16 22:44:36 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 22:44:36 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-16 22:44:36 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-16 23:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10496","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10592","aliyundun_upload_time":"1758035318","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"65","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-16 23:22:43 [Info] TotalPhys:2047,AvailPhys:698,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1371,SelfWorkingSet:10484, SelfPageFile:14248
2025-09-16 23:22:43 [Info] CommitTotal:4826,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:698,SystemCache:4194303,KernelTotal:262,KernelPaged:184,KernelNonpaged:78,PageSize:4096,HandleCount:28012,ProcessCount:52,ThreadCount:732
2025-09-17 00:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10424","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10488","aliyundun_upload_time":"1758038921","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}