2025-07-12 01:08:27 [Info] TotalPhys:2047,AvailPhys:351,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1439,SelfWorkingSet:15720, SelfPageFile:12884
2025-07-12 01:08:27 [Info] CommitTotal:4933,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:351,SystemCache:326,KernelTotal:247,KernelPaged:182,KernelNonpaged:65,PageSize:4096,HandleCount:26891,ProcessCount:54,ThreadCount:755
2025-07-12 01:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15969","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16208","aliyundun_upload_time":"1752253720","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 01:19:25 [Info] GetMessage : T_MSG_CHECK
2025-07-12 01:19:25 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTIyNTQzNjQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyMjk3NTY0LCJzdWIiOiJSVEFQX0lEWF8xNTc5NDZfMTc1MjI1NDM2NDkxMyJ9.UtRJjiQFZ1LDrFXtlSmD1-NhbyNUPnDZpw5DAPIuaEE has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 01:19:36 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 01:19:36 [Info] ipc client:Rtap135231752254376_handler Reg client_name:Rtap135231752254376 on WhiteList
2025-07-12 01:19:36 [Info] start rtap process success, pid is 1048, argument is Rtap135231752254376
2025-07-12 01:19:37 [Info] system memory usage is 84
2025-07-12 01:19:37 [Info] New ClientConnectNotify : Rtap135231752254376, id is 0000051C
2025-07-12 01:19:37 [Info] Rtap Platform Rtap135231752254376 execv work --sca on pid 1048
2025-07-12 01:19:37 [Info] ipc client:Rtap135231752254376 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 01:19:38 [Info] csrss.exe open proc 1048 AliSecCheck.ex
2025-07-12 01:19:39 [Info] csrss.exe open thread 1048 AliSecCheck.ex
2025-07-12 01:19:40 [Info] csrss.exe open thread 1048 AliSecCheck.ex
2025-07-12 01:19:41 [Info] csrss.exe open thread 1048 AliSecCheck.ex
2025-07-12 01:19:43 [Info] csrss.exe open thread 1048 AliSecCheck.ex
2025-07-12 01:20:21 [Info] csrss.exe open thread 1048 AliSecCheck.ex
2025-07-12 01:20:41 [Info] Done Work --sca:1
2025-07-12 01:20:41 [Info] Rtap Platform Rtap135231752254376 Exit:normal exit
2025-07-12 01:20:45 [Info] ClientDisConnectNotify : Rtap135231752254376, id is 0000051C
2025-07-12 02:08:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16021","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16132","aliyundun_upload_time":"1752257333","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 02:09:24 [Info] TotalPhys:2047,AvailPhys:328,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1419,SelfWorkingSet:15992, SelfPageFile:13200
2025-07-12 02:09:24 [Info] CommitTotal:4954,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:328,SystemCache:284,KernelTotal:246,KernelPaged:180,KernelNonpaged:65,PageSize:4096,HandleCount:26890,ProcessCount:54,ThreadCount:753
2025-07-12 02:24:52 [Info] nCurrentClock is 288014800, nCurrentTime is 1752258292
2025-07-12 02:24:52 [Info] SendMessage T_MSG_LOGIN
2025-07-12 02:24:52 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-12 02:24:52 [Info] begin to enable self guard after reconnect
2025-07-12 02:24:53 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-12 02:24:53 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-12 02:24:53 [Info] GetMessage : T_MSG_CHECK
2025-07-12 02:24:53 [Info] task 22dbfd5e-de08-4e17-8a72-71b453e8a33c has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 02:25:01 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-12 02:25:01 [Info] key : cpu, value : 10
2025-07-12 02:25:01 [Info] key : rio, value : 20480
2025-07-12 02:25:01 [Info] key : wio, value : 20480
2025-07-12 02:25:01 [Info] key : cpu_all, value : 0
2025-07-12 02:25:01 [Info] key : max_pid_check, value : 200
2025-07-12 02:25:01 [Info] key : throw_dump, value : 0
2025-07-12 02:25:01 [Info] key : hash_mode, value : 1
2025-07-12 02:25:01 [Info] key : mem, value : 200
2025-07-12 02:25:01 [Info] can not find key max_fd in online conf
2025-07-12 02:25:01 [Info] key : proc_limit, value : 1
2025-07-12 02:25:01 [Info] key : resource_limit_mode, value : 3
2025-07-12 02:25:01 [Info] key : rtap_update_mode, value : 1
2025-07-12 02:25:01 [Info] can not find key debug in online conf
2025-07-12 02:25:01 [Info] can not find key update_mode in online conf
2025-07-12 02:25:01 [Info] can not find key http_mode in online conf
2025-07-12 02:25:01 [Info] can not find key rtap_enable in online conf
2025-07-12 02:25:01 [Info] can not find key rtap_new_agent in online conf
2025-07-12 02:25:01 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-12 02:25:01 [Info] can not find key mem_low_mark in online conf
2025-07-12 02:25:01 [Info] can not find key obnormal_report_interval in online conf
2025-07-12 02:25:01 [Info] key : cache_mode, value : 0
2025-07-12 02:25:01 [Info] key : abnormal_monitor_mode, value : 3
2025-07-12 02:25:01 [Info] key : queue_size_ratio, value : 80
2025-07-12 02:25:01 [Info] queue_size_ratio is 80
2025-07-12 02:25:01 [Info] resource limit mode and max limit cpu is not change
2025-07-12 02:25:01 [Info] set hash mode 1
2025-07-12 02:25:01 [Info] RTAP timeout config:9600000
2025-07-12 02:25:01 [Info] self_guard_mode config is 0
2025-07-12 02:25:01 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-07-12 02:25:03 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 02:25:03 [Info] ipc client:Rtap263471752258303_handler Reg client_name:Rtap263471752258303 on WhiteList
2025-07-12 02:25:03 [Info] start rtap process success, pid is 4412, argument is Rtap263471752258303
2025-07-12 02:25:03 [Info] New ClientConnectNotify : Rtap263471752258303, id is 00000530
2025-07-12 02:25:03 [Info] ipc client:Rtap263471752258303 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 02:25:04 [Info] Rtap Platform Rtap263471752258303 execv work --windows-sysinfoext-check on pid 4412
2025-07-12 02:25:06 [Info] csrss.exe open proc 4412 AliSecCheck.ex
2025-07-12 02:25:07 [Info] csrss.exe open thread 4412 AliSecCheck.ex
2025-07-12 02:25:15 [Info] Done Work --windows-sysinfoext-check:1
2025-07-12 02:25:15 [Info] Rtap Platform Rtap263471752258303 Exit:normal exit
2025-07-12 02:25:17 [Info] ClientDisConnectNotify : Rtap263471752258303, id is 00000530
2025-07-12 03:08:44 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15954","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16144","aliyundun_upload_time":"1752260924","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 03:10:21 [Info] TotalPhys:2047,AvailPhys:320,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1410,SelfWorkingSet:15984, SelfPageFile:13304
2025-07-12 03:10:21 [Info] CommitTotal:4962,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:320,SystemCache:302,KernelTotal:247,KernelPaged:181,KernelNonpaged:65,PageSize:4096,HandleCount:26953,ProcessCount:54,ThreadCount:763
2025-07-12 03:30:35 [Info] get meta data success by v2
2025-07-12 03:30:35 [Info] get empty metaserver config
2025-07-12 03:30:35 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-12 03:30:35 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-12 03:30:35 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-12 03:30:35 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-12 03:30:35 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 03:30:35 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 03:30:35 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-12 03:30:35 [Info] download cert compare md5 same
2025-07-12 03:30:35 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 03:30:35 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 03:30:35 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-12 04:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15933","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16084","aliyundun_upload_time":"1752264525","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 04:11:18 [Info] TotalPhys:2047,AvailPhys:321,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1418,SelfWorkingSet:15908, SelfPageFile:13544
2025-07-12 04:11:18 [Info] CommitTotal:4955,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:321,SystemCache:297,KernelTotal:245,KernelPaged:179,KernelNonpaged:65,PageSize:4096,HandleCount:26882,ProcessCount:54,ThreadCount:751
2025-07-12 05:08:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15966","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16116","aliyundun_upload_time":"1752268133","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 05:12:14 [Info] TotalPhys:2047,AvailPhys:320,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1420,SelfWorkingSet:16040, SelfPageFile:13532
2025-07-12 05:12:14 [Info] CommitTotal:4953,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:320,SystemCache:263,KernelTotal:245,KernelPaged:180,KernelNonpaged:65,PageSize:4096,HandleCount:26898,ProcessCount:54,ThreadCount:756
2025-07-12 06:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15972","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16116","aliyundun_upload_time":"1752271742","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 06:13:11 [Info] TotalPhys:2047,AvailPhys:322,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1418,SelfWorkingSet:15980, SelfPageFile:13468
2025-07-12 06:13:11 [Info] CommitTotal:4955,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:322,SystemCache:272,KernelTotal:245,KernelPaged:180,KernelNonpaged:65,PageSize:4096,HandleCount:26909,ProcessCount:54,ThreadCount:758
2025-07-12 06:47:49 [Info] get meta data success by v2
2025-07-12 06:47:49 [Info] get empty metaserver config
2025-07-12 06:47:49 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-12 06:47:50 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-12 06:47:50 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-12 06:47:50 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-12 06:47:50 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 06:47:50 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 06:47:50 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-12 06:47:50 [Info] download cert compare md5 same
2025-07-12 06:47:50 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 06:47:50 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 06:47:50 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-12 07:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15960","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16092","aliyundun_upload_time":"1752275319","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 07:14:07 [Info] TotalPhys:2047,AvailPhys:309,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1406,SelfWorkingSet:15684, SelfPageFile:12824
2025-07-12 07:14:07 [Info] CommitTotal:4967,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:309,SystemCache:274,KernelTotal:245,KernelPaged:179,KernelNonpaged:65,PageSize:4096,HandleCount:26906,ProcessCount:54,ThreadCount:752
2025-07-12 07:53:37 [Info] nCurrentClock is 306018200, nCurrentTime is 1752278017
2025-07-12 07:53:37 [Info] SendMessage T_MSG_LOGIN
2025-07-12 07:53:37 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-12 07:53:37 [Info] begin to enable self guard after reconnect
2025-07-12 07:53:37 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-12 07:53:37 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-12 07:53:38 [Info] GetMessage : T_MSG_CHECK
2025-07-12 07:53:38 [Info] task 577b855e-e780-4da1-b04c-6b15474ff020 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 07:53:46 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-12 07:53:46 [Info] key : cpu, value : 10
2025-07-12 07:53:46 [Info] key : rio, value : 20480
2025-07-12 07:53:46 [Info] key : wio, value : 20480
2025-07-12 07:53:46 [Info] key : cpu_all, value : 0
2025-07-12 07:53:46 [Info] key : max_pid_check, value : 200
2025-07-12 07:53:46 [Info] key : throw_dump, value : 0
2025-07-12 07:53:46 [Info] key : hash_mode, value : 1
2025-07-12 07:53:46 [Info] key : mem, value : 200
2025-07-12 07:53:46 [Info] can not find key max_fd in online conf
2025-07-12 07:53:46 [Info] key : proc_limit, value : 1
2025-07-12 07:53:46 [Info] key : resource_limit_mode, value : 3
2025-07-12 07:53:46 [Info] key : rtap_update_mode, value : 1
2025-07-12 07:53:46 [Info] can not find key debug in online conf
2025-07-12 07:53:46 [Info] can not find key update_mode in online conf
2025-07-12 07:53:46 [Info] can not find key http_mode in online conf
2025-07-12 07:53:46 [Info] can not find key rtap_enable in online conf
2025-07-12 07:53:46 [Info] can not find key rtap_new_agent in online conf
2025-07-12 07:53:46 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-12 07:53:46 [Info] can not find key mem_low_mark in online conf
2025-07-12 07:53:46 [Info] can not find key obnormal_report_interval in online conf
2025-07-12 07:53:46 [Info] key : cache_mode, value : 0
2025-07-12 07:53:46 [Info] key : abnormal_monitor_mode, value : 3
2025-07-12 07:53:46 [Info] key : queue_size_ratio, value : 80
2025-07-12 07:53:46 [Info] queue_size_ratio is 80
2025-07-12 07:53:46 [Info] resource limit mode and max limit cpu is not change
2025-07-12 07:53:46 [Info] set hash mode 1
2025-07-12 07:53:46 [Info] RTAP timeout config:9600000
2025-07-12 07:53:46 [Info] self_guard_mode config is 0
2025-07-12 07:53:47 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 07:53:47 [Info] ipc client:Rtap252211752278027_handler Reg client_name:Rtap252211752278027 on WhiteList
2025-07-12 07:53:47 [Info] start rtap process success, pid is 4968, argument is Rtap252211752278027
2025-07-12 07:53:48 [Info] New ClientConnectNotify : Rtap252211752278027, id is 0000051C
2025-07-12 07:53:48 [Info] ipc client:Rtap252211752278027 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 07:53:48 [Info] Rtap Platform Rtap252211752278027 execv work --windows-sysinfoext-check on pid 4968
2025-07-12 07:53:50 [Info] csrss.exe open proc 4968 AliSecCheck.ex
2025-07-12 07:53:51 [Info] csrss.exe open thread 4968 AliSecCheck.ex
2025-07-12 07:53:55 [Info] Done Work --windows-sysinfoext-check:1
2025-07-12 07:53:55 [Info] Rtap Platform Rtap252211752278027 Exit:normal exit
2025-07-12 07:53:57 [Info] ClientDisConnectNotify : Rtap252211752278027, id is 0000051C
2025-07-12 08:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15916","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16072","aliyundun_upload_time":"1752278929","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 08:15:05 [Info] TotalPhys:2047,AvailPhys:275,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1402,SelfWorkingSet:15936, SelfPageFile:13456
2025-07-12 08:15:05 [Info] CommitTotal:4970,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:275,SystemCache:294,KernelTotal:246,KernelPaged:180,KernelNonpaged:65,PageSize:4096,HandleCount:27085,ProcessCount:55,ThreadCount:755
2025-07-12 08:53:35 [Info] GetMessage : T_MSG_CHECK
2025-07-12 08:53:35 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTIyODE2MTUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyMzI0ODE1LCJzdWIiOiJSVEFQX0lEWF8xNTc5MzZfMTc1MjI4MTYxNTEwNiJ9.X6O85qI7Mb8ZZPDVh5WCUcwbmyzDq0Ot0Ccl74ZD5ts has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 08:53:46 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 08:53:46 [Info] ipc client:Rtap42061752281626_handler Reg client_name:Rtap42061752281626 on WhiteList
2025-07-12 08:53:46 [Info] start rtap process success, pid is 2560, argument is Rtap42061752281626
2025-07-12 08:53:46 [Info] New ClientConnectNotify : Rtap42061752281626, id is 000004F0
2025-07-12 08:53:46 [Info] ipc client:Rtap42061752281626 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 08:53:46 [Info] Rtap Platform Rtap42061752281626 execv work --windows-process-check on pid 2560
2025-07-12 08:53:47 [Info] csrss.exe open proc 2560 AliSecCheck.ex
2025-07-12 08:53:48 [Info] csrss.exe open thread 2560 AliSecCheck.ex
2025-07-12 08:54:10 [Info] Done Work --windows-process-check:1
2025-07-12 08:54:10 [Info] Rtap Platform Rtap42061752281626 Exit:normal exit
2025-07-12 08:54:12 [Info] ClientDisConnectNotify : Rtap42061752281626, id is 000004F0
2025-07-12 09:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15927","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16076","aliyundun_upload_time":"1752282523","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"88","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 09:16:06 [Info] TotalPhys:2047,AvailPhys:266,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1403,SelfWorkingSet:16092, SelfPageFile:13544
2025-07-12 09:16:06 [Info] CommitTotal:4970,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:266,SystemCache:271,KernelTotal:246,KernelPaged:179,KernelNonpaged:67,PageSize:4096,HandleCount:26790,ProcessCount:54,ThreadCount:753
2025-07-12 09:59:44 [Info] GetMessage : T_MSG_CHECK
2025-07-12 09:59:44 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTIyODU1ODQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyMzI4Nzg0LCJzdWIiOiJSVEFQX0lEWF8xNTc5MzdfMTc1MjI4NTU4NDg1NiJ9.LLUYVUosx7sTNy1QQ6oDKEjd-nz5-1tlUUSWrDMRgZg has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 09:59:55 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 09:59:55 [Info] ipc client:Rtap171671752285595_handler Reg client_name:Rtap171671752285595 on WhiteList
2025-07-12 09:59:55 [Info] start rtap process success, pid is 1292, argument is Rtap171671752285595
2025-07-12 09:59:55 [Info] New ClientConnectNotify : Rtap171671752285595, id is 0000051C
2025-07-12 09:59:56 [Info] ipc client:Rtap171671752285595 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 09:59:56 [Info] Rtap Platform Rtap171671752285595 execv work --tcp-connect-check on pid 1292
2025-07-12 09:59:57 [Info] csrss.exe open proc 1292 AliSecCheck.ex
2025-07-12 09:59:58 [Info] csrss.exe open thread 1292 AliSecCheck.ex
2025-07-12 10:00:07 [Info] Done Work --tcp-connect-check:1
2025-07-12 10:00:07 [Info] Rtap Platform Rtap171671752285595 Exit:normal exit
2025-07-12 10:00:09 [Info] ClientDisConnectNotify : Rtap171671752285595, id is 0000051C
2025-07-12 10:05:59 [Info] get meta data success by v2
2025-07-12 10:05:59 [Info] get empty metaserver config
2025-07-12 10:05:59 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-12 10:05:59 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-12 10:05:59 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-12 10:05:59 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-12 10:05:59 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 10:05:59 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 10:05:59 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-12 10:05:59 [Info] download cert compare md5 same
2025-07-12 10:05:59 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 10:05:59 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 10:05:59 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-12 10:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16000","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16196","aliyundun_upload_time":"1752286130","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 10:16:35 [Info] GetMessage : T_MSG_CHECK
2025-07-12 10:16:35 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTIyODY1OTUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyMzI5Nzk1LCJzdWIiOiJSVEFQX0lEWF8xNTc5NDVfMTc1MjI4NjU5NTMyMCJ9.UV0BA4CqnAC-3y9Sd-PmTpa4DYMSXLzbTjBw4ALAdgI has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 10:16:43 [Info] GetMessage : T_MSG_CHECK
2025-07-12 10:16:43 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTIyODY2MDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyMzI5ODAwLCJzdWIiOiJSVEFQX0lEWF8xNTc5MzlfMTc1MjI4NjYwMDExMyJ9.jBtnGyKgehTji8XTxMLco5PHoDzTDV8oAL5ReRhdT38 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 10:16:46 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 10:16:46 [Info] ipc client:Rtap204691752286606_handler Reg client_name:Rtap204691752286606 on WhiteList
2025-07-12 10:16:46 [Info] start rtap process success, pid is 3032, argument is Rtap204691752286606
2025-07-12 10:16:47 [Info] New ClientConnectNotify : Rtap204691752286606, id is 000004F0
2025-07-12 10:16:47 [Info] ipc client:Rtap204691752286606 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 10:16:47 [Info] Rtap Platform Rtap204691752286606 execv work --windows-registry-check on pid 3032
2025-07-12 10:16:48 [Info] csrss.exe open proc 3032 AliSecCheck.ex
2025-07-12 10:16:49 [Info] csrss.exe open thread 3032 AliSecCheck.ex
2025-07-12 10:16:56 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 10:16:56 [Info] ipc client:Rtap205011752286616_handler Reg client_name:Rtap205011752286616 on WhiteList
2025-07-12 10:16:56 [Info] start rtap process success, pid is 1996, argument is Rtap205011752286616
2025-07-12 10:16:56 [Info] New ClientConnectNotify : Rtap205011752286616, id is 0000053C
2025-07-12 10:16:56 [Info] ipc client:Rtap205011752286616 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 10:16:56 [Info] Rtap Platform Rtap205011752286616 execv work --windows-schedule-task-check on pid 1996
2025-07-12 10:16:57 [Info] csrss.exe open proc 1996 AliSecCheck.ex
2025-07-12 10:16:58 [Info] csrss.exe open thread 1996 AliSecCheck.ex
2025-07-12 10:17:02 [Info] TotalPhys:2047,AvailPhys:222,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6373,AvailPageFile:1379,SelfWorkingSet:16140, SelfPageFile:13668
2025-07-12 10:17:02 [Info] CommitTotal:4994,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:222,SystemCache:255,KernelTotal:246,KernelPaged:179,KernelNonpaged:66,PageSize:4096,HandleCount:27473,ProcessCount:56,ThreadCount:776
2025-07-12 10:17:24 [Info] Done Work --windows-registry-check:1
2025-07-12 10:17:24 [Info] Rtap Platform Rtap204691752286606 Exit:normal exit
2025-07-12 10:17:26 [Info] ClientDisConnectNotify : Rtap204691752286606, id is 000004F0
2025-07-12 10:17:34 [Info] Done Work --windows-schedule-task-check:1
2025-07-12 10:17:34 [Info] Rtap Platform Rtap205011752286616 Exit:normal exit
2025-07-12 10:17:36 [Info] ClientDisConnectNotify : Rtap205011752286616, id is 0000053C
2025-07-12 10:18:00 [Info] GetMessage : T_MSG_CHECK
2025-07-12 10:18:00 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTIyODY2ODAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyMzI5ODgwLCJzdWIiOiJSVEFQX0lEWF8xNTc5NTNfMTc1MjI4NjY4MDU1NSJ9.usE9ZpCijp4cdnzFPhe38qflYxKTZHSTJ06zxlnDXoU has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 10:18:10 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 10:18:10 [Info] ipc client:Rtap207431752286690_handler Reg client_name:Rtap207431752286690 on WhiteList
2025-07-12 10:18:10 [Info] start rtap process success, pid is 1420, argument is Rtap207431752286690
2025-07-12 10:18:10 [Info] New ClientConnectNotify : Rtap207431752286690, id is 000004D8
2025-07-12 10:18:11 [Info] ipc client:Rtap207431752286690 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 10:18:11 [Info] Rtap Platform Rtap207431752286690 execv work --windows-driver-version-check on pid 1420
2025-07-12 10:18:12 [Info] csrss.exe open proc 1420 AliSecCheck.ex
2025-07-12 10:18:13 [Info] csrss.exe open thread 1420 AliSecCheck.ex
2025-07-12 10:18:18 [Info] Done Work --windows-driver-version-check:1
2025-07-12 10:18:18 [Info] Rtap Platform Rtap207431752286690 Exit:normal exit
2025-07-12 10:18:20 [Info] ClientDisConnectNotify : Rtap207431752286690, id is 000004D8
2025-07-12 11:05:53 [Info] GetMessage : T_MSG_CHECK
2025-07-12 11:05:53 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTIyODk1NTMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyMzMyNzUzLCJzdWIiOiJSVEFQX0lEWF8xNTc5NDJfMTc1MjI4OTU1MzQyMyJ9.34fFm1o3CTX4Iqy_OBhXkBuppz9-B7vwWs98UqsndT8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 11:06:02 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 11:06:02 [Info] ipc client:Rtap301221752289562_handler Reg client_name:Rtap301221752289562 on WhiteList
2025-07-12 11:06:02 [Info] start rtap process success, pid is 544, argument is Rtap301221752289562
2025-07-12 11:06:02 [Info] New ClientConnectNotify : Rtap301221752289562, id is 000001E4
2025-07-12 11:06:03 [Info] ipc client:Rtap301221752289562 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 11:06:03 [Info] Rtap Platform Rtap301221752289562 execv work --windows-autorun-item-check on pid 544
2025-07-12 11:06:05 [Info] csrss.exe open proc 544 AliSecCheck.ex
2025-07-12 11:06:06 [Info] csrss.exe open thread 544 AliSecCheck.ex
2025-07-12 11:06:18 [Info] Done Work --windows-autorun-item-check:1
2025-07-12 11:06:18 [Info] Rtap Platform Rtap301221752289562 Exit:normal exit
2025-07-12 11:06:20 [Info] ClientDisConnectNotify : Rtap301221752289562, id is 000001E4
2025-07-12 11:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16029","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16268","aliyundun_upload_time":"1752289737","aliyundun_write_pid_times":"0","ipc_send_count":"156","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 11:17:59 [Info] TotalPhys:2047,AvailPhys:276,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1416,SelfWorkingSet:16032, SelfPageFile:13300
2025-07-12 11:17:59 [Info] CommitTotal:4957,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:276,SystemCache:262,KernelTotal:247,KernelPaged:180,KernelNonpaged:66,PageSize:4096,HandleCount:26831,ProcessCount:54,ThreadCount:760
2025-07-12 12:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15137","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16152","aliyundun_upload_time":"1752293314","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"71","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 12:18:55 [Info] TotalPhys:2047,AvailPhys:546,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1414,SelfWorkingSet:10980, SelfPageFile:13308
2025-07-12 12:18:55 [Info] CommitTotal:4958,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:546,SystemCache:406,KernelTotal:246,KernelPaged:180,KernelNonpaged:66,PageSize:4096,HandleCount:26871,ProcessCount:53,ThreadCount:767
2025-07-12 13:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11038","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"11172","aliyundun_upload_time":"1752296926","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 13:19:52 [Info] TotalPhys:2047,AvailPhys:546,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1409,SelfWorkingSet:11160, SelfPageFile:13512
2025-07-12 13:19:52 [Info] CommitTotal:4963,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:546,SystemCache:410,KernelTotal:246,KernelPaged:180,KernelNonpaged:66,PageSize:4096,HandleCount:26603,ProcessCount:53,ThreadCount:749
2025-07-12 13:23:17 [Info] get meta data success by v2
2025-07-12 13:23:17 [Info] get empty metaserver config
2025-07-12 13:23:17 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-12 13:23:18 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-12 13:23:18 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-12 13:23:18 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-12 13:23:18 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 13:23:18 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 13:23:18 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-12 13:23:18 [Info] download cert compare md5 same
2025-07-12 13:23:18 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 13:23:18 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 13:23:18 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-12 13:23:20 [Info] nCurrentClock is 324018800, nCurrentTime is 1752297800
2025-07-12 13:23:20 [Info] SendMessage T_MSG_LOGIN
2025-07-12 13:23:20 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-12 13:23:20 [Info] begin to enable self guard after reconnect
2025-07-12 13:23:20 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-12 13:23:20 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-12 13:23:20 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-12 13:23:20 [Info] key : cpu, value : 10
2025-07-12 13:23:20 [Info] key : rio, value : 20480
2025-07-12 13:23:20 [Info] key : wio, value : 20480
2025-07-12 13:23:20 [Info] key : cpu_all, value : 0
2025-07-12 13:23:20 [Info] key : max_pid_check, value : 200
2025-07-12 13:23:20 [Info] key : throw_dump, value : 0
2025-07-12 13:23:20 [Info] key : hash_mode, value : 1
2025-07-12 13:23:20 [Info] key : mem, value : 200
2025-07-12 13:23:20 [Info] can not find key max_fd in online conf
2025-07-12 13:23:20 [Info] key : proc_limit, value : 1
2025-07-12 13:23:20 [Info] key : resource_limit_mode, value : 3
2025-07-12 13:23:20 [Info] key : rtap_update_mode, value : 1
2025-07-12 13:23:20 [Info] can not find key debug in online conf
2025-07-12 13:23:20 [Info] can not find key update_mode in online conf
2025-07-12 13:23:20 [Info] can not find key http_mode in online conf
2025-07-12 13:23:20 [Info] can not find key rtap_enable in online conf
2025-07-12 13:23:20 [Info] can not find key rtap_new_agent in online conf
2025-07-12 13:23:20 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-12 13:23:20 [Info] can not find key mem_low_mark in online conf
2025-07-12 13:23:20 [Info] can not find key obnormal_report_interval in online conf
2025-07-12 13:23:20 [Info] key : cache_mode, value : 0
2025-07-12 13:23:20 [Info] key : abnormal_monitor_mode, value : 3
2025-07-12 13:23:20 [Info] key : queue_size_ratio, value : 80
2025-07-12 13:23:20 [Info] queue_size_ratio is 80
2025-07-12 13:23:20 [Info] resource limit mode and max limit cpu is not change
2025-07-12 13:23:20 [Info] set hash mode 1
2025-07-12 13:23:20 [Info] RTAP timeout config:9600000
2025-07-12 13:23:20 [Info] self_guard_mode config is 0
2025-07-12 13:23:20 [Info] GetMessage : T_MSG_CHECK
2025-07-12 13:23:20 [Info] task 0f782a8e-9d30-48e3-b96d-386f06a9c417 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 13:23:30 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 13:23:30 [Info] ipc client:Rtap242881752297810_handler Reg client_name:Rtap242881752297810 on WhiteList
2025-07-12 13:23:30 [Info] start rtap process success, pid is 4952, argument is Rtap242881752297810
2025-07-12 13:23:31 [Info] New ClientConnectNotify : Rtap242881752297810, id is 00000530
2025-07-12 13:23:31 [Info] ipc client:Rtap242881752297810 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 13:23:32 [Info] Rtap Platform Rtap242881752297810 execv work --windows-sysinfoext-check on pid 4952
2025-07-12 13:23:32 [Info] csrss.exe open proc 4952 AliSecCheck.ex
2025-07-12 13:23:33 [Info] csrss.exe open thread 4952 AliSecCheck.ex
2025-07-12 13:23:34 [Info] csrss.exe open thread 4952 AliSecCheck.ex
2025-07-12 13:23:35 [Info] csrss.exe open thread 4952 AliSecCheck.ex
2025-07-12 13:23:36 [Info] csrss.exe open thread 4952 AliSecCheck.ex
2025-07-12 13:23:43 [Info] Done Work --windows-sysinfoext-check:1
2025-07-12 13:23:43 [Info] Rtap Platform Rtap242881752297810 Exit:normal exit
2025-07-12 13:23:45 [Info] ClientDisConnectNotify : Rtap242881752297810, id is 00000530
2025-07-12 14:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"11036","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"11160","aliyundun_upload_time":"1752300534","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 14:20:49 [Info] TotalPhys:2047,AvailPhys:543,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1411,SelfWorkingSet:11052, SelfPageFile:13528
2025-07-12 14:20:49 [Info] CommitTotal:4961,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:543,SystemCache:456,KernelTotal:247,KernelPaged:181,KernelNonpaged:66,PageSize:4096,HandleCount:26603,ProcessCount:53,ThreadCount:747
2025-07-12 15:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11000","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"11064","aliyundun_upload_time":"1752304142","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 15:21:46 [Info] TotalPhys:2047,AvailPhys:539,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1410,SelfWorkingSet:11032, SelfPageFile:13468
2025-07-12 15:21:46 [Info] CommitTotal:4963,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:539,SystemCache:472,KernelTotal:247,KernelPaged:181,KernelNonpaged:66,PageSize:4096,HandleCount:26626,ProcessCount:53,ThreadCount:749
2025-07-12 16:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10947","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"11032","aliyundun_upload_time":"1752307717","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 16:22:42 [Info] TotalPhys:2047,AvailPhys:543,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1414,SelfWorkingSet:11056, SelfPageFile:13556
2025-07-12 16:22:42 [Info] CommitTotal:4958,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:543,SystemCache:479,KernelTotal:248,KernelPaged:181,KernelNonpaged:66,PageSize:4096,HandleCount:26613,ProcessCount:53,ThreadCount:741
2025-07-12 16:40:31 [Info] get meta data success by v2
2025-07-12 16:40:31 [Info] get empty metaserver config
2025-07-12 16:40:31 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-12 16:40:32 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-12 16:40:32 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-12 16:40:32 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-12 16:40:32 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 16:40:32 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 16:40:32 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-12 16:40:32 [Info] download cert compare md5 same
2025-07-12 16:40:32 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 16:40:32 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 16:40:32 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-12 17:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"11030","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"11200","aliyundun_upload_time":"1752311323","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 17:23:39 [Info] TotalPhys:2047,AvailPhys:532,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1409,SelfWorkingSet:11140, SelfPageFile:13556
2025-07-12 17:23:39 [Info] CommitTotal:4964,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:532,SystemCache:473,KernelTotal:247,KernelPaged:181,KernelNonpaged:66,PageSize:4096,HandleCount:26600,ProcessCount:53,ThreadCount:743
2025-07-12 18:08:48 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11087","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"11140","aliyundun_upload_time":"1752314928","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 18:24:35 [Info] TotalPhys:2047,AvailPhys:533,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1407,SelfWorkingSet:11064, SelfPageFile:13416
2025-07-12 18:24:35 [Info] CommitTotal:4966,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:533,SystemCache:478,KernelTotal:247,KernelPaged:181,KernelNonpaged:66,PageSize:4096,HandleCount:26611,ProcessCount:53,ThreadCount:747
2025-07-12 18:51:59 [Info] nCurrentClock is 342019300, nCurrentTime is 1752317519
2025-07-12 18:51:59 [Info] SendMessage T_MSG_LOGIN
2025-07-12 18:51:59 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-12 18:52:00 [Info] begin to enable self guard after reconnect
2025-07-12 18:52:00 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-12 18:52:00 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-12 18:52:00 [Info] GetMessage : T_MSG_CHECK
2025-07-12 18:52:00 [Info] task a7a33d57-a7a7-4100-b8df-f6da79ae8de4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 18:52:08 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-12 18:52:08 [Info] key : cpu, value : 10
2025-07-12 18:52:08 [Info] key : rio, value : 20480
2025-07-12 18:52:08 [Info] key : wio, value : 20480
2025-07-12 18:52:08 [Info] key : cpu_all, value : 0
2025-07-12 18:52:08 [Info] key : max_pid_check, value : 200
2025-07-12 18:52:08 [Info] key : throw_dump, value : 0
2025-07-12 18:52:08 [Info] key : hash_mode, value : 1
2025-07-12 18:52:08 [Info] key : mem, value : 200
2025-07-12 18:52:08 [Info] can not find key max_fd in online conf
2025-07-12 18:52:08 [Info] key : proc_limit, value : 1
2025-07-12 18:52:08 [Info] key : resource_limit_mode, value : 3
2025-07-12 18:52:08 [Info] key : rtap_update_mode, value : 1
2025-07-12 18:52:08 [Info] can not find key debug in online conf
2025-07-12 18:52:08 [Info] can not find key update_mode in online conf
2025-07-12 18:52:08 [Info] can not find key http_mode in online conf
2025-07-12 18:52:08 [Info] can not find key rtap_enable in online conf
2025-07-12 18:52:08 [Info] can not find key rtap_new_agent in online conf
2025-07-12 18:52:08 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-12 18:52:08 [Info] can not find key mem_low_mark in online conf
2025-07-12 18:52:08 [Info] can not find key obnormal_report_interval in online conf
2025-07-12 18:52:08 [Info] key : cache_mode, value : 0
2025-07-12 18:52:08 [Info] key : abnormal_monitor_mode, value : 3
2025-07-12 18:52:08 [Info] key : queue_size_ratio, value : 80
2025-07-12 18:52:08 [Info] queue_size_ratio is 80
2025-07-12 18:52:08 [Info] resource limit mode and max limit cpu is not change
2025-07-12 18:52:08 [Info] set hash mode 1
2025-07-12 18:52:08 [Info] RTAP timeout config:9600000
2025-07-12 18:52:08 [Info] self_guard_mode config is 0
2025-07-12 18:52:08 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-07-12 18:52:11 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 18:52:11 [Info] ipc client:Rtap231531752317531_handler Reg client_name:Rtap231531752317531 on WhiteList
2025-07-12 18:52:11 [Info] start rtap process success, pid is 1204, argument is Rtap231531752317531
2025-07-12 18:52:11 [Info] New ClientConnectNotify : Rtap231531752317531, id is 00000504
2025-07-12 18:52:11 [Info] ipc client:Rtap231531752317531 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 18:52:11 [Info] Rtap Platform Rtap231531752317531 execv work --windows-sysinfoext-check on pid 1204
2025-07-12 18:52:12 [Info] csrss.exe open proc 1204 AliSecCheck.ex
2025-07-12 18:52:13 [Info] csrss.exe open thread 1204 AliSecCheck.ex
2025-07-12 18:52:18 [Info] Done Work --windows-sysinfoext-check:1
2025-07-12 18:52:18 [Info] Rtap Platform Rtap231531752317531 Exit:normal exit
2025-07-12 18:52:20 [Info] ClientDisConnectNotify : Rtap231531752317531, id is 00000504
2025-07-12 19:06:59 [Info] GetMessage : T_MSG_CHECK
2025-07-12 19:06:59 [Info] task f3d0ed56224fa120dd40394666b2b168 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 19:07:08 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 19:07:08 [Info] ipc client:Rtap260821752318428_handler Reg client_name:Rtap260821752318428 on WhiteList
2025-07-12 19:07:08 [Info] start rtap process success, pid is 2896, argument is Rtap260821752318428
2025-07-12 19:07:08 [Info] New ClientConnectNotify : Rtap260821752318428, id is 000001E4
2025-07-12 19:07:08 [Info] ipc client:Rtap260821752318428 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 19:07:09 [Info] Rtap Platform Rtap260821752318428 execv work --windows-vul-check on pid 2896
2025-07-12 19:07:10 [Info] csrss.exe open proc 2896 AliSecCheck.ex
2025-07-12 19:07:11 [Info] csrss.exe open thread 2896 AliSecCheck.ex
2025-07-12 19:07:16 [Info] Done Work --windows-vul-check:1
2025-07-12 19:07:16 [Info] Rtap Platform Rtap260821752318428 Exit:normal exit
2025-07-12 19:07:18 [Info] ClientDisConnectNotify : Rtap260821752318428, id is 000001E4
2025-07-12 19:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11025","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"11092","aliyundun_upload_time":"1752318537","aliyundun_write_pid_times":"0","ipc_send_count":"151","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 19:13:08 [Info] GetMessage : T_MSG_CHECK
2025-07-12 19:13:08 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTIzMTg3ODgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyMzYxOTg4LCJzdWIiOiJSVEFQX0lEWF8xNTgwMTJfMTc1MjMxODc4ODE0OSJ9.4uKiFsJDzqnOvTTnEE9xG4O9UR0dd6DPim4rG4GZMQs has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-12 19:13:17 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-12 19:13:17 [Info] ipc client:Rtap272871752318797_handler Reg client_name:Rtap272871752318797 on WhiteList
2025-07-12 19:13:17 [Info] start rtap process success, pid is 2616, argument is Rtap272871752318797
2025-07-12 19:13:17 [Info] New ClientConnectNotify : Rtap272871752318797, id is 00000504
2025-07-12 19:13:18 [Info] ipc client:Rtap272871752318797 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-12 19:13:18 [Info] Rtap Platform Rtap272871752318797 execv work --secnet_rasp_agent on pid 2616
2025-07-12 19:13:20 [Info] csrss.exe open proc 2616 AliSecCheck.ex
2025-07-12 19:13:21 [Info] csrss.exe open thread 2616 AliSecCheck.ex
2025-07-12 19:13:22 [Info] csrss.exe open thread 2616 AliSecCheck.ex
2025-07-12 19:13:25 [Info] Done Work --secnet_rasp_agent:1
2025-07-12 19:13:25 [Info] Rtap Platform Rtap272871752318797 Exit:normal exit
2025-07-12 19:13:27 [Info] ClientDisConnectNotify : Rtap272871752318797, id is 00000504
2025-07-12 19:25:32 [Info] TotalPhys:2047,AvailPhys:506,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1412,SelfWorkingSet:11088, SelfPageFile:13556
2025-07-12 19:25:32 [Info] CommitTotal:4961,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:506,SystemCache:448,KernelTotal:247,KernelPaged:181,KernelNonpaged:66,PageSize:4096,HandleCount:26607,ProcessCount:53,ThreadCount:744
2025-07-12 19:57:44 [Info] get meta data success by v2
2025-07-12 19:57:44 [Info] get empty metaserver config
2025-07-12 19:57:44 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-12 19:57:44 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-12 19:57:44 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-12 19:57:44 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-12 19:57:44 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 19:57:44 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 19:57:44 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-12 19:57:44 [Info] download cert compare md5 same
2025-07-12 19:57:44 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 19:57:44 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 19:57:44 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-12 20:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11063","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"11224","aliyundun_upload_time":"1752322137","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-07-12 20:26:32 [Info] TotalPhys:2047,AvailPhys:455,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1405,SelfWorkingSet:11112, SelfPageFile:13484
2025-07-12 20:26:32 [Info] CommitTotal:4968,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:455,SystemCache:440,KernelTotal:250,KernelPaged:182,KernelNonpaged:68,PageSize:4096,HandleCount:26617,ProcessCount:53,ThreadCount:754
2025-07-12 21:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11128","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"11244","aliyundun_upload_time":"1752325727","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 21:27:29 [Info] TotalPhys:2047,AvailPhys:385,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1318,SelfWorkingSet:11012, SelfPageFile:13268
2025-07-12 21:27:29 [Info] CommitTotal:5055,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:385,SystemCache:393,KernelTotal:252,KernelPaged:183,KernelNonpaged:69,PageSize:4096,HandleCount:26940,ProcessCount:54,ThreadCount:748
2025-07-12 22:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11101","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"11212","aliyundun_upload_time":"1752329332","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 22:28:25 [Info] TotalPhys:2047,AvailPhys:375,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1299,SelfWorkingSet:11220, SelfPageFile:13548
2025-07-12 22:28:25 [Info] CommitTotal:5073,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:375,SystemCache:371,KernelTotal:251,KernelPaged:182,KernelNonpaged:69,PageSize:4096,HandleCount:26675,ProcessCount:53,ThreadCount:743
2025-07-12 23:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11140","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"11232","aliyundun_upload_time":"1752332938","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-12 23:15:30 [Info] get meta data success by v2
2025-07-12 23:15:30 [Info] get empty metaserver config
2025-07-12 23:15:30 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-12 23:15:30 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-12 23:15:30 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-12 23:15:30 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-12 23:15:30 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 23:15:30 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-12 23:15:30 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-12 23:15:30 [Info] download cert compare md5 same
2025-07-12 23:15:30 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 23:15:30 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-12 23:15:30 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-12 23:29:22 [Info] TotalPhys:2047,AvailPhys:368,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6373,AvailPageFile:1293,SelfWorkingSet:11076, SelfPageFile:13396
2025-07-12 23:29:22 [Info] CommitTotal:5080,CommitLimit:6373,CommitPeak:5741,PhysicalTotal:2047,PhysicalAvailable:368,SystemCache:360,KernelTotal:251,KernelPaged:182,KernelNonpaged:69,PageSize:4096,HandleCount:26644,ProcessCount:53,ThreadCount:743
2025-07-13 00:09:04 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"11094","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"11208","aliyundun_upload_time":"1752336544","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-13 00:21:15 [Info] nCurrentClock is 360020000, nCurrentTime is 1752337275
2025-07-13 00:21:15 [Info] SendMessage T_MSG_LOGIN
2025-07-13 00:21:16 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-13 00:21:16 [Info] begin to enable self guard after reconnect
2025-07-13 00:21:16 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-13 00:21:16 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-13 00:21:16 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-13 00:21:16 [Info] key : cpu, value : 10
2025-07-13 00:21:16 [Info] key : rio, value : 20480
2025-07-13 00:21:16 [Info] key : wio, value : 20480
2025-07-13 00:21:16 [Info] key : cpu_all, value : 0
2025-07-13 00:21:16 [Info] key : max_pid_check, value : 200
2025-07-13 00:21:16 [Info] key : throw_dump, value : 0
2025-07-13 00:21:16 [Info] key : hash_mode, value : 1
2025-07-13 00:21:16 [Info] key : mem, value : 200
2025-07-13 00:21:16 [Info] can not find key max_fd in online conf
2025-07-13 00:21:16 [Info] key : proc_limit, value : 1
2025-07-13 00:21:16 [Info] key : resource_limit_mode, value : 3
2025-07-13 00:21:16 [Info] key : rtap_update_mode, value : 1
2025-07-13 00:21:16 [Info] can not find key debug in online conf
2025-07-13 00:21:16 [Info] can not find key update_mode in online conf
2025-07-13 00:21:16 [Info] can not find key http_mode in online conf
2025-07-13 00:21:16 [Info] can not find key rtap_enable in online conf
2025-07-13 00:21:16 [Info] can not find key rtap_new_agent in online conf
2025-07-13 00:21:16 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-13 00:21:16 [Info] can not find key mem_low_mark in online conf
2025-07-13 00:21:16 [Info] can not find key obnormal_report_interval in online conf
2025-07-13 00:21:16 [Info] key : cache_mode, value : 0
2025-07-13 00:21:16 [Info] key : abnormal_monitor_mode, value : 3
2025-07-13 00:21:16 [Info] key : queue_size_ratio, value : 80
2025-07-13 00:21:16 [Info] queue_size_ratio is 80
2025-07-13 00:21:16 [Info] resource limit mode and max limit cpu is not change
2025-07-13 00:21:16 [Info] set hash mode 1
2025-07-13 00:21:16 [Info] RTAP timeout config:9600000
2025-07-13 00:21:16 [Info] self_guard_mode config is 0
2025-07-13 00:21:16 [Info] GetMessage : T_MSG_CHECK
2025-07-13 00:21:16 [Info] task 89960ef2-ab04-4fcc-9a74-a661475f85b6 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-13 00:21:27 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-13 00:21:27 [Info] ipc client:Rtap221311752337287_handler Reg client_name:Rtap221311752337287 on WhiteList
2025-07-13 00:21:27 [Info] start rtap process success, pid is 2024, argument is Rtap221311752337287
2025-07-13 00:21:27 [Info] New ClientConnectNotify : Rtap221311752337287, id is 000001E4
2025-07-13 00:21:27 [Info] ipc client:Rtap221311752337287 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 00:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9663","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9904","aliyundun_upload_time":"1752854940","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 00:45:24 [Info] TotalPhys:2047,AvailPhys:503,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1456,SelfWorkingSet:9724, SelfPageFile:13684
2025-07-19 00:45:24 [Info] CommitTotal:5138,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:503,SystemCache:378,KernelTotal:256,KernelPaged:182,KernelNonpaged:73,PageSize:4096,HandleCount:26764,ProcessCount:52,ThreadCount:734
2025-07-19 01:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9754","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9852","aliyundun_upload_time":"1752858512","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 01:20:34 [Info] GetMessage : T_MSG_CHECK
2025-07-19 01:20:34 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI4NTkyMzQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyOTAyNDM0LCJzdWIiOiJSVEFQX0lEWF8xNTg0OTNfMTc1Mjg1OTIzNDg1OSJ9.uw4fswUFSdPaI4mUQvFd3UZ1jik_zD-cEVpvX0hk6ro has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 01:20:46 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 01:20:46 [Info] ipc client:Rtap226941752859246_handler Reg client_name:Rtap226941752859246 on WhiteList
2025-07-19 01:20:46 [Info] start rtap process success, pid is 2648, argument is Rtap226941752859246
2025-07-19 01:20:46 [Info] New ClientConnectNotify : Rtap226941752859246, id is 000001E4
2025-07-19 01:20:46 [Info] ipc client:Rtap226941752859246 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 01:20:46 [Info] Rtap Platform Rtap226941752859246 execv work --sca on pid 2648
2025-07-19 01:20:47 [Info] csrss.exe open proc 2648 AliSecCheck.ex
2025-07-19 01:20:48 [Info] csrss.exe open thread 2648 AliSecCheck.ex
2025-07-19 01:21:29 [Info] csrss.exe open thread 2648 AliSecCheck.ex
2025-07-19 01:21:50 [Info] Done Work --sca:1
2025-07-19 01:21:50 [Info] Rtap Platform Rtap226941752859246 Exit:normal exit
2025-07-19 01:21:53 [Info] ClientDisConnectNotify : Rtap226941752859246, id is 000001E4
2025-07-19 01:46:20 [Info] TotalPhys:2047,AvailPhys:505,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1458,SelfWorkingSet:9700, SelfPageFile:13444
2025-07-19 01:46:20 [Info] CommitTotal:5136,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:505,SystemCache:409,KernelTotal:256,KernelPaged:183,KernelNonpaged:73,PageSize:4096,HandleCount:26772,ProcessCount:52,ThreadCount:736
2025-07-19 02:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9684","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9776","aliyundun_upload_time":"1752862131","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 02:47:16 [Info] TotalPhys:2047,AvailPhys:496,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1457,SelfWorkingSet:9648, SelfPageFile:13360
2025-07-19 02:47:16 [Info] CommitTotal:5137,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:496,SystemCache:423,KernelTotal:256,KernelPaged:183,KernelNonpaged:73,PageSize:4096,HandleCount:26754,ProcessCount:52,ThreadCount:737
2025-07-19 03:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9649","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9692","aliyundun_upload_time":"1752865737","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 03:21:20 [Info] get meta data success by v2
2025-07-19 03:21:20 [Info] get empty metaserver config
2025-07-19 03:21:20 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-19 03:21:20 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-19 03:21:20 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-19 03:21:20 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-19 03:21:20 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 03:21:20 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 03:21:21 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-19 03:21:21 [Info] download cert compare md5 same
2025-07-19 03:21:21 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 03:21:21 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 03:21:21 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-19 03:48:13 [Info] TotalPhys:2047,AvailPhys:495,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1453,SelfWorkingSet:9704, SelfPageFile:13496
2025-07-19 03:48:13 [Info] CommitTotal:5142,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:495,SystemCache:425,KernelTotal:256,KernelPaged:183,KernelNonpaged:72,PageSize:4096,HandleCount:26761,ProcessCount:52,ThreadCount:733
2025-07-19 04:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9707","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9832","aliyundun_upload_time":"1752869343","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 04:27:03 [Info] nCurrentClock is 846041700, nCurrentTime is 1752870423
2025-07-19 04:27:03 [Info] SendMessage T_MSG_LOGIN
2025-07-19 04:27:03 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-19 04:27:04 [Info] begin to enable self guard after reconnect
2025-07-19 04:27:04 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-19 04:27:04 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-19 04:27:04 [Info] GetMessage : T_MSG_CHECK
2025-07-19 04:27:04 [Info] task cf193068-4b99-4f50-8ff7-64e8e3a74205 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 04:27:12 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-19 04:27:12 [Info] key : cpu, value : 10
2025-07-19 04:27:12 [Info] key : rio, value : 20480
2025-07-19 04:27:12 [Info] key : wio, value : 20480
2025-07-19 04:27:12 [Info] key : cpu_all, value : 0
2025-07-19 04:27:12 [Info] key : max_pid_check, value : 200
2025-07-19 04:27:12 [Info] key : throw_dump, value : 0
2025-07-19 04:27:12 [Info] key : hash_mode, value : 1
2025-07-19 04:27:12 [Info] key : mem, value : 200
2025-07-19 04:27:12 [Info] can not find key max_fd in online conf
2025-07-19 04:27:12 [Info] key : proc_limit, value : 1
2025-07-19 04:27:12 [Info] key : resource_limit_mode, value : 3
2025-07-19 04:27:12 [Info] key : rtap_update_mode, value : 1
2025-07-19 04:27:12 [Info] can not find key debug in online conf
2025-07-19 04:27:12 [Info] can not find key update_mode in online conf
2025-07-19 04:27:12 [Info] can not find key http_mode in online conf
2025-07-19 04:27:12 [Info] can not find key rtap_enable in online conf
2025-07-19 04:27:12 [Info] can not find key rtap_new_agent in online conf
2025-07-19 04:27:12 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-19 04:27:12 [Info] can not find key mem_low_mark in online conf
2025-07-19 04:27:12 [Info] can not find key obnormal_report_interval in online conf
2025-07-19 04:27:12 [Info] key : cache_mode, value : 0
2025-07-19 04:27:12 [Info] key : abnormal_monitor_mode, value : 3
2025-07-19 04:27:12 [Info] key : queue_size_ratio, value : 80
2025-07-19 04:27:12 [Info] queue_size_ratio is 80
2025-07-19 04:27:12 [Info] resource limit mode and max limit cpu is not change
2025-07-19 04:27:12 [Info] set hash mode 1
2025-07-19 04:27:12 [Info] RTAP timeout config:9600000
2025-07-19 04:27:12 [Info] self_guard_mode config is 0
2025-07-19 04:27:14 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 04:27:14 [Info] ipc client:Rtap264611752870434_handler Reg client_name:Rtap264611752870434 on WhiteList
2025-07-19 04:27:14 [Info] start rtap process success, pid is 3824, argument is Rtap264611752870434
2025-07-19 04:27:14 [Info] New ClientConnectNotify : Rtap264611752870434, id is 0000051C
2025-07-19 04:27:14 [Info] ipc client:Rtap264611752870434 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 04:27:15 [Info] Rtap Platform Rtap264611752870434 execv work --windows-sysinfoext-check on pid 3824
2025-07-19 04:27:16 [Info] csrss.exe open proc 3824 AliSecCheck.ex
2025-07-19 04:27:17 [Info] csrss.exe open thread 3824 AliSecCheck.ex
2025-07-19 04:27:22 [Info] Done Work --windows-sysinfoext-check:1
2025-07-19 04:27:22 [Info] Rtap Platform Rtap264611752870434 Exit:normal exit
2025-07-19 04:27:24 [Info] ClientDisConnectNotify : Rtap264611752870434, id is 0000051C
2025-07-19 04:49:10 [Info] TotalPhys:2047,AvailPhys:496,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1463,SelfWorkingSet:9708, SelfPageFile:13456
2025-07-19 04:49:10 [Info] CommitTotal:5132,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:496,SystemCache:433,KernelTotal:255,KernelPaged:182,KernelNonpaged:73,PageSize:4096,HandleCount:26973,ProcessCount:53,ThreadCount:744
2025-07-19 05:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9703","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9800","aliyundun_upload_time":"1752872917","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 05:50:06 [Info] TotalPhys:2047,AvailPhys:500,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1462,SelfWorkingSet:9648, SelfPageFile:13384
2025-07-19 05:50:06 [Info] CommitTotal:5132,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:500,SystemCache:402,KernelTotal:256,KernelPaged:183,KernelNonpaged:73,PageSize:4096,HandleCount:26765,ProcessCount:52,ThreadCount:727
2025-07-19 06:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9646","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9708","aliyundun_upload_time":"1752876527","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 06:38:30 [Info] get meta data success by v2
2025-07-19 06:38:30 [Info] get empty metaserver config
2025-07-19 06:38:30 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-19 06:38:30 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-19 06:38:30 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-19 06:38:30 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-19 06:38:30 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 06:38:30 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 06:38:30 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-19 06:38:30 [Info] download cert compare md5 same
2025-07-19 06:38:30 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 06:38:30 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 06:38:30 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-19 06:51:02 [Info] TotalPhys:2047,AvailPhys:494,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6595,AvailPageFile:1455,SelfWorkingSet:9784, SelfPageFile:13912
2025-07-19 06:51:02 [Info] CommitTotal:5139,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:494,SystemCache:403,KernelTotal:256,KernelPaged:183,KernelNonpaged:73,PageSize:4096,HandleCount:26755,ProcessCount:52,ThreadCount:733
2025-07-19 07:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9731","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9848","aliyundun_upload_time":"1752880143","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 07:51:59 [Info] TotalPhys:2047,AvailPhys:492,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1456,SelfWorkingSet:9780, SelfPageFile:13800
2025-07-19 07:51:59 [Info] CommitTotal:5139,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:492,SystemCache:404,KernelTotal:255,KernelPaged:182,KernelNonpaged:72,PageSize:4096,HandleCount:26737,ProcessCount:52,ThreadCount:725
2025-07-19 08:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9788","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9832","aliyundun_upload_time":"1752883713","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 08:52:58 [Info] TotalPhys:2047,AvailPhys:448,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1455,SelfWorkingSet:9736, SelfPageFile:13740
2025-07-19 08:52:58 [Info] CommitTotal:5140,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:448,SystemCache:423,KernelTotal:260,KernelPaged:186,KernelNonpaged:74,PageSize:4096,HandleCount:26777,ProcessCount:52,ThreadCount:734
2025-07-19 08:53:03 [Info] GetMessage : T_MSG_CHECK
2025-07-19 08:53:03 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI4ODYzODMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyOTI5NTgzLCJzdWIiOiJSVEFQX0lEWF8xNTg0ODNfMTc1Mjg4NjM4MzY3OCJ9.TWYTi9kZfvOv_FroZyr5VJxU20ubFihwANGDTOieJnw has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 08:53:15 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 08:53:15 [Info] ipc client:Rtap130471752886395_handler Reg client_name:Rtap130471752886395 on WhiteList
2025-07-19 08:53:15 [Info] start rtap process success, pid is 4772, argument is Rtap130471752886395
2025-07-19 08:53:15 [Info] New ClientConnectNotify : Rtap130471752886395, id is 00000504
2025-07-19 08:53:15 [Info] ipc client:Rtap130471752886395 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 08:53:16 [Info] Rtap Platform Rtap130471752886395 execv work --windows-process-check on pid 4772
2025-07-19 08:53:16 [Info] csrss.exe open proc 4772 AliSecCheck.ex
2025-07-19 08:53:17 [Info] csrss.exe open thread 4772 AliSecCheck.ex
2025-07-19 08:53:39 [Info] Done Work --windows-process-check:1
2025-07-19 08:53:39 [Info] Rtap Platform Rtap130471752886395 Exit:normal exit
2025-07-19 08:53:41 [Info] ClientDisConnectNotify : Rtap130471752886395, id is 00000504
2025-07-19 09:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9742","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9816","aliyundun_upload_time":"1752887341","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 09:53:56 [Info] TotalPhys:2047,AvailPhys:448,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1453,SelfWorkingSet:9704, SelfPageFile:13712
2025-07-19 09:53:56 [Info] CommitTotal:5141,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:448,SystemCache:402,KernelTotal:266,KernelPaged:188,KernelNonpaged:77,PageSize:4096,HandleCount:26761,ProcessCount:52,ThreadCount:731
2025-07-19 09:56:40 [Info] get meta data success by v2
2025-07-19 09:56:40 [Info] get empty metaserver config
2025-07-19 09:56:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-19 09:56:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-19 09:56:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-19 09:56:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-19 09:56:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 09:56:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 09:56:40 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-19 09:56:40 [Info] download cert compare md5 same
2025-07-19 09:56:40 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 09:56:40 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 09:56:40 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-19 09:56:41 [Info] nCurrentClock is 864042600, nCurrentTime is 1752890201
2025-07-19 09:56:41 [Info] SendMessage T_MSG_LOGIN
2025-07-19 09:56:41 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-19 09:56:41 [Info] begin to enable self guard after reconnect
2025-07-19 09:56:41 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-19 09:56:41 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-19 09:56:41 [Info] GetMessage : T_MSG_CHECK
2025-07-19 09:56:41 [Info] task 19092a34-67fd-436e-a3b9-a7ca392b4d54 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 09:56:49 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-19 09:56:49 [Info] key : cpu, value : 10
2025-07-19 09:56:49 [Info] key : rio, value : 20480
2025-07-19 09:56:49 [Info] key : wio, value : 20480
2025-07-19 09:56:49 [Info] key : cpu_all, value : 0
2025-07-19 09:56:49 [Info] key : max_pid_check, value : 200
2025-07-19 09:56:49 [Info] key : throw_dump, value : 0
2025-07-19 09:56:49 [Info] key : hash_mode, value : 1
2025-07-19 09:56:49 [Info] key : mem, value : 200
2025-07-19 09:56:49 [Info] can not find key max_fd in online conf
2025-07-19 09:56:49 [Info] key : proc_limit, value : 1
2025-07-19 09:56:49 [Info] key : resource_limit_mode, value : 3
2025-07-19 09:56:49 [Info] key : rtap_update_mode, value : 1
2025-07-19 09:56:49 [Info] can not find key debug in online conf
2025-07-19 09:56:49 [Info] can not find key update_mode in online conf
2025-07-19 09:56:49 [Info] can not find key http_mode in online conf
2025-07-19 09:56:49 [Info] can not find key rtap_enable in online conf
2025-07-19 09:56:49 [Info] can not find key rtap_new_agent in online conf
2025-07-19 09:56:49 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-19 09:56:49 [Info] can not find key mem_low_mark in online conf
2025-07-19 09:56:49 [Info] can not find key obnormal_report_interval in online conf
2025-07-19 09:56:49 [Info] key : cache_mode, value : 0
2025-07-19 09:56:49 [Info] key : abnormal_monitor_mode, value : 3
2025-07-19 09:56:49 [Info] key : queue_size_ratio, value : 80
2025-07-19 09:56:49 [Info] queue_size_ratio is 80
2025-07-19 09:56:49 [Info] resource limit mode and max limit cpu is not change
2025-07-19 09:56:49 [Info] set hash mode 1
2025-07-19 09:56:49 [Info] RTAP timeout config:9600000
2025-07-19 09:56:49 [Info] self_guard_mode config is 0
2025-07-19 09:56:50 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 09:56:50 [Info] ipc client:Rtap255051752890210_handler Reg client_name:Rtap255051752890210 on WhiteList
2025-07-19 09:56:50 [Info] start rtap process success, pid is 4980, argument is Rtap255051752890210
2025-07-19 09:56:51 [Info] New ClientConnectNotify : Rtap255051752890210, id is 0000053C
2025-07-19 09:56:51 [Info] Rtap Platform Rtap255051752890210 execv work --windows-sysinfoext-check on pid 4980
2025-07-19 09:56:52 [Info] ipc client:Rtap255051752890210 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 09:56:52 [Info] csrss.exe open proc 4980 AliSecCheck.ex
2025-07-19 09:56:53 [Info] csrss.exe open thread 4980 AliSecCheck.ex
2025-07-19 09:56:58 [Info] Done Work --windows-sysinfoext-check:1
2025-07-19 09:56:58 [Info] Rtap Platform Rtap255051752890210 Exit:normal exit
2025-07-19 09:57:01 [Info] ClientDisConnectNotify : Rtap255051752890210, id is 0000053C
2025-07-19 09:59:40 [Info] GetMessage : T_MSG_CHECK
2025-07-19 09:59:40 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI4OTAzODAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyOTMzNTgwLCJzdWIiOiJSVEFQX0lEWF8xNTg0ODRfMTc1Mjg5MDM4MDI4OCJ9.CeyroaFWfXKShBdRnwD3fpu55COitxqdQTS7vtvQ7So has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 09:59:50 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 09:59:50 [Info] ipc client:Rtap260931752890390_handler Reg client_name:Rtap260931752890390 on WhiteList
2025-07-19 09:59:50 [Info] start rtap process success, pid is 4352, argument is Rtap260931752890390
2025-07-19 09:59:50 [Info] New ClientConnectNotify : Rtap260931752890390, id is 000001E4
2025-07-19 09:59:50 [Info] ipc client:Rtap260931752890390 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 09:59:50 [Info] Rtap Platform Rtap260931752890390 execv work --tcp-connect-check on pid 4352
2025-07-19 09:59:51 [Info] csrss.exe open proc 4352 AliSecCheck.ex
2025-07-19 09:59:52 [Info] csrss.exe open thread 4352 AliSecCheck.ex
2025-07-19 10:00:01 [Info] Done Work --tcp-connect-check:1
2025-07-19 10:00:01 [Info] Rtap Platform Rtap260931752890390 Exit:normal exit
2025-07-19 10:00:04 [Info] ClientDisConnectNotify : Rtap260931752890390, id is 000001E4
2025-07-19 10:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9718","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"9876","aliyundun_upload_time":"1752890934","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-07-19 10:16:29 [Info] GetMessage : T_MSG_CHECK
2025-07-19 10:16:29 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI4OTEzODksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyOTM0NTg5LCJzdWIiOiJSVEFQX0lEWF8xNTg0OTJfMTc1Mjg5MTM4OTY5MCJ9.Bz6J1LzsBLDT4NGJtgGs5KG_qNSEclsVXOlmQ17BC20 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 10:16:38 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 10:16:38 [Info] ipc client:Rtap293851752891398_handler Reg client_name:Rtap293851752891398 on WhiteList
2025-07-19 10:16:38 [Info] start rtap process success, pid is 3504, argument is Rtap293851752891398
2025-07-19 10:16:38 [Info] New ClientConnectNotify : Rtap293851752891398, id is 000004D8
2025-07-19 10:16:38 [Info] ipc client:Rtap293851752891398 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 10:16:39 [Info] Rtap Platform Rtap293851752891398 execv work --windows-registry-check on pid 3504
2025-07-19 10:16:39 [Info] GetMessage : T_MSG_CHECK
2025-07-19 10:16:39 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI4OTEzOTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyOTM0NTk5LCJzdWIiOiJSVEFQX0lEWF8xNTg0ODZfMTc1Mjg5MTM5OTMyNSJ9.iVEm-ZMlksoM1ayLJSplMof96a-GapnV5megDgsHTj8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 10:16:41 [Info] csrss.exe open proc 3504 AliSecCheck.ex
2025-07-19 10:16:42 [Info] csrss.exe open thread 3504 AliSecCheck.ex
2025-07-19 10:16:52 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 10:16:52 [Info] ipc client:Rtap294301752891412_handler Reg client_name:Rtap294301752891412 on WhiteList
2025-07-19 10:16:52 [Info] start rtap process success, pid is 4044, argument is Rtap294301752891412
2025-07-19 10:16:52 [Info] New ClientConnectNotify : Rtap294301752891412, id is 0000053C
2025-07-19 10:16:52 [Info] ipc client:Rtap294301752891412 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 10:16:52 [Info] Rtap Platform Rtap294301752891412 execv work --windows-schedule-task-check on pid 4044
2025-07-19 10:16:54 [Info] csrss.exe open proc 4044 AliSecCheck.ex
2025-07-19 10:16:55 [Info] csrss.exe open thread 4044 AliSecCheck.ex
2025-07-19 10:17:16 [Info] Done Work --windows-registry-check:1
2025-07-19 10:17:16 [Info] Rtap Platform Rtap293851752891398 Exit:normal exit
2025-07-19 10:17:18 [Info] ClientDisConnectNotify : Rtap293851752891398, id is 000004D8
2025-07-19 10:17:30 [Info] Done Work --windows-schedule-task-check:1
2025-07-19 10:17:30 [Info] Rtap Platform Rtap294301752891412 Exit:normal exit
2025-07-19 10:17:32 [Info] ClientDisConnectNotify : Rtap294301752891412, id is 0000053C
2025-07-19 10:18:45 [Info] GetMessage : T_MSG_CHECK
2025-07-19 10:18:45 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI4OTE1MjUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyOTM0NzI1LCJzdWIiOiJSVEFQX0lEWF8xNTg1MDBfMTc1Mjg5MTUyNTc1NCJ9.YvNcxyeRdJJSDYEcDxh0ECwvY3447v7e_qxI7NTGR-4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 10:18:55 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 10:18:55 [Info] ipc client:Rtap298321752891535_handler Reg client_name:Rtap298321752891535 on WhiteList
2025-07-19 10:18:55 [Info] start rtap process success, pid is 3784, argument is Rtap298321752891535
2025-07-19 10:18:55 [Info] New ClientConnectNotify : Rtap298321752891535, id is 000001E4
2025-07-19 10:18:56 [Info] ipc client:Rtap298321752891535 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 10:18:56 [Info] Rtap Platform Rtap298321752891535 execv work --windows-driver-version-check on pid 3784
2025-07-19 10:18:57 [Info] csrss.exe open proc 3784 AliSecCheck.ex
2025-07-19 10:18:58 [Info] csrss.exe open thread 3784 AliSecCheck.ex
2025-07-19 10:19:03 [Info] Done Work --windows-driver-version-check:1
2025-07-19 10:19:03 [Info] Rtap Platform Rtap298321752891535 Exit:normal exit
2025-07-19 10:19:05 [Info] ClientDisConnectNotify : Rtap298321752891535, id is 000001E4
2025-07-19 10:54:56 [Info] TotalPhys:2047,AvailPhys:447,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1457,SelfWorkingSet:9828, SelfPageFile:13796
2025-07-19 10:54:56 [Info] CommitTotal:5138,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:447,SystemCache:411,KernelTotal:265,KernelPaged:188,KernelNonpaged:77,PageSize:4096,HandleCount:26782,ProcessCount:52,ThreadCount:735
2025-07-19 11:05:57 [Info] GetMessage : T_MSG_CHECK
2025-07-19 11:05:57 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI4OTQzNTcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyOTM3NTU3LCJzdWIiOiJSVEFQX0lEWF8xNTg0ODlfMTc1Mjg5NDM1NzM0NyJ9.Gabd7b1iAPUQbeGyDe6qtjKg27Fx7tx7mchG6EorcCs has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 11:06:07 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 11:06:07 [Info] ipc client:Rtap63121752894367_handler Reg client_name:Rtap63121752894367 on WhiteList
2025-07-19 11:06:07 [Info] start rtap process success, pid is 2560, argument is Rtap63121752894367
2025-07-19 11:06:08 [Info] New ClientConnectNotify : Rtap63121752894367, id is 000004B8
2025-07-19 11:06:08 [Info] ipc client:Rtap63121752894367 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 11:06:08 [Info] Rtap Platform Rtap63121752894367 execv work --windows-autorun-item-check on pid 2560
2025-07-19 11:06:09 [Info] csrss.exe open proc 2560 AliSecCheck.ex
2025-07-19 11:06:10 [Info] csrss.exe open thread 2560 AliSecCheck.ex
2025-07-19 11:06:23 [Info] Done Work --windows-autorun-item-check:1
2025-07-19 11:06:23 [Info] Rtap Platform Rtap63121752894367 Exit:normal exit
2025-07-19 11:06:25 [Info] ClientDisConnectNotify : Rtap63121752894367, id is 000004B8
2025-07-19 11:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9815","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10004","aliyundun_upload_time":"1752894518","aliyundun_write_pid_times":"0","ipc_send_count":"153","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 11:55:52 [Info] TotalPhys:2047,AvailPhys:434,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1455,SelfWorkingSet:9836, SelfPageFile:13816
2025-07-19 11:55:52 [Info] CommitTotal:5140,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:434,SystemCache:395,KernelTotal:265,KernelPaged:189,KernelNonpaged:76,PageSize:4096,HandleCount:26767,ProcessCount:52,ThreadCount:732
2025-07-19 12:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9825","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9880","aliyundun_upload_time":"1752898123","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 12:56:49 [Info] TotalPhys:2047,AvailPhys:447,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1455,SelfWorkingSet:9724, SelfPageFile:13484
2025-07-19 12:56:49 [Info] CommitTotal:5140,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:447,SystemCache:387,KernelTotal:268,KernelPaged:191,KernelNonpaged:76,PageSize:4096,HandleCount:26800,ProcessCount:52,ThreadCount:737
2025-07-19 13:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9762","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9884","aliyundun_upload_time":"1752901729","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 13:14:22 [Info] get meta data success by v2
2025-07-19 13:14:22 [Info] get empty metaserver config
2025-07-19 13:14:22 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-19 13:14:22 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-19 13:14:22 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-19 13:14:22 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-19 13:14:22 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 13:14:22 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 13:14:23 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-19 13:14:23 [Info] download cert compare md5 same
2025-07-19 13:14:23 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 13:14:23 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 13:14:23 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-19 13:57:46 [Info] TotalPhys:2047,AvailPhys:287,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1365,SelfWorkingSet:9892, SelfPageFile:13776
2025-07-19 13:57:46 [Info] CommitTotal:5229,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:287,SystemCache:271,KernelTotal:265,KernelPaged:188,KernelNonpaged:76,PageSize:4096,HandleCount:26776,ProcessCount:52,ThreadCount:723
2025-07-19 14:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9842","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9900","aliyundun_upload_time":"1752905338","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 14:58:42 [Info] TotalPhys:2047,AvailPhys:573,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1382,SelfWorkingSet:9724, SelfPageFile:13664
2025-07-19 14:58:42 [Info] CommitTotal:5213,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:573,SystemCache:257,KernelTotal:252,KernelPaged:178,KernelNonpaged:73,PageSize:4096,HandleCount:26951,ProcessCount:52,ThreadCount:728
2025-07-19 15:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9760","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9876","aliyundun_upload_time":"1752908943","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 15:25:47 [Info] nCurrentClock is 882043300, nCurrentTime is 1752909947
2025-07-19 15:25:47 [Info] SendMessage T_MSG_LOGIN
2025-07-19 15:25:47 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-19 15:25:47 [Info] begin to enable self guard after reconnect
2025-07-19 15:25:47 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-19 15:25:47 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-19 15:25:47 [Info] GetMessage : T_MSG_CHECK
2025-07-19 15:25:47 [Info] task 2583329c-bce8-4307-ab3b-4bb6b41dec65 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 15:25:55 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-19 15:25:55 [Info] key : cpu, value : 10
2025-07-19 15:25:55 [Info] key : rio, value : 20480
2025-07-19 15:25:55 [Info] key : wio, value : 20480
2025-07-19 15:25:55 [Info] key : cpu_all, value : 0
2025-07-19 15:25:55 [Info] key : max_pid_check, value : 200
2025-07-19 15:25:55 [Info] key : throw_dump, value : 0
2025-07-19 15:25:55 [Info] key : hash_mode, value : 1
2025-07-19 15:25:55 [Info] key : mem, value : 200
2025-07-19 15:25:55 [Info] can not find key max_fd in online conf
2025-07-19 15:25:55 [Info] key : proc_limit, value : 1
2025-07-19 15:25:55 [Info] key : resource_limit_mode, value : 3
2025-07-19 15:25:55 [Info] key : rtap_update_mode, value : 1
2025-07-19 15:25:55 [Info] can not find key debug in online conf
2025-07-19 15:25:55 [Info] can not find key update_mode in online conf
2025-07-19 15:25:55 [Info] can not find key http_mode in online conf
2025-07-19 15:25:55 [Info] can not find key rtap_enable in online conf
2025-07-19 15:25:55 [Info] can not find key rtap_new_agent in online conf
2025-07-19 15:25:55 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-19 15:25:55 [Info] can not find key mem_low_mark in online conf
2025-07-19 15:25:55 [Info] can not find key obnormal_report_interval in online conf
2025-07-19 15:25:55 [Info] key : cache_mode, value : 0
2025-07-19 15:25:55 [Info] key : abnormal_monitor_mode, value : 3
2025-07-19 15:25:55 [Info] key : queue_size_ratio, value : 80
2025-07-19 15:25:55 [Info] queue_size_ratio is 80
2025-07-19 15:25:55 [Info] resource limit mode and max limit cpu is not change
2025-07-19 15:25:55 [Info] set hash mode 1
2025-07-19 15:25:55 [Info] RTAP timeout config:9600000
2025-07-19 15:25:55 [Info] self_guard_mode config is 0
2025-07-19 15:25:56 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-07-19 15:25:59 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 15:25:59 [Info] ipc client:Rtap244611752909959_handler Reg client_name:Rtap244611752909959 on WhiteList
2025-07-19 15:25:59 [Info] start rtap process success, pid is 3748, argument is Rtap244611752909959
2025-07-19 15:26:00 [Info] New ClientConnectNotify : Rtap244611752909959, id is 000001E4
2025-07-19 15:26:01 [Info] csrss.exe open proc 3748 AliSecCheck.ex
2025-07-19 15:26:01 [Info] ipc client:Rtap244611752909959 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 15:26:01 [Info] Rtap Platform Rtap244611752909959 execv work --windows-sysinfoext-check on pid 3748
2025-07-19 15:26:02 [Info] csrss.exe open thread 3748 AliSecCheck.ex
2025-07-19 15:26:03 [Info] csrss.exe open thread 3748 AliSecCheck.ex
2025-07-19 15:26:04 [Info] csrss.exe open thread 3748 AliSecCheck.ex
2025-07-19 15:26:05 [Info] csrss.exe open thread 3748 AliSecCheck.ex
2025-07-19 15:26:16 [Info] Done Work --windows-sysinfoext-check:1
2025-07-19 15:26:16 [Info] Rtap Platform Rtap244611752909959 Exit:normal exit
2025-07-19 15:26:18 [Info] ClientDisConnectNotify : Rtap244611752909959, id is 000001E4
2025-07-19 15:59:39 [Info] TotalPhys:2047,AvailPhys:557,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1382,SelfWorkingSet:9764, SelfPageFile:13724
2025-07-19 15:59:39 [Info] CommitTotal:5213,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:557,SystemCache:354,KernelTotal:252,KernelPaged:179,KernelNonpaged:73,PageSize:4096,HandleCount:26828,ProcessCount:52,ThreadCount:734
2025-07-19 16:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9755","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9804","aliyundun_upload_time":"1752912516","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 16:31:30 [Info] get meta data success by v2
2025-07-19 16:31:30 [Info] get empty metaserver config
2025-07-19 16:31:30 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-19 16:31:30 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-19 16:31:30 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-19 16:31:30 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-19 16:31:30 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 16:31:30 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 16:31:30 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-19 16:31:30 [Info] download cert compare md5 same
2025-07-19 16:31:30 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 16:31:30 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 16:31:30 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-19 17:00:35 [Info] TotalPhys:2047,AvailPhys:527,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6595,AvailPageFile:1373,SelfWorkingSet:9652, SelfPageFile:13412
2025-07-19 17:00:35 [Info] CommitTotal:5221,CommitLimit:6595,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:527,SystemCache:369,KernelTotal:253,KernelPaged:180,KernelNonpaged:73,PageSize:4096,HandleCount:26820,ProcessCount:52,ThreadCount:727
2025-07-19 17:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9681","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"9812","aliyundun_upload_time":"1752916123","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 18:01:31 [Info] TotalPhys:2047,AvailPhys:1001,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5663,AvailPageFile:1231,SelfWorkingSet:9888, SelfPageFile:13836
2025-07-19 18:01:31 [Info] CommitTotal:4431,CommitLimit:5663,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:1001,SystemCache:19,KernelTotal:249,KernelPaged:176,KernelNonpaged:73,PageSize:4096,HandleCount:26658,ProcessCount:52,ThreadCount:729
2025-07-19 18:08:48 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9795","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"9888","aliyundun_upload_time":"1752919728","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"51","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 19:02:28 [Info] TotalPhys:2047,AvailPhys:1013,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5663,AvailPageFile:1226,SelfWorkingSet:9728, SelfPageFile:13480
2025-07-19 19:02:28 [Info] CommitTotal:4436,CommitLimit:5663,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:1013,SystemCache:34,KernelTotal:249,KernelPaged:176,KernelNonpaged:73,PageSize:4096,HandleCount:26642,ProcessCount:52,ThreadCount:727
2025-07-19 19:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9735","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"9916","aliyundun_upload_time":"1752923312","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"50","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 19:09:01 [Info] GetMessage : T_MSG_CHECK
2025-07-19 19:09:01 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTI5MjMzNDEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUyOTY2NTQxLCJzdWIiOiJSVEFQX0lEWF8xNTg1NTlfMTc1MjkyMzM0MTc0OSJ9.J41rU0wRZ9iNelZ3LjQygI2lBqcPHrCqfOvguo-tXtQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 19:09:10 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 19:09:10 [Info] ipc client:Rtap26551752923350_handler Reg client_name:Rtap26551752923350 on WhiteList
2025-07-19 19:09:10 [Info] start rtap process success, pid is 2896, argument is Rtap26551752923350
2025-07-19 19:09:11 [Info] New ClientConnectNotify : Rtap26551752923350, id is 000004F8
2025-07-19 19:09:11 [Info] Rtap Platform Rtap26551752923350 execv work --secnet_rasp_agent on pid 2896
2025-07-19 19:09:11 [Info] ipc client:Rtap26551752923350 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 19:09:13 [Info] csrss.exe open proc 2896 AliSecCheck.ex
2025-07-19 19:09:14 [Info] csrss.exe open thread 2896 AliSecCheck.ex
2025-07-19 19:09:15 [Info] csrss.exe open thread 2896 AliSecCheck.ex
2025-07-19 19:09:16 [Info] csrss.exe open thread 2896 AliSecCheck.ex
2025-07-19 19:09:17 [Info] csrss.exe open thread 2896 AliSecCheck.ex
2025-07-19 19:09:18 [Info] Done Work --secnet_rasp_agent:1
2025-07-19 19:09:18 [Info] Rtap Platform Rtap26551752923350 Exit:normal exit
2025-07-19 19:09:21 [Info] ClientDisConnectNotify : Rtap26551752923350, id is 000004F8
2025-07-19 19:48:37 [Info] get meta data success by v2
2025-07-19 19:48:37 [Info] get empty metaserver config
2025-07-19 19:48:37 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-19 19:48:37 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-19 19:48:37 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-19 19:48:37 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-19 19:48:37 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 19:48:37 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 19:48:37 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-19 19:48:37 [Info] download cert compare md5 same
2025-07-19 19:48:37 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 19:48:37 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 19:48:37 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-19 20:03:24 [Info] TotalPhys:2047,AvailPhys:850,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:5663,AvailPageFile:1050,SelfWorkingSet:9820, SelfPageFile:13796
2025-07-19 20:03:24 [Info] CommitTotal:4612,CommitLimit:5663,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:850,SystemCache:166,KernelTotal:253,KernelPaged:180,KernelNonpaged:73,PageSize:4096,HandleCount:26721,ProcessCount:52,ThreadCount:734
2025-07-19 20:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9762","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9912","aliyundun_upload_time":"1752926922","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"58","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 20:54:20 [Info] nCurrentClock is 900044000, nCurrentTime is 1752929660
2025-07-19 20:54:20 [Info] SendMessage T_MSG_LOGIN
2025-07-19 20:54:20 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-19 20:54:20 [Info] begin to enable self guard after reconnect
2025-07-19 20:54:21 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-19 20:54:21 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-19 20:54:21 [Info] GetMessage : T_MSG_CHECK
2025-07-19 20:54:21 [Info] task 3570d529-121a-4e6e-8368-ce99f5d8271d has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-19 20:54:29 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-19 20:54:29 [Info] key : cpu, value : 10
2025-07-19 20:54:29 [Info] key : rio, value : 20480
2025-07-19 20:54:29 [Info] key : wio, value : 20480
2025-07-19 20:54:29 [Info] key : cpu_all, value : 0
2025-07-19 20:54:29 [Info] key : max_pid_check, value : 200
2025-07-19 20:54:29 [Info] key : throw_dump, value : 0
2025-07-19 20:54:29 [Info] key : hash_mode, value : 1
2025-07-19 20:54:29 [Info] key : mem, value : 200
2025-07-19 20:54:29 [Info] can not find key max_fd in online conf
2025-07-19 20:54:29 [Info] key : proc_limit, value : 1
2025-07-19 20:54:29 [Info] key : resource_limit_mode, value : 3
2025-07-19 20:54:29 [Info] key : rtap_update_mode, value : 1
2025-07-19 20:54:29 [Info] can not find key debug in online conf
2025-07-19 20:54:29 [Info] can not find key update_mode in online conf
2025-07-19 20:54:29 [Info] can not find key http_mode in online conf
2025-07-19 20:54:29 [Info] can not find key rtap_enable in online conf
2025-07-19 20:54:29 [Info] can not find key rtap_new_agent in online conf
2025-07-19 20:54:29 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-19 20:54:29 [Info] can not find key mem_low_mark in online conf
2025-07-19 20:54:29 [Info] can not find key obnormal_report_interval in online conf
2025-07-19 20:54:29 [Info] key : cache_mode, value : 0
2025-07-19 20:54:29 [Info] key : abnormal_monitor_mode, value : 3
2025-07-19 20:54:29 [Info] key : queue_size_ratio, value : 80
2025-07-19 20:54:29 [Info] queue_size_ratio is 80
2025-07-19 20:54:29 [Info] resource limit mode and max limit cpu is not change
2025-07-19 20:54:29 [Info] set hash mode 1
2025-07-19 20:54:29 [Info] RTAP timeout config:9600000
2025-07-19 20:54:29 [Info] self_guard_mode config is 0
2025-07-19 20:54:32 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-19 20:54:32 [Info] ipc client:Rtap232991752929672_handler Reg client_name:Rtap232991752929672 on WhiteList
2025-07-19 20:54:32 [Info] start rtap process success, pid is 3388, argument is Rtap232991752929672
2025-07-19 20:54:32 [Info] New ClientConnectNotify : Rtap232991752929672, id is 00000540
2025-07-19 20:54:32 [Info] ipc client:Rtap232991752929672 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-19 20:54:33 [Info] Rtap Platform Rtap232991752929672 execv work --windows-sysinfoext-check on pid 3388
2025-07-19 20:54:34 [Info] csrss.exe open proc 3388 AliSecCheck.ex
2025-07-19 20:54:35 [Info] csrss.exe open thread 3388 AliSecCheck.ex
2025-07-19 20:54:44 [Info] Done Work --windows-sysinfoext-check:1
2025-07-19 20:54:44 [Info] Rtap Platform Rtap232991752929672 Exit:normal exit
2025-07-19 20:54:46 [Info] ClientDisConnectNotify : Rtap232991752929672, id is 00000540
2025-07-19 21:04:21 [Info] TotalPhys:2047,AvailPhys:801,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5663,AvailPageFile:1023,SelfWorkingSet:9760, SelfPageFile:13484
2025-07-19 21:04:21 [Info] CommitTotal:4639,CommitLimit:5663,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:801,SystemCache:276,KernelTotal:255,KernelPaged:182,KernelNonpaged:72,PageSize:4096,HandleCount:27056,ProcessCount:54,ThreadCount:740
2025-07-19 21:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9780","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9872","aliyundun_upload_time":"1752930529","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"61","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 22:05:18 [Info] TotalPhys:2047,AvailPhys:780,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5663,AvailPageFile:1003,SelfWorkingSet:9656, SelfPageFile:13360
2025-07-19 22:05:18 [Info] CommitTotal:4659,CommitLimit:5663,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:780,SystemCache:280,KernelTotal:256,KernelPaged:183,KernelNonpaged:73,PageSize:4096,HandleCount:26887,ProcessCount:53,ThreadCount:739
2025-07-19 22:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9685","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9772","aliyundun_upload_time":"1752934134","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"61","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-19 23:05:45 [Info] get meta data success by v2
2025-07-19 23:05:45 [Info] get empty metaserver config
2025-07-19 23:05:45 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-19 23:05:46 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-19 23:05:46 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-19 23:05:46 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-19 23:05:46 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 23:05:46 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-19 23:05:46 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-19 23:05:46 [Info] download cert compare md5 same
2025-07-19 23:05:46 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 23:05:46 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-19 23:05:46 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-19 23:06:14 [Info] TotalPhys:2047,AvailPhys:779,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5663,AvailPageFile:1002,SelfWorkingSet:9876, SelfPageFile:13904
2025-07-19 23:06:14 [Info] CommitTotal:4660,CommitLimit:5663,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:779,SystemCache:287,KernelTotal:255,KernelPaged:182,KernelNonpaged:72,PageSize:4096,HandleCount:26883,ProcessCount:53,ThreadCount:739
2025-07-19 23:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9736","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9876","aliyundun_upload_time":"1752937739","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"61","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-20 00:07:11 [Info] TotalPhys:2047,AvailPhys:761,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5663,AvailPageFile:984,SelfWorkingSet:9832, SelfPageFile:13772
2025-07-20 00:07:11 [Info] CommitTotal:4678,CommitLimit:5663,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:761,SystemCache:295,KernelTotal:256,KernelPaged:183,KernelNonpaged:73,PageSize:4096,HandleCount:26878,ProcessCount:53,ThreadCount:737
2025-07-20 00:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9863","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9908","aliyundun_upload_time":"1752941313","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"63","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 00:21:41 [Info] TotalPhys:2047,AvailPhys:358,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1425,SelfWorkingSet:9900, SelfPageFile:13796
2025-07-26 00:21:41 [Info] CommitTotal:5183,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:358,SystemCache:261,KernelTotal:264,KernelPaged:186,KernelNonpaged:77,PageSize:4096,HandleCount:27195,ProcessCount:53,ThreadCount:734
2025-07-26 00:53:54 [Info] nCurrentClock is 1386069000, nCurrentTime is 1753462434
2025-07-26 00:53:54 [Info] SendMessage T_MSG_LOGIN
2025-07-26 00:53:54 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-26 00:53:54 [Info] begin to enable self guard after reconnect
2025-07-26 00:53:54 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-26 00:53:55 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-26 00:53:55 [Info] GetMessage : T_MSG_CHECK
2025-07-26 00:53:55 [Info] task 07b44c17-01a3-4858-b523-38e349de769d has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 00:54:03 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-26 00:54:03 [Info] key : cpu, value : 10
2025-07-26 00:54:03 [Info] key : rio, value : 20480
2025-07-26 00:54:03 [Info] key : wio, value : 20480
2025-07-26 00:54:03 [Info] key : cpu_all, value : 0
2025-07-26 00:54:03 [Info] key : max_pid_check, value : 200
2025-07-26 00:54:03 [Info] key : throw_dump, value : 0
2025-07-26 00:54:03 [Info] key : hash_mode, value : 1
2025-07-26 00:54:03 [Info] key : mem, value : 200
2025-07-26 00:54:03 [Info] can not find key max_fd in online conf
2025-07-26 00:54:03 [Info] key : proc_limit, value : 1
2025-07-26 00:54:03 [Info] key : resource_limit_mode, value : 3
2025-07-26 00:54:03 [Info] key : rtap_update_mode, value : 1
2025-07-26 00:54:03 [Info] can not find key debug in online conf
2025-07-26 00:54:03 [Info] can not find key update_mode in online conf
2025-07-26 00:54:03 [Info] can not find key http_mode in online conf
2025-07-26 00:54:03 [Info] can not find key rtap_enable in online conf
2025-07-26 00:54:03 [Info] can not find key rtap_new_agent in online conf
2025-07-26 00:54:03 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-26 00:54:03 [Info] can not find key mem_low_mark in online conf
2025-07-26 00:54:03 [Info] can not find key obnormal_report_interval in online conf
2025-07-26 00:54:03 [Info] key : cache_mode, value : 0
2025-07-26 00:54:03 [Info] key : abnormal_monitor_mode, value : 3
2025-07-26 00:54:03 [Info] key : queue_size_ratio, value : 80
2025-07-26 00:54:03 [Info] queue_size_ratio is 80
2025-07-26 00:54:03 [Info] resource limit mode and max limit cpu is not change
2025-07-26 00:54:03 [Info] set hash mode 1
2025-07-26 00:54:03 [Info] RTAP timeout config:9600000
2025-07-26 00:54:03 [Info] self_guard_mode config is 0
2025-07-26 00:54:06 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 00:54:06 [Info] ipc client:Rtap264111753462446_handler Reg client_name:Rtap264111753462446 on WhiteList
2025-07-26 00:54:06 [Info] start rtap process success, pid is 5072, argument is Rtap264111753462446
2025-07-26 00:54:06 [Info] New ClientConnectNotify : Rtap264111753462446, id is 000001E4
2025-07-26 00:54:06 [Info] ipc client:Rtap264111753462446 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 00:54:07 [Info] Rtap Platform Rtap264111753462446 execv work --windows-sysinfoext-check on pid 5072
2025-07-26 00:54:07 [Info] csrss.exe open proc 5072 AliSecCheck.ex
2025-07-26 00:54:08 [Info] csrss.exe open thread 5072 AliSecCheck.ex
2025-07-26 00:54:09 [Info] csrss.exe open thread 5072 AliSecCheck.ex
2025-07-26 00:54:14 [Info] Done Work --windows-sysinfoext-check:1
2025-07-26 00:54:14 [Info] Rtap Platform Rtap264111753462446 Exit:normal exit
2025-07-26 00:54:16 [Info] ClientDisConnectNotify : Rtap264111753462446, id is 000001E4
2025-07-26 01:08:55 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9864","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10024","aliyundun_upload_time":"1753463335","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 01:19:23 [Info] GetMessage : T_MSG_CHECK
2025-07-26 01:19:23 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM0NjM5NjMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNTA3MTYzLCJzdWIiOiJSVEFQX0lEWF8xNTkwMzZfMTc1MzQ2Mzk2Mzg0NiJ9.QJBckTvCQkquZ6_u8FAUp5DfyK-sWPhqwrrPxm_Tv8w has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 01:19:33 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 01:19:33 [Info] ipc client:Rtap313981753463973_handler Reg client_name:Rtap313981753463973 on WhiteList
2025-07-26 01:19:33 [Info] start rtap process success, pid is 4692, argument is Rtap313981753463973
2025-07-26 01:19:33 [Info] New ClientConnectNotify : Rtap313981753463973, id is 000004D8
2025-07-26 01:19:33 [Info] ipc client:Rtap313981753463973 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 01:19:34 [Info] Rtap Platform Rtap313981753463973 execv work --sca on pid 4692
2025-07-26 01:19:35 [Info] csrss.exe open proc 4692 AliSecCheck.ex
2025-07-26 01:19:36 [Info] csrss.exe open thread 4692 AliSecCheck.ex
2025-07-26 01:20:16 [Info] csrss.exe open thread 4692 AliSecCheck.ex
2025-07-26 01:20:38 [Info] Done Work --sca:1
2025-07-26 01:20:38 [Info] Rtap Platform Rtap313981753463973 Exit:normal exit
2025-07-26 01:20:40 [Info] ClientDisConnectNotify : Rtap313981753463973, id is 000004D8
2025-07-26 01:22:37 [Info] TotalPhys:2047,AvailPhys:380,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1430,SelfWorkingSet:10056, SelfPageFile:13900
2025-07-26 01:22:37 [Info] CommitTotal:5178,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:380,SystemCache:226,KernelTotal:264,KernelPaged:186,KernelNonpaged:77,PageSize:4096,HandleCount:27367,ProcessCount:54,ThreadCount:737
2025-07-26 02:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10020","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10072","aliyundun_upload_time":"1753466940","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 02:23:34 [Info] TotalPhys:2047,AvailPhys:381,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1429,SelfWorkingSet:9884, SelfPageFile:13692
2025-07-26 02:23:34 [Info] CommitTotal:5179,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:381,SystemCache:231,KernelTotal:265,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:27206,ProcessCount:53,ThreadCount:737
2025-07-26 03:05:21 [Info] get meta data success by v2
2025-07-26 03:05:21 [Info] get empty metaserver config
2025-07-26 03:05:21 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-26 03:05:22 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-26 03:05:22 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-26 03:05:22 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-26 03:05:22 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 03:05:22 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 03:05:22 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-26 03:05:22 [Info] download cert compare md5 same
2025-07-26 03:05:22 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 03:05:22 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 03:05:22 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-26 03:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9898","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"10056","aliyundun_upload_time":"1753470525","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 03:24:30 [Info] TotalPhys:2047,AvailPhys:381,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1430,SelfWorkingSet:9812, SelfPageFile:13552
2025-07-26 03:24:30 [Info] CommitTotal:5178,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:381,SystemCache:232,KernelTotal:265,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:27234,ProcessCount:53,ThreadCount:742
2025-07-26 04:08:44 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9894","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10012","aliyundun_upload_time":"1753474124","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 04:25:26 [Info] TotalPhys:2047,AvailPhys:368,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1416,SelfWorkingSet:9772, SelfPageFile:13480
2025-07-26 04:25:26 [Info] CommitTotal:5193,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:368,SystemCache:249,KernelTotal:265,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:27204,ProcessCount:53,ThreadCount:734
2025-07-26 05:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9777","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9860","aliyundun_upload_time":"1753477729","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 05:26:23 [Info] TotalPhys:2047,AvailPhys:361,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1411,SelfWorkingSet:9796, SelfPageFile:13500
2025-07-26 05:26:23 [Info] CommitTotal:5197,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:361,SystemCache:225,KernelTotal:265,KernelPaged:188,KernelNonpaged:77,PageSize:4096,HandleCount:27281,ProcessCount:53,ThreadCount:749
2025-07-26 06:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9802","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9952","aliyundun_upload_time":"1753481338","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 06:22:33 [Info] nCurrentClock is 1404069500, nCurrentTime is 1753482153
2025-07-26 06:22:33 [Info] SendMessage T_MSG_LOGIN
2025-07-26 06:22:33 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-26 06:22:33 [Info] begin to enable self guard after reconnect
2025-07-26 06:22:33 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-26 06:22:33 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-26 06:22:33 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-26 06:22:33 [Info] key : cpu, value : 10
2025-07-26 06:22:33 [Info] key : rio, value : 20480
2025-07-26 06:22:33 [Info] key : wio, value : 20480
2025-07-26 06:22:33 [Info] key : cpu_all, value : 0
2025-07-26 06:22:33 [Info] key : max_pid_check, value : 200
2025-07-26 06:22:33 [Info] key : throw_dump, value : 0
2025-07-26 06:22:33 [Info] key : hash_mode, value : 1
2025-07-26 06:22:33 [Info] key : mem, value : 200
2025-07-26 06:22:33 [Info] can not find key max_fd in online conf
2025-07-26 06:22:33 [Info] key : proc_limit, value : 1
2025-07-26 06:22:33 [Info] key : resource_limit_mode, value : 3
2025-07-26 06:22:33 [Info] key : rtap_update_mode, value : 1
2025-07-26 06:22:33 [Info] can not find key debug in online conf
2025-07-26 06:22:33 [Info] can not find key update_mode in online conf
2025-07-26 06:22:33 [Info] can not find key http_mode in online conf
2025-07-26 06:22:33 [Info] can not find key rtap_enable in online conf
2025-07-26 06:22:33 [Info] can not find key rtap_new_agent in online conf
2025-07-26 06:22:33 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-26 06:22:33 [Info] can not find key mem_low_mark in online conf
2025-07-26 06:22:33 [Info] can not find key obnormal_report_interval in online conf
2025-07-26 06:22:33 [Info] key : cache_mode, value : 0
2025-07-26 06:22:33 [Info] key : abnormal_monitor_mode, value : 3
2025-07-26 06:22:33 [Info] key : queue_size_ratio, value : 80
2025-07-26 06:22:33 [Info] queue_size_ratio is 80
2025-07-26 06:22:33 [Info] resource limit mode and max limit cpu is not change
2025-07-26 06:22:33 [Info] set hash mode 1
2025-07-26 06:22:33 [Info] RTAP timeout config:9600000
2025-07-26 06:22:33 [Info] self_guard_mode config is 0
2025-07-26 06:22:33 [Info] GetMessage : T_MSG_CHECK
2025-07-26 06:22:33 [Info] task f051bf66-e65f-4444-9ef1-af50c4ba90e1 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 06:22:37 [Info] get meta data success by v2
2025-07-26 06:22:37 [Info] get empty metaserver config
2025-07-26 06:22:37 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-26 06:22:37 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-26 06:22:37 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-26 06:22:37 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-26 06:22:37 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 06:22:37 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 06:22:37 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-26 06:22:37 [Info] download cert compare md5 same
2025-07-26 06:22:37 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 06:22:37 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 06:22:37 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-26 06:22:46 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 06:22:46 [Info] ipc client:Rtap252721753482166_handler Reg client_name:Rtap252721753482166 on WhiteList
2025-07-26 06:22:46 [Info] start rtap process success, pid is 3772, argument is Rtap252721753482166
2025-07-26 06:22:46 [Info] New ClientConnectNotify : Rtap252721753482166, id is 000001E4
2025-07-26 06:22:46 [Info] ipc client:Rtap252721753482166 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 06:22:46 [Info] Rtap Platform Rtap252721753482166 execv work --windows-sysinfoext-check on pid 3772
2025-07-26 06:22:48 [Info] csrss.exe open proc 3772 AliSecCheck.ex
2025-07-26 06:22:49 [Info] csrss.exe open thread 3772 AliSecCheck.ex
2025-07-26 06:22:53 [Info] Done Work --windows-sysinfoext-check:1
2025-07-26 06:22:53 [Info] Rtap Platform Rtap252721753482166 Exit:normal exit
2025-07-26 06:22:56 [Info] ClientDisConnectNotify : Rtap252721753482166, id is 000001E4
2025-07-26 06:27:19 [Info] TotalPhys:2047,AvailPhys:382,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6609,AvailPageFile:1428,SelfWorkingSet:9932, SelfPageFile:13912
2025-07-26 06:27:19 [Info] CommitTotal:5180,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:382,SystemCache:228,KernelTotal:265,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:27412,ProcessCount:54,ThreadCount:754
2025-07-26 07:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9865","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10184","aliyundun_upload_time":"1753484912","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 07:28:16 [Info] TotalPhys:2047,AvailPhys:391,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1408,SelfWorkingSet:9804, SelfPageFile:13516
2025-07-26 07:28:16 [Info] CommitTotal:5200,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:391,SystemCache:191,KernelTotal:264,KernelPaged:186,KernelNonpaged:77,PageSize:4096,HandleCount:27222,ProcessCount:53,ThreadCount:740
2025-07-26 08:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9764","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9820","aliyundun_upload_time":"1753488518","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 08:29:14 [Info] TotalPhys:2047,AvailPhys:381,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1417,SelfWorkingSet:9704, SelfPageFile:13448
2025-07-26 08:29:14 [Info] CommitTotal:5191,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:381,SystemCache:218,KernelTotal:265,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:27206,ProcessCount:53,ThreadCount:737
2025-07-26 08:52:40 [Info] GetMessage : T_MSG_CHECK
2025-07-26 08:52:40 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM0OTExNjAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNTM0MzYwLCJzdWIiOiJSVEFQX0lEWF8xNTkwMjZfMTc1MzQ5MTE2MDIxNyJ9.bdLfgmHEOZJYbO4rPPE91oD9p5n_2xo33L1ZeP8m6pU has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 08:52:51 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 08:52:51 [Info] ipc client:Rtap219111753491171_handler Reg client_name:Rtap219111753491171 on WhiteList
2025-07-26 08:52:51 [Info] start rtap process success, pid is 4840, argument is Rtap219111753491171
2025-07-26 08:52:52 [Info] New ClientConnectNotify : Rtap219111753491171, id is 00000540
2025-07-26 08:52:52 [Info] ipc client:Rtap219111753491171 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 08:52:52 [Info] Rtap Platform Rtap219111753491171 execv work --windows-process-check on pid 4840
2025-07-26 08:52:53 [Info] csrss.exe open proc 4840 AliSecCheck.ex
2025-07-26 08:52:54 [Info] csrss.exe open thread 4840 AliSecCheck.ex
2025-07-26 08:53:15 [Info] Done Work --windows-process-check:1
2025-07-26 08:53:15 [Info] Rtap Platform Rtap219111753491171 Exit:normal exit
2025-07-26 08:53:18 [Info] ClientDisConnectNotify : Rtap219111753491171, id is 00000540
2025-07-26 09:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9756","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9836","aliyundun_upload_time":"1753492114","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 09:30:15 [Info] TotalPhys:2047,AvailPhys:348,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1405,SelfWorkingSet:9856, SelfPageFile:13692
2025-07-26 09:30:15 [Info] CommitTotal:5203,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:348,SystemCache:239,KernelTotal:265,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:27244,ProcessCount:53,ThreadCount:742
2025-07-26 09:40:48 [Info] get meta data success by v2
2025-07-26 09:40:48 [Info] get empty metaserver config
2025-07-26 09:40:48 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-26 09:40:48 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-26 09:40:48 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-26 09:40:48 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-26 09:40:48 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 09:40:48 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 09:40:48 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-26 09:40:48 [Info] download cert compare md5 same
2025-07-26 09:40:48 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 09:40:48 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 09:40:48 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-26 09:59:59 [Info] GetMessage : T_MSG_CHECK
2025-07-26 09:59:59 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM0OTUxOTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNTM4Mzk5LCJzdWIiOiJSVEFQX0lEWF8xNTkwMjdfMTc1MzQ5NTE5OTA0MCJ9.nOteCdeiym_2la2t3AhQPzyTexvIH_FUFhV7E-mlkXI has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 10:00:11 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 10:00:11 [Info] ipc client:Rtap23361753495211_handler Reg client_name:Rtap23361753495211 on WhiteList
2025-07-26 10:00:11 [Info] start rtap process success, pid is 3436, argument is Rtap23361753495211
2025-07-26 10:00:11 [Info] New ClientConnectNotify : Rtap23361753495211, id is 0000053C
2025-07-26 10:00:11 [Info] ipc client:Rtap23361753495211 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 10:00:12 [Info] Rtap Platform Rtap23361753495211 execv work --tcp-connect-check on pid 3436
2025-07-26 10:00:13 [Info] csrss.exe open proc 3436 AliSecCheck.ex
2025-07-26 10:00:14 [Info] csrss.exe open thread 3436 AliSecCheck.ex
2025-07-26 10:00:23 [Info] Done Work --tcp-connect-check:1
2025-07-26 10:00:23 [Info] Rtap Platform Rtap23361753495211 Exit:normal exit
2025-07-26 10:00:25 [Info] ClientDisConnectNotify : Rtap23361753495211, id is 0000053C
2025-07-26 10:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9892","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9984","aliyundun_upload_time":"1753495726","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 10:16:23 [Info] GetMessage : T_MSG_CHECK
2025-07-26 10:16:23 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM0OTYxODMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNTM5MzgzLCJzdWIiOiJSVEFQX0lEWF8xNTkwMjlfMTc1MzQ5NjE4MzA1OSJ9._9M949hxoXaWPnLeugYPNnn8-3Jxo1T-ndH05rzysq8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 10:16:31 [Info] GetMessage : T_MSG_CHECK
2025-07-26 10:16:31 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM0OTYxODksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNTM5Mzg5LCJzdWIiOiJSVEFQX0lEWF8xNTkwMzVfMTc1MzQ5NjE4OTkwOCJ9.0Ur05UFW74DMqv5TzK7bWIO9KkRQIKRxo1WdRX7ZY0w has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 10:16:34 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 10:16:34 [Info] ipc client:Rtap55461753496194_handler Reg client_name:Rtap55461753496194 on WhiteList
2025-07-26 10:16:34 [Info] start rtap process success, pid is 4624, argument is Rtap55461753496194
2025-07-26 10:16:34 [Info] New ClientConnectNotify : Rtap55461753496194, id is 000001E4
2025-07-26 10:16:34 [Info] ipc client:Rtap55461753496194 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 10:16:34 [Info] Rtap Platform Rtap55461753496194 execv work --windows-schedule-task-check on pid 4624
2025-07-26 10:16:35 [Info] csrss.exe open proc 4624 AliSecCheck.ex
2025-07-26 10:16:36 [Info] csrss.exe open thread 4624 AliSecCheck.ex
2025-07-26 10:16:43 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 10:16:43 [Info] ipc client:Rtap55751753496203_handler Reg client_name:Rtap55751753496203 on WhiteList
2025-07-26 10:16:43 [Info] start rtap process success, pid is 336, argument is Rtap55751753496203
2025-07-26 10:16:43 [Info] New ClientConnectNotify : Rtap55751753496203, id is 00000504
2025-07-26 10:16:43 [Info] ipc client:Rtap55751753496203 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 10:16:44 [Info] Rtap Platform Rtap55751753496203 execv work --windows-registry-check on pid 336
2025-07-26 10:16:45 [Info] csrss.exe open proc 336 AliSecCheck.ex
2025-07-26 10:16:46 [Info] csrss.exe open thread 336 AliSecCheck.ex
2025-07-26 10:17:11 [Info] Done Work --windows-schedule-task-check:1
2025-07-26 10:17:11 [Info] Rtap Platform Rtap55461753496194 Exit:normal exit
2025-07-26 10:17:13 [Info] ClientDisConnectNotify : Rtap55461753496194, id is 000001E4
2025-07-26 10:17:17 [Info] Done Work --windows-registry-check:1
2025-07-26 10:17:17 [Info] Rtap Platform Rtap55751753496203 Exit:normal exit
2025-07-26 10:17:19 [Info] ClientDisConnectNotify : Rtap55751753496203, id is 00000504
2025-07-26 10:18:03 [Info] GetMessage : T_MSG_CHECK
2025-07-26 10:18:03 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM0OTYyODIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNTM5NDgyLCJzdWIiOiJSVEFQX0lEWF8xNTkwNDNfMTc1MzQ5NjI4Mjk0OSJ9.YDYcptwv-UtY1bk7gjA86DbcKwLyNEiS5Szf3P4uspk has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 10:18:14 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 10:18:14 [Info] ipc client:Rtap58731753496294_handler Reg client_name:Rtap58731753496294 on WhiteList
2025-07-26 10:18:14 [Info] start rtap process success, pid is 4556, argument is Rtap58731753496294
2025-07-26 10:18:14 [Info] New ClientConnectNotify : Rtap58731753496294, id is 000004D8
2025-07-26 10:18:14 [Info] ipc client:Rtap58731753496294 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 10:18:15 [Info] Rtap Platform Rtap58731753496294 execv work --windows-driver-version-check on pid 4556
2025-07-26 10:18:17 [Info] csrss.exe open proc 4556 AliSecCheck.ex
2025-07-26 10:18:18 [Info] csrss.exe open thread 4556 AliSecCheck.ex
2025-07-26 10:18:22 [Info] Done Work --windows-driver-version-check:1
2025-07-26 10:18:22 [Info] Rtap Platform Rtap58731753496294 Exit:normal exit
2025-07-26 10:18:24 [Info] ClientDisConnectNotify : Rtap58731753496294, id is 000004D8
2025-07-26 10:31:11 [Info] TotalPhys:2047,AvailPhys:350,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1414,SelfWorkingSet:10072, SelfPageFile:13964
2025-07-26 10:31:11 [Info] CommitTotal:5194,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:350,SystemCache:232,KernelTotal:265,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:27216,ProcessCount:53,ThreadCount:737
2025-07-26 11:05:59 [Info] GetMessage : T_MSG_CHECK
2025-07-26 11:05:59 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM0OTkxNTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNTQyMzU5LCJzdWIiOiJSVEFQX0lEWF8xNTkwMzJfMTc1MzQ5OTE1OTI1NyJ9.1OiqBXSyWiuTv7a-QZr2LHouO9nmKDjkM0aBCYAE2Ss has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 11:06:10 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 11:06:10 [Info] ipc client:Rtap152641753499170_handler Reg client_name:Rtap152641753499170 on WhiteList
2025-07-26 11:06:10 [Info] start rtap process success, pid is 3828, argument is Rtap152641753499170
2025-07-26 11:06:10 [Info] New ClientConnectNotify : Rtap152641753499170, id is 00000504
2025-07-26 11:06:10 [Info] ipc client:Rtap152641753499170 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 11:06:10 [Info] Rtap Platform Rtap152641753499170 execv work --windows-autorun-item-check on pid 3828
2025-07-26 11:06:12 [Info] csrss.exe open proc 3828 AliSecCheck.ex
2025-07-26 11:06:13 [Info] csrss.exe open thread 3828 AliSecCheck.ex
2025-07-26 11:06:25 [Info] Done Work --windows-autorun-item-check:1
2025-07-26 11:06:25 [Info] Rtap Platform Rtap152641753499170 Exit:normal exit
2025-07-26 11:06:27 [Info] ClientDisConnectNotify : Rtap152641753499170, id is 00000504
2025-07-26 11:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9978","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10108","aliyundun_upload_time":"1753499332","aliyundun_write_pid_times":"0","ipc_send_count":"156","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 11:32:07 [Info] TotalPhys:2047,AvailPhys:348,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1414,SelfWorkingSet:9880, SelfPageFile:13496
2025-07-26 11:32:07 [Info] CommitTotal:5194,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:348,SystemCache:238,KernelTotal:264,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:27250,ProcessCount:53,ThreadCount:739
2025-07-26 11:52:13 [Info] nCurrentClock is 1422070000, nCurrentTime is 1753501933
2025-07-26 11:52:13 [Info] SendMessage T_MSG_LOGIN
2025-07-26 11:52:13 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-26 11:52:13 [Info] begin to enable self guard after reconnect
2025-07-26 11:52:13 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-26 11:52:13 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-26 11:52:13 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-26 11:52:13 [Info] key : cpu, value : 10
2025-07-26 11:52:13 [Info] key : rio, value : 20480
2025-07-26 11:52:13 [Info] key : wio, value : 20480
2025-07-26 11:52:13 [Info] key : cpu_all, value : 0
2025-07-26 11:52:13 [Info] key : max_pid_check, value : 200
2025-07-26 11:52:13 [Info] key : throw_dump, value : 0
2025-07-26 11:52:13 [Info] key : hash_mode, value : 1
2025-07-26 11:52:13 [Info] key : mem, value : 200
2025-07-26 11:52:13 [Info] can not find key max_fd in online conf
2025-07-26 11:52:13 [Info] key : proc_limit, value : 1
2025-07-26 11:52:13 [Info] key : resource_limit_mode, value : 3
2025-07-26 11:52:13 [Info] key : rtap_update_mode, value : 1
2025-07-26 11:52:13 [Info] can not find key debug in online conf
2025-07-26 11:52:13 [Info] can not find key update_mode in online conf
2025-07-26 11:52:13 [Info] can not find key http_mode in online conf
2025-07-26 11:52:13 [Info] can not find key rtap_enable in online conf
2025-07-26 11:52:13 [Info] can not find key rtap_new_agent in online conf
2025-07-26 11:52:13 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-26 11:52:13 [Info] can not find key mem_low_mark in online conf
2025-07-26 11:52:13 [Info] can not find key obnormal_report_interval in online conf
2025-07-26 11:52:13 [Info] key : cache_mode, value : 0
2025-07-26 11:52:13 [Info] key : abnormal_monitor_mode, value : 3
2025-07-26 11:52:13 [Info] key : queue_size_ratio, value : 80
2025-07-26 11:52:13 [Info] queue_size_ratio is 80
2025-07-26 11:52:13 [Info] resource limit mode and max limit cpu is not change
2025-07-26 11:52:13 [Info] set hash mode 1
2025-07-26 11:52:13 [Info] RTAP timeout config:9600000
2025-07-26 11:52:13 [Info] self_guard_mode config is 0
2025-07-26 11:52:13 [Info] GetMessage : T_MSG_CHECK
2025-07-26 11:52:13 [Info] task 236e80ee-2ab5-4cfc-9591-5aab19bb626f has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 11:52:22 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-07-26 11:52:25 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 11:52:25 [Info] ipc client:Rtap243261753501945_handler Reg client_name:Rtap243261753501945 on WhiteList
2025-07-26 11:52:25 [Info] start rtap process success, pid is 4048, argument is Rtap243261753501945
2025-07-26 11:52:25 [Info] New ClientConnectNotify : Rtap243261753501945, id is 000004D8
2025-07-26 11:52:25 [Info] ipc client:Rtap243261753501945 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 11:52:25 [Info] Rtap Platform Rtap243261753501945 execv work --windows-sysinfoext-check on pid 4048
2025-07-26 11:52:26 [Info] csrss.exe open proc 4048 AliSecCheck.ex
2025-07-26 11:52:27 [Info] csrss.exe open thread 4048 AliSecCheck.ex
2025-07-26 11:52:32 [Info] Done Work --windows-sysinfoext-check:1
2025-07-26 11:52:32 [Info] Rtap Platform Rtap243261753501945 Exit:normal exit
2025-07-26 11:52:34 [Info] ClientDisConnectNotify : Rtap243261753501945, id is 000004D8
2025-07-26 12:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9946","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10092","aliyundun_upload_time":"1753502942","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 12:33:04 [Info] TotalPhys:2047,AvailPhys:354,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6609,AvailPageFile:1414,SelfWorkingSet:9812, SelfPageFile:13504
2025-07-26 12:33:04 [Info] CommitTotal:5195,CommitLimit:6609,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:354,SystemCache:208,KernelTotal:266,KernelPaged:189,KernelNonpaged:76,PageSize:4096,HandleCount:27258,ProcessCount:53,ThreadCount:747
2025-07-26 12:58:01 [Info] get meta data success by v2
2025-07-26 12:58:01 [Info] get empty metaserver config
2025-07-26 12:58:01 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-26 12:58:02 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-26 12:58:02 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-26 12:58:02 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-26 12:58:02 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 12:58:02 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 12:58:02 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-26 12:58:02 [Info] download cert compare md5 same
2025-07-26 12:58:02 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 12:58:02 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 12:58:02 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-26 13:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9859","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10032","aliyundun_upload_time":"1753506515","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"54","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 13:34:01 [Info] TotalPhys:2047,AvailPhys:793,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5829,AvailPageFile:1187,SelfWorkingSet:9840, SelfPageFile:13516
2025-07-26 13:34:01 [Info] CommitTotal:4641,CommitLimit:5829,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:793,SystemCache:184,KernelTotal:253,KernelPaged:179,KernelNonpaged:74,PageSize:4096,HandleCount:27154,ProcessCount:53,ThreadCount:744
2025-07-26 14:08:44 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9874","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9976","aliyundun_upload_time":"1753510124","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"62","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 14:34:58 [Info] TotalPhys:2047,AvailPhys:675,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5829,AvailPageFile:1076,SelfWorkingSet:9764, SelfPageFile:13536
2025-07-26 14:34:58 [Info] CommitTotal:4752,CommitLimit:5829,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:675,SystemCache:202,KernelTotal:253,KernelPaged:178,KernelNonpaged:74,PageSize:4096,HandleCount:27199,ProcessCount:53,ThreadCount:745
2025-07-26 15:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9807","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9924","aliyundun_upload_time":"1753513743","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 15:35:54 [Info] TotalPhys:2047,AvailPhys:634,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5829,AvailPageFile:1039,SelfWorkingSet:9856, SelfPageFile:13636
2025-07-26 15:35:54 [Info] CommitTotal:4789,CommitLimit:5829,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:634,SystemCache:224,KernelTotal:253,KernelPaged:179,KernelNonpaged:74,PageSize:4096,HandleCount:27192,ProcessCount:53,ThreadCount:740
2025-07-26 16:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9861","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9904","aliyundun_upload_time":"1753517319","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 16:15:16 [Info] get meta data success by v2
2025-07-26 16:15:16 [Info] get empty metaserver config
2025-07-26 16:15:16 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-26 16:15:16 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-26 16:15:16 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-26 16:15:16 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-26 16:15:16 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 16:15:16 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 16:15:17 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-26 16:15:17 [Info] download cert compare md5 same
2025-07-26 16:15:17 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 16:15:17 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 16:15:17 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-26 16:36:51 [Info] TotalPhys:2047,AvailPhys:567,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5829,AvailPageFile:973,SelfWorkingSet:9792, SelfPageFile:13636
2025-07-26 16:36:51 [Info] CommitTotal:4855,CommitLimit:5829,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:567,SystemCache:269,KernelTotal:254,KernelPaged:179,KernelNonpaged:74,PageSize:4096,HandleCount:27277,ProcessCount:53,ThreadCount:742
2025-07-26 17:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9816","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"9960","aliyundun_upload_time":"1753520926","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 17:20:59 [Info] nCurrentClock is 1440070600, nCurrentTime is 1753521659
2025-07-26 17:20:59 [Info] SendMessage T_MSG_LOGIN
2025-07-26 17:20:59 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-26 17:20:59 [Info] begin to enable self guard after reconnect
2025-07-26 17:20:59 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-26 17:20:59 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-26 17:20:59 [Info] GetMessage : T_MSG_CHECK
2025-07-26 17:20:59 [Info] task eaff0995-642c-49e4-a066-6a5d6e2aa2b5 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 17:21:07 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-26 17:21:07 [Info] key : cpu, value : 10
2025-07-26 17:21:07 [Info] key : rio, value : 20480
2025-07-26 17:21:07 [Info] key : wio, value : 20480
2025-07-26 17:21:07 [Info] key : cpu_all, value : 0
2025-07-26 17:21:07 [Info] key : max_pid_check, value : 200
2025-07-26 17:21:07 [Info] key : throw_dump, value : 0
2025-07-26 17:21:07 [Info] key : hash_mode, value : 1
2025-07-26 17:21:07 [Info] key : mem, value : 200
2025-07-26 17:21:07 [Info] can not find key max_fd in online conf
2025-07-26 17:21:07 [Info] key : proc_limit, value : 1
2025-07-26 17:21:07 [Info] key : resource_limit_mode, value : 3
2025-07-26 17:21:07 [Info] key : rtap_update_mode, value : 1
2025-07-26 17:21:07 [Info] can not find key debug in online conf
2025-07-26 17:21:07 [Info] can not find key update_mode in online conf
2025-07-26 17:21:07 [Info] can not find key http_mode in online conf
2025-07-26 17:21:07 [Info] can not find key rtap_enable in online conf
2025-07-26 17:21:07 [Info] can not find key rtap_new_agent in online conf
2025-07-26 17:21:07 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-26 17:21:07 [Info] can not find key mem_low_mark in online conf
2025-07-26 17:21:07 [Info] can not find key obnormal_report_interval in online conf
2025-07-26 17:21:07 [Info] key : cache_mode, value : 0
2025-07-26 17:21:07 [Info] key : abnormal_monitor_mode, value : 3
2025-07-26 17:21:07 [Info] key : queue_size_ratio, value : 80
2025-07-26 17:21:07 [Info] queue_size_ratio is 80
2025-07-26 17:21:07 [Info] resource limit mode and max limit cpu is not change
2025-07-26 17:21:07 [Info] set hash mode 1
2025-07-26 17:21:07 [Info] RTAP timeout config:9600000
2025-07-26 17:21:07 [Info] self_guard_mode config is 0
2025-07-26 17:21:11 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 17:21:11 [Info] ipc client:Rtap232071753521671_handler Reg client_name:Rtap232071753521671 on WhiteList
2025-07-26 17:21:11 [Info] start rtap process success, pid is 2348, argument is Rtap232071753521671
2025-07-26 17:21:12 [Info] New ClientConnectNotify : Rtap232071753521671, id is 00000504
2025-07-26 17:21:12 [Info] ipc client:Rtap232071753521671 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 17:21:12 [Info] Rtap Platform Rtap232071753521671 execv work --windows-sysinfoext-check on pid 2348
2025-07-26 17:21:13 [Info] csrss.exe open proc 2348 AliSecCheck.ex
2025-07-26 17:21:14 [Info] csrss.exe open thread 2348 AliSecCheck.ex
2025-07-26 17:21:15 [Info] csrss.exe open thread 2348 AliSecCheck.ex
2025-07-26 17:21:16 [Info] csrss.exe open thread 2348 AliSecCheck.ex
2025-07-26 17:21:17 [Info] csrss.exe open thread 2348 AliSecCheck.ex
2025-07-26 17:21:24 [Info] Done Work --windows-sysinfoext-check:1
2025-07-26 17:21:24 [Info] Rtap Platform Rtap232071753521671 Exit:normal exit
2025-07-26 17:21:26 [Info] ClientDisConnectNotify : Rtap232071753521671, id is 00000504
2025-07-26 17:37:48 [Info] TotalPhys:2047,AvailPhys:550,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5829,AvailPageFile:961,SelfWorkingSet:9932, SelfPageFile:13632
2025-07-26 17:37:48 [Info] CommitTotal:4868,CommitLimit:5829,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:550,SystemCache:307,KernelTotal:254,KernelPaged:179,KernelNonpaged:74,PageSize:4096,HandleCount:27370,ProcessCount:54,ThreadCount:753
2025-07-26 18:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9887","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9944","aliyundun_upload_time":"1753524538","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 18:38:44 [Info] TotalPhys:2047,AvailPhys:541,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5829,AvailPageFile:952,SelfWorkingSet:9860, SelfPageFile:13624
2025-07-26 18:38:44 [Info] CommitTotal:4877,CommitLimit:5829,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:541,SystemCache:312,KernelTotal:255,KernelPaged:180,KernelNonpaged:75,PageSize:4096,HandleCount:27223,ProcessCount:53,ThreadCount:742
2025-07-26 19:07:09 [Info] GetMessage : T_MSG_CHECK
2025-07-26 19:07:09 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTM1MjgwMjksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzUzNTcxMjI5LCJzdWIiOiJSVEFQX0lEWF8xNTkxMDJfMTc1MzUyODAyOTMzOCJ9.fFXoXED9627ik1AlcuSz9FcwpPxWT3_qLXkrcBRzKO0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 19:07:18 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 19:07:18 [Info] ipc client:Rtap112311753528038_handler Reg client_name:Rtap112311753528038 on WhiteList
2025-07-26 19:07:18 [Info] start rtap process success, pid is 3816, argument is Rtap112311753528038
2025-07-26 19:07:18 [Info] New ClientConnectNotify : Rtap112311753528038, id is 000004D8
2025-07-26 19:07:18 [Info] ipc client:Rtap112311753528038 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 19:07:18 [Info] Rtap Platform Rtap112311753528038 execv work --secnet_rasp_agent on pid 3816
2025-07-26 19:07:19 [Info] csrss.exe open proc 3816 AliSecCheck.ex
2025-07-26 19:07:20 [Info] csrss.exe open thread 3816 AliSecCheck.ex
2025-07-26 19:07:26 [Info] Done Work --secnet_rasp_agent:1
2025-07-26 19:07:26 [Info] Rtap Platform Rtap112311753528038 Exit:normal exit
2025-07-26 19:07:28 [Info] ClientDisConnectNotify : Rtap112311753528038, id is 000004D8
2025-07-26 19:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9843","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"2","aliyundun_max_mem":"10040","aliyundun_upload_time":"1753528114","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 19:32:34 [Info] get meta data success by v2
2025-07-26 19:32:34 [Info] get empty metaserver config
2025-07-26 19:32:34 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-26 19:32:35 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-26 19:32:35 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-26 19:32:35 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-26 19:32:35 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 19:32:35 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 19:32:35 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-26 19:32:35 [Info] download cert compare md5 same
2025-07-26 19:32:35 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 19:32:35 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 19:32:35 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-26 19:39:41 [Info] TotalPhys:2047,AvailPhys:472,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:5829,AvailPageFile:821,SelfWorkingSet:9852, SelfPageFile:13720
2025-07-26 19:39:41 [Info] CommitTotal:5008,CommitLimit:5829,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:472,SystemCache:287,KernelTotal:257,KernelPaged:183,KernelNonpaged:74,PageSize:4096,HandleCount:27237,ProcessCount:53,ThreadCount:738
2025-07-26 20:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9866","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10004","aliyundun_upload_time":"1753531720","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 20:40:38 [Info] TotalPhys:2047,AvailPhys:402,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1473,SelfWorkingSet:9836, SelfPageFile:13768
2025-07-26 20:40:38 [Info] CommitTotal:5130,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:402,SystemCache:147,KernelTotal:254,KernelPaged:179,KernelNonpaged:75,PageSize:4096,HandleCount:27418,ProcessCount:52,ThreadCount:768
2025-07-26 21:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9952","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10044","aliyundun_upload_time":"1753535327","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 21:41:34 [Info] TotalPhys:2047,AvailPhys:426,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1488,SelfWorkingSet:9696, SelfPageFile:13472
2025-07-26 21:41:34 [Info] CommitTotal:5116,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:426,SystemCache:171,KernelTotal:252,KernelPaged:178,KernelNonpaged:74,PageSize:4096,HandleCount:26985,ProcessCount:52,ThreadCount:738
2025-07-26 22:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9770","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10028","aliyundun_upload_time":"1753538936","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 22:42:31 [Info] TotalPhys:2047,AvailPhys:394,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1466,SelfWorkingSet:9852, SelfPageFile:13552
2025-07-26 22:42:31 [Info] CommitTotal:5137,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:394,SystemCache:190,KernelTotal:252,KernelPaged:178,KernelNonpaged:74,PageSize:4096,HandleCount:26952,ProcessCount:52,ThreadCount:733
2025-07-26 22:49:44 [Info] nCurrentClock is 1458071100, nCurrentTime is 1753541384
2025-07-26 22:49:44 [Info] SendMessage T_MSG_LOGIN
2025-07-26 22:49:44 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-07-26 22:49:44 [Info] begin to enable self guard after reconnect
2025-07-26 22:49:45 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-07-26 22:49:45 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-07-26 22:49:45 [Info] GetMessage : T_MSG_CHECK
2025-07-26 22:49:45 [Info] task 38f4235c-4f24-4580-b651-5e71a391bd56 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 22:49:47 [Info] get meta data success by v2
2025-07-26 22:49:47 [Info] get empty metaserver config
2025-07-26 22:49:47 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-07-26 22:49:48 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-07-26 22:49:48 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-07-26 22:49:48 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-07-26 22:49:48 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 22:49:48 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-07-26 22:49:48 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-07-26 22:49:48 [Info] download cert compare md5 same
2025-07-26 22:49:48 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 22:49:48 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-07-26 22:49:48 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-07-26 22:49:53 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-07-26 22:49:53 [Info] key : cpu, value : 10
2025-07-26 22:49:53 [Info] key : rio, value : 20480
2025-07-26 22:49:53 [Info] key : wio, value : 20480
2025-07-26 22:49:53 [Info] key : cpu_all, value : 0
2025-07-26 22:49:53 [Info] key : max_pid_check, value : 200
2025-07-26 22:49:53 [Info] key : throw_dump, value : 0
2025-07-26 22:49:53 [Info] key : hash_mode, value : 1
2025-07-26 22:49:53 [Info] key : mem, value : 200
2025-07-26 22:49:53 [Info] can not find key max_fd in online conf
2025-07-26 22:49:53 [Info] key : proc_limit, value : 1
2025-07-26 22:49:53 [Info] key : resource_limit_mode, value : 3
2025-07-26 22:49:53 [Info] key : rtap_update_mode, value : 1
2025-07-26 22:49:53 [Info] can not find key debug in online conf
2025-07-26 22:49:53 [Info] can not find key update_mode in online conf
2025-07-26 22:49:53 [Info] can not find key http_mode in online conf
2025-07-26 22:49:53 [Info] can not find key rtap_enable in online conf
2025-07-26 22:49:53 [Info] can not find key rtap_new_agent in online conf
2025-07-26 22:49:53 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-07-26 22:49:53 [Info] can not find key mem_low_mark in online conf
2025-07-26 22:49:53 [Info] can not find key obnormal_report_interval in online conf
2025-07-26 22:49:53 [Info] key : cache_mode, value : 0
2025-07-26 22:49:53 [Info] key : abnormal_monitor_mode, value : 3
2025-07-26 22:49:53 [Info] key : queue_size_ratio, value : 80
2025-07-26 22:49:53 [Info] queue_size_ratio is 80
2025-07-26 22:49:53 [Info] resource limit mode and max limit cpu is not change
2025-07-26 22:49:53 [Info] set hash mode 1
2025-07-26 22:49:53 [Info] RTAP timeout config:9600000
2025-07-26 22:49:53 [Info] self_guard_mode config is 0
2025-07-26 22:49:53 [Info] GetMessage : T_MSG_CHECK
2025-07-26 22:49:53 [Info] task e4677d987e5d5d4a0081c9824054cadf has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-07-26 22:49:58 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 22:49:58 [Info] ipc client:Rtap220911753541398_handler Reg client_name:Rtap220911753541398 on WhiteList
2025-07-26 22:49:58 [Info] start rtap process success, pid is 4392, argument is Rtap220911753541398
2025-07-26 22:49:58 [Info] system memory usage is 82
2025-07-26 22:49:59 [Info] New ClientConnectNotify : Rtap220911753541398, id is 00000504
2025-07-26 22:49:59 [Info] Rtap Platform Rtap220911753541398 execv work --windows-sysinfoext-check on pid 4392
2025-07-26 22:49:59 [Info] ipc client:Rtap220911753541398 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 22:50:00 [Info] csrss.exe open proc 4392 AliSecCheck.ex
2025-07-26 22:50:01 [Info] csrss.exe open thread 4392 AliSecCheck.ex
2025-07-26 22:50:02 [Info] csrss.exe open thread 4392 AliSecCheck.ex
2025-07-26 22:50:03 [Info] csrss.exe open thread 4392 AliSecCheck.ex
2025-07-26 22:50:03 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-07-26 22:50:03 [Info] ipc client:Rtap221081753541403_handler Reg client_name:Rtap221081753541403 on WhiteList
2025-07-26 22:50:03 [Info] start rtap process success, pid is 2216, argument is Rtap221081753541403
2025-07-26 22:50:04 [Info] New ClientConnectNotify : Rtap221081753541403, id is 000001E4
2025-07-26 22:50:04 [Info] csrss.exe open thread 4392 AliSecCheck.ex
2025-07-26 22:50:04 [Info] Rtap Platform Rtap221081753541403 execv work --windows-vul-check on pid 2216
2025-07-26 22:50:04 [Info] ipc client:Rtap221081753541403 UnReg client_name:protocol_ipc_client on WhiteList
2025-07-26 22:50:07 [Info] csrss.exe open proc 2216 AliSecCheck.ex
2025-07-26 22:50:08 [Info] csrss.exe open thread 2216 AliSecCheck.ex
2025-07-26 22:50:11 [Info] Done Work --windows-sysinfoext-check:1
2025-07-26 22:50:11 [Info] Rtap Platform Rtap220911753541398 Exit:normal exit
2025-07-26 22:50:13 [Info] ClientDisConnectNotify : Rtap220911753541398, id is 00000504
2025-07-26 22:50:13 [Info] Done Work --windows-vul-check:1
2025-07-26 22:50:13 [Info] Rtap Platform Rtap221081753541403 Exit:normal exit
2025-07-26 22:50:16 [Info] ClientDisConnectNotify : Rtap221081753541403, id is 000001E4
2025-07-26 23:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9858","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10000","aliyundun_upload_time":"1753542513","aliyundun_write_pid_times":"0","ipc_send_count":"149","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-07-26 23:43:29 [Info] TotalPhys:2047,AvailPhys:366,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6604,AvailPageFile:1460,SelfWorkingSet:9964, SelfPageFile:13916
2025-07-26 23:43:29 [Info] CommitTotal:5144,CommitLimit:6604,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:366,SystemCache:221,KernelTotal:254,KernelPaged:179,KernelNonpaged:74,PageSize:4096,HandleCount:26948,ProcessCount:52,ThreadCount:734
2025-07-27 00:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9959","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10028","aliyundun_upload_time":"1753546123","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 00:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10009","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10120","aliyundun_upload_time":"1754064540","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"56","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 00:59:59 [Info] TotalPhys:2047,AvailPhys:884,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1222,SelfWorkingSet:10072, SelfPageFile:13728
2025-08-02 00:59:59 [Info] CommitTotal:4576,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:884,SystemCache:173,KernelTotal:258,KernelPaged:183,KernelNonpaged:75,PageSize:4096,HandleCount:26937,ProcessCount:52,ThreadCount:723
2025-08-02 01:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10000","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10072","aliyundun_upload_time":"1754068112","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"56","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 01:19:30 [Info] GetMessage : T_MSG_CHECK
2025-08-02 01:19:30 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxNzk2OTQsImlhdCI6MTc1NDA2ODc3MCwiaXNzIjoiUlRBUCIsImF1ZCI6IlJUQVAiLCJleHAiOjE3NTQxMTE5NzB9.7Nsi-R6ok2iVrwJsKGr5q0-hxXLaUirM2-e6CNfJXNY has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 01:19:41 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 01:19:41 [Info] ipc client:Rtap75981754068781_handler Reg client_name:Rtap75981754068781 on WhiteList
2025-08-02 01:19:41 [Info] start rtap process success, pid is 4476, argument is Rtap75981754068781
2025-08-02 01:19:41 [Info] New ClientConnectNotify : Rtap75981754068781, id is 0000053C
2025-08-02 01:19:42 [Info] ipc client:Rtap75981754068781 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 01:19:42 [Info] Rtap Platform Rtap75981754068781 execv work --sca on pid 4476
2025-08-02 01:19:44 [Info] csrss.exe open proc 4476 AliSecCheck.ex
2025-08-02 01:19:45 [Info] csrss.exe open thread 4476 AliSecCheck.ex
2025-08-02 01:20:24 [Info] csrss.exe open thread 4476 AliSecCheck.ex
2025-08-02 01:20:46 [Info] Done Work --sca:1
2025-08-02 01:20:46 [Info] Rtap Platform Rtap75981754068781 Exit:normal exit
2025-08-02 01:20:48 [Info] ClientDisConnectNotify : Rtap75981754068781, id is 0000053C
2025-08-02 02:00:56 [Info] TotalPhys:2047,AvailPhys:885,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1234,SelfWorkingSet:9980, SelfPageFile:13660
2025-08-02 02:00:56 [Info] CommitTotal:4565,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:885,SystemCache:217,KernelTotal:258,KernelPaged:183,KernelNonpaged:75,PageSize:4096,HandleCount:26969,ProcessCount:52,ThreadCount:732
2025-08-02 02:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9987","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10056","aliyundun_upload_time":"1754071716","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"58","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 02:58:19 [Info] nCurrentClock is 1944089300, nCurrentTime is 1754074699
2025-08-02 02:58:19 [Info] SendMessage T_MSG_LOGIN
2025-08-02 02:58:19 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-02 02:58:19 [Info] begin to enable self guard after reconnect
2025-08-02 02:58:19 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-02 02:58:19 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-02 02:58:19 [Info] GetMessage : T_MSG_CHECK
2025-08-02 02:58:19 [Info] task f554732c-eef1-47d4-b939-cdd19b620aae has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 02:58:27 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-02 02:58:27 [Info] key : cpu, value : 10
2025-08-02 02:58:27 [Info] key : rio, value : 20480
2025-08-02 02:58:27 [Info] key : wio, value : 20480
2025-08-02 02:58:27 [Info] key : cpu_all, value : 0
2025-08-02 02:58:27 [Info] key : max_pid_check, value : 200
2025-08-02 02:58:27 [Info] key : throw_dump, value : 0
2025-08-02 02:58:27 [Info] key : hash_mode, value : 1
2025-08-02 02:58:27 [Info] key : mem, value : 200
2025-08-02 02:58:27 [Info] can not find key max_fd in online conf
2025-08-02 02:58:27 [Info] key : proc_limit, value : 1
2025-08-02 02:58:27 [Info] key : resource_limit_mode, value : 3
2025-08-02 02:58:27 [Info] key : rtap_update_mode, value : 1
2025-08-02 02:58:27 [Info] can not find key debug in online conf
2025-08-02 02:58:27 [Info] can not find key update_mode in online conf
2025-08-02 02:58:27 [Info] can not find key http_mode in online conf
2025-08-02 02:58:27 [Info] can not find key rtap_enable in online conf
2025-08-02 02:58:27 [Info] can not find key rtap_new_agent in online conf
2025-08-02 02:58:27 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-02 02:58:27 [Info] can not find key mem_low_mark in online conf
2025-08-02 02:58:27 [Info] can not find key obnormal_report_interval in online conf
2025-08-02 02:58:27 [Info] key : cache_mode, value : 0
2025-08-02 02:58:27 [Info] key : abnormal_monitor_mode, value : 3
2025-08-02 02:58:27 [Info] key : queue_size_ratio, value : 80
2025-08-02 02:58:27 [Info] queue_size_ratio is 80
2025-08-02 02:58:27 [Info] resource limit mode and max limit cpu is not change
2025-08-02 02:58:27 [Info] set hash mode 1
2025-08-02 02:58:27 [Info] RTAP timeout config:9600000
2025-08-02 02:58:27 [Info] self_guard_mode config is 0
2025-08-02 02:58:28 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 02:58:28 [Info] ipc client:Rtap269531754074708_handler Reg client_name:Rtap269531754074708 on WhiteList
2025-08-02 02:58:28 [Info] start rtap process success, pid is 612, argument is Rtap269531754074708
2025-08-02 02:58:31 [Info] New ClientConnectNotify : Rtap269531754074708, id is 000004D8
2025-08-02 02:58:31 [Info] Rtap Platform Rtap269531754074708 execv work --windows-sysinfoext-check on pid 612
2025-08-02 02:58:31 [Info] csrss.exe open proc 612 AliSecCheck.ex
2025-08-02 02:58:32 [Info] csrss.exe open thread 612 AliSecCheck.ex
2025-08-02 02:58:32 [Info] ipc client:Rtap269531754074708 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 02:58:34 [Info] get meta data success by v2
2025-08-02 02:58:34 [Info] get empty metaserver config
2025-08-02 02:58:34 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-02 02:58:34 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-02 02:58:34 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-02 02:58:34 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-02 02:58:34 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 02:58:34 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 02:58:34 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-02 02:58:34 [Info] download cert compare md5 same
2025-08-02 02:58:34 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 02:58:34 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 02:58:34 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-02 02:58:42 [Info] Done Work --windows-sysinfoext-check:1
2025-08-02 02:58:42 [Info] Rtap Platform Rtap269531754074708 Exit:normal exit
2025-08-02 02:58:44 [Info] ClientDisConnectNotify : Rtap269531754074708, id is 000004D8
2025-08-02 03:01:53 [Info] TotalPhys:2047,AvailPhys:869,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:5799,AvailPageFile:1220,SelfWorkingSet:10152, SelfPageFile:13924
2025-08-02 03:01:53 [Info] CommitTotal:4579,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:869,SystemCache:225,KernelTotal:258,KernelPaged:183,KernelNonpaged:75,PageSize:4096,HandleCount:27153,ProcessCount:53,ThreadCount:747
2025-08-02 03:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10061","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10200","aliyundun_upload_time":"1754075326","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"57","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 04:02:49 [Info] TotalPhys:2047,AvailPhys:843,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1225,SelfWorkingSet:9972, SelfPageFile:13612
2025-08-02 04:02:49 [Info] CommitTotal:4574,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:843,SystemCache:229,KernelTotal:258,KernelPaged:183,KernelNonpaged:75,PageSize:4096,HandleCount:26948,ProcessCount:52,ThreadCount:725
2025-08-02 04:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10025","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10112","aliyundun_upload_time":"1754078915","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"57","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 05:03:46 [Info] TotalPhys:2047,AvailPhys:864,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1219,SelfWorkingSet:9996, SelfPageFile:13612
2025-08-02 05:03:46 [Info] CommitTotal:4579,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:864,SystemCache:257,KernelTotal:259,KernelPaged:184,KernelNonpaged:75,PageSize:4096,HandleCount:26972,ProcessCount:52,ThreadCount:734
2025-08-02 05:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9992","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10044","aliyundun_upload_time":"1754082521","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"57","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 06:04:42 [Info] TotalPhys:2047,AvailPhys:865,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1221,SelfWorkingSet:10080, SelfPageFile:13932
2025-08-02 06:04:42 [Info] CommitTotal:4578,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:865,SystemCache:262,KernelTotal:259,KernelPaged:184,KernelNonpaged:75,PageSize:4096,HandleCount:26963,ProcessCount:52,ThreadCount:734
2025-08-02 06:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10080","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10172","aliyundun_upload_time":"1754086130","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"57","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 06:15:39 [Info] get meta data success by v2
2025-08-02 06:15:39 [Info] get empty metaserver config
2025-08-02 06:15:39 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-02 06:15:39 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-02 06:15:39 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-02 06:15:39 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-02 06:15:39 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 06:15:39 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 06:15:39 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-02 06:15:39 [Info] download cert compare md5 same
2025-08-02 06:15:39 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 06:15:39 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 06:15:39 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-02 07:05:38 [Info] TotalPhys:2047,AvailPhys:847,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1218,SelfWorkingSet:9976, SelfPageFile:13956
2025-08-02 07:05:38 [Info] CommitTotal:4581,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:847,SystemCache:264,KernelTotal:259,KernelPaged:184,KernelNonpaged:75,PageSize:4096,HandleCount:26939,ProcessCount:52,ThreadCount:727
2025-08-02 07:08:55 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9992","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10132","aliyundun_upload_time":"1754089735","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"57","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 08:06:34 [Info] TotalPhys:2047,AvailPhys:861,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1217,SelfWorkingSet:10100, SelfPageFile:14064
2025-08-02 08:06:34 [Info] CommitTotal:4581,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:861,SystemCache:265,KernelTotal:259,KernelPaged:184,KernelNonpaged:75,PageSize:4096,HandleCount:26952,ProcessCount:52,ThreadCount:732
2025-08-02 08:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10050","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10100","aliyundun_upload_time":"1754093321","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"57","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 08:27:05 [Info] nCurrentClock is 1962089800, nCurrentTime is 1754094425
2025-08-02 08:27:05 [Info] SendMessage T_MSG_LOGIN
2025-08-02 08:27:05 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-02 08:27:05 [Info] begin to enable self guard after reconnect
2025-08-02 08:27:05 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-02 08:27:05 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-02 08:27:05 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-02 08:27:05 [Info] key : cpu, value : 10
2025-08-02 08:27:05 [Info] key : rio, value : 20480
2025-08-02 08:27:05 [Info] key : wio, value : 20480
2025-08-02 08:27:05 [Info] key : cpu_all, value : 0
2025-08-02 08:27:05 [Info] key : max_pid_check, value : 200
2025-08-02 08:27:05 [Info] key : throw_dump, value : 0
2025-08-02 08:27:05 [Info] key : hash_mode, value : 1
2025-08-02 08:27:05 [Info] key : mem, value : 200
2025-08-02 08:27:05 [Info] can not find key max_fd in online conf
2025-08-02 08:27:05 [Info] key : proc_limit, value : 1
2025-08-02 08:27:05 [Info] key : resource_limit_mode, value : 3
2025-08-02 08:27:05 [Info] key : rtap_update_mode, value : 1
2025-08-02 08:27:05 [Info] can not find key debug in online conf
2025-08-02 08:27:05 [Info] can not find key update_mode in online conf
2025-08-02 08:27:05 [Info] can not find key http_mode in online conf
2025-08-02 08:27:05 [Info] can not find key rtap_enable in online conf
2025-08-02 08:27:05 [Info] can not find key rtap_new_agent in online conf
2025-08-02 08:27:05 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-02 08:27:05 [Info] can not find key mem_low_mark in online conf
2025-08-02 08:27:05 [Info] can not find key obnormal_report_interval in online conf
2025-08-02 08:27:05 [Info] key : cache_mode, value : 0
2025-08-02 08:27:05 [Info] key : abnormal_monitor_mode, value : 3
2025-08-02 08:27:05 [Info] key : queue_size_ratio, value : 80
2025-08-02 08:27:05 [Info] queue_size_ratio is 80
2025-08-02 08:27:05 [Info] resource limit mode and max limit cpu is not change
2025-08-02 08:27:05 [Info] set hash mode 1
2025-08-02 08:27:05 [Info] RTAP timeout config:9600000
2025-08-02 08:27:05 [Info] self_guard_mode config is 0
2025-08-02 08:27:05 [Info] GetMessage : T_MSG_CHECK
2025-08-02 08:27:05 [Info] task a48b1931-f70d-4abc-abd5-e335f554ecd2 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 08:27:14 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-02 08:27:15 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 08:27:15 [Info] ipc client:Rtap258371754094435_handler Reg client_name:Rtap258371754094435 on WhiteList
2025-08-02 08:27:15 [Info] start rtap process success, pid is 3760, argument is Rtap258371754094435
2025-08-02 08:27:15 [Info] New ClientConnectNotify : Rtap258371754094435, id is 000004F8
2025-08-02 08:27:15 [Info] ipc client:Rtap258371754094435 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 08:27:16 [Info] Rtap Platform Rtap258371754094435 execv work --windows-sysinfoext-check on pid 3760
2025-08-02 08:27:16 [Info] csrss.exe open proc 3760 AliSecCheck.ex
2025-08-02 08:27:17 [Info] csrss.exe open thread 3760 AliSecCheck.ex
2025-08-02 08:27:23 [Info] Done Work --windows-sysinfoext-check:1
2025-08-02 08:27:23 [Info] Rtap Platform Rtap258371754094435 Exit:normal exit
2025-08-02 08:27:25 [Info] ClientDisConnectNotify : Rtap258371754094435, id is 000004F8
2025-08-02 08:52:01 [Info] GetMessage : T_MSG_CHECK
2025-08-02 08:52:01 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxNzk2OTQsImlhdCI6MTc1NDA5NTkyMSwiaXNzIjoiUlRBUCIsImF1ZCI6IlJUQVAiLCJleHAiOjE3NTQxMzkxMjF9.c-E6B6_ahWFvwYqs76ntfHTuZeJwukrPR9KBWHqbygk has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 08:52:11 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 08:52:11 [Info] ipc client:Rtap307231754095931_handler Reg client_name:Rtap307231754095931 on WhiteList
2025-08-02 08:52:11 [Info] start rtap process success, pid is 3604, argument is Rtap307231754095931
2025-08-02 08:52:11 [Info] New ClientConnectNotify : Rtap307231754095931, id is 000004D8
2025-08-02 08:52:11 [Info] ipc client:Rtap307231754095931 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 08:52:11 [Info] Rtap Platform Rtap307231754095931 execv work --windows-process-check on pid 3604
2025-08-02 08:52:12 [Info] csrss.exe open proc 3604 AliSecCheck.ex
2025-08-02 08:52:13 [Info] csrss.exe open thread 3604 AliSecCheck.ex
2025-08-02 08:52:35 [Info] Done Work --windows-process-check:1
2025-08-02 08:52:35 [Info] Rtap Platform Rtap307231754095931 Exit:normal exit
2025-08-02 08:52:37 [Info] ClientDisConnectNotify : Rtap307231754095931, id is 000004D8
2025-08-02 09:07:35 [Info] TotalPhys:2047,AvailPhys:791,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1186,SelfWorkingSet:9944, SelfPageFile:13788
2025-08-02 09:07:35 [Info] CommitTotal:4613,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:791,SystemCache:409,KernelTotal:281,KernelPaged:199,KernelNonpaged:82,PageSize:4096,HandleCount:26941,ProcessCount:52,ThreadCount:728
2025-08-02 09:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10017","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10112","aliyundun_upload_time":"1754096942","aliyundun_write_pid_times":"0","ipc_send_count":"149","login_time":"0","mem_usage":"61","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 09:33:39 [Info] get meta data success by v2
2025-08-02 09:33:39 [Info] get empty metaserver config
2025-08-02 09:33:39 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-02 09:33:39 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-02 09:33:39 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-02 09:33:39 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-02 09:33:39 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 09:33:39 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 09:33:39 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-02 09:33:39 [Info] download cert compare md5 same
2025-08-02 09:33:39 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 09:33:39 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 09:33:39 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-02 10:00:01 [Info] GetMessage : T_MSG_CHECK
2025-08-02 10:00:01 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQxMDAwMDEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0MTQzMjAxLCJzdWIiOiJSVEFQX0lEWF8xNTk1NzRfMTc1NDEwMDAwMTczMCJ9.6HQtM_gRwj9oZuh9yiE9Tr-CeBqzh5jvhuDLpfOLDJ0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 10:00:10 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 10:00:10 [Info] ipc client:Rtap112751754100010_handler Reg client_name:Rtap112751754100010 on WhiteList
2025-08-02 10:00:10 [Info] start rtap process success, pid is 4860, argument is Rtap112751754100010
2025-08-02 10:00:10 [Info] New ClientConnectNotify : Rtap112751754100010, id is 000004F8
2025-08-02 10:00:11 [Info] ipc client:Rtap112751754100010 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 10:00:11 [Info] Rtap Platform Rtap112751754100010 execv work --tcp-connect-check on pid 4860
2025-08-02 10:00:13 [Info] csrss.exe open proc 4860 AliSecCheck.ex
2025-08-02 10:00:14 [Info] csrss.exe open thread 4860 AliSecCheck.ex
2025-08-02 10:00:22 [Info] Done Work --tcp-connect-check:1
2025-08-02 10:00:22 [Info] Rtap Platform Rtap112751754100010 Exit:normal exit
2025-08-02 10:00:24 [Info] ClientDisConnectNotify : Rtap112751754100010, id is 000004F8
2025-08-02 10:08:32 [Info] TotalPhys:2047,AvailPhys:810,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1180,SelfWorkingSet:9964, SelfPageFile:13600
2025-08-02 10:08:32 [Info] CommitTotal:4619,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:810,SystemCache:422,KernelTotal:283,KernelPaged:200,KernelNonpaged:83,PageSize:4096,HandleCount:26961,ProcessCount:52,ThreadCount:732
2025-08-02 10:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10047","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10224","aliyundun_upload_time":"1754100515","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"60","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 10:16:19 [Info] GetMessage : T_MSG_CHECK
2025-08-02 10:16:19 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQxMDA5NzksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0MTQ0MTc5LCJzdWIiOiJSVEFQX0lEWF8xNTk1NzZfMTc1NDEwMDk3OTUzOSJ9.qiNuJg5B9itE-JjQcF9usRCBjap3aH6qg_DEA10a_p8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 10:16:27 [Info] GetMessage : T_MSG_CHECK
2025-08-02 10:16:27 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQxMDA5ODAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0MTQ0MTgwLCJzdWIiOiJSVEFQX0lEWF8xNTk1ODJfMTc1NDEwMDk4MDEwMyJ9.nZUitvPV7jQ9XclgXSWPsWcwYdMaFrT1Q6PalRog9GI has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 10:16:28 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 10:16:28 [Info] ipc client:Rtap144691754100988_handler Reg client_name:Rtap144691754100988 on WhiteList
2025-08-02 10:16:28 [Info] start rtap process success, pid is 2136, argument is Rtap144691754100988
2025-08-02 10:16:28 [Info] New ClientConnectNotify : Rtap144691754100988, id is 0000051C
2025-08-02 10:16:29 [Info] ipc client:Rtap144691754100988 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 10:16:29 [Info] Rtap Platform Rtap144691754100988 execv work --windows-schedule-task-check on pid 2136
2025-08-02 10:16:31 [Info] csrss.exe open proc 2136 AliSecCheck.ex
2025-08-02 10:16:32 [Info] csrss.exe open thread 2136 AliSecCheck.ex
2025-08-02 10:16:38 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 10:16:38 [Info] ipc client:Rtap145011754100998_handler Reg client_name:Rtap145011754100998 on WhiteList
2025-08-02 10:16:38 [Info] start rtap process success, pid is 4828, argument is Rtap145011754100998
2025-08-02 10:16:38 [Info] New ClientConnectNotify : Rtap145011754100998, id is 0000053C
2025-08-02 10:16:38 [Info] ipc client:Rtap145011754100998 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 10:16:38 [Info] Rtap Platform Rtap145011754100998 execv work --windows-registry-check on pid 4828
2025-08-02 10:16:40 [Info] csrss.exe open proc 4828 AliSecCheck.ex
2025-08-02 10:16:41 [Info] csrss.exe open thread 4828 AliSecCheck.ex
2025-08-02 10:17:06 [Info] Done Work --windows-schedule-task-check:1
2025-08-02 10:17:06 [Info] Rtap Platform Rtap144691754100988 Exit:normal exit
2025-08-02 10:17:08 [Info] ClientDisConnectNotify : Rtap144691754100988, id is 0000051C
2025-08-02 10:17:12 [Info] Done Work --windows-registry-check:1
2025-08-02 10:17:12 [Info] Rtap Platform Rtap145011754100998 Exit:normal exit
2025-08-02 10:17:14 [Info] ClientDisConnectNotify : Rtap145011754100998, id is 0000053C
2025-08-02 10:18:05 [Info] GetMessage : T_MSG_CHECK
2025-08-02 10:18:05 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQxMDEwODQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0MTQ0Mjg0LCJzdWIiOiJSVEFQX0lEWF8xNTk1OTBfMTc1NDEwMTA4NDk3MyJ9.jwZOetNyLiZTEwvhrVB37liygmkB2sXKjs3DSvox7Ms has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 10:18:17 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 10:18:17 [Info] ipc client:Rtap148251754101097_handler Reg client_name:Rtap148251754101097 on WhiteList
2025-08-02 10:18:17 [Info] start rtap process success, pid is 1996, argument is Rtap148251754101097
2025-08-02 10:18:17 [Info] New ClientConnectNotify : Rtap148251754101097, id is 000004D8
2025-08-02 10:18:17 [Info] ipc client:Rtap148251754101097 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 10:18:17 [Info] Rtap Platform Rtap148251754101097 execv work --windows-driver-version-check on pid 1996
2025-08-02 10:18:19 [Info] csrss.exe open proc 1996 AliSecCheck.ex
2025-08-02 10:18:20 [Info] csrss.exe open thread 1996 AliSecCheck.ex
2025-08-02 10:18:24 [Info] Done Work --windows-driver-version-check:1
2025-08-02 10:18:24 [Info] Rtap Platform Rtap148251754101097 Exit:normal exit
2025-08-02 10:18:27 [Info] ClientDisConnectNotify : Rtap148251754101097, id is 000004D8
2025-08-02 11:05:50 [Info] GetMessage : T_MSG_CHECK
2025-08-02 11:05:50 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQxMDM5NTAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0MTQ3MTUwLCJzdWIiOiJSVEFQX0lEWF8xNTk1NzlfMTc1NDEwMzk1MDI0OSJ9.O8qCmLUVDwv_FgyUjMKE0wTHCZJHr8haIhwXdLXc2JI has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 11:06:00 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 11:06:00 [Info] ipc client:Rtap241741754103960_handler Reg client_name:Rtap241741754103960 on WhiteList
2025-08-02 11:06:00 [Info] start rtap process success, pid is 1484, argument is Rtap241741754103960
2025-08-02 11:06:00 [Info] New ClientConnectNotify : Rtap241741754103960, id is 0000053C
2025-08-02 11:06:00 [Info] ipc client:Rtap241741754103960 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 11:06:01 [Info] Rtap Platform Rtap241741754103960 execv work --windows-autorun-item-check on pid 1484
2025-08-02 11:06:03 [Info] csrss.exe open proc 1484 AliSecCheck.ex
2025-08-02 11:06:04 [Info] csrss.exe open thread 1484 AliSecCheck.ex
2025-08-02 11:06:16 [Info] Done Work --windows-autorun-item-check:1
2025-08-02 11:06:16 [Info] Rtap Platform Rtap241741754103960 Exit:normal exit
2025-08-02 11:06:18 [Info] ClientDisConnectNotify : Rtap241741754103960, id is 0000053C
2025-08-02 11:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10033","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10172","aliyundun_upload_time":"1754104115","aliyundun_write_pid_times":"0","ipc_send_count":"151","login_time":"0","mem_usage":"59","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 11:09:29 [Info] TotalPhys:2047,AvailPhys:820,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1190,SelfWorkingSet:10064, SelfPageFile:13924
2025-08-02 11:09:29 [Info] CommitTotal:4609,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:820,SystemCache:431,KernelTotal:285,KernelPaged:201,KernelNonpaged:83,PageSize:4096,HandleCount:26961,ProcessCount:52,ThreadCount:728
2025-08-02 12:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9975","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10096","aliyundun_upload_time":"1754107720","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 12:10:25 [Info] TotalPhys:2047,AvailPhys:715,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1175,SelfWorkingSet:9960, SelfPageFile:13876
2025-08-02 12:10:25 [Info] CommitTotal:4623,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:715,SystemCache:446,KernelTotal:291,KernelPaged:206,KernelNonpaged:84,PageSize:4096,HandleCount:27225,ProcessCount:53,ThreadCount:733
2025-08-02 12:50:46 [Info] get meta data success by v2
2025-08-02 12:50:46 [Info] get empty metaserver config
2025-08-02 12:50:46 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-02 12:50:46 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-02 12:50:46 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-02 12:50:46 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-02 12:50:46 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 12:50:46 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 12:50:46 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-02 12:50:46 [Info] download cert compare md5 same
2025-08-02 12:50:46 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 12:50:46 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 12:50:46 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-02 13:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9978","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10088","aliyundun_upload_time":"1754111325","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 13:11:21 [Info] TotalPhys:2047,AvailPhys:714,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:1175,SelfWorkingSet:9872, SelfPageFile:13656
2025-08-02 13:11:21 [Info] CommitTotal:4623,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:714,SystemCache:446,KernelTotal:290,KernelPaged:206,KernelNonpaged:84,PageSize:4096,HandleCount:27221,ProcessCount:53,ThreadCount:735
2025-08-02 13:56:27 [Info] nCurrentClock is 1980090300, nCurrentTime is 1754114187
2025-08-02 13:56:27 [Info] SendMessage T_MSG_LOGIN
2025-08-02 13:56:27 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-02 13:56:27 [Info] begin to enable self guard after reconnect
2025-08-02 13:56:27 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-02 13:56:27 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-02 13:56:27 [Info] GetMessage : T_MSG_CHECK
2025-08-02 13:56:27 [Info] task 41caf60d-b411-48b5-946e-e7950fabc8a6 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 13:56:35 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-02 13:56:35 [Info] key : cpu, value : 10
2025-08-02 13:56:35 [Info] key : rio, value : 20480
2025-08-02 13:56:35 [Info] key : wio, value : 20480
2025-08-02 13:56:35 [Info] key : cpu_all, value : 0
2025-08-02 13:56:35 [Info] key : max_pid_check, value : 200
2025-08-02 13:56:35 [Info] key : throw_dump, value : 0
2025-08-02 13:56:35 [Info] key : hash_mode, value : 1
2025-08-02 13:56:35 [Info] key : mem, value : 200
2025-08-02 13:56:35 [Info] can not find key max_fd in online conf
2025-08-02 13:56:35 [Info] key : proc_limit, value : 1
2025-08-02 13:56:35 [Info] key : resource_limit_mode, value : 3
2025-08-02 13:56:35 [Info] key : rtap_update_mode, value : 1
2025-08-02 13:56:35 [Info] can not find key debug in online conf
2025-08-02 13:56:35 [Info] can not find key update_mode in online conf
2025-08-02 13:56:35 [Info] can not find key http_mode in online conf
2025-08-02 13:56:35 [Info] can not find key rtap_enable in online conf
2025-08-02 13:56:35 [Info] can not find key rtap_new_agent in online conf
2025-08-02 13:56:35 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-02 13:56:35 [Info] can not find key mem_low_mark in online conf
2025-08-02 13:56:35 [Info] can not find key obnormal_report_interval in online conf
2025-08-02 13:56:35 [Info] key : cache_mode, value : 0
2025-08-02 13:56:35 [Info] key : abnormal_monitor_mode, value : 3
2025-08-02 13:56:35 [Info] key : queue_size_ratio, value : 80
2025-08-02 13:56:35 [Info] queue_size_ratio is 80
2025-08-02 13:56:35 [Info] resource limit mode and max limit cpu is not change
2025-08-02 13:56:35 [Info] set hash mode 1
2025-08-02 13:56:35 [Info] RTAP timeout config:9600000
2025-08-02 13:56:35 [Info] self_guard_mode config is 0
2025-08-02 13:56:40 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 13:56:40 [Info] ipc client:Rtap248461754114200_handler Reg client_name:Rtap248461754114200 on WhiteList
2025-08-02 13:56:40 [Info] start rtap process success, pid is 3288, argument is Rtap248461754114200
2025-08-02 13:56:40 [Info] New ClientConnectNotify : Rtap248461754114200, id is 000004D8
2025-08-02 13:56:41 [Info] Rtap Platform Rtap248461754114200 execv work --windows-sysinfoext-check on pid 3288
2025-08-02 13:56:41 [Info] ipc client:Rtap248461754114200 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 13:56:42 [Info] csrss.exe open proc 3288 AliSecCheck.ex
2025-08-02 13:56:43 [Info] csrss.exe open thread 3288 AliSecCheck.ex
2025-08-02 13:56:52 [Info] Done Work --windows-sysinfoext-check:1
2025-08-02 13:56:52 [Info] Rtap Platform Rtap248461754114200 Exit:normal exit
2025-08-02 13:56:54 [Info] ClientDisConnectNotify : Rtap248461754114200, id is 000004D8
2025-08-02 14:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9973","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"2","aliyundun_max_mem":"10068","aliyundun_upload_time":"1754114912","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 14:12:20 [Info] TotalPhys:2047,AvailPhys:438,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:872,SelfWorkingSet:9952, SelfPageFile:13668
2025-08-02 14:12:20 [Info] CommitTotal:4926,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:438,SystemCache:232,KernelTotal:277,KernelPaged:197,KernelNonpaged:80,PageSize:4096,HandleCount:27464,ProcessCount:54,ThreadCount:732
2025-08-02 15:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9890","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9968","aliyundun_upload_time":"1754118517","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 15:13:16 [Info] TotalPhys:2047,AvailPhys:450,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5799,AvailPageFile:882,SelfWorkingSet:9888, SelfPageFile:13616
2025-08-02 15:13:16 [Info] CommitTotal:4916,CommitLimit:5799,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:450,SystemCache:235,KernelTotal:278,KernelPaged:197,KernelNonpaged:80,PageSize:4096,HandleCount:27327,ProcessCount:53,ThreadCount:734
2025-08-02 16:08:05 [Info] get meta data success by v2
2025-08-02 16:08:05 [Info] get empty metaserver config
2025-08-02 16:08:05 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-02 16:08:06 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-02 16:08:06 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-02 16:08:06 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-02 16:08:06 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 16:08:06 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 16:08:06 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-02 16:08:06 [Info] download cert compare md5 same
2025-08-02 16:08:06 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 16:08:06 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 16:08:06 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-02 16:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9990","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10196","aliyundun_upload_time":"1754122121","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-08-02 16:14:13 [Info] TotalPhys:2047,AvailPhys:495,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6326,AvailPageFile:1420,SelfWorkingSet:10056, SelfPageFile:14000
2025-08-02 16:14:13 [Info] CommitTotal:4905,CommitLimit:6326,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:495,SystemCache:112,KernelTotal:257,KernelPaged:180,KernelNonpaged:76,PageSize:4096,HandleCount:27454,ProcessCount:53,ThreadCount:743
2025-08-02 17:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10123","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"7","aliyundun_max_mem":"10244","aliyundun_upload_time":"1754125715","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 17:15:15 [Info] TotalPhys:2047,AvailPhys:494,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6326,AvailPageFile:1403,SelfWorkingSet:10124, SelfPageFile:14008
2025-08-02 17:15:15 [Info] CommitTotal:4922,CommitLimit:6326,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:494,SystemCache:265,KernelTotal:271,KernelPaged:190,KernelNonpaged:80,PageSize:4096,HandleCount:27332,ProcessCount:53,ThreadCount:735
2025-08-02 18:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10048","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10140","aliyundun_upload_time":"1754129321","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 18:16:12 [Info] TotalPhys:2047,AvailPhys:484,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6326,AvailPageFile:1392,SelfWorkingSet:10124, SelfPageFile:13972
2025-08-02 18:16:12 [Info] CommitTotal:4934,CommitLimit:6326,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:484,SystemCache:279,KernelTotal:272,KernelPaged:192,KernelNonpaged:80,PageSize:4096,HandleCount:27326,ProcessCount:53,ThreadCount:740
2025-08-02 19:02:39 [Info] GetMessage : T_MSG_CHECK
2025-08-02 19:02:39 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQxMzI1NTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0MTc1NzU5LCJzdWIiOiJSVEFQX0lEWF8xNTk2NDlfMTc1NDEzMjU1OTI4MCJ9.nJzA8L0Z3qY8sPFlHUIVywz1Yzx-nkl9di2rRrukXdU has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 19:02:49 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 19:02:49 [Info] ipc client:Rtap192951754132569_handler Reg client_name:Rtap192951754132569 on WhiteList
2025-08-02 19:02:49 [Info] start rtap process success, pid is 4768, argument is Rtap192951754132569
2025-08-02 19:02:50 [Info] New ClientConnectNotify : Rtap192951754132569, id is 000001E4
2025-08-02 19:02:51 [Info] Rtap Platform Rtap192951754132569 execv work --secnet_rasp_agent on pid 4768
2025-08-02 19:02:51 [Info] csrss.exe open proc 4768 AliSecCheck.ex
2025-08-02 19:02:51 [Info] ipc client:Rtap192951754132569 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 19:02:52 [Info] csrss.exe open thread 4768 AliSecCheck.ex
2025-08-02 19:02:53 [Info] csrss.exe open thread 4768 AliSecCheck.ex
2025-08-02 19:02:54 [Info] csrss.exe open thread 4768 AliSecCheck.ex
2025-08-02 19:02:55 [Info] csrss.exe open thread 4768 AliSecCheck.ex
2025-08-02 19:02:58 [Info] Done Work --secnet_rasp_agent:1
2025-08-02 19:02:58 [Info] Rtap Platform Rtap192951754132569 Exit:normal exit
2025-08-02 19:03:00 [Info] ClientDisConnectNotify : Rtap192951754132569, id is 000001E4
2025-08-02 19:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10113","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10276","aliyundun_upload_time":"1754132927","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 19:17:08 [Info] TotalPhys:2047,AvailPhys:477,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6326,AvailPageFile:1390,SelfWorkingSet:10008, SelfPageFile:13972
2025-08-02 19:17:08 [Info] CommitTotal:4935,CommitLimit:6326,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:477,SystemCache:247,KernelTotal:275,KernelPaged:194,KernelNonpaged:80,PageSize:4096,HandleCount:27333,ProcessCount:53,ThreadCount:740
2025-08-02 19:25:56 [Info] nCurrentClock is 1998090900, nCurrentTime is 1754133956
2025-08-02 19:25:56 [Info] SendMessage T_MSG_LOGIN
2025-08-02 19:25:57 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-02 19:25:57 [Info] begin to enable self guard after reconnect
2025-08-02 19:25:57 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-02 19:25:57 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-02 19:25:57 [Info] GetMessage : T_MSG_CHECK
2025-08-02 19:25:57 [Info] task 2fc0a1bc-d449-4083-9ba1-61bc93c72590 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-02 19:26:05 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-02 19:26:05 [Info] key : cpu, value : 10
2025-08-02 19:26:05 [Info] key : rio, value : 20480
2025-08-02 19:26:05 [Info] key : wio, value : 20480
2025-08-02 19:26:05 [Info] key : cpu_all, value : 0
2025-08-02 19:26:05 [Info] key : max_pid_check, value : 200
2025-08-02 19:26:05 [Info] key : throw_dump, value : 0
2025-08-02 19:26:05 [Info] key : hash_mode, value : 1
2025-08-02 19:26:05 [Info] key : mem, value : 200
2025-08-02 19:26:05 [Info] can not find key max_fd in online conf
2025-08-02 19:26:05 [Info] key : proc_limit, value : 1
2025-08-02 19:26:05 [Info] key : resource_limit_mode, value : 3
2025-08-02 19:26:05 [Info] key : rtap_update_mode, value : 1
2025-08-02 19:26:05 [Info] can not find key debug in online conf
2025-08-02 19:26:05 [Info] can not find key update_mode in online conf
2025-08-02 19:26:05 [Info] can not find key http_mode in online conf
2025-08-02 19:26:05 [Info] can not find key rtap_enable in online conf
2025-08-02 19:26:05 [Info] can not find key rtap_new_agent in online conf
2025-08-02 19:26:05 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-02 19:26:05 [Info] can not find key mem_low_mark in online conf
2025-08-02 19:26:05 [Info] can not find key obnormal_report_interval in online conf
2025-08-02 19:26:05 [Info] key : cache_mode, value : 0
2025-08-02 19:26:05 [Info] key : abnormal_monitor_mode, value : 3
2025-08-02 19:26:05 [Info] key : queue_size_ratio, value : 80
2025-08-02 19:26:05 [Info] queue_size_ratio is 80
2025-08-02 19:26:05 [Info] resource limit mode and max limit cpu is not change
2025-08-02 19:26:05 [Info] set hash mode 1
2025-08-02 19:26:05 [Info] RTAP timeout config:9600000
2025-08-02 19:26:05 [Info] self_guard_mode config is 0
2025-08-02 19:26:08 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-02 19:26:08 [Info] ipc client:Rtap238631754133968_handler Reg client_name:Rtap238631754133968 on WhiteList
2025-08-02 19:26:08 [Info] start rtap process success, pid is 1656, argument is Rtap238631754133968
2025-08-02 19:26:09 [Info] New ClientConnectNotify : Rtap238631754133968, id is 00000504
2025-08-02 19:26:09 [Info] Rtap Platform Rtap238631754133968 execv work --windows-sysinfoext-check on pid 1656
2025-08-02 19:26:09 [Info] ipc client:Rtap238631754133968 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-02 19:26:10 [Info] csrss.exe open proc 1656 AliSecCheck.ex
2025-08-02 19:26:11 [Info] csrss.exe open thread 1656 AliSecCheck.ex
2025-08-02 19:26:13 [Info] get meta data success by v2
2025-08-02 19:26:13 [Info] get empty metaserver config
2025-08-02 19:26:13 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-02 19:26:13 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-02 19:26:13 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-02 19:26:13 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-02 19:26:13 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 19:26:13 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 19:26:13 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-02 19:26:13 [Info] download cert compare md5 same
2025-08-02 19:26:13 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 19:26:13 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 19:26:13 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-02 19:26:20 [Info] Done Work --windows-sysinfoext-check:1
2025-08-02 19:26:20 [Info] Rtap Platform Rtap238631754133968 Exit:normal exit
2025-08-02 19:26:24 [Info] ClientDisConnectNotify : Rtap238631754133968, id is 00000504
2025-08-02 20:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9949","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10088","aliyundun_upload_time":"1754136525","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 20:18:06 [Info] TotalPhys:2047,AvailPhys:431,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6326,AvailPageFile:1331,SelfWorkingSet:10084, SelfPageFile:13760
2025-08-02 20:18:06 [Info] CommitTotal:4995,CommitLimit:6326,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:431,SystemCache:243,KernelTotal:276,KernelPaged:195,KernelNonpaged:81,PageSize:4096,HandleCount:27367,ProcessCount:53,ThreadCount:747
2025-08-02 21:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10012","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10116","aliyundun_upload_time":"1754140136","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 21:19:03 [Info] TotalPhys:2047,AvailPhys:532,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6415,AvailPageFile:1444,SelfWorkingSet:9916, SelfPageFile:13676
2025-08-02 21:19:03 [Info] CommitTotal:4971,CommitLimit:6415,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:532,SystemCache:132,KernelTotal:259,KernelPaged:182,KernelNonpaged:77,PageSize:4096,HandleCount:27431,ProcessCount:53,ThreadCount:735
2025-08-02 22:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9914","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10036","aliyundun_upload_time":"1754143714","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 22:20:00 [Info] TotalPhys:2047,AvailPhys:500,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6415,AvailPageFile:1418,SelfWorkingSet:9972, SelfPageFile:13656
2025-08-02 22:20:00 [Info] CommitTotal:4997,CommitLimit:6415,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:500,SystemCache:154,KernelTotal:259,KernelPaged:182,KernelNonpaged:77,PageSize:4096,HandleCount:27322,ProcessCount:53,ThreadCount:733
2025-08-02 22:43:39 [Info] get meta data success by v2
2025-08-02 22:43:39 [Info] get empty metaserver config
2025-08-02 22:43:39 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-02 22:43:39 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-02 22:43:39 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-02 22:43:39 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-02 22:43:39 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 22:43:39 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-02 22:43:39 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-02 22:43:39 [Info] download cert compare md5 same
2025-08-02 22:43:39 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 22:43:39 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-02 22:43:39 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-02 23:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9961","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"5","aliyundun_max_mem":"10096","aliyundun_upload_time":"1754147326","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-02 23:20:57 [Info] TotalPhys:2047,AvailPhys:474,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6415,AvailPageFile:1394,SelfWorkingSet:10112, SelfPageFile:14032
2025-08-02 23:20:57 [Info] CommitTotal:5021,CommitLimit:6415,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:474,SystemCache:192,KernelTotal:260,KernelPaged:183,KernelNonpaged:77,PageSize:4096,HandleCount:27573,ProcessCount:53,ThreadCount:755
2025-08-03 00:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10078","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10136","aliyundun_upload_time":"1754150934","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 00:37:37 [Info] TotalPhys:2047,AvailPhys:501,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1152,SelfWorkingSet:10128, SelfPageFile:13864
2025-08-09 00:37:37 [Info] CommitTotal:5043,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:501,SystemCache:265,KernelTotal:264,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:27337,ProcessCount:52,ThreadCount:736
2025-08-09 01:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10074","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10136","aliyundun_upload_time":"1754672919","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 01:18:43 [Info] GetMessage : T_MSG_CHECK
2025-08-09 01:18:43 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ2NzM1MjMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NzE2NzIzLCJzdWIiOiJSVEFQX0lEWF8xNjAxMzBfMTc1NDY3MzUyMzU4MSJ9.HaXUC7quGdfdPAacYce4syrCrNFO-O5jSuIWS2PWgmo has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 01:18:52 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 01:18:52 [Info] ipc client:Rtap163801754673532_handler Reg client_name:Rtap163801754673532 on WhiteList
2025-08-09 01:18:52 [Info] start rtap process success, pid is 4792, argument is Rtap163801754673532
2025-08-09 01:18:52 [Info] New ClientConnectNotify : Rtap163801754673532, id is 00000504
2025-08-09 01:18:52 [Info] ipc client:Rtap163801754673532 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 01:18:52 [Info] Rtap Platform Rtap163801754673532 execv work --sca on pid 4792
2025-08-09 01:18:53 [Info] csrss.exe open proc 4792 AliSecCheck.ex
2025-08-09 01:18:54 [Info] csrss.exe open thread 4792 AliSecCheck.ex
2025-08-09 01:19:36 [Info] csrss.exe open thread 4792 AliSecCheck.ex
2025-08-09 01:20:01 [Info] Done Work --sca:1
2025-08-09 01:20:01 [Info] Rtap Platform Rtap163801754673532 Exit:normal exit
2025-08-09 01:20:03 [Info] ClientDisConnectNotify : Rtap163801754673532, id is 00000504
2025-08-09 01:38:34 [Info] TotalPhys:2047,AvailPhys:492,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1144,SelfWorkingSet:10036, SelfPageFile:13840
2025-08-09 01:38:34 [Info] CommitTotal:5051,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:492,SystemCache:275,KernelTotal:265,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:27368,ProcessCount:52,ThreadCount:730
2025-08-09 02:08:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10070","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10124","aliyundun_upload_time":"1754676533","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 02:39:31 [Info] TotalPhys:2047,AvailPhys:478,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1108,SelfWorkingSet:10032, SelfPageFile:13832
2025-08-09 02:39:31 [Info] CommitTotal:5087,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:478,SystemCache:166,KernelTotal:261,KernelPaged:183,KernelNonpaged:77,PageSize:4096,HandleCount:27336,ProcessCount:52,ThreadCount:729
2025-08-09 02:53:39 [Info] get meta data success by v2
2025-08-09 02:53:39 [Info] get empty metaserver config
2025-08-09 02:53:39 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-09 02:53:39 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-09 02:53:39 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-09 02:53:39 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-09 02:53:39 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 02:53:39 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 02:53:40 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-09 02:53:40 [Info] download cert compare md5 same
2025-08-09 02:53:40 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 02:53:40 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 02:53:40 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-09 03:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10065","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10164","aliyundun_upload_time":"1754680141","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 03:40:27 [Info] TotalPhys:2047,AvailPhys:492,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1120,SelfWorkingSet:10024, SelfPageFile:13804
2025-08-09 03:40:27 [Info] CommitTotal:5075,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:492,SystemCache:167,KernelTotal:261,KernelPaged:184,KernelNonpaged:77,PageSize:4096,HandleCount:27335,ProcessCount:52,ThreadCount:733
2025-08-09 04:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10031","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10096","aliyundun_upload_time":"1754683718","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 04:41:24 [Info] TotalPhys:2047,AvailPhys:483,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1111,SelfWorkingSet:10104, SelfPageFile:13976
2025-08-09 04:41:24 [Info] CommitTotal:5085,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:483,SystemCache:192,KernelTotal:262,KernelPaged:184,KernelNonpaged:77,PageSize:4096,HandleCount:27318,ProcessCount:52,ThreadCount:726
2025-08-09 05:04:50 [Info] nCurrentClock is 2502110900, nCurrentTime is 1754687090
2025-08-09 05:04:50 [Info] SendMessage T_MSG_LOGIN
2025-08-09 05:04:50 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-09 05:04:50 [Info] begin to enable self guard after reconnect
2025-08-09 05:04:50 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-09 05:04:50 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-09 05:04:50 [Info] GetMessage : T_MSG_CHECK
2025-08-09 05:04:50 [Info] task 48a1db78-3899-44ce-a192-e475a7aa0899 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 05:04:58 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-09 05:04:58 [Info] key : cpu, value : 10
2025-08-09 05:04:58 [Info] key : rio, value : 20480
2025-08-09 05:04:58 [Info] key : wio, value : 20480
2025-08-09 05:04:58 [Info] key : cpu_all, value : 0
2025-08-09 05:04:58 [Info] key : max_pid_check, value : 200
2025-08-09 05:04:58 [Info] key : throw_dump, value : 0
2025-08-09 05:04:58 [Info] key : hash_mode, value : 1
2025-08-09 05:04:58 [Info] key : mem, value : 200
2025-08-09 05:04:58 [Info] can not find key max_fd in online conf
2025-08-09 05:04:58 [Info] key : proc_limit, value : 1
2025-08-09 05:04:58 [Info] key : resource_limit_mode, value : 3
2025-08-09 05:04:58 [Info] key : rtap_update_mode, value : 1
2025-08-09 05:04:58 [Info] can not find key debug in online conf
2025-08-09 05:04:58 [Info] can not find key update_mode in online conf
2025-08-09 05:04:58 [Info] can not find key http_mode in online conf
2025-08-09 05:04:58 [Info] can not find key rtap_enable in online conf
2025-08-09 05:04:58 [Info] can not find key rtap_new_agent in online conf
2025-08-09 05:04:58 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-09 05:04:58 [Info] can not find key mem_low_mark in online conf
2025-08-09 05:04:58 [Info] can not find key obnormal_report_interval in online conf
2025-08-09 05:04:58 [Info] key : cache_mode, value : 0
2025-08-09 05:04:58 [Info] key : abnormal_monitor_mode, value : 3
2025-08-09 05:04:58 [Info] key : queue_size_ratio, value : 80
2025-08-09 05:04:58 [Info] queue_size_ratio is 80
2025-08-09 05:04:58 [Info] resource limit mode and max limit cpu is not change
2025-08-09 05:04:58 [Info] set hash mode 1
2025-08-09 05:04:58 [Info] RTAP timeout config:9600000
2025-08-09 05:04:58 [Info] self_guard_mode config is 0
2025-08-09 05:04:58 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-09 05:05:03 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 05:05:03 [Info] ipc client:Rtap279301754687103_handler Reg client_name:Rtap279301754687103 on WhiteList
2025-08-09 05:05:03 [Info] start rtap process success, pid is 4796, argument is Rtap279301754687103
2025-08-09 05:05:03 [Info] New ClientConnectNotify : Rtap279301754687103, id is 0000053C
2025-08-09 05:05:03 [Info] ipc client:Rtap279301754687103 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 05:05:04 [Info] Rtap Platform Rtap279301754687103 execv work --windows-sysinfoext-check on pid 4796
2025-08-09 05:05:05 [Info] csrss.exe open proc 4796 AliSecCheck.ex
2025-08-09 05:05:06 [Info] csrss.exe open thread 4796 AliSecCheck.ex
2025-08-09 05:05:11 [Info] Done Work --windows-sysinfoext-check:1
2025-08-09 05:05:11 [Info] Rtap Platform Rtap279301754687103 Exit:normal exit
2025-08-09 05:05:13 [Info] ClientDisConnectNotify : Rtap279301754687103, id is 0000053C
2025-08-09 05:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10088","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10180","aliyundun_upload_time":"1754687332","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 05:42:22 [Info] TotalPhys:2047,AvailPhys:495,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1118,SelfWorkingSet:9984, SelfPageFile:13764
2025-08-09 05:42:22 [Info] CommitTotal:5077,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:495,SystemCache:257,KernelTotal:265,KernelPaged:188,KernelNonpaged:77,PageSize:4096,HandleCount:27350,ProcessCount:52,ThreadCount:736
2025-08-09 06:08:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9981","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10060","aliyundun_upload_time":"1754690911","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 06:11:01 [Info] get meta data success by v2
2025-08-09 06:11:01 [Info] get empty metaserver config
2025-08-09 06:11:01 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-09 06:11:02 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-09 06:11:02 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-09 06:11:02 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-09 06:11:02 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 06:11:02 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 06:11:02 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-09 06:11:02 [Info] download cert compare md5 same
2025-08-09 06:11:02 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 06:11:02 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 06:11:02 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-09 06:43:23 [Info] TotalPhys:2047,AvailPhys:452,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1121,SelfWorkingSet:9900, SelfPageFile:13736
2025-08-09 06:43:23 [Info] CommitTotal:5075,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:452,SystemCache:298,KernelTotal:267,KernelPaged:187,KernelNonpaged:79,PageSize:4096,HandleCount:27321,ProcessCount:52,ThreadCount:729
2025-08-09 07:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9960","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10084","aliyundun_upload_time":"1754694522","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-08-09 07:44:20 [Info] TotalPhys:2047,AvailPhys:459,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1113,SelfWorkingSet:9904, SelfPageFile:13796
2025-08-09 07:44:20 [Info] CommitTotal:5082,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:459,SystemCache:276,KernelTotal:273,KernelPaged:192,KernelNonpaged:81,PageSize:4096,HandleCount:27312,ProcessCount:52,ThreadCount:726
2025-08-09 08:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9938","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9992","aliyundun_upload_time":"1754698134","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 08:45:20 [Info] TotalPhys:2047,AvailPhys:450,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1118,SelfWorkingSet:9896, SelfPageFile:13724
2025-08-09 08:45:20 [Info] CommitTotal:5078,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:450,SystemCache:278,KernelTotal:273,KernelPaged:191,KernelNonpaged:81,PageSize:4096,HandleCount:27336,ProcessCount:52,ThreadCount:732
2025-08-09 08:51:36 [Info] GetMessage : T_MSG_CHECK
2025-08-09 08:51:36 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ3MDA2OTYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NzQzODk2LCJzdWIiOiJSVEFQX0lEWF8xNjAxMjBfMTc1NDcwMDY5Njg1NSJ9.qDdmEqCV0nxNCBZCNn0EquTnr96-mZy3RizbHGEaRf4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 08:51:49 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 08:51:49 [Info] ipc client:Rtap68251754700709_handler Reg client_name:Rtap68251754700709 on WhiteList
2025-08-09 08:51:49 [Info] start rtap process success, pid is 4024, argument is Rtap68251754700709
2025-08-09 08:51:49 [Info] New ClientConnectNotify : Rtap68251754700709, id is 000004D8
2025-08-09 08:51:49 [Info] ipc client:Rtap68251754700709 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 08:51:49 [Info] Rtap Platform Rtap68251754700709 execv work --windows-process-check on pid 4024
2025-08-09 08:51:50 [Info] csrss.exe open proc 4024 AliSecCheck.ex
2025-08-09 08:51:51 [Info] csrss.exe open thread 4024 AliSecCheck.ex
2025-08-09 08:52:13 [Info] Done Work --windows-process-check:1
2025-08-09 08:52:13 [Info] Rtap Platform Rtap68251754700709 Exit:normal exit
2025-08-09 08:52:15 [Info] ClientDisConnectNotify : Rtap68251754700709, id is 000004D8
2025-08-09 09:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9967","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10080","aliyundun_upload_time":"1754701713","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 09:29:34 [Info] get meta data success by v2
2025-08-09 09:29:34 [Info] get empty metaserver config
2025-08-09 09:29:34 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-09 09:29:35 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-09 09:29:35 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-09 09:29:35 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-09 09:29:35 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 09:29:35 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 09:29:35 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-09 09:29:35 [Info] download cert compare md5 same
2025-08-09 09:29:35 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 09:29:35 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 09:29:35 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-09 09:46:18 [Info] TotalPhys:2047,AvailPhys:453,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6196,AvailPageFile:1103,SelfWorkingSet:10004, SelfPageFile:13788
2025-08-09 09:46:18 [Info] CommitTotal:5092,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:453,SystemCache:271,KernelTotal:273,KernelPaged:191,KernelNonpaged:81,PageSize:4096,HandleCount:27353,ProcessCount:52,ThreadCount:735
2025-08-09 09:58:00 [Info] GetMessage : T_MSG_CHECK
2025-08-09 09:58:00 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ3MDQ2ODAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NzQ3ODgwLCJzdWIiOiJSVEFQX0lEWF8xNjAxMjFfMTc1NDcwNDY4MDQ5MiJ9.8PfDsYr42PrRhVVlH-mEsQqUzCY8U2X5gRt3dNEakBs has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 09:58:11 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 09:58:11 [Info] ipc client:Rtap198291754704691_handler Reg client_name:Rtap198291754704691 on WhiteList
2025-08-09 09:58:11 [Info] start rtap process success, pid is 2644, argument is Rtap198291754704691
2025-08-09 09:58:11 [Info] New ClientConnectNotify : Rtap198291754704691, id is 00000540
2025-08-09 09:58:11 [Info] Rtap Platform Rtap198291754704691 execv work --tcp-connect-check on pid 2644
2025-08-09 09:58:12 [Info] ipc client:Rtap198291754704691 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 09:58:13 [Info] csrss.exe open proc 2644 AliSecCheck.ex
2025-08-09 09:58:14 [Info] csrss.exe open thread 2644 AliSecCheck.ex
2025-08-09 09:58:26 [Info] Done Work --tcp-connect-check:1
2025-08-09 09:58:26 [Info] Rtap Platform Rtap198291754704691 Exit:normal exit
2025-08-09 09:58:28 [Info] ClientDisConnectNotify : Rtap198291754704691, id is 00000540
2025-08-09 10:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9993","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10084","aliyundun_upload_time":"1754705329","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 10:16:10 [Info] GetMessage : T_MSG_CHECK
2025-08-09 10:16:10 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ3MDU3NzAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NzQ4OTcwLCJzdWIiOiJSVEFQX0lEWF8xNjAxMjlfMTc1NDcwNTc3MDM5MSJ9.oNRASEhSpSgF9QE_7slHfJH9V5w-UHYJJElvvzhQ27g has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 10:16:19 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 10:16:19 [Info] ipc client:Rtap233821754705779_handler Reg client_name:Rtap233821754705779 on WhiteList
2025-08-09 10:16:19 [Info] start rtap process success, pid is 4088, argument is Rtap233821754705779
2025-08-09 10:16:19 [Info] New ClientConnectNotify : Rtap233821754705779, id is 000004F8
2025-08-09 10:16:19 [Info] Rtap Platform Rtap233821754705779 execv work --windows-registry-check on pid 4088
2025-08-09 10:16:20 [Info] ipc client:Rtap233821754705779 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 10:16:20 [Info] csrss.exe open proc 4088 AliSecCheck.ex
2025-08-09 10:16:21 [Info] csrss.exe open thread 4088 AliSecCheck.ex
2025-08-09 10:16:26 [Info] GetMessage : T_MSG_CHECK
2025-08-09 10:16:26 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTMxNzk2OTQsImlhdCI6MTc1NDcwNTc4NiwiaXNzIjoiUlRBUCIsImF1ZCI6IlJUQVAiLCJleHAiOjE3NTQ3NDg5ODZ9.X-_ZbSVKfRkuPovLxl188JPomr_OOcWc0iTR-k7kiqo has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 10:16:36 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 10:16:36 [Info] ipc client:Rtap234371754705796_handler Reg client_name:Rtap234371754705796 on WhiteList
2025-08-09 10:16:36 [Info] start rtap process success, pid is 1588, argument is Rtap234371754705796
2025-08-09 10:16:36 [Info] New ClientConnectNotify : Rtap234371754705796, id is 00000540
2025-08-09 10:16:37 [Info] ipc client:Rtap234371754705796 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 10:16:37 [Info] Rtap Platform Rtap234371754705796 execv work --windows-schedule-task-check on pid 1588
2025-08-09 10:16:37 [Info] csrss.exe open proc 1588 AliSecCheck.ex
2025-08-09 10:16:38 [Info] csrss.exe open thread 1588 AliSecCheck.ex
2025-08-09 10:16:56 [Info] Done Work --windows-registry-check:1
2025-08-09 10:16:56 [Info] Rtap Platform Rtap233821754705779 Exit:normal exit
2025-08-09 10:16:58 [Info] ClientDisConnectNotify : Rtap233821754705779, id is 000004F8
2025-08-09 10:17:15 [Info] Done Work --windows-schedule-task-check:1
2025-08-09 10:17:15 [Info] Rtap Platform Rtap234371754705796 Exit:normal exit
2025-08-09 10:17:17 [Info] ClientDisConnectNotify : Rtap234371754705796, id is 00000540
2025-08-09 10:17:50 [Info] GetMessage : T_MSG_CHECK
2025-08-09 10:17:50 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ3MDU4NzAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NzQ5MDcwLCJzdWIiOiJSVEFQX0lEWF8xNjAxMzdfMTc1NDcwNTg3MDY0MiJ9.zampVlbx1XPR7iGc9BhBzzBLPF4pMjG-CZMXhkQZTXI has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 10:17:59 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 10:17:59 [Info] ipc client:Rtap237081754705879_handler Reg client_name:Rtap237081754705879 on WhiteList
2025-08-09 10:17:59 [Info] start rtap process success, pid is 4448, argument is Rtap237081754705879
2025-08-09 10:17:59 [Info] New ClientConnectNotify : Rtap237081754705879, id is 000004D8
2025-08-09 10:17:59 [Info] ipc client:Rtap237081754705879 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 10:18:00 [Info] Rtap Platform Rtap237081754705879 execv work --windows-driver-version-check on pid 4448
2025-08-09 10:18:02 [Info] csrss.exe open proc 4448 AliSecCheck.ex
2025-08-09 10:18:03 [Info] csrss.exe open thread 4448 AliSecCheck.ex
2025-08-09 10:18:07 [Info] Done Work --windows-driver-version-check:1
2025-08-09 10:18:07 [Info] Rtap Platform Rtap237081754705879 Exit:normal exit
2025-08-09 10:18:09 [Info] ClientDisConnectNotify : Rtap237081754705879, id is 000004D8
2025-08-09 10:35:00 [Info] nCurrentClock is 2520111500, nCurrentTime is 1754706900
2025-08-09 10:35:00 [Info] SendMessage T_MSG_LOGIN
2025-08-09 10:35:00 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-09 10:35:00 [Info] begin to enable self guard after reconnect
2025-08-09 10:35:00 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-09 10:35:00 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-09 10:35:00 [Info] GetMessage : T_MSG_CHECK
2025-08-09 10:35:00 [Info] task c2a1b5b8-3501-47ff-b3e0-c65ec0a3adcd has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 10:35:08 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-09 10:35:08 [Info] key : cpu, value : 10
2025-08-09 10:35:08 [Info] key : rio, value : 20480
2025-08-09 10:35:08 [Info] key : wio, value : 20480
2025-08-09 10:35:08 [Info] key : cpu_all, value : 0
2025-08-09 10:35:08 [Info] key : max_pid_check, value : 200
2025-08-09 10:35:08 [Info] key : throw_dump, value : 0
2025-08-09 10:35:08 [Info] key : hash_mode, value : 1
2025-08-09 10:35:08 [Info] key : mem, value : 200
2025-08-09 10:35:08 [Info] can not find key max_fd in online conf
2025-08-09 10:35:08 [Info] key : proc_limit, value : 1
2025-08-09 10:35:08 [Info] key : resource_limit_mode, value : 3
2025-08-09 10:35:08 [Info] key : rtap_update_mode, value : 1
2025-08-09 10:35:08 [Info] can not find key debug in online conf
2025-08-09 10:35:08 [Info] can not find key update_mode in online conf
2025-08-09 10:35:08 [Info] can not find key http_mode in online conf
2025-08-09 10:35:08 [Info] can not find key rtap_enable in online conf
2025-08-09 10:35:08 [Info] can not find key rtap_new_agent in online conf
2025-08-09 10:35:08 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-09 10:35:08 [Info] can not find key mem_low_mark in online conf
2025-08-09 10:35:08 [Info] can not find key obnormal_report_interval in online conf
2025-08-09 10:35:08 [Info] key : cache_mode, value : 0
2025-08-09 10:35:08 [Info] key : abnormal_monitor_mode, value : 3
2025-08-09 10:35:08 [Info] key : queue_size_ratio, value : 80
2025-08-09 10:35:08 [Info] queue_size_ratio is 80
2025-08-09 10:35:08 [Info] resource limit mode and max limit cpu is not change
2025-08-09 10:35:08 [Info] set hash mode 1
2025-08-09 10:35:08 [Info] RTAP timeout config:9600000
2025-08-09 10:35:08 [Info] self_guard_mode config is 0
2025-08-09 10:35:12 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 10:35:12 [Info] ipc client:Rtap270821754706912_handler Reg client_name:Rtap270821754706912 on WhiteList
2025-08-09 10:35:12 [Info] start rtap process success, pid is 4656, argument is Rtap270821754706912
2025-08-09 10:35:12 [Info] New ClientConnectNotify : Rtap270821754706912, id is 00000540
2025-08-09 10:35:12 [Info] ipc client:Rtap270821754706912 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 10:35:13 [Info] Rtap Platform Rtap270821754706912 execv work --windows-sysinfoext-check on pid 4656
2025-08-09 10:35:13 [Info] csrss.exe open proc 4656 AliSecCheck.ex
2025-08-09 10:35:14 [Info] csrss.exe open thread 4656 AliSecCheck.ex
2025-08-09 10:35:20 [Info] Done Work --windows-sysinfoext-check:1
2025-08-09 10:35:20 [Info] Rtap Platform Rtap270821754706912 Exit:normal exit
2025-08-09 10:35:22 [Info] ClientDisConnectNotify : Rtap270821754706912, id is 00000540
2025-08-09 10:47:16 [Info] TotalPhys:2047,AvailPhys:448,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1100,SelfWorkingSet:10108, SelfPageFile:13820
2025-08-09 10:47:16 [Info] CommitTotal:5095,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:448,SystemCache:267,KernelTotal:272,KernelPaged:191,KernelNonpaged:81,PageSize:4096,HandleCount:27519,ProcessCount:53,ThreadCount:745
2025-08-09 11:05:46 [Info] GetMessage : T_MSG_CHECK
2025-08-09 11:05:46 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ3MDg3NDYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NzUxOTQ2LCJzdWIiOiJSVEFQX0lEWF8xNjAxMjZfMTc1NDcwODc0NjMzNiJ9.57t6rYF45pDNTu3tLDb_ZvY1s9fcPojEfI9bKM6ATX4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 11:05:56 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 11:05:56 [Info] ipc client:Rtap3351754708756_handler Reg client_name:Rtap3351754708756 on WhiteList
2025-08-09 11:05:56 [Info] start rtap process success, pid is 4900, argument is Rtap3351754708756
2025-08-09 11:05:56 [Info] New ClientConnectNotify : Rtap3351754708756, id is 000004D8
2025-08-09 11:05:56 [Info] Rtap Platform Rtap3351754708756 execv work --windows-autorun-item-check on pid 4900
2025-08-09 11:05:57 [Info] ipc client:Rtap3351754708756 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 11:05:59 [Info] csrss.exe open proc 4900 AliSecCheck.ex
2025-08-09 11:06:00 [Info] csrss.exe open thread 4900 AliSecCheck.ex
2025-08-09 11:06:12 [Info] Done Work --windows-autorun-item-check:1
2025-08-09 11:06:12 [Info] Rtap Platform Rtap3351754708756 Exit:normal exit
2025-08-09 11:06:14 [Info] ClientDisConnectNotify : Rtap3351754708756, id is 000004D8
2025-08-09 11:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10114","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10260","aliyundun_upload_time":"1754708921","aliyundun_write_pid_times":"0","ipc_send_count":"159","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 11:48:12 [Info] TotalPhys:2047,AvailPhys:461,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1110,SelfWorkingSet:10116, SelfPageFile:13848
2025-08-09 11:48:12 [Info] CommitTotal:5085,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:461,SystemCache:276,KernelTotal:272,KernelPaged:191,KernelNonpaged:81,PageSize:4096,HandleCount:27343,ProcessCount:52,ThreadCount:730
2025-08-09 12:08:44 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10132","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10188","aliyundun_upload_time":"1754712524","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 12:46:57 [Info] get meta data success by v2
2025-08-09 12:46:57 [Info] get empty metaserver config
2025-08-09 12:46:57 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-09 12:46:57 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-09 12:46:57 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-09 12:46:57 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-09 12:46:57 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 12:46:57 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 12:46:57 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-09 12:46:58 [Info] download cert compare md5 same
2025-08-09 12:46:58 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 12:46:58 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 12:46:58 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-09 12:49:09 [Info] TotalPhys:2047,AvailPhys:445,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6196,AvailPageFile:1101,SelfWorkingSet:10044, SelfPageFile:13948
2025-08-09 12:49:09 [Info] CommitTotal:5094,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:445,SystemCache:246,KernelTotal:275,KernelPaged:194,KernelNonpaged:81,PageSize:4096,HandleCount:27352,ProcessCount:52,ThreadCount:738
2025-08-09 13:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10040","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10124","aliyundun_upload_time":"1754716132","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 13:50:06 [Info] TotalPhys:2047,AvailPhys:453,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6196,AvailPageFile:1099,SelfWorkingSet:10044, SelfPageFile:13788
2025-08-09 13:50:06 [Info] CommitTotal:5096,CommitLimit:6196,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:453,SystemCache:247,KernelTotal:276,KernelPaged:195,KernelNonpaged:81,PageSize:4096,HandleCount:27344,ProcessCount:52,ThreadCount:728
2025-08-09 14:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10024","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10076","aliyundun_upload_time":"1754719741","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 14:51:02 [Info] TotalPhys:2047,AvailPhys:615,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6567,AvailPageFile:1493,SelfWorkingSet:9880, SelfPageFile:13592
2025-08-09 14:51:02 [Info] CommitTotal:5074,CommitLimit:6567,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:615,SystemCache:131,KernelTotal:259,KernelPaged:182,KernelNonpaged:77,PageSize:4096,HandleCount:27336,ProcessCount:52,ThreadCount:723
2025-08-09 15:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9929","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10092","aliyundun_upload_time":"1754723317","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 15:51:59 [Info] TotalPhys:2047,AvailPhys:613,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6567,AvailPageFile:1497,SelfWorkingSet:9984, SelfPageFile:13636
2025-08-09 15:51:59 [Info] CommitTotal:5070,CommitLimit:6567,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:613,SystemCache:178,KernelTotal:259,KernelPaged:182,KernelNonpaged:77,PageSize:4096,HandleCount:27357,ProcessCount:52,ThreadCount:730
2025-08-09 16:03:56 [Info] nCurrentClock is 2538112100, nCurrentTime is 1754726636
2025-08-09 16:03:56 [Info] SendMessage T_MSG_LOGIN
2025-08-09 16:03:56 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-09 16:03:56 [Info] begin to enable self guard after reconnect
2025-08-09 16:03:56 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-09 16:03:56 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-09 16:03:56 [Info] GetMessage : T_MSG_CHECK
2025-08-09 16:03:56 [Info] task d08a8199-9799-4e81-b99b-273235f53e3c has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 16:04:04 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-09 16:04:04 [Info] key : cpu, value : 10
2025-08-09 16:04:04 [Info] key : rio, value : 20480
2025-08-09 16:04:04 [Info] key : wio, value : 20480
2025-08-09 16:04:04 [Info] key : cpu_all, value : 0
2025-08-09 16:04:04 [Info] key : max_pid_check, value : 200
2025-08-09 16:04:04 [Info] key : throw_dump, value : 0
2025-08-09 16:04:04 [Info] key : hash_mode, value : 1
2025-08-09 16:04:04 [Info] key : mem, value : 200
2025-08-09 16:04:04 [Info] can not find key max_fd in online conf
2025-08-09 16:04:04 [Info] key : proc_limit, value : 1
2025-08-09 16:04:04 [Info] key : resource_limit_mode, value : 3
2025-08-09 16:04:04 [Info] key : rtap_update_mode, value : 1
2025-08-09 16:04:04 [Info] can not find key debug in online conf
2025-08-09 16:04:04 [Info] can not find key update_mode in online conf
2025-08-09 16:04:04 [Info] can not find key http_mode in online conf
2025-08-09 16:04:04 [Info] can not find key rtap_enable in online conf
2025-08-09 16:04:04 [Info] can not find key rtap_new_agent in online conf
2025-08-09 16:04:04 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-09 16:04:04 [Info] can not find key mem_low_mark in online conf
2025-08-09 16:04:04 [Info] can not find key obnormal_report_interval in online conf
2025-08-09 16:04:04 [Info] key : cache_mode, value : 0
2025-08-09 16:04:04 [Info] key : abnormal_monitor_mode, value : 3
2025-08-09 16:04:04 [Info] key : queue_size_ratio, value : 80
2025-08-09 16:04:04 [Info] queue_size_ratio is 80
2025-08-09 16:04:04 [Info] resource limit mode and max limit cpu is not change
2025-08-09 16:04:04 [Info] set hash mode 1
2025-08-09 16:04:04 [Info] RTAP timeout config:9600000
2025-08-09 16:04:04 [Info] self_guard_mode config is 0
2025-08-09 16:04:10 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 16:04:10 [Info] ipc client:Rtap260021754726650_handler Reg client_name:Rtap260021754726650 on WhiteList
2025-08-09 16:04:10 [Info] start rtap process success, pid is 3048, argument is Rtap260021754726650
2025-08-09 16:04:12 [Info] csrss.exe open proc 3048 AliSecCheck.ex
2025-08-09 16:04:12 [Info] New ClientConnectNotify : Rtap260021754726650, id is 00000540
2025-08-09 16:04:12 [Info] ipc client:Rtap260021754726650 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 16:04:12 [Info] Rtap Platform Rtap260021754726650 execv work --windows-sysinfoext-check on pid 3048
2025-08-09 16:04:13 [Info] csrss.exe open thread 3048 AliSecCheck.ex
2025-08-09 16:04:14 [Info] csrss.exe open thread 3048 AliSecCheck.ex
2025-08-09 16:04:15 [Info] csrss.exe open thread 3048 AliSecCheck.ex
2025-08-09 16:04:16 [Info] csrss.exe open thread 3048 AliSecCheck.ex
2025-08-09 16:04:22 [Info] get meta data success by v2
2025-08-09 16:04:22 [Info] get empty metaserver config
2025-08-09 16:04:22 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-09 16:04:22 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-09 16:04:22 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-09 16:04:22 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-09 16:04:22 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 16:04:22 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 16:04:22 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-09 16:04:22 [Info] download cert compare md5 same
2025-08-09 16:04:22 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 16:04:22 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 16:04:22 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-09 16:04:23 [Info] Done Work --windows-sysinfoext-check:1
2025-08-09 16:04:23 [Info] Rtap Platform Rtap260021754726650 Exit:normal exit
2025-08-09 16:04:25 [Info] ClientDisConnectNotify : Rtap260021754726650, id is 00000540
2025-08-09 16:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9981","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10080","aliyundun_upload_time":"1754726931","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 16:52:57 [Info] TotalPhys:2047,AvailPhys:634,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6567,AvailPageFile:1506,SelfWorkingSet:10048, SelfPageFile:13780
2025-08-09 16:52:57 [Info] CommitTotal:5061,CommitLimit:6567,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:634,SystemCache:235,KernelTotal:260,KernelPaged:183,KernelNonpaged:77,PageSize:4096,HandleCount:27339,ProcessCount:52,ThreadCount:725
2025-08-09 17:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10039","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10164","aliyundun_upload_time":"1754730540","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 17:53:54 [Info] TotalPhys:2047,AvailPhys:500,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6567,AvailPageFile:1478,SelfWorkingSet:10060, SelfPageFile:13744
2025-08-09 17:53:54 [Info] CommitTotal:5088,CommitLimit:6567,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:500,SystemCache:236,KernelTotal:260,KernelPaged:183,KernelNonpaged:77,PageSize:4096,HandleCount:27500,ProcessCount:52,ThreadCount:734
2025-08-09 18:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10061","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10136","aliyundun_upload_time":"1754734116","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 18:54:51 [Info] TotalPhys:2047,AvailPhys:502,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6567,AvailPageFile:1473,SelfWorkingSet:10028, SelfPageFile:13700
2025-08-09 18:54:51 [Info] CommitTotal:5094,CommitLimit:6567,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:502,SystemCache:241,KernelTotal:260,KernelPaged:183,KernelNonpaged:77,PageSize:4096,HandleCount:27409,ProcessCount:52,ThreadCount:737
2025-08-09 19:02:45 [Info] GetMessage : T_MSG_CHECK
2025-08-09 19:02:45 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTQ3MzczNjUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU0NzgwNTY1LCJzdWIiOiJSVEFQX0lEWF8xNjAxOTZfMTc1NDczNzM2NTQ3MiJ9.MxhvagTfNJk05qXMF-mLizFZ0oqzAJSaxex4TkHj0QE has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 19:02:57 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 19:02:57 [Info] ipc client:Rtap282631754737377_handler Reg client_name:Rtap282631754737377 on WhiteList
2025-08-09 19:02:57 [Info] start rtap process success, pid is 4448, argument is Rtap282631754737377
2025-08-09 19:02:57 [Info] New ClientConnectNotify : Rtap282631754737377, id is 00000504
2025-08-09 19:02:57 [Info] ipc client:Rtap282631754737377 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 19:02:58 [Info] Rtap Platform Rtap282631754737377 execv work --secnet_rasp_agent on pid 4448
2025-08-09 19:03:00 [Info] csrss.exe open proc 4448 AliSecCheck.ex
2025-08-09 19:03:01 [Info] csrss.exe open thread 4448 AliSecCheck.ex
2025-08-09 19:03:02 [Info] csrss.exe open thread 4448 AliSecCheck.ex
2025-08-09 19:03:03 [Info] csrss.exe open thread 4448 AliSecCheck.ex
2025-08-09 19:03:05 [Info] Done Work --secnet_rasp_agent:1
2025-08-09 19:03:05 [Info] Rtap Platform Rtap282631754737377 Exit:normal exit
2025-08-09 19:03:07 [Info] ClientDisConnectNotify : Rtap282631754737377, id is 00000504
2025-08-09 19:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10051","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10112","aliyundun_upload_time":"1754737727","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 19:21:42 [Info] get meta data success by v2
2025-08-09 19:21:42 [Info] get empty metaserver config
2025-08-09 19:21:42 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-09 19:21:42 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-09 19:21:42 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-09 19:21:42 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-09 19:21:42 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 19:21:42 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 19:21:42 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-09 19:21:42 [Info] download cert compare md5 same
2025-08-09 19:21:42 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 19:21:42 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 19:21:42 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-09 19:55:48 [Info] TotalPhys:2047,AvailPhys:479,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6567,AvailPageFile:1475,SelfWorkingSet:9836, SelfPageFile:13516
2025-08-09 19:55:48 [Info] CommitTotal:5092,CommitLimit:6567,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:479,SystemCache:227,KernelTotal:263,KernelPaged:186,KernelNonpaged:77,PageSize:4096,HandleCount:27407,ProcessCount:52,ThreadCount:738
2025-08-09 20:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9947","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10228","aliyundun_upload_time":"1754741336","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 20:56:44 [Info] TotalPhys:2047,AvailPhys:533,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6567,AvailPageFile:1490,SelfWorkingSet:9904, SelfPageFile:13600
2025-08-09 20:56:44 [Info] CommitTotal:5077,CommitLimit:6567,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:533,SystemCache:105,KernelTotal:258,KernelPaged:181,KernelNonpaged:76,PageSize:4096,HandleCount:27777,ProcessCount:53,ThreadCount:748
2025-08-09 21:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9927","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10016","aliyundun_upload_time":"1754744914","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 21:32:55 [Info] nCurrentClock is 2556112600, nCurrentTime is 1754746375
2025-08-09 21:32:56 [Info] SendMessage T_MSG_LOGIN
2025-08-09 21:32:56 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-09 21:32:56 [Info] begin to enable self guard after reconnect
2025-08-09 21:32:56 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-09 21:32:56 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-09 21:32:56 [Info] GetMessage : T_MSG_CHECK
2025-08-09 21:32:56 [Info] task 289cf675-417e-4bfe-ad96-8b2addf4c402 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 21:33:04 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-09 21:33:04 [Info] key : cpu, value : 10
2025-08-09 21:33:04 [Info] key : rio, value : 20480
2025-08-09 21:33:04 [Info] key : wio, value : 20480
2025-08-09 21:33:04 [Info] key : cpu_all, value : 0
2025-08-09 21:33:04 [Info] key : max_pid_check, value : 200
2025-08-09 21:33:04 [Info] key : throw_dump, value : 0
2025-08-09 21:33:04 [Info] key : hash_mode, value : 1
2025-08-09 21:33:04 [Info] key : mem, value : 200
2025-08-09 21:33:04 [Info] can not find key max_fd in online conf
2025-08-09 21:33:04 [Info] key : proc_limit, value : 1
2025-08-09 21:33:04 [Info] key : resource_limit_mode, value : 3
2025-08-09 21:33:04 [Info] key : rtap_update_mode, value : 1
2025-08-09 21:33:04 [Info] can not find key debug in online conf
2025-08-09 21:33:04 [Info] can not find key update_mode in online conf
2025-08-09 21:33:04 [Info] can not find key http_mode in online conf
2025-08-09 21:33:04 [Info] can not find key rtap_enable in online conf
2025-08-09 21:33:04 [Info] can not find key rtap_new_agent in online conf
2025-08-09 21:33:04 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-09 21:33:04 [Info] can not find key mem_low_mark in online conf
2025-08-09 21:33:04 [Info] can not find key obnormal_report_interval in online conf
2025-08-09 21:33:04 [Info] key : cache_mode, value : 0
2025-08-09 21:33:04 [Info] key : abnormal_monitor_mode, value : 3
2025-08-09 21:33:04 [Info] key : queue_size_ratio, value : 80
2025-08-09 21:33:04 [Info] queue_size_ratio is 80
2025-08-09 21:33:04 [Info] resource limit mode and max limit cpu is not change
2025-08-09 21:33:04 [Info] set hash mode 1
2025-08-09 21:33:04 [Info] RTAP timeout config:9600000
2025-08-09 21:33:04 [Info] self_guard_mode config is 0
2025-08-09 21:33:05 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-09 21:33:07 [Info] GetMessage : T_MSG_CHECK
2025-08-09 21:33:07 [Info] task 490cb9bb5f31f03c89ba97fb68d15eb1 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-09 21:33:11 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 21:33:11 [Info] ipc client:Rtap249311754746391_handler Reg client_name:Rtap249311754746391 on WhiteList
2025-08-09 21:33:11 [Info] start rtap process success, pid is 2576, argument is Rtap249311754746391
2025-08-09 21:33:12 [Info] New ClientConnectNotify : Rtap249311754746391, id is 000004F8
2025-08-09 21:33:13 [Info] ipc client:Rtap249311754746391 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 21:33:13 [Info] Rtap Platform Rtap249311754746391 execv work --windows-sysinfoext-check on pid 2576
2025-08-09 21:33:14 [Info] csrss.exe open proc 2576 AliSecCheck.ex
2025-08-09 21:33:15 [Info] csrss.exe open thread 2576 AliSecCheck.ex
2025-08-09 21:33:16 [Info] csrss.exe open thread 2576 AliSecCheck.ex
2025-08-09 21:33:17 [Info] csrss.exe open thread 2576 AliSecCheck.ex
2025-08-09 21:33:17 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-09 21:33:17 [Info] ipc client:Rtap249511754746397_handler Reg client_name:Rtap249511754746397 on WhiteList
2025-08-09 21:33:17 [Info] start rtap process success, pid is 3512, argument is Rtap249511754746397
2025-08-09 21:33:17 [Info] New ClientConnectNotify : Rtap249511754746397, id is 00000540
2025-08-09 21:33:18 [Info] csrss.exe open thread 2576 AliSecCheck.ex
2025-08-09 21:33:18 [Info] Rtap Platform Rtap249511754746397 execv work --windows-vul-check on pid 3512
2025-08-09 21:33:18 [Info] ipc client:Rtap249511754746397 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-09 21:33:21 [Info] csrss.exe open proc 3512 AliSecCheck.ex
2025-08-09 21:33:22 [Info] csrss.exe open thread 3512 AliSecCheck.ex
2025-08-09 21:33:25 [Info] Done Work --windows-sysinfoext-check:1
2025-08-09 21:33:25 [Info] Rtap Platform Rtap249311754746391 Exit:normal exit
2025-08-09 21:33:27 [Info] ClientDisConnectNotify : Rtap249311754746391, id is 000004F8
2025-08-09 21:33:31 [Info] Done Work --windows-vul-check:1
2025-08-09 21:33:31 [Info] Rtap Platform Rtap249511754746397 Exit:normal exit
2025-08-09 21:33:33 [Info] ClientDisConnectNotify : Rtap249511754746397, id is 00000540
2025-08-09 21:57:43 [Info] TotalPhys:2047,AvailPhys:497,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6567,AvailPageFile:1476,SelfWorkingSet:10080, SelfPageFile:13816
2025-08-09 21:57:43 [Info] CommitTotal:5090,CommitLimit:6567,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:497,SystemCache:163,KernelTotal:258,KernelPaged:182,KernelNonpaged:76,PageSize:4096,HandleCount:27795,ProcessCount:54,ThreadCount:744
2025-08-09 22:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10003","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"2","aliyundun_max_mem":"10084","aliyundun_upload_time":"1754748541","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 22:39:09 [Info] get meta data success by v2
2025-08-09 22:39:09 [Info] get empty metaserver config
2025-08-09 22:39:09 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-09 22:39:09 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-09 22:39:09 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-09 22:39:09 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-09 22:39:09 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 22:39:09 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-09 22:39:09 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-09 22:39:09 [Info] download cert compare md5 same
2025-08-09 22:39:09 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 22:39:09 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-09 22:39:09 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-09 22:58:40 [Info] TotalPhys:2047,AvailPhys:481,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6567,AvailPageFile:1462,SelfWorkingSet:10104, SelfPageFile:13952
2025-08-09 22:58:40 [Info] CommitTotal:5105,CommitLimit:6567,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:481,SystemCache:192,KernelTotal:259,KernelPaged:182,KernelNonpaged:76,PageSize:4096,HandleCount:27666,ProcessCount:53,ThreadCount:743
2025-08-09 23:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10046","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10132","aliyundun_upload_time":"1754752126","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-09 23:59:38 [Info] TotalPhys:2047,AvailPhys:339,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6567,AvailPageFile:1311,SelfWorkingSet:9968, SelfPageFile:13668
2025-08-09 23:59:38 [Info] CommitTotal:5256,CommitLimit:6567,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:339,SystemCache:133,KernelTotal:258,KernelPaged:182,KernelNonpaged:76,PageSize:4096,HandleCount:27680,ProcessCount:53,ThreadCount:736
2025-08-16 00:15:16 [Info] TotalPhys:2047,AvailPhys:327,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6563,AvailPageFile:1322,SelfWorkingSet:10212, SelfPageFile:14072
2025-08-16 00:15:16 [Info] CommitTotal:5241,CommitLimit:6563,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:327,SystemCache:93,KernelTotal:264,KernelPaged:185,KernelNonpaged:78,PageSize:4096,HandleCount:27707,ProcessCount:53,ThreadCount:736
2025-08-16 01:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10120","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10212","aliyundun_upload_time":"1755277716","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 01:16:12 [Info] TotalPhys:2047,AvailPhys:294,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6563,AvailPageFile:1292,SelfWorkingSet:10236, SelfPageFile:14080
2025-08-16 01:16:12 [Info] CommitTotal:5271,CommitLimit:6563,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:294,SystemCache:63,KernelTotal:260,KernelPaged:182,KernelNonpaged:78,PageSize:4096,HandleCount:27719,ProcessCount:53,ThreadCount:736
2025-08-16 01:18:12 [Info] GetMessage : T_MSG_CHECK
2025-08-16 01:18:12 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTUyNzgyOTIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MzIxNDkyLCJzdWIiOiJSVEFQX0lEWF8xNjA2NzdfMTc1NTI3ODI5MjM3MiJ9.TBU_U1Lxs8kUMvCUlG-ynl1ZfCiYXalZMGr0qSsdWY8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 01:18:23 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 01:18:23 [Info] ipc client:Rtap252281755278303_handler Reg client_name:Rtap252281755278303 on WhiteList
2025-08-16 01:18:23 [Info] start rtap process success, pid is 2020, argument is Rtap252281755278303
2025-08-16 01:18:24 [Info] system memory usage is 88
2025-08-16 01:18:24 [Info] system memory usage is 87
2025-08-16 01:18:25 [Info] New ClientConnectNotify : Rtap252281755278303, id is 0000053C
2025-08-16 01:18:25 [Info] Rtap Platform Rtap252281755278303 execv work --sca on pid 2020
2025-08-16 01:18:25 [Info] ipc client:Rtap252281755278303 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 01:18:26 [Info] csrss.exe open proc 2020 AliSecCheck.ex
2025-08-16 01:18:27 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2025-08-16 01:18:28 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2025-08-16 01:18:29 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2025-08-16 01:18:31 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2025-08-16 01:19:11 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2025-08-16 01:19:33 [Info] Done Work --sca:1
2025-08-16 01:19:33 [Info] Rtap Platform Rtap252281755278303 Exit:normal exit
2025-08-16 01:19:35 [Info] ClientDisConnectNotify : Rtap252281755278303, id is 0000053C
2025-08-16 01:39:30 [Info] nCurrentClock is 3042133100, nCurrentTime is 1755279570
2025-08-16 01:39:30 [Info] SendMessage T_MSG_LOGIN
2025-08-16 01:39:30 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-16 01:39:30 [Info] begin to enable self guard after reconnect
2025-08-16 01:39:31 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-16 01:39:31 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-16 01:39:31 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-16 01:39:31 [Info] key : cpu, value : 10
2025-08-16 01:39:31 [Info] key : rio, value : 20480
2025-08-16 01:39:31 [Info] key : wio, value : 20480
2025-08-16 01:39:31 [Info] key : cpu_all, value : 0
2025-08-16 01:39:31 [Info] key : max_pid_check, value : 200
2025-08-16 01:39:31 [Info] key : throw_dump, value : 0
2025-08-16 01:39:31 [Info] key : hash_mode, value : 1
2025-08-16 01:39:31 [Info] key : mem, value : 200
2025-08-16 01:39:31 [Info] can not find key max_fd in online conf
2025-08-16 01:39:31 [Info] key : proc_limit, value : 1
2025-08-16 01:39:31 [Info] key : resource_limit_mode, value : 3
2025-08-16 01:39:31 [Info] key : rtap_update_mode, value : 1
2025-08-16 01:39:31 [Info] can not find key debug in online conf
2025-08-16 01:39:31 [Info] can not find key update_mode in online conf
2025-08-16 01:39:31 [Info] can not find key http_mode in online conf
2025-08-16 01:39:31 [Info] can not find key rtap_enable in online conf
2025-08-16 01:39:31 [Info] can not find key rtap_new_agent in online conf
2025-08-16 01:39:31 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-16 01:39:31 [Info] can not find key mem_low_mark in online conf
2025-08-16 01:39:31 [Info] can not find key obnormal_report_interval in online conf
2025-08-16 01:39:31 [Info] key : cache_mode, value : 0
2025-08-16 01:39:31 [Info] key : abnormal_monitor_mode, value : 3
2025-08-16 01:39:31 [Info] key : queue_size_ratio, value : 80
2025-08-16 01:39:31 [Info] queue_size_ratio is 80
2025-08-16 01:39:31 [Info] resource limit mode and max limit cpu is not change
2025-08-16 01:39:31 [Info] set hash mode 1
2025-08-16 01:39:31 [Info] RTAP timeout config:9600000
2025-08-16 01:39:31 [Info] self_guard_mode config is 0
2025-08-16 01:39:31 [Info] GetMessage : T_MSG_CHECK
2025-08-16 01:39:31 [Info] task e50a7bae-1583-405d-8842-f4f34b4234f8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 01:39:40 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-16 01:39:42 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 01:39:42 [Info] ipc client:Rtap294051755279582_handler Reg client_name:Rtap294051755279582 on WhiteList
2025-08-16 01:39:42 [Info] start rtap process success, pid is 1196, argument is Rtap294051755279582
2025-08-16 01:39:42 [Info] New ClientConnectNotify : Rtap294051755279582, id is 000004DC
2025-08-16 01:39:42 [Info] ipc client:Rtap294051755279582 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 01:39:43 [Info] Rtap Platform Rtap294051755279582 execv work --windows-sysinfoext-check on pid 1196
2025-08-16 01:39:44 [Info] csrss.exe open proc 1196 AliSecCheck.ex
2025-08-16 01:39:45 [Info] csrss.exe open thread 1196 AliSecCheck.ex
2025-08-16 01:39:54 [Info] Done Work --windows-sysinfoext-check:1
2025-08-16 01:39:54 [Info] Rtap Platform Rtap294051755279582 Exit:normal exit
2025-08-16 01:39:56 [Info] ClientDisConnectNotify : Rtap294051755279582, id is 000004DC
2025-08-16 02:08:55 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10241","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10344","aliyundun_upload_time":"1755281335","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 02:17:12 [Info] TotalPhys:2047,AvailPhys:257,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6563,AvailPageFile:1267,SelfWorkingSet:10084, SelfPageFile:13684
2025-08-16 02:17:12 [Info] CommitTotal:5296,CommitLimit:6563,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:257,SystemCache:37,KernelTotal:261,KernelPaged:183,KernelNonpaged:78,PageSize:4096,HandleCount:27712,ProcessCount:53,ThreadCount:741
2025-08-16 02:45:46 [Info] get meta data success by v2
2025-08-16 02:45:46 [Info] get empty metaserver config
2025-08-16 02:45:46 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-16 02:45:46 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-16 02:45:46 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-16 02:45:46 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-16 02:45:46 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 02:45:46 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 02:45:46 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-16 02:45:46 [Info] download cert compare md5 same
2025-08-16 02:45:46 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 02:45:46 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 02:45:46 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-16 03:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10096","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10284","aliyundun_upload_time":"1755284940","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 03:18:08 [Info] TotalPhys:2047,AvailPhys:258,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6563,AvailPageFile:1264,SelfWorkingSet:10064, SelfPageFile:13708
2025-08-16 03:18:08 [Info] CommitTotal:5299,CommitLimit:6563,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:258,SystemCache:40,KernelTotal:262,KernelPaged:183,KernelNonpaged:78,PageSize:4096,HandleCount:27717,ProcessCount:53,ThreadCount:742
2025-08-16 04:08:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10093","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10120","aliyundun_upload_time":"1755288511","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 04:19:04 [Info] TotalPhys:2047,AvailPhys:264,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6563,AvailPageFile:1273,SelfWorkingSet:9904, SelfPageFile:13580
2025-08-16 04:19:04 [Info] CommitTotal:5290,CommitLimit:6563,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:264,SystemCache:44,KernelTotal:261,KernelPaged:182,KernelNonpaged:78,PageSize:4096,HandleCount:27726,ProcessCount:53,ThreadCount:741
2025-08-16 05:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9957","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10128","aliyundun_upload_time":"1755292119","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 05:20:01 [Info] TotalPhys:2047,AvailPhys:260,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6563,AvailPageFile:1269,SelfWorkingSet:10108, SelfPageFile:13736
2025-08-16 05:20:01 [Info] CommitTotal:5294,CommitLimit:6563,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:260,SystemCache:34,KernelTotal:261,KernelPaged:183,KernelNonpaged:78,PageSize:4096,HandleCount:27708,ProcessCount:53,ThreadCount:739
2025-08-16 06:02:58 [Info] get meta data success by v2
2025-08-16 06:02:58 [Info] get empty metaserver config
2025-08-16 06:02:58 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-16 06:02:58 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-16 06:02:58 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-16 06:02:58 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-16 06:02:58 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 06:02:58 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 06:02:59 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-16 06:02:59 [Info] download cert compare md5 same
2025-08-16 06:02:59 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 06:02:59 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 06:02:59 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-16 06:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10073","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10340","aliyundun_upload_time":"1755295729","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"87","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 06:20:57 [Info] TotalPhys:2047,AvailPhys:255,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6563,AvailPageFile:1263,SelfWorkingSet:9988, SelfPageFile:13588
2025-08-16 06:20:57 [Info] CommitTotal:5300,CommitLimit:6563,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:255,SystemCache:20,KernelTotal:261,KernelPaged:183,KernelNonpaged:78,PageSize:4096,HandleCount:27714,ProcessCount:53,ThreadCount:735
2025-08-16 07:08:14 [Info] nCurrentClock is 3060134000, nCurrentTime is 1755299294
2025-08-16 07:08:14 [Info] SendMessage T_MSG_LOGIN
2025-08-16 07:08:14 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-16 07:08:14 [Info] begin to enable self guard after reconnect
2025-08-16 07:08:14 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-16 07:08:14 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-16 07:08:15 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-16 07:08:15 [Info] key : cpu, value : 10
2025-08-16 07:08:15 [Info] key : rio, value : 20480
2025-08-16 07:08:15 [Info] key : wio, value : 20480
2025-08-16 07:08:15 [Info] key : cpu_all, value : 0
2025-08-16 07:08:15 [Info] key : max_pid_check, value : 200
2025-08-16 07:08:15 [Info] key : throw_dump, value : 0
2025-08-16 07:08:15 [Info] key : hash_mode, value : 1
2025-08-16 07:08:15 [Info] key : mem, value : 200
2025-08-16 07:08:15 [Info] can not find key max_fd in online conf
2025-08-16 07:08:15 [Info] key : proc_limit, value : 1
2025-08-16 07:08:15 [Info] key : resource_limit_mode, value : 3
2025-08-16 07:08:15 [Info] key : rtap_update_mode, value : 1
2025-08-16 07:08:15 [Info] can not find key debug in online conf
2025-08-16 07:08:15 [Info] can not find key update_mode in online conf
2025-08-16 07:08:15 [Info] can not find key http_mode in online conf
2025-08-16 07:08:15 [Info] can not find key rtap_enable in online conf
2025-08-16 07:08:15 [Info] can not find key rtap_new_agent in online conf
2025-08-16 07:08:15 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-16 07:08:15 [Info] can not find key mem_low_mark in online conf
2025-08-16 07:08:15 [Info] can not find key obnormal_report_interval in online conf
2025-08-16 07:08:15 [Info] key : cache_mode, value : 0
2025-08-16 07:08:15 [Info] key : abnormal_monitor_mode, value : 3
2025-08-16 07:08:15 [Info] key : queue_size_ratio, value : 80
2025-08-16 07:08:15 [Info] queue_size_ratio is 80
2025-08-16 07:08:15 [Info] resource limit mode and max limit cpu is not change
2025-08-16 07:08:15 [Info] set hash mode 1
2025-08-16 07:08:15 [Info] RTAP timeout config:9600000
2025-08-16 07:08:15 [Info] self_guard_mode config is 0
2025-08-16 07:08:15 [Info] GetMessage : T_MSG_CHECK
2025-08-16 07:08:15 [Info] task f72c33f0-31f1-4e1a-afd0-e1315dac08b6 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 07:08:25 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 07:08:25 [Info] ipc client:Rtap282761755299305_handler Reg client_name:Rtap282761755299305 on WhiteList
2025-08-16 07:08:25 [Info] start rtap process success, pid is 3236, argument is Rtap282761755299305
2025-08-16 07:08:26 [Info] system memory usage is 88
2025-08-16 07:08:26 [Info] New ClientConnectNotify : Rtap282761755299305, id is 00000504
2025-08-16 07:08:26 [Info] Rtap Platform Rtap282761755299305 execv work --windows-sysinfoext-check on pid 3236
2025-08-16 07:08:27 [Info] ipc client:Rtap282761755299305 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 07:08:28 [Info] csrss.exe open proc 3236 AliSecCheck.ex
2025-08-16 07:08:29 [Info] csrss.exe open thread 3236 AliSecCheck.ex
2025-08-16 07:08:30 [Info] csrss.exe open thread 3236 AliSecCheck.ex
2025-08-16 07:08:31 [Info] csrss.exe open thread 3236 AliSecCheck.ex
2025-08-16 07:08:38 [Info] Done Work --windows-sysinfoext-check:1
2025-08-16 07:08:38 [Info] Rtap Platform Rtap282761755299305 Exit:normal exit
2025-08-16 07:08:40 [Info] ClientDisConnectNotify : Rtap282761755299305, id is 00000504
2025-08-16 07:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10102","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10192","aliyundun_upload_time":"1755299338","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"88","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 07:21:56 [Info] TotalPhys:2047,AvailPhys:257,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6563,AvailPageFile:1267,SelfWorkingSet:9924, SelfPageFile:13520
2025-08-16 07:21:56 [Info] CommitTotal:5296,CommitLimit:6563,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:257,SystemCache:43,KernelTotal:261,KernelPaged:183,KernelNonpaged:78,PageSize:4096,HandleCount:27880,ProcessCount:54,ThreadCount:747
2025-08-16 08:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10098","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10192","aliyundun_upload_time":"1755302926","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 08:22:53 [Info] TotalPhys:2047,AvailPhys:286,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6563,AvailPageFile:1265,SelfWorkingSet:10244, SelfPageFile:14076
2025-08-16 08:22:53 [Info] CommitTotal:5298,CommitLimit:6563,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:286,SystemCache:13,KernelTotal:260,KernelPaged:181,KernelNonpaged:78,PageSize:4096,HandleCount:27752,ProcessCount:53,ThreadCount:739
2025-08-16 08:51:10 [Info] GetMessage : T_MSG_CHECK
2025-08-16 08:51:10 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTUzMDU0NzAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MzQ4NjcwLCJzdWIiOiJSVEFQX0lEWF8xNjA2NjdfMTc1NTMwNTQ3MDkxNyJ9.5k53DqhWEFUomxx15C-U2D5i7ge-K3u2e8FnKF7wNRo has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 08:51:20 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 08:51:20 [Info] ipc client:Rtap156731755305480_handler Reg client_name:Rtap156731755305480 on WhiteList
2025-08-16 08:51:20 [Info] start rtap process success, pid is 2304, argument is Rtap156731755305480
2025-08-16 08:51:20 [Info] New ClientConnectNotify : Rtap156731755305480, id is 0000053C
2025-08-16 08:51:20 [Info] ipc client:Rtap156731755305480 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 08:51:20 [Info] Rtap Platform Rtap156731755305480 execv work --windows-process-check on pid 2304
2025-08-16 08:51:22 [Info] csrss.exe open proc 2304 AliSecCheck.ex
2025-08-16 08:51:23 [Info] csrss.exe open thread 2304 AliSecCheck.ex
2025-08-16 08:51:24 [Info] csrss.exe open thread 2304 AliSecCheck.ex
2025-08-16 08:51:48 [Info] Done Work --windows-process-check:1
2025-08-16 08:51:48 [Info] Rtap Platform Rtap156731755305480 Exit:normal exit
2025-08-16 08:51:50 [Info] ClientDisConnectNotify : Rtap156731755305480, id is 0000053C
2025-08-16 09:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10192","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10256","aliyundun_upload_time":"1755306514","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 09:21:05 [Info] get meta data success by v2
2025-08-16 09:21:05 [Info] get empty metaserver config
2025-08-16 09:21:05 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-16 09:21:05 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-16 09:21:05 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-16 09:21:05 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-16 09:21:05 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 09:21:05 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 09:21:05 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-16 09:21:05 [Info] download cert compare md5 same
2025-08-16 09:21:05 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 09:21:05 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 09:21:05 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-16 09:23:53 [Info] TotalPhys:2047,AvailPhys:294,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6563,AvailPageFile:1268,SelfWorkingSet:10304, SelfPageFile:14304
2025-08-16 09:23:53 [Info] CommitTotal:5294,CommitLimit:6563,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:294,SystemCache:45,KernelTotal:261,KernelPaged:183,KernelNonpaged:78,PageSize:4096,HandleCount:27737,ProcessCount:53,ThreadCount:743
2025-08-16 09:58:48 [Info] GetMessage : T_MSG_CHECK
2025-08-16 09:58:48 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTUzMDk1MjgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MzUyNzI4LCJzdWIiOiJSVEFQX0lEWF8xNjA2NjhfMTc1NTMwOTUyODAwMiJ9.q9qvFFumgmlvozhVeV25JcHKCaEYi0ENh-hac6qMHaA has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 09:58:58 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 09:58:58 [Info] ipc client:Rtap289241755309538_handler Reg client_name:Rtap289241755309538 on WhiteList
2025-08-16 09:58:59 [Info] start rtap process success, pid is 5036, argument is Rtap289241755309538
2025-08-16 09:58:59 [Info] New ClientConnectNotify : Rtap289241755309538, id is 00000504
2025-08-16 09:58:59 [Info] ipc client:Rtap289241755309538 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 09:58:59 [Info] Rtap Platform Rtap289241755309538 execv work --tcp-connect-check on pid 5036
2025-08-16 09:59:00 [Info] csrss.exe open proc 5036 AliSecCheck.ex
2025-08-16 09:59:01 [Info] csrss.exe open thread 5036 AliSecCheck.ex
2025-08-16 09:59:10 [Info] Done Work --tcp-connect-check:1
2025-08-16 09:59:10 [Info] Rtap Platform Rtap289241755309538 Exit:normal exit
2025-08-16 09:59:12 [Info] ClientDisConnectNotify : Rtap289241755309538, id is 00000504
2025-08-16 10:08:48 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10163","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10304","aliyundun_upload_time":"1755310128","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 10:16:36 [Info] GetMessage : T_MSG_CHECK
2025-08-16 10:16:36 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTUzMTA1OTUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MzUzNzk1LCJzdWIiOiJSVEFQX0lEWF8xNjA2NzZfMTc1NTMxMDU5NTkxOSJ9.RrwIETzzVxBiG1bQF9IkWqHCx1b0q68-UcGWvRbhFbk has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 10:16:44 [Info] GetMessage : T_MSG_CHECK
2025-08-16 10:16:44 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTUzMTA1OTYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MzUzNzk2LCJzdWIiOiJSVEFQX0lEWF8xNjA2NzBfMTc1NTMxMDU5NjY5NiJ9.smZ1lwbTBWu7t42-9DxOwMm5_YiYd80DBXeupkkCUtw has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 10:16:47 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 10:16:47 [Info] ipc client:Rtap324151755310607_handler Reg client_name:Rtap324151755310607 on WhiteList
2025-08-16 10:16:47 [Info] start rtap process success, pid is 4804, argument is Rtap324151755310607
2025-08-16 10:16:49 [Info] New ClientConnectNotify : Rtap324151755310607, id is 000004F4
2025-08-16 10:16:50 [Info] csrss.exe open proc 4804 AliSecCheck.ex
2025-08-16 10:16:50 [Info] ipc client:Rtap324151755310607 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 10:16:50 [Info] Rtap Platform Rtap324151755310607 execv work --windows-registry-check on pid 4804
2025-08-16 10:16:51 [Info] csrss.exe open thread 4804 AliSecCheck.ex
2025-08-16 10:16:52 [Info] csrss.exe open thread 4804 AliSecCheck.ex
2025-08-16 10:16:53 [Info] csrss.exe open thread 4804 AliSecCheck.ex
2025-08-16 10:16:54 [Info] csrss.exe open thread 4804 AliSecCheck.ex
2025-08-16 10:16:54 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 10:16:54 [Info] ipc client:Rtap324381755310614_handler Reg client_name:Rtap324381755310614 on WhiteList
2025-08-16 10:16:54 [Info] start rtap process success, pid is 4256, argument is Rtap324381755310614
2025-08-16 10:16:55 [Info] New ClientConnectNotify : Rtap324381755310614, id is 000004B8
2025-08-16 10:16:55 [Info] ipc client:Rtap324381755310614 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 10:16:55 [Info] Rtap Platform Rtap324381755310614 execv work --windows-schedule-task-check on pid 4256
2025-08-16 10:16:56 [Info] csrss.exe open proc 4256 AliSecCheck.ex
2025-08-16 10:16:57 [Info] csrss.exe open thread 4256 AliSecCheck.ex
2025-08-16 10:17:35 [Info] Done Work --windows-registry-check:1
2025-08-16 10:17:35 [Info] Rtap Platform Rtap324151755310607 Exit:normal exit
2025-08-16 10:17:35 [Info] GetMessage : T_MSG_CHECK
2025-08-16 10:17:35 [Info] task eyJhbGciOiJIUzI1NiIsImFsZyI6IkhTMjU2In0.eyJpYXQiOjE3NTUzMTA2NTUsImlzcyI6IlJUQVAiLCJpc3MiOiJSVEFQIiwiYXVkIjoiUlRBUCIsImV4cCI6MTc1NTM1Mzg1NSwic3ViIjoiUlRBUF9JRFhfMTYwNjg0XzE3NTUzMTA2NTU3MDIifQ.UuDPgP1-ZMsRLxJQAUrYotvmxZLo0yHYfgusIkbbYDM has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 10:17:37 [Info] ClientDisConnectNotify : Rtap324151755310607, id is 000004F4
2025-08-16 10:17:47 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 10:17:47 [Info] ipc client:Rtap326111755310667_handler Reg client_name:Rtap326111755310667 on WhiteList
2025-08-16 10:17:47 [Info] start rtap process success, pid is 4736, argument is Rtap326111755310667
2025-08-16 10:17:47 [Info] New ClientConnectNotify : Rtap326111755310667, id is 0000053C
2025-08-16 10:17:47 [Info] Rtap Platform Rtap326111755310667 execv work --windows-driver-version-check on pid 4736
2025-08-16 10:17:47 [Info] ipc client:Rtap326111755310667 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 10:17:48 [Info] csrss.exe open proc 4736 AliSecCheck.ex
2025-08-16 10:17:49 [Info] csrss.exe open thread 4736 AliSecCheck.ex
2025-08-16 10:17:54 [Info] Done Work --windows-driver-version-check:1
2025-08-16 10:17:54 [Info] Rtap Platform Rtap326111755310667 Exit:normal exit
2025-08-16 10:17:57 [Info] ClientDisConnectNotify : Rtap326111755310667, id is 0000053C
2025-08-16 10:18:01 [Info] Done Work --windows-schedule-task-check:1
2025-08-16 10:18:01 [Info] Rtap Platform Rtap324381755310614 Exit:normal exit
2025-08-16 10:18:03 [Info] ClientDisConnectNotify : Rtap324381755310614, id is 000004B8
2025-08-16 10:24:50 [Info] TotalPhys:2047,AvailPhys:874,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5718,AvailPageFile:1116,SelfWorkingSet:10136, SelfPageFile:13808
2025-08-16 10:24:50 [Info] CommitTotal:4602,CommitLimit:5718,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:874,SystemCache:4194303,KernelTotal:257,KernelPaged:179,KernelNonpaged:78,PageSize:4096,HandleCount:27612,ProcessCount:53,ThreadCount:747
2025-08-16 11:05:51 [Info] GetMessage : T_MSG_CHECK
2025-08-16 11:05:51 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTUzMTM1NTEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1MzU2NzUxLCJzdWIiOiJSVEFQX0lEWF8xNjA2NzNfMTc1NTMxMzU1MTUxNCJ9.mmV6qfpCwE__tIq8tSWVIoX60AyVeO9CFduIbeQ94K0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 11:06:01 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 11:06:01 [Info] ipc client:Rtap92941755313561_handler Reg client_name:Rtap92941755313561 on WhiteList
2025-08-16 11:06:01 [Info] start rtap process success, pid is 824, argument is Rtap92941755313561
2025-08-16 11:06:01 [Info] New ClientConnectNotify : Rtap92941755313561, id is 000004F4
2025-08-16 11:06:01 [Info] ipc client:Rtap92941755313561 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 11:06:01 [Info] Rtap Platform Rtap92941755313561 execv work --windows-autorun-item-check on pid 824
2025-08-16 11:06:04 [Info] csrss.exe open proc 824 AliSecCheck.ex
2025-08-16 11:06:05 [Info] csrss.exe open thread 824 AliSecCheck.ex
2025-08-16 11:06:17 [Info] Done Work --windows-autorun-item-check:1
2025-08-16 11:06:17 [Info] Rtap Platform Rtap92941755313561 Exit:normal exit
2025-08-16 11:06:19 [Info] ClientDisConnectNotify : Rtap92941755313561, id is 000004F4
2025-08-16 11:08:54 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10144","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10352","aliyundun_upload_time":"1755313734","aliyundun_write_pid_times":"0","ipc_send_count":"153","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 11:25:46 [Info] TotalPhys:2047,AvailPhys:714,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5718,AvailPageFile:977,SelfWorkingSet:10076, SelfPageFile:13772
2025-08-16 11:25:46 [Info] CommitTotal:4740,CommitLimit:5718,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:714,SystemCache:4194303,KernelTotal:258,KernelPaged:179,KernelNonpaged:78,PageSize:4096,HandleCount:27659,ProcessCount:53,ThreadCount:739
2025-08-16 12:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10101","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10240","aliyundun_upload_time":"1755317340","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 12:26:43 [Info] TotalPhys:2047,AvailPhys:522,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6308,AvailPageFile:1402,SelfWorkingSet:10292, SelfPageFile:13984
2025-08-16 12:26:43 [Info] CommitTotal:4906,CommitLimit:6308,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:522,SystemCache:4194303,KernelTotal:267,KernelPaged:186,KernelNonpaged:80,PageSize:4096,HandleCount:28708,ProcessCount:55,ThreadCount:786
2025-08-16 12:37:49 [Info] nCurrentClock is 3078134500, nCurrentTime is 1755319069
2025-08-16 12:37:49 [Info] SendMessage T_MSG_LOGIN
2025-08-16 12:37:49 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-16 12:37:49 [Info] begin to enable self guard after reconnect
2025-08-16 12:37:49 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-16 12:37:49 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-16 12:37:49 [Info] GetMessage : T_MSG_CHECK
2025-08-16 12:37:49 [Info] task fee620f8-e297-4f45-9548-ca05a50c4177 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 12:37:57 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-16 12:37:57 [Info] key : cpu, value : 10
2025-08-16 12:37:57 [Info] key : rio, value : 20480
2025-08-16 12:37:57 [Info] key : wio, value : 20480
2025-08-16 12:37:57 [Info] key : cpu_all, value : 0
2025-08-16 12:37:57 [Info] key : max_pid_check, value : 200
2025-08-16 12:37:57 [Info] key : throw_dump, value : 0
2025-08-16 12:37:57 [Info] key : hash_mode, value : 1
2025-08-16 12:37:57 [Info] key : mem, value : 200
2025-08-16 12:37:57 [Info] can not find key max_fd in online conf
2025-08-16 12:37:57 [Info] key : proc_limit, value : 1
2025-08-16 12:37:57 [Info] key : resource_limit_mode, value : 3
2025-08-16 12:37:57 [Info] key : rtap_update_mode, value : 1
2025-08-16 12:37:57 [Info] can not find key debug in online conf
2025-08-16 12:37:57 [Info] can not find key update_mode in online conf
2025-08-16 12:37:57 [Info] can not find key http_mode in online conf
2025-08-16 12:37:57 [Info] can not find key rtap_enable in online conf
2025-08-16 12:37:57 [Info] can not find key rtap_new_agent in online conf
2025-08-16 12:37:57 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-16 12:37:57 [Info] can not find key mem_low_mark in online conf
2025-08-16 12:37:57 [Info] can not find key obnormal_report_interval in online conf
2025-08-16 12:37:57 [Info] key : cache_mode, value : 0
2025-08-16 12:37:57 [Info] key : abnormal_monitor_mode, value : 3
2025-08-16 12:37:57 [Info] key : queue_size_ratio, value : 80
2025-08-16 12:37:57 [Info] queue_size_ratio is 80
2025-08-16 12:37:57 [Info] resource limit mode and max limit cpu is not change
2025-08-16 12:37:57 [Info] set hash mode 1
2025-08-16 12:37:57 [Info] RTAP timeout config:9600000
2025-08-16 12:37:57 [Info] self_guard_mode config is 0
2025-08-16 12:38:03 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 12:38:03 [Info] ipc client:Rtap273261755319083_handler Reg client_name:Rtap273261755319083 on WhiteList
2025-08-16 12:38:03 [Info] start rtap process success, pid is 3368, argument is Rtap273261755319083
2025-08-16 12:38:03 [Info] New ClientConnectNotify : Rtap273261755319083, id is 000004B8
2025-08-16 12:38:03 [Info] ipc client:Rtap273261755319083 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 12:38:04 [Info] Rtap Platform Rtap273261755319083 execv work --windows-sysinfoext-check on pid 3368
2025-08-16 12:38:04 [Info] csrss.exe open proc 3368 AliSecCheck.ex
2025-08-16 12:38:05 [Info] csrss.exe open thread 3368 AliSecCheck.ex
2025-08-16 12:38:06 [Info] csrss.exe open thread 3368 AliSecCheck.ex
2025-08-16 12:38:15 [Info] Done Work --windows-sysinfoext-check:1
2025-08-16 12:38:15 [Info] Rtap Platform Rtap273261755319083 Exit:normal exit
2025-08-16 12:38:17 [Info] ClientDisConnectNotify : Rtap273261755319083, id is 000004B8
2025-08-16 12:38:19 [Info] get meta data success by v2
2025-08-16 12:38:19 [Info] get empty metaserver config
2025-08-16 12:38:19 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-16 12:38:19 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-16 12:38:19 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-16 12:38:19 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-16 12:38:19 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 12:38:19 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 12:38:19 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-16 12:38:19 [Info] download cert compare md5 same
2025-08-16 12:38:19 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 12:38:19 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 12:38:19 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-16 13:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10215","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10292","aliyundun_upload_time":"1755320918","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 13:27:40 [Info] TotalPhys:2047,AvailPhys:597,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6179,AvailPageFile:1331,SelfWorkingSet:10104, SelfPageFile:13812
2025-08-16 13:27:40 [Info] CommitTotal:4848,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:597,SystemCache:147,KernelTotal:262,KernelPaged:182,KernelNonpaged:80,PageSize:4096,HandleCount:27711,ProcessCount:53,ThreadCount:736
2025-08-16 14:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10119","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10200","aliyundun_upload_time":"1755324526","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 14:28:37 [Info] TotalPhys:2047,AvailPhys:564,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6179,AvailPageFile:1284,SelfWorkingSet:10168, SelfPageFile:13916
2025-08-16 14:28:37 [Info] CommitTotal:4895,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:564,SystemCache:159,KernelTotal:262,KernelPaged:182,KernelNonpaged:79,PageSize:4096,HandleCount:27713,ProcessCount:53,ThreadCount:734
2025-08-16 15:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10154","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10212","aliyundun_upload_time":"1755328143","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 15:29:33 [Info] TotalPhys:2047,AvailPhys:498,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6179,AvailPageFile:1221,SelfWorkingSet:10148, SelfPageFile:13772
2025-08-16 15:29:33 [Info] CommitTotal:4958,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:498,SystemCache:165,KernelTotal:261,KernelPaged:182,KernelNonpaged:79,PageSize:4096,HandleCount:27727,ProcessCount:53,ThreadCount:732
2025-08-16 15:55:32 [Info] get meta data success by v2
2025-08-16 15:55:32 [Info] get empty metaserver config
2025-08-16 15:55:32 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-16 15:55:32 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-16 15:55:32 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-16 15:55:32 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-16 15:55:32 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 15:55:32 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 15:55:32 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-16 15:55:32 [Info] download cert compare md5 same
2025-08-16 15:55:32 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 15:55:32 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 15:55:32 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-16 16:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10135","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10228","aliyundun_upload_time":"1755331714","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 16:30:30 [Info] TotalPhys:2047,AvailPhys:493,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6179,AvailPageFile:1215,SelfWorkingSet:10048, SelfPageFile:13764
2025-08-16 16:30:30 [Info] CommitTotal:4964,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:493,SystemCache:194,KernelTotal:262,KernelPaged:182,KernelNonpaged:80,PageSize:4096,HandleCount:27712,ProcessCount:53,ThreadCount:729
2025-08-16 17:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10074","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10148","aliyundun_upload_time":"1755335320","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 17:31:26 [Info] TotalPhys:2047,AvailPhys:498,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6179,AvailPageFile:1218,SelfWorkingSet:10080, SelfPageFile:13796
2025-08-16 17:31:26 [Info] CommitTotal:4960,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:498,SystemCache:199,KernelTotal:262,KernelPaged:182,KernelNonpaged:79,PageSize:4096,HandleCount:27730,ProcessCount:53,ThreadCount:730
2025-08-16 18:06:32 [Info] nCurrentClock is 3096135000, nCurrentTime is 1755338792
2025-08-16 18:06:32 [Info] SendMessage T_MSG_LOGIN
2025-08-16 18:06:32 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-16 18:06:32 [Info] begin to enable self guard after reconnect
2025-08-16 18:06:32 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-16 18:06:32 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-16 18:06:32 [Info] GetMessage : T_MSG_CHECK
2025-08-16 18:06:32 [Info] task 137b15a8-c116-4be4-9151-32ce01854383 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 18:06:40 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-16 18:06:40 [Info] key : cpu, value : 10
2025-08-16 18:06:40 [Info] key : rio, value : 20480
2025-08-16 18:06:40 [Info] key : wio, value : 20480
2025-08-16 18:06:40 [Info] key : cpu_all, value : 0
2025-08-16 18:06:40 [Info] key : max_pid_check, value : 200
2025-08-16 18:06:40 [Info] key : throw_dump, value : 0
2025-08-16 18:06:40 [Info] key : hash_mode, value : 1
2025-08-16 18:06:40 [Info] key : mem, value : 200
2025-08-16 18:06:40 [Info] can not find key max_fd in online conf
2025-08-16 18:06:40 [Info] key : proc_limit, value : 1
2025-08-16 18:06:40 [Info] key : resource_limit_mode, value : 3
2025-08-16 18:06:40 [Info] key : rtap_update_mode, value : 1
2025-08-16 18:06:40 [Info] can not find key debug in online conf
2025-08-16 18:06:40 [Info] can not find key update_mode in online conf
2025-08-16 18:06:40 [Info] can not find key http_mode in online conf
2025-08-16 18:06:40 [Info] can not find key rtap_enable in online conf
2025-08-16 18:06:40 [Info] can not find key rtap_new_agent in online conf
2025-08-16 18:06:40 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-16 18:06:40 [Info] can not find key mem_low_mark in online conf
2025-08-16 18:06:40 [Info] can not find key obnormal_report_interval in online conf
2025-08-16 18:06:40 [Info] key : cache_mode, value : 0
2025-08-16 18:06:40 [Info] key : abnormal_monitor_mode, value : 3
2025-08-16 18:06:40 [Info] key : queue_size_ratio, value : 80
2025-08-16 18:06:40 [Info] queue_size_ratio is 80
2025-08-16 18:06:40 [Info] resource limit mode and max limit cpu is not change
2025-08-16 18:06:40 [Info] set hash mode 1
2025-08-16 18:06:40 [Info] RTAP timeout config:9600000
2025-08-16 18:06:40 [Info] self_guard_mode config is 0
2025-08-16 18:06:41 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-16 18:06:45 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 18:06:45 [Info] ipc client:Rtap261941755338805_handler Reg client_name:Rtap261941755338805 on WhiteList
2025-08-16 18:06:45 [Info] start rtap process success, pid is 4956, argument is Rtap261941755338805
2025-08-16 18:06:45 [Info] New ClientConnectNotify : Rtap261941755338805, id is 0000051C
2025-08-16 18:06:46 [Info] ipc client:Rtap261941755338805 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 18:06:46 [Info] Rtap Platform Rtap261941755338805 execv work --windows-sysinfoext-check on pid 4956
2025-08-16 18:06:48 [Info] csrss.exe open proc 4956 AliSecCheck.ex
2025-08-16 18:06:49 [Info] csrss.exe open thread 4956 AliSecCheck.ex
2025-08-16 18:06:53 [Info] Done Work --windows-sysinfoext-check:1
2025-08-16 18:06:53 [Info] Rtap Platform Rtap261941755338805 Exit:normal exit
2025-08-16 18:06:55 [Info] ClientDisConnectNotify : Rtap261941755338805, id is 0000051C
2025-08-16 18:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10059","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10176","aliyundun_upload_time":"1755338930","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 18:32:25 [Info] TotalPhys:2047,AvailPhys:482,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6179,AvailPageFile:1214,SelfWorkingSet:10188, SelfPageFile:13984
2025-08-16 18:32:25 [Info] CommitTotal:4965,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:482,SystemCache:205,KernelTotal:262,KernelPaged:182,KernelNonpaged:79,PageSize:4096,HandleCount:27898,ProcessCount:54,ThreadCount:740
2025-08-16 19:01:21 [Info] GetMessage : T_MSG_CHECK
2025-08-16 19:01:21 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTUzNDIwODEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1Mzg1MjgxLCJzdWIiOiJSVEFQX0lEWF8xNjA3NDNfMTc1NTM0MjA4MTU5MSJ9.xa0D__pAOrCwByYBLDHprXTCQTe1xlPiWLUdFjW9pQs has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 19:01:32 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 19:01:32 [Info] ipc client:Rtap41601755342092_handler Reg client_name:Rtap41601755342092 on WhiteList
2025-08-16 19:01:32 [Info] start rtap process success, pid is 4812, argument is Rtap41601755342092
2025-08-16 19:01:32 [Info] New ClientConnectNotify : Rtap41601755342092, id is 000004F4
2025-08-16 19:01:32 [Info] ipc client:Rtap41601755342092 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 19:01:32 [Info] Rtap Platform Rtap41601755342092 execv work --secnet_rasp_agent on pid 4812
2025-08-16 19:01:34 [Info] csrss.exe open proc 4812 AliSecCheck.ex
2025-08-16 19:01:35 [Info] csrss.exe open thread 4812 AliSecCheck.ex
2025-08-16 19:01:37 [Info] csrss.exe open thread 4812 AliSecCheck.ex
2025-08-16 19:01:39 [Info] Done Work --secnet_rasp_agent:1
2025-08-16 19:01:39 [Info] Rtap Platform Rtap41601755342092 Exit:normal exit
2025-08-16 19:01:43 [Info] ClientDisConnectNotify : Rtap41601755342092, id is 000004F4
2025-08-16 19:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10172","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10212","aliyundun_upload_time":"1755342536","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 19:12:46 [Info] get meta data success by v2
2025-08-16 19:12:46 [Info] get empty metaserver config
2025-08-16 19:12:46 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-16 19:12:46 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-16 19:12:46 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-16 19:12:46 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-16 19:12:46 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 19:12:46 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 19:12:47 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-16 19:12:47 [Info] download cert compare md5 same
2025-08-16 19:12:47 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 19:12:47 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 19:12:47 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-16 19:33:21 [Info] TotalPhys:2047,AvailPhys:493,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6179,AvailPageFile:1218,SelfWorkingSet:10084, SelfPageFile:13788
2025-08-16 19:33:21 [Info] CommitTotal:4961,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:493,SystemCache:194,KernelTotal:265,KernelPaged:185,KernelNonpaged:79,PageSize:4096,HandleCount:27754,ProcessCount:53,ThreadCount:735
2025-08-16 20:09:04 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10161","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10304","aliyundun_upload_time":"1755346144","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 20:34:18 [Info] TotalPhys:2047,AvailPhys:488,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6179,AvailPageFile:1204,SelfWorkingSet:9996, SelfPageFile:13648
2025-08-16 20:34:18 [Info] CommitTotal:4975,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:488,SystemCache:143,KernelTotal:262,KernelPaged:182,KernelNonpaged:79,PageSize:4096,HandleCount:27618,ProcessCount:52,ThreadCount:747
2025-08-16 21:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10015","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10148","aliyundun_upload_time":"1755349719","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 21:35:14 [Info] TotalPhys:2047,AvailPhys:483,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6179,AvailPageFile:1201,SelfWorkingSet:10020, SelfPageFile:13884
2025-08-16 21:35:14 [Info] CommitTotal:4978,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:483,SystemCache:146,KernelTotal:262,KernelPaged:182,KernelNonpaged:79,PageSize:4096,HandleCount:27640,ProcessCount:52,ThreadCount:734
2025-08-16 22:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10041","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10112","aliyundun_upload_time":"1755353325","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-16 22:29:57 [Info] get meta data success by v2
2025-08-16 22:29:57 [Info] get empty metaserver config
2025-08-16 22:29:57 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-16 22:29:57 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-16 22:29:57 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-16 22:29:57 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-16 22:29:57 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 22:29:57 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-16 22:29:58 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-16 22:29:58 [Info] download cert compare md5 same
2025-08-16 22:29:58 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 22:29:58 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-16 22:29:58 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-16 22:36:11 [Info] TotalPhys:2047,AvailPhys:477,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6179,AvailPageFile:1196,SelfWorkingSet:10252, SelfPageFile:14060
2025-08-16 22:36:11 [Info] CommitTotal:4983,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:477,SystemCache:149,KernelTotal:262,KernelPaged:182,KernelNonpaged:79,PageSize:4096,HandleCount:27489,ProcessCount:52,ThreadCount:732
2025-08-16 23:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10137","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10276","aliyundun_upload_time":"1755356938","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-08-16 23:35:54 [Info] nCurrentClock is 3114135500, nCurrentTime is 1755358554
2025-08-16 23:35:54 [Info] SendMessage T_MSG_LOGIN
2025-08-16 23:35:54 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-16 23:35:54 [Info] begin to enable self guard after reconnect
2025-08-16 23:35:54 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-16 23:35:54 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-16 23:35:54 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-16 23:35:54 [Info] key : cpu, value : 10
2025-08-16 23:35:54 [Info] key : rio, value : 20480
2025-08-16 23:35:54 [Info] key : wio, value : 20480
2025-08-16 23:35:54 [Info] key : cpu_all, value : 0
2025-08-16 23:35:54 [Info] key : max_pid_check, value : 200
2025-08-16 23:35:54 [Info] key : throw_dump, value : 0
2025-08-16 23:35:54 [Info] key : hash_mode, value : 1
2025-08-16 23:35:54 [Info] key : mem, value : 200
2025-08-16 23:35:54 [Info] can not find key max_fd in online conf
2025-08-16 23:35:54 [Info] key : proc_limit, value : 1
2025-08-16 23:35:54 [Info] key : resource_limit_mode, value : 3
2025-08-16 23:35:54 [Info] key : rtap_update_mode, value : 1
2025-08-16 23:35:54 [Info] can not find key debug in online conf
2025-08-16 23:35:54 [Info] can not find key update_mode in online conf
2025-08-16 23:35:54 [Info] can not find key http_mode in online conf
2025-08-16 23:35:54 [Info] can not find key rtap_enable in online conf
2025-08-16 23:35:54 [Info] can not find key rtap_new_agent in online conf
2025-08-16 23:35:54 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-16 23:35:54 [Info] can not find key mem_low_mark in online conf
2025-08-16 23:35:54 [Info] can not find key obnormal_report_interval in online conf
2025-08-16 23:35:54 [Info] key : cache_mode, value : 0
2025-08-16 23:35:54 [Info] key : abnormal_monitor_mode, value : 3
2025-08-16 23:35:54 [Info] key : queue_size_ratio, value : 80
2025-08-16 23:35:54 [Info] queue_size_ratio is 80
2025-08-16 23:35:54 [Info] resource limit mode and max limit cpu is not change
2025-08-16 23:35:54 [Info] set hash mode 1
2025-08-16 23:35:54 [Info] RTAP timeout config:9600000
2025-08-16 23:35:54 [Info] self_guard_mode config is 0
2025-08-16 23:35:55 [Info] GetMessage : T_MSG_CHECK
2025-08-16 23:35:55 [Info] task 17156ce8-5a32-4963-9c44-179e180233b2 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-16 23:36:06 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-16 23:36:06 [Info] ipc client:Rtap251891755358566_handler Reg client_name:Rtap251891755358566 on WhiteList
2025-08-16 23:36:06 [Info] start rtap process success, pid is 4740, argument is Rtap251891755358566
2025-08-16 23:36:07 [Info] system memory usage is 89
2025-08-16 23:36:07 [Info] New ClientConnectNotify : Rtap251891755358566, id is 0000051C
2025-08-16 23:36:07 [Info] Rtap Platform Rtap251891755358566 execv work --windows-sysinfoext-check on pid 4740
2025-08-16 23:36:07 [Info] csrss.exe open proc 4740 AliSecCheck.ex
2025-08-16 23:36:07 [Info] ipc client:Rtap251891755358566 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-16 23:36:08 [Info] csrss.exe open thread 4740 AliSecCheck.ex
2025-08-16 23:36:09 [Info] csrss.exe open thread 4740 AliSecCheck.ex
2025-08-16 23:36:10 [Info] csrss.exe open thread 4740 AliSecCheck.ex
2025-08-16 23:36:11 [Info] csrss.exe open thread 4740 AliSecCheck.ex
2025-08-16 23:36:18 [Info] Done Work --windows-sysinfoext-check:1
2025-08-16 23:36:18 [Info] Rtap Platform Rtap251891755358566 Exit:normal exit
2025-08-16 23:36:21 [Info] ClientDisConnectNotify : Rtap251891755358566, id is 0000051C
2025-08-16 23:37:15 [Info] TotalPhys:2047,AvailPhys:241,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6179,AvailPageFile:917,SelfWorkingSet:10088, SelfPageFile:13912
2025-08-16 23:37:15 [Info] CommitTotal:5262,CommitLimit:6179,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:241,SystemCache:4194303,KernelTotal:262,KernelPaged:183,KernelNonpaged:79,PageSize:4096,HandleCount:28108,ProcessCount:54,ThreadCount:759
2025-08-23 00:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10008","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10132","aliyundun_upload_time":"1755878916","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 00:54:20 [Info] TotalPhys:2047,AvailPhys:455,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6322,AvailPageFile:1170,SelfWorkingSet:10004, SelfPageFile:14088
2025-08-23 00:54:20 [Info] CommitTotal:5151,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:455,SystemCache:44,KernelTotal:264,KernelPaged:185,KernelNonpaged:79,PageSize:4096,HandleCount:27607,ProcessCount:52,ThreadCount:732
2025-08-23 01:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9976","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10020","aliyundun_upload_time":"1755882521","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 01:18:05 [Info] GetMessage : T_MSG_CHECK
2025-08-23 01:18:05 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU4ODMwODUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1OTI2Mjg1LCJzdWIiOiJSVEFQX0lEWF8xNjEyMjRfMTc1NTg4MzA4NTE0OSJ9._h-QMlgXZFHHRl0UePeHxQDVrEX-qzPzgnMZYdMFpyY has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 01:18:16 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 01:18:16 [Info] ipc client:Rtap13801755883096_handler Reg client_name:Rtap13801755883096 on WhiteList
2025-08-23 01:18:17 [Info] start rtap process success, pid is 3400, argument is Rtap13801755883096
2025-08-23 01:18:17 [Info] New ClientConnectNotify : Rtap13801755883096, id is 0000053C
2025-08-23 01:18:17 [Info] ipc client:Rtap13801755883096 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 01:18:17 [Info] Rtap Platform Rtap13801755883096 execv work --sca on pid 3400
2025-08-23 01:18:19 [Info] csrss.exe open proc 3400 AliSecCheck.ex
2025-08-23 01:18:20 [Info] csrss.exe open thread 3400 AliSecCheck.ex
2025-08-23 01:19:02 [Info] csrss.exe open thread 3400 AliSecCheck.ex
2025-08-23 01:19:25 [Info] Done Work --sca:1
2025-08-23 01:19:25 [Info] Rtap Platform Rtap13801755883096 Exit:normal exit
2025-08-23 01:19:27 [Info] ClientDisConnectNotify : Rtap13801755883096, id is 0000053C
2025-08-23 01:55:17 [Info] TotalPhys:2047,AvailPhys:342,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6322,AvailPageFile:1061,SelfWorkingSet:10156, SelfPageFile:14084
2025-08-23 01:55:17 [Info] CommitTotal:5260,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:342,SystemCache:4194303,KernelTotal:253,KernelPaged:182,KernelNonpaged:70,PageSize:4096,HandleCount:27601,ProcessCount:52,ThreadCount:731
2025-08-23 02:08:55 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10090","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10208","aliyundun_upload_time":"1755886135","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 02:38:49 [Info] get meta data success by v2
2025-08-23 02:38:49 [Info] get empty metaserver config
2025-08-23 02:38:49 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-23 02:38:49 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-23 02:38:49 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-23 02:38:49 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-23 02:38:49 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 02:38:49 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 02:38:50 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-23 02:38:50 [Info] download cert compare md5 same
2025-08-23 02:38:50 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 02:38:50 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 02:38:50 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-23 02:56:14 [Info] TotalPhys:2047,AvailPhys:335,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6322,AvailPageFile:1052,SelfWorkingSet:10296, SelfPageFile:14208
2025-08-23 02:56:14 [Info] CommitTotal:5269,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:335,SystemCache:4194303,KernelTotal:253,KernelPaged:182,KernelNonpaged:70,PageSize:4096,HandleCount:27597,ProcessCount:52,ThreadCount:732
2025-08-23 03:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10246","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10304","aliyundun_upload_time":"1755889718","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 03:43:57 [Info] nCurrentClock is 3600152300, nCurrentTime is 1755891837
2025-08-23 03:43:57 [Info] SendMessage T_MSG_LOGIN
2025-08-23 03:43:57 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-23 03:43:57 [Info] begin to enable self guard after reconnect
2025-08-23 03:43:57 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-23 03:43:57 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-23 03:43:57 [Info] GetMessage : T_MSG_CHECK
2025-08-23 03:43:57 [Info] task 8a81d257-f1c8-4378-8db8-f7705040f944 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 03:44:05 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-23 03:44:05 [Info] key : cpu, value : 10
2025-08-23 03:44:05 [Info] key : rio, value : 20480
2025-08-23 03:44:05 [Info] key : wio, value : 20480
2025-08-23 03:44:05 [Info] key : cpu_all, value : 0
2025-08-23 03:44:05 [Info] key : max_pid_check, value : 200
2025-08-23 03:44:05 [Info] key : throw_dump, value : 0
2025-08-23 03:44:05 [Info] key : hash_mode, value : 1
2025-08-23 03:44:05 [Info] key : mem, value : 200
2025-08-23 03:44:05 [Info] can not find key max_fd in online conf
2025-08-23 03:44:05 [Info] key : proc_limit, value : 1
2025-08-23 03:44:05 [Info] key : resource_limit_mode, value : 3
2025-08-23 03:44:05 [Info] key : rtap_update_mode, value : 1
2025-08-23 03:44:05 [Info] can not find key debug in online conf
2025-08-23 03:44:05 [Info] can not find key update_mode in online conf
2025-08-23 03:44:05 [Info] can not find key http_mode in online conf
2025-08-23 03:44:05 [Info] can not find key rtap_enable in online conf
2025-08-23 03:44:05 [Info] can not find key rtap_new_agent in online conf
2025-08-23 03:44:05 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-23 03:44:05 [Info] can not find key mem_low_mark in online conf
2025-08-23 03:44:05 [Info] can not find key obnormal_report_interval in online conf
2025-08-23 03:44:05 [Info] key : cache_mode, value : 0
2025-08-23 03:44:05 [Info] key : abnormal_monitor_mode, value : 3
2025-08-23 03:44:05 [Info] key : queue_size_ratio, value : 80
2025-08-23 03:44:05 [Info] queue_size_ratio is 80
2025-08-23 03:44:05 [Info] resource limit mode and max limit cpu is not change
2025-08-23 03:44:05 [Info] set hash mode 1
2025-08-23 03:44:05 [Info] RTAP timeout config:9600000
2025-08-23 03:44:05 [Info] self_guard_mode config is 0
2025-08-23 03:44:10 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 03:44:10 [Info] ipc client:Rtap299661755891850_handler Reg client_name:Rtap299661755891850 on WhiteList
2025-08-23 03:44:10 [Info] start rtap process success, pid is 3124, argument is Rtap299661755891850
2025-08-23 03:44:10 [Info] New ClientConnectNotify : Rtap299661755891850, id is 000004D8
2025-08-23 03:44:10 [Info] ipc client:Rtap299661755891850 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 03:44:10 [Info] Rtap Platform Rtap299661755891850 execv work --windows-sysinfoext-check on pid 3124
2025-08-23 03:44:11 [Info] csrss.exe open proc 3124 AliSecCheck.ex
2025-08-23 03:44:12 [Info] csrss.exe open thread 3124 AliSecCheck.ex
2025-08-23 03:44:17 [Info] Done Work --windows-sysinfoext-check:1
2025-08-23 03:44:17 [Info] Rtap Platform Rtap299661755891850 Exit:normal exit
2025-08-23 03:44:20 [Info] ClientDisConnectNotify : Rtap299661755891850, id is 000004D8
2025-08-23 03:57:12 [Info] TotalPhys:2047,AvailPhys:330,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6322,AvailPageFile:1059,SelfWorkingSet:10292, SelfPageFile:14140
2025-08-23 03:57:12 [Info] CommitTotal:5263,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:330,SystemCache:4194303,KernelTotal:253,KernelPaged:182,KernelNonpaged:70,PageSize:4096,HandleCount:27767,ProcessCount:53,ThreadCount:737
2025-08-23 04:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10232","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10296","aliyundun_upload_time":"1755893326","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 04:58:09 [Info] TotalPhys:2047,AvailPhys:331,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6322,AvailPageFile:1056,SelfWorkingSet:10124, SelfPageFile:13776
2025-08-23 04:58:09 [Info] CommitTotal:5266,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:331,SystemCache:4194303,KernelTotal:253,KernelPaged:182,KernelNonpaged:70,PageSize:4096,HandleCount:27652,ProcessCount:52,ThreadCount:732
2025-08-23 05:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10111","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10212","aliyundun_upload_time":"1755896942","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 05:56:13 [Info] get meta data success by v2
2025-08-23 05:56:13 [Info] get empty metaserver config
2025-08-23 05:56:13 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-23 05:56:14 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-23 05:56:14 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-23 05:56:14 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-23 05:56:14 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 05:56:14 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 05:56:14 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-23 05:56:14 [Info] download cert compare md5 same
2025-08-23 05:56:14 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 05:56:14 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 05:56:14 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-23 05:59:06 [Info] TotalPhys:2047,AvailPhys:331,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6322,AvailPageFile:1051,SelfWorkingSet:10156, SelfPageFile:13892
2025-08-23 05:59:06 [Info] CommitTotal:5271,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:331,SystemCache:4194303,KernelTotal:256,KernelPaged:185,KernelNonpaged:70,PageSize:4096,HandleCount:27639,ProcessCount:52,ThreadCount:742
2025-08-23 06:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10128","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10200","aliyundun_upload_time":"1755900514","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 07:00:02 [Info] TotalPhys:2047,AvailPhys:333,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6322,AvailPageFile:1054,SelfWorkingSet:10164, SelfPageFile:13776
2025-08-23 07:00:02 [Info] CommitTotal:5267,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:333,SystemCache:4194303,KernelTotal:256,KernelPaged:186,KernelNonpaged:70,PageSize:4096,HandleCount:27616,ProcessCount:52,ThreadCount:730
2025-08-23 07:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10153","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10232","aliyundun_upload_time":"1755904115","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 08:00:59 [Info] TotalPhys:2047,AvailPhys:326,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6322,AvailPageFile:1044,SelfWorkingSet:10172, SelfPageFile:14020
2025-08-23 08:00:59 [Info] CommitTotal:5278,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:326,SystemCache:4194303,KernelTotal:256,KernelPaged:186,KernelNonpaged:70,PageSize:4096,HandleCount:27637,ProcessCount:52,ThreadCount:741
2025-08-23 08:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10218","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10284","aliyundun_upload_time":"1755907726","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 08:50:22 [Info] GetMessage : T_MSG_CHECK
2025-08-23 08:50:22 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU5MTAyMjIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1OTUzNDIyLCJzdWIiOiJSVEFQX0lEWF8xNjEyMTRfMTc1NTkxMDIyMjIyMSJ9.hZhJbziz6TLxWYVfqYpbr7VTo-DgHO9ghqLYLV1-6Xw has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 08:50:31 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 08:50:31 [Info] ipc client:Rtap244551755910231_handler Reg client_name:Rtap244551755910231 on WhiteList
2025-08-23 08:50:31 [Info] start rtap process success, pid is 3896, argument is Rtap244551755910231
2025-08-23 08:50:31 [Info] New ClientConnectNotify : Rtap244551755910231, id is 000004F4
2025-08-23 08:50:31 [Info] ipc client:Rtap244551755910231 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 08:50:32 [Info] Rtap Platform Rtap244551755910231 execv work --windows-process-check on pid 3896
2025-08-23 08:50:32 [Info] csrss.exe open proc 3896 AliSecCheck.ex
2025-08-23 08:50:33 [Info] csrss.exe open thread 3896 AliSecCheck.ex
2025-08-23 08:50:55 [Info] Done Work --windows-process-check:1
2025-08-23 08:50:55 [Info] Rtap Platform Rtap244551755910231 Exit:normal exit
2025-08-23 08:50:57 [Info] ClientDisConnectNotify : Rtap244551755910231, id is 000004F4
2025-08-23 09:02:00 [Info] TotalPhys:2047,AvailPhys:296,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6322,AvailPageFile:1041,SelfWorkingSet:10300, SelfPageFile:14140
2025-08-23 09:02:00 [Info] CommitTotal:5280,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:296,SystemCache:4194303,KernelTotal:257,KernelPaged:185,KernelNonpaged:72,PageSize:4096,HandleCount:27601,ProcessCount:52,ThreadCount:730
2025-08-23 09:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10176","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10300","aliyundun_upload_time":"1755911323","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 09:13:58 [Info] nCurrentClock is 3618152800, nCurrentTime is 1755911638
2025-08-23 09:13:58 [Info] SendMessage T_MSG_LOGIN
2025-08-23 09:13:58 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-23 09:13:58 [Info] begin to enable self guard after reconnect
2025-08-23 09:13:58 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-23 09:13:58 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-23 09:13:58 [Info] GetMessage : T_MSG_CHECK
2025-08-23 09:13:58 [Info] task fbb4589a-937b-4e06-b6d0-cb2e4406db7c has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 09:14:07 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-23 09:14:07 [Info] key : cpu, value : 10
2025-08-23 09:14:07 [Info] key : rio, value : 20480
2025-08-23 09:14:07 [Info] key : wio, value : 20480
2025-08-23 09:14:07 [Info] key : cpu_all, value : 0
2025-08-23 09:14:07 [Info] key : max_pid_check, value : 200
2025-08-23 09:14:07 [Info] key : throw_dump, value : 0
2025-08-23 09:14:07 [Info] key : hash_mode, value : 1
2025-08-23 09:14:07 [Info] key : mem, value : 200
2025-08-23 09:14:07 [Info] can not find key max_fd in online conf
2025-08-23 09:14:07 [Info] key : proc_limit, value : 1
2025-08-23 09:14:07 [Info] key : resource_limit_mode, value : 3
2025-08-23 09:14:07 [Info] key : rtap_update_mode, value : 1
2025-08-23 09:14:07 [Info] can not find key debug in online conf
2025-08-23 09:14:07 [Info] can not find key update_mode in online conf
2025-08-23 09:14:07 [Info] can not find key http_mode in online conf
2025-08-23 09:14:07 [Info] can not find key rtap_enable in online conf
2025-08-23 09:14:07 [Info] can not find key rtap_new_agent in online conf
2025-08-23 09:14:07 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-23 09:14:07 [Info] can not find key mem_low_mark in online conf
2025-08-23 09:14:07 [Info] can not find key obnormal_report_interval in online conf
2025-08-23 09:14:07 [Info] key : cache_mode, value : 0
2025-08-23 09:14:07 [Info] key : abnormal_monitor_mode, value : 3
2025-08-23 09:14:07 [Info] key : queue_size_ratio, value : 80
2025-08-23 09:14:07 [Info] queue_size_ratio is 80
2025-08-23 09:14:07 [Info] resource limit mode and max limit cpu is not change
2025-08-23 09:14:07 [Info] set hash mode 1
2025-08-23 09:14:07 [Info] RTAP timeout config:9600000
2025-08-23 09:14:07 [Info] self_guard_mode config is 0
2025-08-23 09:14:11 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 09:14:11 [Info] ipc client:Rtap290921755911651_handler Reg client_name:Rtap290921755911651 on WhiteList
2025-08-23 09:14:11 [Info] start rtap process success, pid is 2628, argument is Rtap290921755911651
2025-08-23 09:14:11 [Info] New ClientConnectNotify : Rtap290921755911651, id is 0000053C
2025-08-23 09:14:11 [Info] ipc client:Rtap290921755911651 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 09:14:12 [Info] Rtap Platform Rtap290921755911651 execv work --windows-sysinfoext-check on pid 2628
2025-08-23 09:14:14 [Info] csrss.exe open proc 2628 AliSecCheck.ex
2025-08-23 09:14:15 [Info] csrss.exe open thread 2628 AliSecCheck.ex
2025-08-23 09:14:19 [Info] Done Work --windows-sysinfoext-check:1
2025-08-23 09:14:19 [Info] Rtap Platform Rtap290921755911651 Exit:normal exit
2025-08-23 09:14:21 [Info] ClientDisConnectNotify : Rtap290921755911651, id is 0000053C
2025-08-23 09:14:35 [Info] get meta data success by v2
2025-08-23 09:14:35 [Info] get empty metaserver config
2025-08-23 09:14:35 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-23 09:14:35 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-23 09:14:35 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-23 09:14:35 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-23 09:14:35 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 09:14:35 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 09:14:36 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-23 09:14:36 [Info] download cert compare md5 same
2025-08-23 09:14:36 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 09:14:36 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 09:14:36 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-23 09:58:11 [Info] GetMessage : T_MSG_CHECK
2025-08-23 09:58:11 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU5MTQyOTEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1OTU3NDkxLCJzdWIiOiJSVEFQX0lEWF8xNjEyMTVfMTc1NTkxNDI5MTM2NSJ9.AX3uqFFB0TjbJ882GfVfSVC2XypYS46VT3UWurcai28 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 09:58:23 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 09:58:23 [Info] ipc client:Rtap49841755914303_handler Reg client_name:Rtap49841755914303 on WhiteList
2025-08-23 09:58:23 [Info] start rtap process success, pid is 4392, argument is Rtap49841755914303
2025-08-23 09:58:23 [Info] New ClientConnectNotify : Rtap49841755914303, id is 000004F4
2025-08-23 09:58:24 [Info] ipc client:Rtap49841755914303 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 09:58:24 [Info] Rtap Platform Rtap49841755914303 execv work --tcp-connect-check on pid 4392
2025-08-23 09:58:26 [Info] csrss.exe open proc 4392 AliSecCheck.ex
2025-08-23 09:58:27 [Info] csrss.exe open thread 4392 AliSecCheck.ex
2025-08-23 09:58:35 [Info] Done Work --tcp-connect-check:1
2025-08-23 09:58:35 [Info] Rtap Platform Rtap49841755914303 Exit:normal exit
2025-08-23 09:58:37 [Info] ClientDisConnectNotify : Rtap49841755914303, id is 000004F4
2025-08-23 10:03:00 [Info] TotalPhys:2047,AvailPhys:310,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6322,AvailPageFile:1039,SelfWorkingSet:10080, SelfPageFile:13776
2025-08-23 10:03:00 [Info] CommitTotal:5283,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:310,SystemCache:4194303,KernelTotal:256,KernelPaged:185,KernelNonpaged:71,PageSize:4096,HandleCount:27622,ProcessCount:52,ThreadCount:732
2025-08-23 10:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10073","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10332","aliyundun_upload_time":"1755914939","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 10:16:02 [Info] GetMessage : T_MSG_CHECK
2025-08-23 10:16:02 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU5MTUzNjIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1OTU4NTYyLCJzdWIiOiJSVEFQX0lEWF8xNjEyMTdfMTc1NTkxNTM2MjExNiJ9.8Iy51oYjdlBNXgymHNe2aroeP3g0CLi8PSpB4yw-bXc has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 10:16:10 [Info] GetMessage : T_MSG_CHECK
2025-08-23 10:16:10 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU5MTUzNjgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1OTU4NTY4LCJzdWIiOiJSVEFQX0lEWF8xNjEyMjNfMTc1NTkxNTM2ODYzOSJ9.utFAPQd9_6KXN7nb7yF7nnGEsrRSYEwjraMHhv_a08U has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 10:16:11 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 10:16:11 [Info] ipc client:Rtap84721755915371_handler Reg client_name:Rtap84721755915371 on WhiteList
2025-08-23 10:16:11 [Info] start rtap process success, pid is 4444, argument is Rtap84721755915371
2025-08-23 10:16:12 [Info] New ClientConnectNotify : Rtap84721755915371, id is 00000548
2025-08-23 10:16:12 [Info] ipc client:Rtap84721755915371 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 10:16:12 [Info] Rtap Platform Rtap84721755915371 execv work --windows-schedule-task-check on pid 4444
2025-08-23 10:16:13 [Info] csrss.exe open proc 4444 AliSecCheck.ex
2025-08-23 10:16:14 [Info] csrss.exe open thread 4444 AliSecCheck.ex
2025-08-23 10:16:21 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 10:16:21 [Info] ipc client:Rtap85051755915381_handler Reg client_name:Rtap85051755915381 on WhiteList
2025-08-23 10:16:21 [Info] start rtap process success, pid is 4220, argument is Rtap85051755915381
2025-08-23 10:16:21 [Info] New ClientConnectNotify : Rtap85051755915381, id is 00000540
2025-08-23 10:16:21 [Info] ipc client:Rtap85051755915381 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 10:16:21 [Info] Rtap Platform Rtap85051755915381 execv work --windows-registry-check on pid 4220
2025-08-23 10:16:23 [Info] csrss.exe open proc 4220 AliSecCheck.ex
2025-08-23 10:16:24 [Info] csrss.exe open thread 4220 AliSecCheck.ex
2025-08-23 10:16:49 [Info] Done Work --windows-schedule-task-check:1
2025-08-23 10:16:49 [Info] Rtap Platform Rtap84721755915371 Exit:normal exit
2025-08-23 10:16:52 [Info] ClientDisConnectNotify : Rtap84721755915371, id is 00000548
2025-08-23 10:16:59 [Info] Done Work --windows-registry-check:1
2025-08-23 10:16:59 [Info] Rtap Platform Rtap85051755915381 Exit:normal exit
2025-08-23 10:17:01 [Info] ClientDisConnectNotify : Rtap85051755915381, id is 00000540
2025-08-23 10:17:36 [Info] GetMessage : T_MSG_CHECK
2025-08-23 10:17:36 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU5MTU0NTYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1OTU4NjU2LCJzdWIiOiJSVEFQX0lEWF8xNjEyMzFfMTc1NTkxNTQ1NjM3NCJ9.f8FzJHyGTIaPFS9i1aJDPeKPSPrYf8qJPnwDGgSH3WY has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 10:17:48 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 10:17:48 [Info] ipc client:Rtap87891755915468_handler Reg client_name:Rtap87891755915468 on WhiteList
2025-08-23 10:17:48 [Info] start rtap process success, pid is 1292, argument is Rtap87891755915468
2025-08-23 10:17:48 [Info] New ClientConnectNotify : Rtap87891755915468, id is 0000053C
2025-08-23 10:17:48 [Info] ipc client:Rtap87891755915468 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 10:17:48 [Info] Rtap Platform Rtap87891755915468 execv work --windows-driver-version-check on pid 1292
2025-08-23 10:17:49 [Info] csrss.exe open proc 1292 AliSecCheck.ex
2025-08-23 10:17:50 [Info] csrss.exe open thread 1292 AliSecCheck.ex
2025-08-23 10:17:56 [Info] Done Work --windows-driver-version-check:1
2025-08-23 10:17:56 [Info] Rtap Platform Rtap87891755915468 Exit:normal exit
2025-08-23 10:17:58 [Info] ClientDisConnectNotify : Rtap87891755915468, id is 0000053C
2025-08-23 11:03:57 [Info] TotalPhys:2047,AvailPhys:325,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6322,AvailPageFile:1052,SelfWorkingSet:10124, SelfPageFile:13732
2025-08-23 11:03:57 [Info] CommitTotal:5269,CommitLimit:6322,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:325,SystemCache:4194303,KernelTotal:256,KernelPaged:184,KernelNonpaged:71,PageSize:4096,HandleCount:27624,ProcessCount:52,ThreadCount:741
2025-08-23 11:05:46 [Info] GetMessage : T_MSG_CHECK
2025-08-23 11:05:46 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU5MTgzNDYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1OTYxNTQ2LCJzdWIiOiJSVEFQX0lEWF8xNjEyMjBfMTc1NTkxODM0NjMwNiJ9.yAa1fK3jslYH9TPNUrKKu4yfb5RZInFsj1ZekHgCYkE has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 11:05:56 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 11:05:56 [Info] ipc client:Rtap182201755918356_handler Reg client_name:Rtap182201755918356 on WhiteList
2025-08-23 11:05:56 [Info] start rtap process success, pid is 2556, argument is Rtap182201755918356
2025-08-23 11:05:56 [Info] New ClientConnectNotify : Rtap182201755918356, id is 00000540
2025-08-23 11:05:57 [Info] ipc client:Rtap182201755918356 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 11:05:57 [Info] Rtap Platform Rtap182201755918356 execv work --windows-autorun-item-check on pid 2556
2025-08-23 11:05:59 [Info] csrss.exe open proc 2556 AliSecCheck.ex
2025-08-23 11:06:00 [Info] csrss.exe open thread 2556 AliSecCheck.ex
2025-08-23 11:06:12 [Info] Done Work --windows-autorun-item-check:1
2025-08-23 11:06:12 [Info] Rtap Platform Rtap182201755918356 Exit:normal exit
2025-08-23 11:06:14 [Info] ClientDisConnectNotify : Rtap182201755918356, id is 00000540
2025-08-23 11:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10209","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10360","aliyundun_upload_time":"1755918518","aliyundun_write_pid_times":"0","ipc_send_count":"153","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 12:04:54 [Info] TotalPhys:2047,AvailPhys:662,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6620,AvailPageFile:1352,SelfWorkingSet:10152, SelfPageFile:13736
2025-08-23 12:04:54 [Info] CommitTotal:5267,CommitLimit:6620,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:662,SystemCache:50,KernelTotal:255,KernelPaged:184,KernelNonpaged:70,PageSize:4096,HandleCount:27753,ProcessCount:52,ThreadCount:742
2025-08-23 12:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10114","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10232","aliyundun_upload_time":"1755922129","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 12:31:56 [Info] get meta data success by v2
2025-08-23 12:31:56 [Info] get empty metaserver config
2025-08-23 12:31:56 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-23 12:31:56 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-23 12:31:56 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-23 12:31:56 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-23 12:31:56 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 12:31:56 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 12:31:57 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-23 12:31:57 [Info] download cert compare md5 same
2025-08-23 12:31:57 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 12:31:57 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 12:31:57 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-23 13:05:56 [Info] TotalPhys:2047,AvailPhys:622,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6620,AvailPageFile:1344,SelfWorkingSet:10216, SelfPageFile:14088
2025-08-23 13:05:56 [Info] CommitTotal:5276,CommitLimit:6620,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:622,SystemCache:160,KernelTotal:260,KernelPaged:187,KernelNonpaged:72,PageSize:4096,HandleCount:27652,ProcessCount:52,ThreadCount:736
2025-08-23 13:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10179","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10256","aliyundun_upload_time":"1755925714","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-08-23 14:06:53 [Info] TotalPhys:2047,AvailPhys:637,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6620,AvailPageFile:1334,SelfWorkingSet:10232, SelfPageFile:14084
2025-08-23 14:06:53 [Info] CommitTotal:5286,CommitLimit:6620,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:637,SystemCache:143,KernelTotal:270,KernelPaged:194,KernelNonpaged:76,PageSize:4096,HandleCount:27637,ProcessCount:52,ThreadCount:734
2025-08-23 14:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10218","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"10264","aliyundun_upload_time":"1755929327","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 14:43:39 [Info] nCurrentClock is 3636153300, nCurrentTime is 1755931419
2025-08-23 14:43:39 [Info] SendMessage T_MSG_LOGIN
2025-08-23 14:43:39 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-23 14:43:39 [Info] begin to enable self guard after reconnect
2025-08-23 14:43:39 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-23 14:43:39 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-23 14:43:39 [Info] GetMessage : T_MSG_CHECK
2025-08-23 14:43:39 [Info] task a8158a65-756a-424b-9a9f-f124bfb8e4e3 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 14:43:47 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-23 14:43:47 [Info] key : cpu, value : 10
2025-08-23 14:43:47 [Info] key : rio, value : 20480
2025-08-23 14:43:47 [Info] key : wio, value : 20480
2025-08-23 14:43:47 [Info] key : cpu_all, value : 0
2025-08-23 14:43:47 [Info] key : max_pid_check, value : 200
2025-08-23 14:43:47 [Info] key : throw_dump, value : 0
2025-08-23 14:43:47 [Info] key : hash_mode, value : 1
2025-08-23 14:43:47 [Info] key : mem, value : 200
2025-08-23 14:43:47 [Info] can not find key max_fd in online conf
2025-08-23 14:43:47 [Info] key : proc_limit, value : 1
2025-08-23 14:43:47 [Info] key : resource_limit_mode, value : 3
2025-08-23 14:43:47 [Info] key : rtap_update_mode, value : 1
2025-08-23 14:43:47 [Info] can not find key debug in online conf
2025-08-23 14:43:47 [Info] can not find key update_mode in online conf
2025-08-23 14:43:47 [Info] can not find key http_mode in online conf
2025-08-23 14:43:47 [Info] can not find key rtap_enable in online conf
2025-08-23 14:43:47 [Info] can not find key rtap_new_agent in online conf
2025-08-23 14:43:47 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-23 14:43:47 [Info] can not find key mem_low_mark in online conf
2025-08-23 14:43:47 [Info] can not find key obnormal_report_interval in online conf
2025-08-23 14:43:47 [Info] key : cache_mode, value : 0
2025-08-23 14:43:47 [Info] key : abnormal_monitor_mode, value : 3
2025-08-23 14:43:47 [Info] key : queue_size_ratio, value : 80
2025-08-23 14:43:47 [Info] queue_size_ratio is 80
2025-08-23 14:43:47 [Info] resource limit mode and max limit cpu is not change
2025-08-23 14:43:47 [Info] set hash mode 1
2025-08-23 14:43:47 [Info] RTAP timeout config:9600000
2025-08-23 14:43:47 [Info] self_guard_mode config is 0
2025-08-23 14:43:47 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-23 14:43:50 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 14:43:50 [Info] ipc client:Rtap281461755931430_handler Reg client_name:Rtap281461755931430 on WhiteList
2025-08-23 14:43:50 [Info] start rtap process success, pid is 4348, argument is Rtap281461755931430
2025-08-23 14:43:52 [Info] csrss.exe open proc 4348 AliSecCheck.ex
2025-08-23 14:43:53 [Info] New ClientConnectNotify : Rtap281461755931430, id is 000004D8
2025-08-23 14:43:53 [Info] csrss.exe open thread 4348 AliSecCheck.ex
2025-08-23 14:43:53 [Info] ipc client:Rtap281461755931430 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 14:43:53 [Info] Rtap Platform Rtap281461755931430 execv work --windows-sysinfoext-check on pid 4348
2025-08-23 14:43:54 [Info] csrss.exe open thread 4348 AliSecCheck.ex
2025-08-23 14:43:55 [Info] csrss.exe open thread 4348 AliSecCheck.ex
2025-08-23 14:44:04 [Info] Done Work --windows-sysinfoext-check:1
2025-08-23 14:44:04 [Info] Rtap Platform Rtap281461755931430 Exit:normal exit
2025-08-23 14:44:06 [Info] ClientDisConnectNotify : Rtap281461755931430, id is 000004D8
2025-08-23 15:07:52 [Info] TotalPhys:2047,AvailPhys:618,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6620,AvailPageFile:1322,SelfWorkingSet:10020, SelfPageFile:13684
2025-08-23 15:07:52 [Info] CommitTotal:5297,CommitLimit:6620,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:618,SystemCache:26,KernelTotal:268,KernelPaged:192,KernelNonpaged:76,PageSize:4096,HandleCount:27748,ProcessCount:52,ThreadCount:749
2025-08-23 15:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10055","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10256","aliyundun_upload_time":"1755932940","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 15:50:04 [Info] get meta data success by v2
2025-08-23 15:50:04 [Info] get empty metaserver config
2025-08-23 15:50:04 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-23 15:50:04 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-23 15:50:04 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-23 15:50:04 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-23 15:50:04 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 15:50:04 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 15:50:04 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-23 15:50:04 [Info] download cert compare md5 same
2025-08-23 15:50:04 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 15:50:04 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 15:50:04 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-23 16:08:49 [Info] TotalPhys:2047,AvailPhys:619,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6620,AvailPageFile:1333,SelfWorkingSet:10164, SelfPageFile:13812
2025-08-23 16:08:49 [Info] CommitTotal:5287,CommitLimit:6620,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:619,SystemCache:56,KernelTotal:267,KernelPaged:191,KernelNonpaged:75,PageSize:4096,HandleCount:27741,ProcessCount:52,ThreadCount:746
2025-08-23 16:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10142","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10200","aliyundun_upload_time":"1755936529","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 17:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10113","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10172","aliyundun_upload_time":"1755940137","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"69","module_load_failed":"0","network_send_buff_size":"1158","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 17:09:45 [Info] TotalPhys:2047,AvailPhys:629,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6620,AvailPageFile:1343,SelfWorkingSet:10036, SelfPageFile:13624
2025-08-23 17:09:45 [Info] CommitTotal:5277,CommitLimit:6620,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:629,SystemCache:59,KernelTotal:267,KernelPaged:191,KernelNonpaged:76,PageSize:4096,HandleCount:27643,ProcessCount:52,ThreadCount:738
2025-08-23 18:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10079","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10152","aliyundun_upload_time":"1755943712","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 18:10:42 [Info] TotalPhys:2047,AvailPhys:608,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6620,AvailPageFile:1334,SelfWorkingSet:10024, SelfPageFile:13588
2025-08-23 18:10:42 [Info] CommitTotal:5286,CommitLimit:6620,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:608,SystemCache:62,KernelTotal:268,KernelPaged:192,KernelNonpaged:76,PageSize:4096,HandleCount:27618,ProcessCount:52,ThreadCount:730
2025-08-23 18:55:16 [Info] GetMessage : T_MSG_CHECK
2025-08-23 18:55:16 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTU5NDY1MTYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU1OTg5NzE2LCJzdWIiOiJSVEFQX0lEWF8xNjEyOTBfMTc1NTk0NjUxNjcxOCJ9.vKDUEiqYy-HQAz8I2a6Wd0NwVIXcq2GLQ9Xf-ePt3yA has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 18:55:25 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 18:55:25 [Info] ipc client:Rtap119041755946525_handler Reg client_name:Rtap119041755946525 on WhiteList
2025-08-23 18:55:25 [Info] start rtap process success, pid is 3548, argument is Rtap119041755946525
2025-08-23 18:55:26 [Info] New ClientConnectNotify : Rtap119041755946525, id is 000004F4
2025-08-23 18:55:26 [Info] ipc client:Rtap119041755946525 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 18:55:26 [Info] Rtap Platform Rtap119041755946525 execv work --secnet_rasp_agent on pid 3548
2025-08-23 18:55:27 [Info] csrss.exe open proc 3548 AliSecCheck.ex
2025-08-23 18:55:28 [Info] csrss.exe open thread 3548 AliSecCheck.ex
2025-08-23 18:55:29 [Info] csrss.exe open thread 3548 AliSecCheck.ex
2025-08-23 18:55:33 [Info] Done Work --secnet_rasp_agent:1
2025-08-23 18:55:33 [Info] Rtap Platform Rtap119041755946525 Exit:normal exit
2025-08-23 18:55:35 [Info] ClientDisConnectNotify : Rtap119041755946525, id is 000004F4
2025-08-23 19:07:19 [Info] get meta data success by v2
2025-08-23 19:07:19 [Info] get empty metaserver config
2025-08-23 19:07:19 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-23 19:07:19 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-23 19:07:19 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-23 19:07:19 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-23 19:07:19 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 19:07:19 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 19:07:19 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-23 19:07:19 [Info] download cert compare md5 same
2025-08-23 19:07:19 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 19:07:19 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 19:07:19 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-23 19:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10082","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10248","aliyundun_upload_time":"1755947320","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 19:11:38 [Info] TotalPhys:2047,AvailPhys:600,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6620,AvailPageFile:1318,SelfWorkingSet:10060, SelfPageFile:13808
2025-08-23 19:11:38 [Info] CommitTotal:5301,CommitLimit:6620,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:600,SystemCache:95,KernelTotal:271,KernelPaged:195,KernelNonpaged:76,PageSize:4096,HandleCount:27658,ProcessCount:52,ThreadCount:738
2025-08-23 20:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10091","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10156","aliyundun_upload_time":"1755950929","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 20:12:31 [Info] nCurrentClock is 3654153800, nCurrentTime is 1755951151
2025-08-23 20:12:31 [Info] SendMessage T_MSG_LOGIN
2025-08-23 20:12:31 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-23 20:12:31 [Info] begin to enable self guard after reconnect
2025-08-23 20:12:31 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-23 20:12:31 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-23 20:12:31 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-23 20:12:31 [Info] key : cpu, value : 10
2025-08-23 20:12:31 [Info] key : rio, value : 20480
2025-08-23 20:12:31 [Info] key : wio, value : 20480
2025-08-23 20:12:31 [Info] key : cpu_all, value : 0
2025-08-23 20:12:31 [Info] key : max_pid_check, value : 200
2025-08-23 20:12:31 [Info] key : throw_dump, value : 0
2025-08-23 20:12:31 [Info] key : hash_mode, value : 1
2025-08-23 20:12:31 [Info] key : mem, value : 200
2025-08-23 20:12:31 [Info] can not find key max_fd in online conf
2025-08-23 20:12:31 [Info] key : proc_limit, value : 1
2025-08-23 20:12:31 [Info] key : resource_limit_mode, value : 3
2025-08-23 20:12:31 [Info] key : rtap_update_mode, value : 1
2025-08-23 20:12:31 [Info] can not find key debug in online conf
2025-08-23 20:12:31 [Info] can not find key update_mode in online conf
2025-08-23 20:12:31 [Info] can not find key http_mode in online conf
2025-08-23 20:12:31 [Info] can not find key rtap_enable in online conf
2025-08-23 20:12:31 [Info] can not find key rtap_new_agent in online conf
2025-08-23 20:12:31 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-23 20:12:31 [Info] can not find key mem_low_mark in online conf
2025-08-23 20:12:31 [Info] can not find key obnormal_report_interval in online conf
2025-08-23 20:12:31 [Info] key : cache_mode, value : 0
2025-08-23 20:12:31 [Info] key : abnormal_monitor_mode, value : 3
2025-08-23 20:12:31 [Info] key : queue_size_ratio, value : 80
2025-08-23 20:12:31 [Info] queue_size_ratio is 80
2025-08-23 20:12:31 [Info] resource limit mode and max limit cpu is not change
2025-08-23 20:12:31 [Info] set hash mode 1
2025-08-23 20:12:31 [Info] RTAP timeout config:9600000
2025-08-23 20:12:31 [Info] self_guard_mode config is 0
2025-08-23 20:12:31 [Info] GetMessage : T_MSG_CHECK
2025-08-23 20:12:31 [Info] task 96e90544-ea12-4214-babb-490ce3663d9d has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 20:12:39 [Info] TotalPhys:2047,AvailPhys:600,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6620,AvailPageFile:1324,SelfWorkingSet:9980, SelfPageFile:13648
2025-08-23 20:12:39 [Info] CommitTotal:5295,CommitLimit:6620,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:600,SystemCache:91,KernelTotal:271,KernelPaged:195,KernelNonpaged:75,PageSize:4096,HandleCount:27622,ProcessCount:52,ThreadCount:726
2025-08-23 20:12:43 [Info] GetMessage : T_MSG_CHECK
2025-08-23 20:12:43 [Info] task a65a9c69878d8e3e899aa68a135ff2e1 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-23 20:12:44 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 20:12:44 [Info] ipc client:Rtap270531755951164_handler Reg client_name:Rtap270531755951164 on WhiteList
2025-08-23 20:12:44 [Info] start rtap process success, pid is 4648, argument is Rtap270531755951164
2025-08-23 20:12:44 [Info] New ClientConnectNotify : Rtap270531755951164, id is 00000540
2025-08-23 20:12:44 [Info] ipc client:Rtap270531755951164 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-23 20:12:44 [Info] Rtap Platform Rtap270531755951164 execv work --windows-sysinfoext-check on pid 4648
2025-08-23 20:12:46 [Info] csrss.exe open proc 4648 AliSecCheck.ex
2025-08-23 20:12:47 [Info] csrss.exe open thread 4648 AliSecCheck.ex
2025-08-23 20:12:51 [Info] Done Work --windows-sysinfoext-check:1
2025-08-23 20:12:53 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-23 20:12:53 [Info] Rtap platform Rtap270531755951164 is reuse
2025-08-23 20:12:54 [Info] Rtap Platform Rtap270531755951164 execv work --windows-vul-check on pid 4648
2025-08-23 20:13:01 [Info] Done Work --windows-vul-check:1
2025-08-23 20:13:01 [Info] Rtap Platform Rtap270531755951164 Exit:normal exit
2025-08-23 20:13:03 [Info] ClientDisConnectNotify : Rtap270531755951164, id is 00000540
2025-08-23 21:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10054","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10168","aliyundun_upload_time":"1755954542","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 21:13:36 [Info] TotalPhys:2047,AvailPhys:617,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6684,AvailPageFile:1416,SelfWorkingSet:10016, SelfPageFile:13604
2025-08-23 21:13:36 [Info] CommitTotal:5268,CommitLimit:6684,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:617,SystemCache:4194303,KernelTotal:254,KernelPaged:182,KernelNonpaged:72,PageSize:4096,HandleCount:27962,ProcessCount:53,ThreadCount:740
2025-08-23 22:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10087","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10116","aliyundun_upload_time":"1755958118","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 22:14:32 [Info] TotalPhys:2047,AvailPhys:605,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6684,AvailPageFile:1408,SelfWorkingSet:10124, SelfPageFile:13764
2025-08-23 22:14:32 [Info] CommitTotal:5275,CommitLimit:6684,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:605,SystemCache:4194303,KernelTotal:256,KernelPaged:183,KernelNonpaged:72,PageSize:4096,HandleCount:28045,ProcessCount:53,ThreadCount:734
2025-08-23 22:24:40 [Info] get meta data success by v2
2025-08-23 22:24:40 [Info] get empty metaserver config
2025-08-23 22:24:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-23 22:24:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-23 22:24:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-23 22:24:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-23 22:24:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 22:24:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-23 22:24:41 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-23 22:24:41 [Info] download cert compare md5 same
2025-08-23 22:24:41 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 22:24:41 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-23 22:24:41 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-23 23:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9996","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10160","aliyundun_upload_time":"1755961736","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-23 23:15:29 [Info] TotalPhys:2047,AvailPhys:612,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6684,AvailPageFile:1418,SelfWorkingSet:10080, SelfPageFile:13756
2025-08-23 23:15:29 [Info] CommitTotal:5265,CommitLimit:6684,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:612,SystemCache:11,KernelTotal:255,KernelPaged:182,KernelNonpaged:72,PageSize:4096,HandleCount:27990,ProcessCount:53,ThreadCount:745
2025-08-24 00:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10063","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10116","aliyundun_upload_time":"1755965340","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"42","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-24 00:16:26 [Info] TotalPhys:2047,AvailPhys:1031,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5710,AvailPageFile:1254,SelfWorkingSet:10012, SelfPageFile:13624
2025-08-24 00:16:26 [Info] CommitTotal:4456,CommitLimit:5710,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:1031,SystemCache:4194303,KernelTotal:250,KernelPaged:178,KernelNonpaged:71,PageSize:4096,HandleCount:27913,ProcessCount:53,ThreadCount:756
2025-08-30 00:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10109","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10220","aliyundun_upload_time":"1756483715","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 00:21:47 [Info] nCurrentClock is 4140171300, nCurrentTime is 1756484507
2025-08-30 00:21:48 [Info] SendMessage T_MSG_LOGIN
2025-08-30 00:21:48 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-30 00:21:48 [Info] begin to enable self guard after reconnect
2025-08-30 00:21:48 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-30 00:21:48 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-30 00:21:48 [Info] GetMessage : T_MSG_CHECK
2025-08-30 00:21:48 [Info] task 28a03b75-589d-4bda-b564-c166dd1d43ff has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 00:21:56 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-30 00:21:56 [Info] key : cpu, value : 10
2025-08-30 00:21:56 [Info] key : rio, value : 20480
2025-08-30 00:21:56 [Info] key : wio, value : 20480
2025-08-30 00:21:56 [Info] key : cpu_all, value : 0
2025-08-30 00:21:56 [Info] key : max_pid_check, value : 200
2025-08-30 00:21:56 [Info] key : throw_dump, value : 0
2025-08-30 00:21:56 [Info] key : hash_mode, value : 1
2025-08-30 00:21:56 [Info] key : mem, value : 200
2025-08-30 00:21:56 [Info] can not find key max_fd in online conf
2025-08-30 00:21:56 [Info] key : proc_limit, value : 1
2025-08-30 00:21:56 [Info] key : resource_limit_mode, value : 3
2025-08-30 00:21:56 [Info] key : rtap_update_mode, value : 1
2025-08-30 00:21:56 [Info] can not find key debug in online conf
2025-08-30 00:21:56 [Info] can not find key update_mode in online conf
2025-08-30 00:21:56 [Info] can not find key http_mode in online conf
2025-08-30 00:21:56 [Info] can not find key rtap_enable in online conf
2025-08-30 00:21:56 [Info] can not find key rtap_new_agent in online conf
2025-08-30 00:21:56 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-30 00:21:56 [Info] can not find key mem_low_mark in online conf
2025-08-30 00:21:56 [Info] can not find key obnormal_report_interval in online conf
2025-08-30 00:21:56 [Info] key : cache_mode, value : 0
2025-08-30 00:21:56 [Info] key : abnormal_monitor_mode, value : 3
2025-08-30 00:21:56 [Info] key : queue_size_ratio, value : 80
2025-08-30 00:21:56 [Info] queue_size_ratio is 80
2025-08-30 00:21:56 [Info] resource limit mode and max limit cpu is not change
2025-08-30 00:21:56 [Info] set hash mode 1
2025-08-30 00:21:56 [Info] RTAP timeout config:9600000
2025-08-30 00:21:56 [Info] self_guard_mode config is 0
2025-08-30 00:21:59 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 00:21:59 [Info] ipc client:Rtap320621756484519_handler Reg client_name:Rtap320621756484519 on WhiteList
2025-08-30 00:21:59 [Info] start rtap process success, pid is 1860, argument is Rtap320621756484519
2025-08-30 00:22:02 [Info] csrss.exe open proc 1860 AliSecCheck.ex
2025-08-30 00:22:02 [Info] New ClientConnectNotify : Rtap320621756484519, id is 00000540
2025-08-30 00:22:02 [Info] ipc client:Rtap320621756484519 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 00:22:02 [Info] Rtap Platform Rtap320621756484519 execv work --windows-sysinfoext-check on pid 1860
2025-08-30 00:22:03 [Info] csrss.exe open thread 1860 AliSecCheck.ex
2025-08-30 00:22:04 [Info] csrss.exe open thread 1860 AliSecCheck.ex
2025-08-30 00:22:05 [Info] csrss.exe open thread 1860 AliSecCheck.ex
2025-08-30 00:22:07 [Info] csrss.exe open thread 1860 AliSecCheck.ex
2025-08-30 00:22:13 [Info] Done Work --windows-sysinfoext-check:1
2025-08-30 00:22:13 [Info] Rtap Platform Rtap320621756484519 Exit:normal exit
2025-08-30 00:22:15 [Info] ClientDisConnectNotify : Rtap320621756484519, id is 00000540
2025-08-30 00:32:57 [Info] TotalPhys:2047,AvailPhys:448,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1298,SelfWorkingSet:10148, SelfPageFile:14008
2025-08-30 00:32:57 [Info] CommitTotal:5393,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:448,SystemCache:4194303,KernelTotal:261,KernelPaged:185,KernelNonpaged:75,PageSize:4096,HandleCount:28505,ProcessCount:54,ThreadCount:769
2025-08-30 01:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10125","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10184","aliyundun_upload_time":"1756487331","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 01:17:56 [Info] GetMessage : T_MSG_CHECK
2025-08-30 01:17:56 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY0ODc4NzYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2NTMxMDc2LCJzdWIiOiJSVEFQX0lEWF8xNjE3NzFfMTc1NjQ4Nzg3NjY0NCJ9.YrhlLBm8Nm-OyrK5pgNWUcGyWrJGcOm0oRLmO11NRYU has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 01:18:05 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 01:18:05 [Info] ipc client:Rtap102861756487885_handler Reg client_name:Rtap102861756487885 on WhiteList
2025-08-30 01:18:05 [Info] start rtap process success, pid is 2672, argument is Rtap102861756487885
2025-08-30 01:18:05 [Info] New ClientConnectNotify : Rtap102861756487885, id is 000004B8
2025-08-30 01:18:05 [Info] ipc client:Rtap102861756487885 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 01:18:06 [Info] Rtap Platform Rtap102861756487885 execv work --sca on pid 2672
2025-08-30 01:18:08 [Info] csrss.exe open proc 2672 AliSecCheck.ex
2025-08-30 01:18:09 [Info] csrss.exe open thread 2672 AliSecCheck.ex
2025-08-30 01:19:15 [Info] csrss.exe open thread 2672 AliSecCheck.ex
2025-08-30 01:19:38 [Info] Done Work --sca:1
2025-08-30 01:19:38 [Info] Rtap Platform Rtap102861756487885 Exit:normal exit
2025-08-30 01:19:40 [Info] ClientDisConnectNotify : Rtap102861756487885, id is 000004B8
2025-08-30 01:33:54 [Info] TotalPhys:2047,AvailPhys:451,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1320,SelfWorkingSet:10140, SelfPageFile:13884
2025-08-30 01:33:54 [Info] CommitTotal:5371,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:451,SystemCache:4194303,KernelTotal:259,KernelPaged:185,KernelNonpaged:73,PageSize:4096,HandleCount:28163,ProcessCount:53,ThreadCount:733
2025-08-30 02:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10106","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10200","aliyundun_upload_time":"1756490936","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 02:34:07 [Info] get meta data success by v2
2025-08-30 02:34:07 [Info] get empty metaserver config
2025-08-30 02:34:07 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-30 02:34:08 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-30 02:34:08 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-30 02:34:08 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-30 02:34:08 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 02:34:08 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 02:34:08 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-30 02:34:08 [Info] download cert compare md5 same
2025-08-30 02:34:08 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 02:34:08 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 02:34:08 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-30 02:34:50 [Info] TotalPhys:2047,AvailPhys:453,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6691,AvailPageFile:1322,SelfWorkingSet:10236, SelfPageFile:14076
2025-08-30 02:34:50 [Info] CommitTotal:5369,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:453,SystemCache:4194303,KernelTotal:259,KernelPaged:185,KernelNonpaged:73,PageSize:4096,HandleCount:28184,ProcessCount:53,ThreadCount:741
2025-08-30 03:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10163","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10288","aliyundun_upload_time":"1756494514","aliyundun_write_pid_times":"0","ipc_send_count":"132","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-08-30 03:35:51 [Info] TotalPhys:2047,AvailPhys:391,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1309,SelfWorkingSet:10104, SelfPageFile:13944
2025-08-30 03:35:51 [Info] CommitTotal:5382,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:391,SystemCache:4194303,KernelTotal:258,KernelPaged:184,KernelNonpaged:73,PageSize:4096,HandleCount:28207,ProcessCount:53,ThreadCount:740
2025-08-30 04:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10130","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10196","aliyundun_upload_time":"1756498142","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 04:36:48 [Info] TotalPhys:2047,AvailPhys:403,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1320,SelfWorkingSet:10096, SelfPageFile:13944
2025-08-30 04:36:48 [Info] CommitTotal:5371,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:403,SystemCache:4194303,KernelTotal:258,KernelPaged:184,KernelNonpaged:73,PageSize:4096,HandleCount:28283,ProcessCount:53,ThreadCount:749
2025-08-30 05:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10122","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10176","aliyundun_upload_time":"1756501731","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 05:37:46 [Info] TotalPhys:2047,AvailPhys:432,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1317,SelfWorkingSet:10196, SelfPageFile:14008
2025-08-30 05:37:46 [Info] CommitTotal:5374,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:432,SystemCache:4194303,KernelTotal:261,KernelPaged:188,KernelNonpaged:73,PageSize:4096,HandleCount:28275,ProcessCount:53,ThreadCount:747
2025-08-30 05:51:30 [Info] nCurrentClock is 4158172000, nCurrentTime is 1756504290
2025-08-30 05:51:30 [Info] SendMessage T_MSG_LOGIN
2025-08-30 05:51:31 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-30 05:51:31 [Info] begin to enable self guard after reconnect
2025-08-30 05:51:31 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-30 05:51:31 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-30 05:51:31 [Info] GetMessage : T_MSG_CHECK
2025-08-30 05:51:31 [Info] task 8daf30b7-cace-411b-a818-0a13499da912 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 05:51:39 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-30 05:51:39 [Info] key : cpu, value : 10
2025-08-30 05:51:39 [Info] key : rio, value : 20480
2025-08-30 05:51:39 [Info] key : wio, value : 20480
2025-08-30 05:51:39 [Info] key : cpu_all, value : 0
2025-08-30 05:51:39 [Info] key : max_pid_check, value : 200
2025-08-30 05:51:39 [Info] key : throw_dump, value : 0
2025-08-30 05:51:39 [Info] key : hash_mode, value : 1
2025-08-30 05:51:39 [Info] key : mem, value : 200
2025-08-30 05:51:39 [Info] can not find key max_fd in online conf
2025-08-30 05:51:39 [Info] key : proc_limit, value : 1
2025-08-30 05:51:39 [Info] key : resource_limit_mode, value : 3
2025-08-30 05:51:39 [Info] key : rtap_update_mode, value : 1
2025-08-30 05:51:39 [Info] can not find key debug in online conf
2025-08-30 05:51:39 [Info] can not find key update_mode in online conf
2025-08-30 05:51:39 [Info] can not find key http_mode in online conf
2025-08-30 05:51:39 [Info] can not find key rtap_enable in online conf
2025-08-30 05:51:39 [Info] can not find key rtap_new_agent in online conf
2025-08-30 05:51:39 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-30 05:51:39 [Info] can not find key mem_low_mark in online conf
2025-08-30 05:51:39 [Info] can not find key obnormal_report_interval in online conf
2025-08-30 05:51:39 [Info] key : cache_mode, value : 0
2025-08-30 05:51:39 [Info] key : abnormal_monitor_mode, value : 3
2025-08-30 05:51:39 [Info] key : queue_size_ratio, value : 80
2025-08-30 05:51:39 [Info] queue_size_ratio is 80
2025-08-30 05:51:39 [Info] resource limit mode and max limit cpu is not change
2025-08-30 05:51:39 [Info] set hash mode 1
2025-08-30 05:51:39 [Info] RTAP timeout config:9600000
2025-08-30 05:51:39 [Info] self_guard_mode config is 0
2025-08-30 05:51:46 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 05:51:46 [Info] ipc client:Rtap311421756504306_handler Reg client_name:Rtap311421756504306 on WhiteList
2025-08-30 05:51:46 [Info] start rtap process success, pid is 3120, argument is Rtap311421756504306
2025-08-30 05:51:46 [Info] New ClientConnectNotify : Rtap311421756504306, id is 0000053C
2025-08-30 05:51:46 [Info] ipc client:Rtap311421756504306 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 05:51:46 [Info] Rtap Platform Rtap311421756504306 execv work --windows-sysinfoext-check on pid 3120
2025-08-30 05:51:47 [Info] csrss.exe open proc 3120 AliSecCheck.ex
2025-08-30 05:51:48 [Info] csrss.exe open thread 3120 AliSecCheck.ex
2025-08-30 05:51:49 [Info] csrss.exe open thread 3120 AliSecCheck.ex
2025-08-30 05:51:57 [Info] Done Work --windows-sysinfoext-check:1
2025-08-30 05:51:57 [Info] Rtap Platform Rtap311421756504306 Exit:normal exit
2025-08-30 05:52:00 [Info] ClientDisConnectNotify : Rtap311421756504306, id is 0000053C
2025-08-30 05:52:21 [Info] get meta data success by v2
2025-08-30 05:52:21 [Info] get empty metaserver config
2025-08-30 05:52:21 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-30 05:52:21 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-30 05:52:21 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-30 05:52:21 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-30 05:52:21 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 05:52:21 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 05:52:21 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-30 05:52:21 [Info] download cert compare md5 same
2025-08-30 05:52:21 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 05:52:21 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 05:52:21 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-30 06:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10135","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10200","aliyundun_upload_time":"1756505312","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 06:38:45 [Info] TotalPhys:2047,AvailPhys:416,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1314,SelfWorkingSet:10156, SelfPageFile:13948
2025-08-30 06:38:45 [Info] CommitTotal:5377,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:416,SystemCache:4194303,KernelTotal:261,KernelPaged:188,KernelNonpaged:73,PageSize:4096,HandleCount:28339,ProcessCount:53,ThreadCount:742
2025-08-30 07:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10103","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10156","aliyundun_upload_time":"1756508922","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 07:39:42 [Info] TotalPhys:2047,AvailPhys:406,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1313,SelfWorkingSet:10144, SelfPageFile:13956
2025-08-30 07:39:42 [Info] CommitTotal:5377,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:406,SystemCache:4194303,KernelTotal:261,KernelPaged:187,KernelNonpaged:73,PageSize:4096,HandleCount:28269,ProcessCount:53,ThreadCount:741
2025-08-30 08:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10133","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10176","aliyundun_upload_time":"1756512529","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 08:40:42 [Info] TotalPhys:2047,AvailPhys:391,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1310,SelfWorkingSet:10048, SelfPageFile:13808
2025-08-30 08:40:42 [Info] CommitTotal:5381,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:391,SystemCache:4194303,KernelTotal:264,KernelPaged:189,KernelNonpaged:75,PageSize:4096,HandleCount:28277,ProcessCount:53,ThreadCount:739
2025-08-30 08:50:00 [Info] GetMessage : T_MSG_CHECK
2025-08-30 08:50:00 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY1MTUwMDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2NTU4MjAwLCJzdWIiOiJSVEFQX0lEWF8xNjE3NjFfMTc1NjUxNTAwMDU0MSJ9._5GY4EIbEuY31fchcl9i1N0_eqMgKY1Y_fXdwM98Rxk has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 08:50:11 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 08:50:11 [Info] ipc client:Rtap5641756515011_handler Reg client_name:Rtap5641756515011 on WhiteList
2025-08-30 08:50:11 [Info] start rtap process success, pid is 4344, argument is Rtap5641756515011
2025-08-30 08:50:11 [Info] New ClientConnectNotify : Rtap5641756515011, id is 000004F4
2025-08-30 08:50:11 [Info] ipc client:Rtap5641756515011 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 08:50:12 [Info] Rtap Platform Rtap5641756515011 execv work --windows-process-check on pid 4344
2025-08-30 08:50:14 [Info] csrss.exe open proc 4344 AliSecCheck.ex
2025-08-30 08:50:15 [Info] csrss.exe open thread 4344 AliSecCheck.ex
2025-08-30 08:50:35 [Info] Done Work --windows-process-check:1
2025-08-30 08:50:35 [Info] Rtap Platform Rtap5641756515011 Exit:normal exit
2025-08-30 08:50:37 [Info] ClientDisConnectNotify : Rtap5641756515011, id is 000004F4
2025-08-30 09:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10075","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10196","aliyundun_upload_time":"1756516119","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 09:10:26 [Info] get meta data success by v2
2025-08-30 09:10:26 [Info] get empty metaserver config
2025-08-30 09:10:26 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-30 09:10:26 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-30 09:10:26 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-30 09:10:26 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-30 09:10:26 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 09:10:26 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 09:10:26 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-30 09:10:26 [Info] download cert compare md5 same
2025-08-30 09:10:26 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 09:10:26 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 09:10:26 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-30 09:41:41 [Info] TotalPhys:2047,AvailPhys:377,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1297,SelfWorkingSet:10048, SelfPageFile:13824
2025-08-30 09:41:41 [Info] CommitTotal:5394,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:377,SystemCache:4194303,KernelTotal:267,KernelPaged:190,KernelNonpaged:76,PageSize:4096,HandleCount:28366,ProcessCount:53,ThreadCount:749
2025-08-30 09:56:52 [Info] GetMessage : T_MSG_CHECK
2025-08-30 09:56:52 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY1MTkwMTIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2NTYyMjEyLCJzdWIiOiJSVEFQX0lEWF8xNjE3NjJfMTc1NjUxOTAxMjUwNCJ9.sexmxh9ijOVrE0eZniI577TuAY9ch9zKYOoVXA94ljA has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 09:57:02 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 09:57:02 [Info] ipc client:Rtap136621756519022_handler Reg client_name:Rtap136621756519022 on WhiteList
2025-08-30 09:57:02 [Info] start rtap process success, pid is 4580, argument is Rtap136621756519022
2025-08-30 09:57:02 [Info] New ClientConnectNotify : Rtap136621756519022, id is 00000540
2025-08-30 09:57:02 [Info] ipc client:Rtap136621756519022 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 09:57:03 [Info] Rtap Platform Rtap136621756519022 execv work --tcp-connect-check on pid 4580
2025-08-30 09:57:04 [Info] csrss.exe open proc 4580 AliSecCheck.ex
2025-08-30 09:57:05 [Info] csrss.exe open thread 4580 AliSecCheck.ex
2025-08-30 09:57:46 [Info] Done Work --tcp-connect-check:1
2025-08-30 09:57:46 [Info] Rtap Platform Rtap136621756519022 Exit:normal exit
2025-08-30 09:57:48 [Info] ClientDisConnectNotify : Rtap136621756519022, id is 00000540
2025-08-30 10:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10093","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10256","aliyundun_upload_time":"1756519730","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 10:15:34 [Info] GetMessage : T_MSG_CHECK
2025-08-30 10:15:34 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY1MjAxMzQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2NTYzMzM0LCJzdWIiOiJSVEFQX0lEWF8xNjE3NjRfMTc1NjUyMDEzNDQ5OSJ9.ggPuJpdGccRbdOGCA3VHg1dOX6xMGUER6ijBN-wfDF0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 10:15:47 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 10:15:47 [Info] ipc client:Rtap173361756520147_handler Reg client_name:Rtap173361756520147 on WhiteList
2025-08-30 10:15:47 [Info] start rtap process success, pid is 4060, argument is Rtap173361756520147
2025-08-30 10:15:47 [Info] New ClientConnectNotify : Rtap173361756520147, id is 00000548
2025-08-30 10:15:47 [Info] ipc client:Rtap173361756520147 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 10:15:47 [Info] Rtap Platform Rtap173361756520147 execv work --windows-schedule-task-check on pid 4060
2025-08-30 10:15:48 [Info] csrss.exe open proc 4060 AliSecCheck.ex
2025-08-30 10:15:49 [Info] csrss.exe open thread 4060 AliSecCheck.ex
2025-08-30 10:15:53 [Info] GetMessage : T_MSG_CHECK
2025-08-30 10:15:53 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY1MjAxNTMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2NTYzMzUzLCJzdWIiOiJSVEFQX0lEWF8xNjE3NzBfMTc1NjUyMDE1MzE4MSJ9.POZTqW0zwxffnHb_nKcYu-trbWOOIAwf3K3VHJu5EvY has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 10:16:04 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 10:16:04 [Info] ipc client:Rtap173921756520164_handler Reg client_name:Rtap173921756520164 on WhiteList
2025-08-30 10:16:04 [Info] start rtap process success, pid is 4604, argument is Rtap173921756520164
2025-08-30 10:16:04 [Info] New ClientConnectNotify : Rtap173921756520164, id is 00000540
2025-08-30 10:16:05 [Info] ipc client:Rtap173921756520164 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 10:16:05 [Info] Rtap Platform Rtap173921756520164 execv work --windows-registry-check on pid 4604
2025-08-30 10:16:06 [Info] csrss.exe open proc 4604 AliSecCheck.ex
2025-08-30 10:16:07 [Info] csrss.exe open thread 4604 AliSecCheck.ex
2025-08-30 10:16:24 [Info] Done Work --windows-schedule-task-check:1
2025-08-30 10:16:24 [Info] Rtap Platform Rtap173361756520147 Exit:normal exit
2025-08-30 10:16:26 [Info] ClientDisConnectNotify : Rtap173361756520147, id is 00000548
2025-08-30 10:16:38 [Info] Done Work --windows-registry-check:1
2025-08-30 10:16:38 [Info] Rtap Platform Rtap173921756520164 Exit:normal exit
2025-08-30 10:16:40 [Info] ClientDisConnectNotify : Rtap173921756520164, id is 00000540
2025-08-30 10:17:15 [Info] GetMessage : T_MSG_CHECK
2025-08-30 10:17:15 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY1MjAyMzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2NTYzNDM1LCJzdWIiOiJSVEFQX0lEWF8xNjE3NzhfMTc1NjUyMDIzNTExNSJ9.phHmIK7Sy1hrIn1xD3owvpYhlIPu1A-i8xas7bfHTmM has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 10:17:27 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 10:17:27 [Info] ipc client:Rtap176631756520247_handler Reg client_name:Rtap176631756520247 on WhiteList
2025-08-30 10:17:27 [Info] start rtap process success, pid is 4400, argument is Rtap176631756520247
2025-08-30 10:17:27 [Info] New ClientConnectNotify : Rtap176631756520247, id is 000004B8
2025-08-30 10:17:27 [Info] ipc client:Rtap176631756520247 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 10:17:27 [Info] Rtap Platform Rtap176631756520247 execv work --windows-driver-version-check on pid 4400
2025-08-30 10:17:30 [Info] csrss.exe open proc 4400 AliSecCheck.ex
2025-08-30 10:17:31 [Info] csrss.exe open thread 4400 AliSecCheck.ex
2025-08-30 10:17:35 [Info] Done Work --windows-driver-version-check:1
2025-08-30 10:17:35 [Info] Rtap Platform Rtap176631756520247 Exit:normal exit
2025-08-30 10:17:37 [Info] ClientDisConnectNotify : Rtap176631756520247, id is 000004B8
2025-08-30 10:42:38 [Info] TotalPhys:2047,AvailPhys:401,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1319,SelfWorkingSet:10120, SelfPageFile:14188
2025-08-30 10:42:38 [Info] CommitTotal:5372,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:401,SystemCache:4194303,KernelTotal:263,KernelPaged:188,KernelNonpaged:75,PageSize:4096,HandleCount:28254,ProcessCount:53,ThreadCount:737
2025-08-30 11:05:49 [Info] GetMessage : T_MSG_CHECK
2025-08-30 11:05:49 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY1MjMxNDksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2NTY2MzQ5LCJzdWIiOiJSVEFQX0lEWF8xNjE3NjdfMTc1NjUyMzE0OTcwMiJ9.VsuENWG7khoZa7kPZrgfa9KZKQl5s55Do7BN5C0ePUM has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 11:05:59 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 11:05:59 [Info] ipc client:Rtap271721756523159_handler Reg client_name:Rtap271721756523159 on WhiteList
2025-08-30 11:05:59 [Info] start rtap process success, pid is 4056, argument is Rtap271721756523159
2025-08-30 11:06:01 [Info] New ClientConnectNotify : Rtap271721756523159, id is 00000540
2025-08-30 11:06:01 [Info] Rtap Platform Rtap271721756523159 execv work --windows-autorun-item-check on pid 4056
2025-08-30 11:06:01 [Info] csrss.exe open proc 4056 AliSecCheck.ex
2025-08-30 11:06:02 [Info] ipc client:Rtap271721756523159 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 11:06:02 [Info] csrss.exe open thread 4056 AliSecCheck.ex
2025-08-30 11:06:03 [Info] csrss.exe open thread 4056 AliSecCheck.ex
2025-08-30 11:06:04 [Info] csrss.exe open thread 4056 AliSecCheck.ex
2025-08-30 11:06:05 [Info] csrss.exe open thread 4056 AliSecCheck.ex
2025-08-30 11:06:20 [Info] Done Work --windows-autorun-item-check:1
2025-08-30 11:06:20 [Info] Rtap Platform Rtap271721756523159 Exit:normal exit
2025-08-30 11:06:22 [Info] ClientDisConnectNotify : Rtap271721756523159, id is 00000540
2025-08-30 11:08:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10084","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10304","aliyundun_upload_time":"1756523319","aliyundun_write_pid_times":"0","ipc_send_count":"154","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 11:21:12 [Info] nCurrentClock is 4176172600, nCurrentTime is 1756524072
2025-08-30 11:21:12 [Info] SendMessage T_MSG_LOGIN
2025-08-30 11:21:12 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-30 11:21:12 [Info] begin to enable self guard after reconnect
2025-08-30 11:21:12 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-30 11:21:12 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-30 11:21:12 [Info] GetMessage : T_MSG_CHECK
2025-08-30 11:21:12 [Info] task 971262bd-2390-4ab5-b527-7aa0d0147294 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 11:21:20 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-30 11:21:20 [Info] key : cpu, value : 10
2025-08-30 11:21:20 [Info] key : rio, value : 20480
2025-08-30 11:21:20 [Info] key : wio, value : 20480
2025-08-30 11:21:20 [Info] key : cpu_all, value : 0
2025-08-30 11:21:20 [Info] key : max_pid_check, value : 200
2025-08-30 11:21:20 [Info] key : throw_dump, value : 0
2025-08-30 11:21:20 [Info] key : hash_mode, value : 1
2025-08-30 11:21:20 [Info] key : mem, value : 200
2025-08-30 11:21:20 [Info] can not find key max_fd in online conf
2025-08-30 11:21:20 [Info] key : proc_limit, value : 1
2025-08-30 11:21:20 [Info] key : resource_limit_mode, value : 3
2025-08-30 11:21:20 [Info] key : rtap_update_mode, value : 1
2025-08-30 11:21:20 [Info] can not find key debug in online conf
2025-08-30 11:21:20 [Info] can not find key update_mode in online conf
2025-08-30 11:21:20 [Info] can not find key http_mode in online conf
2025-08-30 11:21:20 [Info] can not find key rtap_enable in online conf
2025-08-30 11:21:20 [Info] can not find key rtap_new_agent in online conf
2025-08-30 11:21:20 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-30 11:21:20 [Info] can not find key mem_low_mark in online conf
2025-08-30 11:21:20 [Info] can not find key obnormal_report_interval in online conf
2025-08-30 11:21:20 [Info] key : cache_mode, value : 0
2025-08-30 11:21:20 [Info] key : abnormal_monitor_mode, value : 3
2025-08-30 11:21:20 [Info] key : queue_size_ratio, value : 80
2025-08-30 11:21:20 [Info] queue_size_ratio is 80
2025-08-30 11:21:20 [Info] resource limit mode and max limit cpu is not change
2025-08-30 11:21:20 [Info] set hash mode 1
2025-08-30 11:21:20 [Info] RTAP timeout config:9600000
2025-08-30 11:21:20 [Info] self_guard_mode config is 0
2025-08-30 11:21:20 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-08-30 11:21:26 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 11:21:26 [Info] ipc client:Rtap301991756524086_handler Reg client_name:Rtap301991756524086 on WhiteList
2025-08-30 11:21:26 [Info] start rtap process success, pid is 1264, argument is Rtap301991756524086
2025-08-30 11:21:26 [Info] New ClientConnectNotify : Rtap301991756524086, id is 000004B8
2025-08-30 11:21:26 [Info] ipc client:Rtap301991756524086 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 11:21:27 [Info] Rtap Platform Rtap301991756524086 execv work --windows-sysinfoext-check on pid 1264
2025-08-30 11:21:27 [Info] csrss.exe open proc 1264 AliSecCheck.ex
2025-08-30 11:21:28 [Info] csrss.exe open thread 1264 AliSecCheck.ex
2025-08-30 11:21:34 [Info] Done Work --windows-sysinfoext-check:1
2025-08-30 11:21:34 [Info] Rtap Platform Rtap301991756524086 Exit:normal exit
2025-08-30 11:21:36 [Info] ClientDisConnectNotify : Rtap301991756524086, id is 000004B8
2025-08-30 11:43:38 [Info] TotalPhys:2047,AvailPhys:512,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1303,SelfWorkingSet:10028, SelfPageFile:14264
2025-08-30 11:43:38 [Info] CommitTotal:5388,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:512,SystemCache:4194303,KernelTotal:256,KernelPaged:183,KernelNonpaged:73,PageSize:4096,HandleCount:28419,ProcessCount:54,ThreadCount:742
2025-08-30 12:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10030","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10200","aliyundun_upload_time":"1756526929","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 12:27:52 [Info] get meta data success by v2
2025-08-30 12:27:52 [Info] get empty metaserver config
2025-08-30 12:27:52 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-30 12:27:52 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-30 12:27:52 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-30 12:27:52 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-30 12:27:52 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 12:27:52 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 12:27:52 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-30 12:27:52 [Info] download cert compare md5 same
2025-08-30 12:27:52 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 12:27:52 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 12:27:52 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-30 12:44:35 [Info] TotalPhys:2047,AvailPhys:513,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6691,AvailPageFile:1305,SelfWorkingSet:9988, SelfPageFile:13808
2025-08-30 12:44:35 [Info] CommitTotal:5386,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:513,SystemCache:61,KernelTotal:260,KernelPaged:186,KernelNonpaged:73,PageSize:4096,HandleCount:28266,ProcessCount:53,ThreadCount:739
2025-08-30 13:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10012","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10152","aliyundun_upload_time":"1756530536","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 13:45:31 [Info] TotalPhys:2047,AvailPhys:524,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1315,SelfWorkingSet:9900, SelfPageFile:13720
2025-08-30 13:45:31 [Info] CommitTotal:5376,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:524,SystemCache:80,KernelTotal:259,KernelPaged:186,KernelNonpaged:73,PageSize:4096,HandleCount:28250,ProcessCount:53,ThreadCount:738
2025-08-30 14:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9988","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10048","aliyundun_upload_time":"1756534142","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 14:46:27 [Info] TotalPhys:2047,AvailPhys:515,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6691,AvailPageFile:1307,SelfWorkingSet:9824, SelfPageFile:13680
2025-08-30 14:46:27 [Info] CommitTotal:5384,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:515,SystemCache:84,KernelTotal:259,KernelPaged:186,KernelNonpaged:73,PageSize:4096,HandleCount:28229,ProcessCount:53,ThreadCount:738
2025-08-30 15:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9850","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10052","aliyundun_upload_time":"1756537717","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 15:45:05 [Info] get meta data success by v2
2025-08-30 15:45:05 [Info] get empty metaserver config
2025-08-30 15:45:05 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-30 15:45:06 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-30 15:45:06 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-30 15:45:06 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-30 15:45:06 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 15:45:06 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 15:45:06 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-30 15:45:06 [Info] download cert compare md5 same
2025-08-30 15:45:06 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 15:45:06 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 15:45:06 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-30 15:47:24 [Info] TotalPhys:2047,AvailPhys:514,TotalVirtual:2047,AvailVirtual:1978,TotalPageFile:6691,AvailPageFile:1309,SelfWorkingSet:10028, SelfPageFile:13980
2025-08-30 15:47:24 [Info] CommitTotal:5382,CommitLimit:6691,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:514,SystemCache:84,KernelTotal:260,KernelPaged:187,KernelNonpaged:73,PageSize:4096,HandleCount:28243,ProcessCount:53,ThreadCount:743
2025-08-30 16:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9953","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10132","aliyundun_upload_time":"1756541326","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"63","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 16:48:20 [Info] TotalPhys:2047,AvailPhys:728,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1368,SelfWorkingSet:10064, SelfPageFile:13960
2025-08-30 16:48:20 [Info] CommitTotal:4829,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:728,SystemCache:4194303,KernelTotal:253,KernelPaged:179,KernelNonpaged:73,PageSize:4096,HandleCount:28157,ProcessCount:53,ThreadCount:739
2025-08-30 16:50:03 [Info] nCurrentClock is 4194173100, nCurrentTime is 1756543803
2025-08-30 16:50:03 [Info] SendMessage T_MSG_LOGIN
2025-08-30 16:50:04 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-30 16:50:04 [Info] begin to enable self guard after reconnect
2025-08-30 16:50:04 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-30 16:50:04 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-30 16:50:04 [Info] GetMessage : T_MSG_CHECK
2025-08-30 16:50:04 [Info] task f6902a18-faef-479b-81f6-cba8b0b667c6 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 16:50:12 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-30 16:50:12 [Info] key : cpu, value : 10
2025-08-30 16:50:12 [Info] key : rio, value : 20480
2025-08-30 16:50:12 [Info] key : wio, value : 20480
2025-08-30 16:50:12 [Info] key : cpu_all, value : 0
2025-08-30 16:50:12 [Info] key : max_pid_check, value : 200
2025-08-30 16:50:12 [Info] key : throw_dump, value : 0
2025-08-30 16:50:12 [Info] key : hash_mode, value : 1
2025-08-30 16:50:12 [Info] key : mem, value : 200
2025-08-30 16:50:12 [Info] can not find key max_fd in online conf
2025-08-30 16:50:12 [Info] key : proc_limit, value : 1
2025-08-30 16:50:12 [Info] key : resource_limit_mode, value : 3
2025-08-30 16:50:12 [Info] key : rtap_update_mode, value : 1
2025-08-30 16:50:12 [Info] can not find key debug in online conf
2025-08-30 16:50:12 [Info] can not find key update_mode in online conf
2025-08-30 16:50:12 [Info] can not find key http_mode in online conf
2025-08-30 16:50:12 [Info] can not find key rtap_enable in online conf
2025-08-30 16:50:12 [Info] can not find key rtap_new_agent in online conf
2025-08-30 16:50:12 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-30 16:50:12 [Info] can not find key mem_low_mark in online conf
2025-08-30 16:50:12 [Info] can not find key obnormal_report_interval in online conf
2025-08-30 16:50:12 [Info] key : cache_mode, value : 0
2025-08-30 16:50:12 [Info] key : abnormal_monitor_mode, value : 3
2025-08-30 16:50:12 [Info] key : queue_size_ratio, value : 80
2025-08-30 16:50:12 [Info] queue_size_ratio is 80
2025-08-30 16:50:12 [Info] resource limit mode and max limit cpu is not change
2025-08-30 16:50:12 [Info] set hash mode 1
2025-08-30 16:50:12 [Info] RTAP timeout config:9600000
2025-08-30 16:50:12 [Info] self_guard_mode config is 0
2025-08-30 16:50:18 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 16:50:18 [Info] ipc client:Rtap291001756543818_handler Reg client_name:Rtap291001756543818 on WhiteList
2025-08-30 16:50:18 [Info] start rtap process success, pid is 4728, argument is Rtap291001756543818
2025-08-30 16:50:19 [Info] New ClientConnectNotify : Rtap291001756543818, id is 000004D8
2025-08-30 16:50:19 [Info] ipc client:Rtap291001756543818 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 16:50:19 [Info] Rtap Platform Rtap291001756543818 execv work --windows-sysinfoext-check on pid 4728
2025-08-30 16:50:20 [Info] csrss.exe open proc 4728 AliSecCheck.ex
2025-08-30 16:50:21 [Info] csrss.exe open thread 4728 AliSecCheck.ex
2025-08-30 16:50:22 [Info] csrss.exe open thread 4728 AliSecCheck.ex
2025-08-30 16:50:24 [Info] csrss.exe open thread 4728 AliSecCheck.ex
2025-08-30 16:50:25 [Info] csrss.exe open thread 4728 AliSecCheck.ex
2025-08-30 16:50:31 [Info] Done Work --windows-sysinfoext-check:1
2025-08-30 16:50:31 [Info] Rtap Platform Rtap291001756543818 Exit:normal exit
2025-08-30 16:50:33 [Info] ClientDisConnectNotify : Rtap291001756543818, id is 000004D8
2025-08-30 17:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9992","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10064","aliyundun_upload_time":"1756544939","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"65","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 17:49:20 [Info] TotalPhys:2047,AvailPhys:720,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1360,SelfWorkingSet:9668, SelfPageFile:13444
2025-08-30 17:49:20 [Info] CommitTotal:4837,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:720,SystemCache:4194303,KernelTotal:253,KernelPaged:180,KernelNonpaged:73,PageSize:4096,HandleCount:28139,ProcessCount:53,ThreadCount:738
2025-08-30 18:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9734","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9968","aliyundun_upload_time":"1756548512","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"64","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 18:50:17 [Info] TotalPhys:2047,AvailPhys:684,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1324,SelfWorkingSet:9812, SelfPageFile:13604
2025-08-30 18:50:17 [Info] CommitTotal:4873,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:684,SystemCache:4194303,KernelTotal:253,KernelPaged:180,KernelNonpaged:73,PageSize:4096,HandleCount:28143,ProcessCount:53,ThreadCount:735
2025-08-30 18:53:46 [Info] GetMessage : T_MSG_CHECK
2025-08-30 18:53:46 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTY1NTEyMjYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU2NTk0NDI2LCJzdWIiOiJSVEFQX0lEWF8xNjE4MzdfMTc1NjU1MTIyNjQ3MiJ9.Zt4Cz1oMor_WBzG-sgacp-iEP_KVa2xIe3u32azbFcs has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 18:53:56 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 18:53:56 [Info] ipc client:Rtap205561756551236_handler Reg client_name:Rtap205561756551236 on WhiteList
2025-08-30 18:53:56 [Info] start rtap process success, pid is 2464, argument is Rtap205561756551236
2025-08-30 18:53:57 [Info] New ClientConnectNotify : Rtap205561756551236, id is 00000540
2025-08-30 18:53:57 [Info] ipc client:Rtap205561756551236 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 18:53:57 [Info] Rtap Platform Rtap205561756551236 execv work --secnet_rasp_agent on pid 2464
2025-08-30 18:53:58 [Info] csrss.exe open proc 2464 AliSecCheck.ex
2025-08-30 18:53:59 [Info] csrss.exe open thread 2464 AliSecCheck.ex
2025-08-30 18:54:00 [Info] csrss.exe open thread 2464 AliSecCheck.ex
2025-08-30 18:54:04 [Info] Done Work --secnet_rasp_agent:1
2025-08-30 18:54:04 [Info] Rtap Platform Rtap205561756551236 Exit:normal exit
2025-08-30 18:54:06 [Info] ClientDisConnectNotify : Rtap205561756551236, id is 00000540
2025-08-30 19:02:25 [Info] get meta data success by v2
2025-08-30 19:02:25 [Info] get empty metaserver config
2025-08-30 19:02:25 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-30 19:02:25 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-30 19:02:25 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-30 19:02:25 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-30 19:02:25 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 19:02:25 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 19:02:25 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-30 19:02:25 [Info] download cert compare md5 same
2025-08-30 19:02:25 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 19:02:25 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 19:02:25 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-30 19:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9853","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10108","aliyundun_upload_time":"1756552122","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"66","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 19:51:13 [Info] TotalPhys:2047,AvailPhys:675,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1314,SelfWorkingSet:9932, SelfPageFile:13984
2025-08-30 19:51:13 [Info] CommitTotal:4883,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:675,SystemCache:4194303,KernelTotal:257,KernelPaged:183,KernelNonpaged:73,PageSize:4096,HandleCount:28116,ProcessCount:53,ThreadCount:741
2025-08-30 20:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9987","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10104","aliyundun_upload_time":"1756555730","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 20:52:10 [Info] TotalPhys:2047,AvailPhys:663,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1312,SelfWorkingSet:9800, SelfPageFile:13648
2025-08-30 20:52:10 [Info] CommitTotal:4886,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:663,SystemCache:4194303,KernelTotal:259,KernelPaged:186,KernelNonpaged:73,PageSize:4096,HandleCount:27854,ProcessCount:52,ThreadCount:728
2025-08-30 21:09:00 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9826","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9960","aliyundun_upload_time":"1756559340","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 21:53:06 [Info] TotalPhys:2047,AvailPhys:670,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1320,SelfWorkingSet:9948, SelfPageFile:13732
2025-08-30 21:53:06 [Info] CommitTotal:4878,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:670,SystemCache:4194303,KernelTotal:258,KernelPaged:185,KernelNonpaged:73,PageSize:4096,HandleCount:27829,ProcessCount:52,ThreadCount:734
2025-08-30 22:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9898","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9952","aliyundun_upload_time":"1756562927","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 22:18:54 [Info] nCurrentClock is 4212173600, nCurrentTime is 1756563534
2025-08-30 22:18:54 [Info] SendMessage T_MSG_LOGIN
2025-08-30 22:18:54 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-08-30 22:18:54 [Info] begin to enable self guard after reconnect
2025-08-30 22:18:54 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-08-30 22:18:54 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-08-30 22:18:54 [Info] GetMessage : T_MSG_CHECK
2025-08-30 22:18:54 [Info] task f08d2027-ec98-4d15-aa8e-010d280686f5 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-08-30 22:19:02 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-08-30 22:19:02 [Info] key : cpu, value : 10
2025-08-30 22:19:02 [Info] key : rio, value : 20480
2025-08-30 22:19:02 [Info] key : wio, value : 20480
2025-08-30 22:19:02 [Info] key : cpu_all, value : 0
2025-08-30 22:19:02 [Info] key : max_pid_check, value : 200
2025-08-30 22:19:02 [Info] key : throw_dump, value : 0
2025-08-30 22:19:02 [Info] key : hash_mode, value : 1
2025-08-30 22:19:02 [Info] key : mem, value : 200
2025-08-30 22:19:02 [Info] can not find key max_fd in online conf
2025-08-30 22:19:02 [Info] key : proc_limit, value : 1
2025-08-30 22:19:02 [Info] key : resource_limit_mode, value : 3
2025-08-30 22:19:02 [Info] key : rtap_update_mode, value : 1
2025-08-30 22:19:02 [Info] can not find key debug in online conf
2025-08-30 22:19:02 [Info] can not find key update_mode in online conf
2025-08-30 22:19:02 [Info] can not find key http_mode in online conf
2025-08-30 22:19:02 [Info] can not find key rtap_enable in online conf
2025-08-30 22:19:02 [Info] can not find key rtap_new_agent in online conf
2025-08-30 22:19:02 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-08-30 22:19:02 [Info] can not find key mem_low_mark in online conf
2025-08-30 22:19:02 [Info] can not find key obnormal_report_interval in online conf
2025-08-30 22:19:02 [Info] key : cache_mode, value : 0
2025-08-30 22:19:02 [Info] key : abnormal_monitor_mode, value : 3
2025-08-30 22:19:02 [Info] key : queue_size_ratio, value : 80
2025-08-30 22:19:02 [Info] queue_size_ratio is 80
2025-08-30 22:19:02 [Info] resource limit mode and max limit cpu is not change
2025-08-30 22:19:02 [Info] set hash mode 1
2025-08-30 22:19:02 [Info] RTAP timeout config:9600000
2025-08-30 22:19:02 [Info] self_guard_mode config is 0
2025-08-30 22:19:09 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-08-30 22:19:09 [Info] ipc client:Rtap279971756563549_handler Reg client_name:Rtap279971756563549 on WhiteList
2025-08-30 22:19:09 [Info] start rtap process success, pid is 4364, argument is Rtap279971756563549
2025-08-30 22:19:09 [Info] New ClientConnectNotify : Rtap279971756563549, id is 000004D8
2025-08-30 22:19:09 [Info] ipc client:Rtap279971756563549 UnReg client_name:protocol_ipc_client on WhiteList
2025-08-30 22:19:10 [Info] Rtap Platform Rtap279971756563549 execv work --windows-sysinfoext-check on pid 4364
2025-08-30 22:19:11 [Info] csrss.exe open proc 4364 AliSecCheck.ex
2025-08-30 22:19:12 [Info] csrss.exe open thread 4364 AliSecCheck.ex
2025-08-30 22:19:17 [Info] Done Work --windows-sysinfoext-check:1
2025-08-30 22:19:17 [Info] Rtap Platform Rtap279971756563549 Exit:normal exit
2025-08-30 22:19:19 [Info] ClientDisConnectNotify : Rtap279971756563549, id is 000004D8
2025-08-30 22:19:46 [Info] get meta data success by v2
2025-08-30 22:19:46 [Info] get empty metaserver config
2025-08-30 22:19:46 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-08-30 22:19:46 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-08-30 22:19:46 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-08-30 22:19:46 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-08-30 22:19:46 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 22:19:46 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-08-30 22:19:47 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-08-30 22:19:47 [Info] download cert compare md5 same
2025-08-30 22:19:47 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 22:19:47 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-08-30 22:19:47 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-08-30 22:54:06 [Info] TotalPhys:2047,AvailPhys:642,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1302,SelfWorkingSet:9916, SelfPageFile:13704
2025-08-30 22:54:06 [Info] CommitTotal:4895,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:642,SystemCache:4194303,KernelTotal:259,KernelPaged:185,KernelNonpaged:73,PageSize:4096,HandleCount:27815,ProcessCount:52,ThreadCount:731
2025-08-30 23:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"9923","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10036","aliyundun_upload_time":"1756566537","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-08-30 23:55:02 [Info] TotalPhys:2047,AvailPhys:636,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6198,AvailPageFile:1285,SelfWorkingSet:9916, SelfPageFile:13944
2025-08-30 23:55:02 [Info] CommitTotal:4912,CommitLimit:6198,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:636,SystemCache:4194303,KernelTotal:258,KernelPaged:185,KernelNonpaged:73,PageSize:4096,HandleCount:27839,ProcessCount:52,ThreadCount:730
2025-08-31 00:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9890","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"9980","aliyundun_upload_time":"1756570143","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 00:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10035","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10200","aliyundun_upload_time":"1757088516","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"63","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 00:12:02 [Info] TotalPhys:2047,AvailPhys:744,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6046,AvailPageFile:1303,SelfWorkingSet:9992, SelfPageFile:14124
2025-09-06 00:12:02 [Info] CommitTotal:4742,CommitLimit:6046,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:744,SystemCache:236,KernelTotal:262,KernelPaged:186,KernelNonpaged:76,PageSize:4096,HandleCount:28070,ProcessCount:53,ThreadCount:732
2025-09-06 01:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10023","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10064","aliyundun_upload_time":"1757092131","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 01:12:59 [Info] TotalPhys:2047,AvailPhys:548,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6046,AvailPageFile:1101,SelfWorkingSet:10052, SelfPageFile:14244
2025-09-06 01:12:59 [Info] CommitTotal:4945,CommitLimit:6046,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:548,SystemCache:89,KernelTotal:263,KernelPaged:186,KernelNonpaged:76,PageSize:4096,HandleCount:28160,ProcessCount:53,ThreadCount:737
2025-09-06 01:17:29 [Info] GetMessage : T_MSG_CHECK
2025-09-06 01:17:29 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTcwOTI2NDksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3MTM1ODQ5LCJzdWIiOiJSVEFQX0lEWF8xNjIzMThfMTc1NzA5MjY0OTA4MiJ9.qYYsLDoEklNwSZTEx7wGdNPaYD-gjAlJf3Y2AIdd7l0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 01:17:39 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 01:17:39 [Info] ipc client:Rtap191431757092659_handler Reg client_name:Rtap191431757092659 on WhiteList
2025-09-06 01:17:39 [Info] start rtap process success, pid is 5008, argument is Rtap191431757092659
2025-09-06 01:17:39 [Info] New ClientConnectNotify : Rtap191431757092659, id is 000004D8
2025-09-06 01:17:39 [Info] ipc client:Rtap191431757092659 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 01:17:39 [Info] Rtap Platform Rtap191431757092659 execv work --sca on pid 5008
2025-09-06 01:17:41 [Info] csrss.exe open proc 5008 AliSecCheck.ex
2025-09-06 01:17:43 [Info] csrss.exe open thread 5008 AliSecCheck.ex
2025-09-06 01:19:42 [Info] csrss.exe open thread 5008 AliSecCheck.ex
2025-09-06 01:20:05 [Info] Done Work --sca:1
2025-09-06 01:20:05 [Info] Rtap Platform Rtap191431757092659 Exit:normal exit
2025-09-06 01:20:07 [Info] ClientDisConnectNotify : Rtap191431757092659, id is 000004D8
2025-09-06 02:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10140","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10220","aliyundun_upload_time":"1757095717","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 02:13:56 [Info] TotalPhys:2047,AvailPhys:547,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6046,AvailPageFile:1102,SelfWorkingSet:10176, SelfPageFile:14236
2025-09-06 02:13:56 [Info] CommitTotal:4943,CommitLimit:6046,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:547,SystemCache:82,KernelTotal:263,KernelPaged:187,KernelNonpaged:76,PageSize:4096,HandleCount:28145,ProcessCount:53,ThreadCount:731
2025-09-06 02:29:52 [Info] nCurrentClock is 4698196400, nCurrentTime is 1757096992
2025-09-06 02:29:52 [Info] SendMessage T_MSG_LOGIN
2025-09-06 02:29:52 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-06 02:29:52 [Info] begin to enable self guard after reconnect
2025-09-06 02:29:52 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-06 02:29:52 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-06 02:29:52 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-06 02:29:52 [Info] key : cpu, value : 10
2025-09-06 02:29:52 [Info] key : rio, value : 20480
2025-09-06 02:29:52 [Info] key : wio, value : 20480
2025-09-06 02:29:52 [Info] key : cpu_all, value : 0
2025-09-06 02:29:52 [Info] key : max_pid_check, value : 200
2025-09-06 02:29:52 [Info] key : throw_dump, value : 0
2025-09-06 02:29:52 [Info] key : hash_mode, value : 1
2025-09-06 02:29:52 [Info] key : mem, value : 200
2025-09-06 02:29:52 [Info] can not find key max_fd in online conf
2025-09-06 02:29:52 [Info] key : proc_limit, value : 1
2025-09-06 02:29:52 [Info] key : resource_limit_mode, value : 3
2025-09-06 02:29:52 [Info] key : rtap_update_mode, value : 1
2025-09-06 02:29:52 [Info] can not find key debug in online conf
2025-09-06 02:29:52 [Info] can not find key update_mode in online conf
2025-09-06 02:29:52 [Info] can not find key http_mode in online conf
2025-09-06 02:29:52 [Info] can not find key rtap_enable in online conf
2025-09-06 02:29:52 [Info] can not find key rtap_new_agent in online conf
2025-09-06 02:29:52 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-06 02:29:52 [Info] can not find key mem_low_mark in online conf
2025-09-06 02:29:52 [Info] can not find key obnormal_report_interval in online conf
2025-09-06 02:29:52 [Info] key : cache_mode, value : 0
2025-09-06 02:29:52 [Info] key : abnormal_monitor_mode, value : 3
2025-09-06 02:29:52 [Info] key : queue_size_ratio, value : 80
2025-09-06 02:29:52 [Info] queue_size_ratio is 80
2025-09-06 02:29:52 [Info] resource limit mode and max limit cpu is not change
2025-09-06 02:29:52 [Info] set hash mode 1
2025-09-06 02:29:52 [Info] RTAP timeout config:9600000
2025-09-06 02:29:52 [Info] self_guard_mode config is 0
2025-09-06 02:29:52 [Info] GetMessage : T_MSG_CHECK
2025-09-06 02:29:52 [Info] task 2f37011a-eba2-4729-b985-e58ef9f3db81 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 02:30:06 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 02:30:06 [Info] ipc client:Rtap5711757097006_handler Reg client_name:Rtap5711757097006 on WhiteList
2025-09-06 02:30:06 [Info] start rtap process success, pid is 4908, argument is Rtap5711757097006
2025-09-06 02:30:06 [Info] New ClientConnectNotify : Rtap5711757097006, id is 000004F4
2025-09-06 02:30:06 [Info] ipc client:Rtap5711757097006 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 02:30:07 [Info] Rtap Platform Rtap5711757097006 execv work --windows-sysinfoext-check on pid 4908
2025-09-06 02:30:09 [Info] csrss.exe open proc 4908 AliSecCheck.ex
2025-09-06 02:30:10 [Info] csrss.exe open thread 4908 AliSecCheck.ex
2025-09-06 02:30:14 [Info] Done Work --windows-sysinfoext-check:1
2025-09-06 02:30:14 [Info] Rtap Platform Rtap5711757097006 Exit:normal exit
2025-09-06 02:30:16 [Info] ClientDisConnectNotify : Rtap5711757097006, id is 000004F4
2025-09-06 02:30:50 [Info] get meta data success by v2
2025-09-06 02:30:50 [Info] get empty metaserver config
2025-09-06 02:30:50 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-06 02:30:51 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-06 02:30:51 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-06 02:30:51 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-06 02:30:51 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 02:30:51 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 02:30:51 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-06 02:30:51 [Info] download cert compare md5 same
2025-09-06 02:30:51 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 02:30:51 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 02:30:51 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-06 03:08:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10185","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10264","aliyundun_upload_time":"1757099323","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 03:14:57 [Info] TotalPhys:2047,AvailPhys:544,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6046,AvailPageFile:1102,SelfWorkingSet:10160, SelfPageFile:14152
2025-09-06 03:14:57 [Info] CommitTotal:4943,CommitLimit:6046,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:544,SystemCache:83,KernelTotal:263,KernelPaged:187,KernelNonpaged:76,PageSize:4096,HandleCount:28168,ProcessCount:53,ThreadCount:737
2025-09-06 04:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10189","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10196","aliyundun_upload_time":"1757102930","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 04:15:53 [Info] TotalPhys:2047,AvailPhys:539,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6046,AvailPageFile:1095,SelfWorkingSet:10236, SelfPageFile:14176
2025-09-06 04:15:53 [Info] CommitTotal:4950,CommitLimit:6046,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:539,SystemCache:88,KernelTotal:263,KernelPaged:186,KernelNonpaged:76,PageSize:4096,HandleCount:28172,ProcessCount:53,ThreadCount:741
2025-09-06 05:08:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10163","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"10236","aliyundun_upload_time":"1757106511","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 05:16:56 [Info] TotalPhys:2047,AvailPhys:500,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6046,AvailPageFile:1044,SelfWorkingSet:10188, SelfPageFile:14148
2025-09-06 05:16:56 [Info] CommitTotal:5001,CommitLimit:6046,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:500,SystemCache:57,KernelTotal:264,KernelPaged:187,KernelNonpaged:76,PageSize:4096,HandleCount:28371,ProcessCount:53,ThreadCount:764
2025-09-06 05:48:20 [Info] get meta data success by v2
2025-09-06 05:48:20 [Info] get empty metaserver config
2025-09-06 05:48:20 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-06 05:48:20 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-06 05:48:20 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-06 05:48:20 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-06 05:48:20 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 05:48:20 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 05:48:20 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-06 05:48:20 [Info] download cert compare md5 same
2025-09-06 05:48:20 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 05:48:20 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 05:48:20 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-06 06:08:50 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10151","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10368","aliyundun_upload_time":"1757110130","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 06:17:52 [Info] TotalPhys:2047,AvailPhys:482,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6046,AvailPageFile:1036,SelfWorkingSet:10200, SelfPageFile:13944
2025-09-06 06:17:52 [Info] CommitTotal:5009,CommitLimit:6046,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:482,SystemCache:48,KernelTotal:263,KernelPaged:187,KernelNonpaged:76,PageSize:4096,HandleCount:28093,ProcessCount:53,ThreadCount:737
2025-09-06 07:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10156","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10212","aliyundun_upload_time":"1757113737","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 07:18:49 [Info] TotalPhys:2047,AvailPhys:470,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6046,AvailPageFile:1024,SelfWorkingSet:10268, SelfPageFile:13944
2025-09-06 07:18:49 [Info] CommitTotal:5022,CommitLimit:6046,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:470,SystemCache:46,KernelTotal:263,KernelPaged:186,KernelNonpaged:76,PageSize:4096,HandleCount:28094,ProcessCount:53,ThreadCount:732
2025-09-06 07:58:57 [Info] nCurrentClock is 4716199700, nCurrentTime is 1757116737
2025-09-06 07:58:57 [Info] SendMessage T_MSG_LOGIN
2025-09-06 07:58:57 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-06 07:58:57 [Info] begin to enable self guard after reconnect
2025-09-06 07:58:57 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-06 07:58:57 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-06 07:58:57 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-06 07:58:57 [Info] key : cpu, value : 10
2025-09-06 07:58:57 [Info] key : rio, value : 20480
2025-09-06 07:58:57 [Info] key : wio, value : 20480
2025-09-06 07:58:57 [Info] key : cpu_all, value : 0
2025-09-06 07:58:57 [Info] key : max_pid_check, value : 200
2025-09-06 07:58:57 [Info] key : throw_dump, value : 0
2025-09-06 07:58:57 [Info] key : hash_mode, value : 1
2025-09-06 07:58:57 [Info] key : mem, value : 200
2025-09-06 07:58:57 [Info] can not find key max_fd in online conf
2025-09-06 07:58:57 [Info] key : proc_limit, value : 1
2025-09-06 07:58:57 [Info] key : resource_limit_mode, value : 3
2025-09-06 07:58:57 [Info] key : rtap_update_mode, value : 1
2025-09-06 07:58:57 [Info] can not find key debug in online conf
2025-09-06 07:58:57 [Info] can not find key update_mode in online conf
2025-09-06 07:58:57 [Info] can not find key http_mode in online conf
2025-09-06 07:58:57 [Info] can not find key rtap_enable in online conf
2025-09-06 07:58:57 [Info] can not find key rtap_new_agent in online conf
2025-09-06 07:58:57 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-06 07:58:57 [Info] can not find key mem_low_mark in online conf
2025-09-06 07:58:57 [Info] can not find key obnormal_report_interval in online conf
2025-09-06 07:58:57 [Info] key : cache_mode, value : 0
2025-09-06 07:58:57 [Info] key : abnormal_monitor_mode, value : 3
2025-09-06 07:58:57 [Info] key : queue_size_ratio, value : 80
2025-09-06 07:58:57 [Info] queue_size_ratio is 80
2025-09-06 07:58:57 [Info] resource limit mode and max limit cpu is not change
2025-09-06 07:58:57 [Info] set hash mode 1
2025-09-06 07:58:57 [Info] RTAP timeout config:9600000
2025-09-06 07:58:57 [Info] self_guard_mode config is 0
2025-09-06 07:58:57 [Info] GetMessage : T_MSG_CHECK
2025-09-06 07:58:57 [Info] task e3ce8d81-e158-4e3a-a47d-de0d29327e4f has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 07:59:06 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-09-06 07:59:09 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 07:59:09 [Info] ipc client:Rtap322751757116749_handler Reg client_name:Rtap322751757116749 on WhiteList
2025-09-06 07:59:09 [Info] start rtap process success, pid is 2020, argument is Rtap322751757116749
2025-09-06 07:59:09 [Info] New ClientConnectNotify : Rtap322751757116749, id is 000004D8
2025-09-06 07:59:09 [Info] ipc client:Rtap322751757116749 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 07:59:09 [Info] Rtap Platform Rtap322751757116749 execv work --windows-sysinfoext-check on pid 2020
2025-09-06 07:59:10 [Info] csrss.exe open proc 2020 AliSecCheck.ex
2025-09-06 07:59:11 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2025-09-06 07:59:16 [Info] Done Work --windows-sysinfoext-check:1
2025-09-06 07:59:16 [Info] Rtap Platform Rtap322751757116749 Exit:normal exit
2025-09-06 07:59:18 [Info] ClientDisConnectNotify : Rtap322751757116749, id is 000004D8
2025-09-06 08:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10247","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10284","aliyundun_upload_time":"1757117317","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 08:19:49 [Info] TotalPhys:2047,AvailPhys:442,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6046,AvailPageFile:1016,SelfWorkingSet:10152, SelfPageFile:13792
2025-09-06 08:19:49 [Info] CommitTotal:5029,CommitLimit:6046,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:442,SystemCache:37,KernelTotal:263,KernelPaged:187,KernelNonpaged:76,PageSize:4096,HandleCount:28323,ProcessCount:54,ThreadCount:743
2025-09-06 08:49:26 [Info] GetMessage : T_MSG_CHECK
2025-09-06 08:49:26 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTcxMTk3NjYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3MTYyOTY2LCJzdWIiOiJSVEFQX0lEWF8xNjIzMDhfMTc1NzExOTc2NjUwNCJ9.US1iJfJ-3J0OB5TWI8JwcFIMCPtm5Ey2OGspkTHZ6jE has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 08:49:39 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 08:49:39 [Info] ipc client:Rtap94021757119779_handler Reg client_name:Rtap94021757119779 on WhiteList
2025-09-06 08:49:39 [Info] start rtap process success, pid is 3124, argument is Rtap94021757119779
2025-09-06 08:49:39 [Info] New ClientConnectNotify : Rtap94021757119779, id is 000004F4
2025-09-06 08:49:39 [Info] ipc client:Rtap94021757119779 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 08:49:39 [Info] Rtap Platform Rtap94021757119779 execv work --windows-process-check on pid 3124
2025-09-06 08:49:41 [Info] csrss.exe open proc 3124 AliSecCheck.ex
2025-09-06 08:49:42 [Info] csrss.exe open thread 3124 AliSecCheck.ex
2025-09-06 08:50:07 [Info] Done Work --windows-process-check:1
2025-09-06 08:50:07 [Info] Rtap Platform Rtap94021757119779 Exit:normal exit
2025-09-06 08:50:09 [Info] ClientDisConnectNotify : Rtap94021757119779, id is 000004F4
2025-09-06 09:06:38 [Info] get meta data success by v2
2025-09-06 09:06:38 [Info] get empty metaserver config
2025-09-06 09:06:38 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-06 09:06:38 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-06 09:06:38 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-06 09:06:38 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-06 09:06:38 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 09:06:38 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 09:06:39 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-06 09:06:39 [Info] download cert compare md5 same
2025-09-06 09:06:39 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 09:06:39 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 09:06:39 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-06 09:08:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10169","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"10268","aliyundun_upload_time":"1757120922","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 09:20:49 [Info] TotalPhys:2047,AvailPhys:467,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6046,AvailPageFile:1028,SelfWorkingSet:10196, SelfPageFile:14200
2025-09-06 09:20:49 [Info] CommitTotal:5018,CommitLimit:6046,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:467,SystemCache:4194303,KernelTotal:262,KernelPaged:185,KernelNonpaged:76,PageSize:4096,HandleCount:28124,ProcessCount:53,ThreadCount:740
2025-09-06 09:56:46 [Info] GetMessage : T_MSG_CHECK
2025-09-06 09:56:46 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTcxMjM4MDYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3MTY3MDA2LCJzdWIiOiJSVEFQX0lEWF8xNjIzMDlfMTc1NzEyMzgwNjM5MyJ9.-mETHkfBAnBMkinueWfLu-FTfZs4UJNmgmPFTv7x7Oc has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 09:56:57 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 09:56:57 [Info] ipc client:Rtap225881757123817_handler Reg client_name:Rtap225881757123817 on WhiteList
2025-09-06 09:56:57 [Info] start rtap process success, pid is 4600, argument is Rtap225881757123817
2025-09-06 09:56:59 [Info] New ClientConnectNotify : Rtap225881757123817, id is 00000548
2025-09-06 09:56:59 [Info] ipc client:Rtap225881757123817 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 09:56:59 [Info] Rtap Platform Rtap225881757123817 execv work --tcp-connect-check on pid 4600
2025-09-06 09:56:59 [Info] csrss.exe open proc 4600 AliSecCheck.ex
2025-09-06 09:57:00 [Info] csrss.exe open thread 4600 AliSecCheck.ex
2025-09-06 09:57:01 [Info] csrss.exe open thread 4600 AliSecCheck.ex
2025-09-06 09:57:02 [Info] csrss.exe open thread 4600 AliSecCheck.ex
2025-09-06 09:57:03 [Info] csrss.exe open thread 4600 AliSecCheck.ex
2025-09-06 09:57:10 [Info] Done Work --tcp-connect-check:1
2025-09-06 09:57:10 [Info] Rtap Platform Rtap225881757123817 Exit:normal exit
2025-09-06 09:57:12 [Info] ClientDisConnectNotify : Rtap225881757123817, id is 00000548
2025-09-06 10:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10165","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10276","aliyundun_upload_time":"1757124536","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 10:16:05 [Info] GetMessage : T_MSG_CHECK
2025-09-06 10:16:05 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTcxMjQ5NjUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3MTY4MTY1LCJzdWIiOiJSVEFQX0lEWF8xNjIzMTdfMTc1NzEyNDk2NTkwNyJ9.EtkdsQkEkJaZKDglaKzVJcaKXE4RWFMeDgPyg0PdaUY has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 10:16:16 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 10:16:16 [Info] ipc client:Rtap263731757124976_handler Reg client_name:Rtap263731757124976 on WhiteList
2025-09-06 10:16:16 [Info] start rtap process success, pid is 4492, argument is Rtap263731757124976
2025-09-06 10:16:16 [Info] New ClientConnectNotify : Rtap263731757124976, id is 000001E4
2025-09-06 10:16:16 [Info] ipc client:Rtap263731757124976 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 10:16:16 [Info] Rtap Platform Rtap263731757124976 execv work --windows-registry-check on pid 4492
2025-09-06 10:16:18 [Info] csrss.exe open proc 4492 AliSecCheck.ex
2025-09-06 10:16:19 [Info] csrss.exe open thread 4492 AliSecCheck.ex
2025-09-06 10:16:33 [Info] GetMessage : T_MSG_CHECK
2025-09-06 10:16:33 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTcxMjQ5OTMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3MTY4MTkzLCJzdWIiOiJSVEFQX0lEWF8xNjIzMTFfMTc1NzEyNDk5MzAzNyJ9.1Mf6xbIuWKdK_v46JEh30kv9Y2ihg3Ic-lW6rIh_LHM has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 10:16:41 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 10:16:41 [Info] ipc client:Rtap264551757125001_handler Reg client_name:Rtap264551757125001 on WhiteList
2025-09-06 10:16:41 [Info] start rtap process success, pid is 3676, argument is Rtap264551757125001
2025-09-06 10:16:41 [Info] New ClientConnectNotify : Rtap264551757125001, id is 00000548
2025-09-06 10:16:42 [Info] ipc client:Rtap264551757125001 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 10:16:42 [Info] Rtap Platform Rtap264551757125001 execv work --windows-schedule-task-check on pid 3676
2025-09-06 10:16:44 [Info] csrss.exe open proc 3676 AliSecCheck.ex
2025-09-06 10:16:45 [Info] csrss.exe open thread 3676 AliSecCheck.ex
2025-09-06 10:16:53 [Info] Done Work --windows-registry-check:1
2025-09-06 10:16:53 [Info] Rtap Platform Rtap263731757124976 Exit:normal exit
2025-09-06 10:16:55 [Info] ClientDisConnectNotify : Rtap263731757124976, id is 000001E4
2025-09-06 10:17:20 [Info] Done Work --windows-schedule-task-check:1
2025-09-06 10:17:20 [Info] Rtap Platform Rtap264551757125001 Exit:normal exit
2025-09-06 10:17:22 [Info] ClientDisConnectNotify : Rtap264551757125001, id is 00000548
2025-09-06 10:17:31 [Info] GetMessage : T_MSG_CHECK
2025-09-06 10:17:31 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTcxMjUwNTEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3MTY4MjUxLCJzdWIiOiJSVEFQX0lEWF8xNjIzMjVfMTc1NzEyNTA1MTI5MyJ9.eWo1M0JQsgUIRrqTiN_S1Cv1RiTvCfyP7XixDvjLfWo has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 10:17:40 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 10:17:40 [Info] ipc client:Rtap266471757125060_handler Reg client_name:Rtap266471757125060 on WhiteList
2025-09-06 10:17:40 [Info] start rtap process success, pid is 3820, argument is Rtap266471757125060
2025-09-06 10:17:40 [Info] New ClientConnectNotify : Rtap266471757125060, id is 000004D8
2025-09-06 10:17:40 [Info] ipc client:Rtap266471757125060 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 10:17:40 [Info] Rtap Platform Rtap266471757125060 execv work --windows-driver-version-check on pid 3820
2025-09-06 10:17:42 [Info] csrss.exe open proc 3820 AliSecCheck.ex
2025-09-06 10:17:43 [Info] csrss.exe open thread 3820 AliSecCheck.ex
2025-09-06 10:17:48 [Info] Done Work --windows-driver-version-check:1
2025-09-06 10:17:48 [Info] Rtap Platform Rtap266471757125060 Exit:normal exit
2025-09-06 10:17:50 [Info] ClientDisConnectNotify : Rtap266471757125060, id is 000004D8
2025-09-06 10:21:45 [Info] TotalPhys:2047,AvailPhys:495,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6497,AvailPageFile:1440,SelfWorkingSet:10200, SelfPageFile:14164
2025-09-06 10:21:45 [Info] CommitTotal:5056,CommitLimit:6497,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:495,SystemCache:4194303,KernelTotal:258,KernelPaged:182,KernelNonpaged:76,PageSize:4096,HandleCount:28116,ProcessCount:53,ThreadCount:733
2025-09-06 11:05:48 [Info] GetMessage : T_MSG_CHECK
2025-09-06 11:05:48 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTcxMjc5NDgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3MTcxMTQ4LCJzdWIiOiJSVEFQX0lEWF8xNjIzMTRfMTc1NzEyNzk0ODExNCJ9.E8JXDe6CGKCazWn9DSJAxHOD90nJI1jeHniMRvezWDQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 11:06:00 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 11:06:00 [Info] ipc client:Rtap33501757127960_handler Reg client_name:Rtap33501757127960 on WhiteList
2025-09-06 11:06:00 [Info] start rtap process success, pid is 4736, argument is Rtap33501757127960
2025-09-06 11:06:00 [Info] New ClientConnectNotify : Rtap33501757127960, id is 00000548
2025-09-06 11:06:01 [Info] ipc client:Rtap33501757127960 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 11:06:01 [Info] Rtap Platform Rtap33501757127960 execv work --windows-autorun-item-check on pid 4736
2025-09-06 11:06:02 [Info] csrss.exe open proc 4736 AliSecCheck.ex
2025-09-06 11:06:03 [Info] csrss.exe open thread 4736 AliSecCheck.ex
2025-09-06 11:06:16 [Info] Done Work --windows-autorun-item-check:1
2025-09-06 11:06:16 [Info] Rtap Platform Rtap33501757127960 Exit:normal exit
2025-09-06 11:06:18 [Info] ClientDisConnectNotify : Rtap33501757127960, id is 00000548
2025-09-06 11:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10184","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10216","aliyundun_upload_time":"1757128126","aliyundun_write_pid_times":"0","ipc_send_count":"152","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 11:22:42 [Info] TotalPhys:2047,AvailPhys:479,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6497,AvailPageFile:1426,SelfWorkingSet:10100, SelfPageFile:13728
2025-09-06 11:22:42 [Info] CommitTotal:5070,CommitLimit:6497,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:479,SystemCache:4194303,KernelTotal:258,KernelPaged:181,KernelNonpaged:76,PageSize:4096,HandleCount:28099,ProcessCount:53,ThreadCount:737
2025-09-06 12:08:56 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10136","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10296","aliyundun_upload_time":"1757131736","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 12:23:39 [Info] TotalPhys:2047,AvailPhys:484,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6497,AvailPageFile:1428,SelfWorkingSet:10248, SelfPageFile:13892
2025-09-06 12:23:39 [Info] CommitTotal:5068,CommitLimit:6497,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:484,SystemCache:8,KernelTotal:261,KernelPaged:185,KernelNonpaged:76,PageSize:4096,HandleCount:28154,ProcessCount:53,ThreadCount:751
2025-09-06 12:24:04 [Info] get meta data success by v2
2025-09-06 12:24:04 [Info] get empty metaserver config
2025-09-06 12:24:04 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-06 12:24:04 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-06 12:24:04 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-06 12:24:04 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-06 12:24:04 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 12:24:04 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 12:24:04 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-06 12:24:04 [Info] download cert compare md5 same
2025-09-06 12:24:04 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 12:24:04 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 12:24:04 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-06 13:08:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10136","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10312","aliyundun_upload_time":"1757135314","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 13:24:35 [Info] TotalPhys:2047,AvailPhys:489,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6497,AvailPageFile:1430,SelfWorkingSet:10076, SelfPageFile:13756
2025-09-06 13:24:35 [Info] CommitTotal:5066,CommitLimit:6497,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:489,SystemCache:4194303,KernelTotal:262,KernelPaged:185,KernelNonpaged:76,PageSize:4096,HandleCount:28089,ProcessCount:53,ThreadCount:738
2025-09-06 13:29:01 [Info] nCurrentClock is 4734200200, nCurrentTime is 1757136541
2025-09-06 13:29:01 [Info] SendMessage T_MSG_LOGIN
2025-09-06 13:29:01 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-06 13:29:01 [Info] begin to enable self guard after reconnect
2025-09-06 13:29:02 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-06 13:29:02 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-06 13:29:02 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-06 13:29:02 [Info] key : cpu, value : 10
2025-09-06 13:29:02 [Info] key : rio, value : 20480
2025-09-06 13:29:02 [Info] key : wio, value : 20480
2025-09-06 13:29:02 [Info] key : cpu_all, value : 0
2025-09-06 13:29:02 [Info] key : max_pid_check, value : 200
2025-09-06 13:29:02 [Info] key : throw_dump, value : 0
2025-09-06 13:29:02 [Info] key : hash_mode, value : 1
2025-09-06 13:29:02 [Info] key : mem, value : 200
2025-09-06 13:29:02 [Info] can not find key max_fd in online conf
2025-09-06 13:29:02 [Info] key : proc_limit, value : 1
2025-09-06 13:29:02 [Info] key : resource_limit_mode, value : 3
2025-09-06 13:29:02 [Info] key : rtap_update_mode, value : 1
2025-09-06 13:29:02 [Info] can not find key debug in online conf
2025-09-06 13:29:02 [Info] can not find key update_mode in online conf
2025-09-06 13:29:02 [Info] can not find key http_mode in online conf
2025-09-06 13:29:02 [Info] can not find key rtap_enable in online conf
2025-09-06 13:29:02 [Info] can not find key rtap_new_agent in online conf
2025-09-06 13:29:02 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-06 13:29:02 [Info] can not find key mem_low_mark in online conf
2025-09-06 13:29:02 [Info] can not find key obnormal_report_interval in online conf
2025-09-06 13:29:02 [Info] key : cache_mode, value : 0
2025-09-06 13:29:02 [Info] key : abnormal_monitor_mode, value : 3
2025-09-06 13:29:02 [Info] key : queue_size_ratio, value : 80
2025-09-06 13:29:02 [Info] queue_size_ratio is 80
2025-09-06 13:29:02 [Info] resource limit mode and max limit cpu is not change
2025-09-06 13:29:02 [Info] set hash mode 1
2025-09-06 13:29:02 [Info] RTAP timeout config:9600000
2025-09-06 13:29:02 [Info] self_guard_mode config is 0
2025-09-06 13:29:02 [Info] GetMessage : T_MSG_CHECK
2025-09-06 13:29:02 [Info] task 0489e66d-e479-4ace-9840-c2342ab366a3 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 13:29:12 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 13:29:12 [Info] ipc client:Rtap314071757136552_handler Reg client_name:Rtap314071757136552 on WhiteList
2025-09-06 13:29:12 [Info] start rtap process success, pid is 2996, argument is Rtap314071757136552
2025-09-06 13:29:12 [Info] New ClientConnectNotify : Rtap314071757136552, id is 000004D8
2025-09-06 13:29:12 [Info] ipc client:Rtap314071757136552 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 13:29:13 [Info] Rtap Platform Rtap314071757136552 execv work --windows-sysinfoext-check on pid 2996
2025-09-06 13:29:15 [Info] csrss.exe open proc 2996 AliSecCheck.ex
2025-09-06 13:29:16 [Info] csrss.exe open thread 2996 AliSecCheck.ex
2025-09-06 13:29:20 [Info] Done Work --windows-sysinfoext-check:1
2025-09-06 13:29:20 [Info] Rtap Platform Rtap314071757136552 Exit:normal exit
2025-09-06 13:29:22 [Info] ClientDisConnectNotify : Rtap314071757136552, id is 000004D8
2025-09-06 14:08:47 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10086","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10168","aliyundun_upload_time":"1757138927","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 14:25:36 [Info] TotalPhys:2047,AvailPhys:488,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6497,AvailPageFile:1429,SelfWorkingSet:9848, SelfPageFile:13532
2025-09-06 14:25:36 [Info] CommitTotal:5067,CommitLimit:6497,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:488,SystemCache:19,KernelTotal:261,KernelPaged:185,KernelNonpaged:76,PageSize:4096,HandleCount:28123,ProcessCount:53,ThreadCount:741
2025-09-06 15:08:55 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9913","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10104","aliyundun_upload_time":"1757142535","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"52","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 15:26:32 [Info] TotalPhys:2047,AvailPhys:903,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5850,AvailPageFile:1240,SelfWorkingSet:10068, SelfPageFile:14168
2025-09-06 15:26:32 [Info] CommitTotal:4609,CommitLimit:5850,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:903,SystemCache:4194303,KernelTotal:256,KernelPaged:180,KernelNonpaged:76,PageSize:4096,HandleCount:28012,ProcessCount:53,ThreadCount:740
2025-09-06 15:41:26 [Info] get meta data success by v2
2025-09-06 15:41:26 [Info] get empty metaserver config
2025-09-06 15:41:26 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-06 15:41:26 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-06 15:41:26 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-06 15:41:26 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-06 15:41:26 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 15:41:26 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 15:41:26 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-06 15:41:26 [Info] download cert compare md5 same
2025-09-06 15:41:26 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 15:41:26 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 15:41:26 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-06 16:09:02 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10019","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10208","aliyundun_upload_time":"1757146142","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"56","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 16:27:29 [Info] TotalPhys:2047,AvailPhys:863,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5850,AvailPageFile:1215,SelfWorkingSet:10036, SelfPageFile:13728
2025-09-06 16:27:29 [Info] CommitTotal:4634,CommitLimit:5850,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:863,SystemCache:4194303,KernelTotal:256,KernelPaged:179,KernelNonpaged:76,PageSize:4096,HandleCount:28015,ProcessCount:53,ThreadCount:739
2025-09-06 17:08:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10011","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10044","aliyundun_upload_time":"1757149717","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"57","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 17:28:26 [Info] TotalPhys:2047,AvailPhys:860,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5850,AvailPageFile:1209,SelfWorkingSet:10004, SelfPageFile:13704
2025-09-06 17:28:26 [Info] CommitTotal:4641,CommitLimit:5850,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:860,SystemCache:4194303,KernelTotal:256,KernelPaged:179,KernelNonpaged:76,PageSize:4096,HandleCount:28012,ProcessCount:53,ThreadCount:737
2025-09-06 18:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9998","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10044","aliyundun_upload_time":"1757153337","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"58","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 18:29:23 [Info] TotalPhys:2047,AvailPhys:871,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5850,AvailPageFile:1221,SelfWorkingSet:10020, SelfPageFile:13708
2025-09-06 18:29:23 [Info] CommitTotal:4629,CommitLimit:5850,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:871,SystemCache:4194303,KernelTotal:258,KernelPaged:182,KernelNonpaged:76,PageSize:4096,HandleCount:28130,ProcessCount:53,ThreadCount:737
2025-09-06 18:52:44 [Info] GetMessage : T_MSG_CHECK
2025-09-06 18:52:44 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTcxNTU5NjQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3MTk5MTY0LCJzdWIiOiJSVEFQX0lEWF8xNjIzODRfMTc1NzE1NTk2NDAwMCJ9.1ljN4me9zPSHzesM3PP3pbi8975mi1_AfmpP0GLloMQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 18:52:56 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 18:52:56 [Info] ipc client:Rtap293021757155976_handler Reg client_name:Rtap293021757155976 on WhiteList
2025-09-06 18:52:56 [Info] start rtap process success, pid is 308, argument is Rtap293021757155976
2025-09-06 18:52:57 [Info] New ClientConnectNotify : Rtap293021757155976, id is 000001E4
2025-09-06 18:52:57 [Info] Rtap Platform Rtap293021757155976 execv work --secnet_rasp_agent on pid 308
2025-09-06 18:52:57 [Info] ipc client:Rtap293021757155976 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 18:52:59 [Info] csrss.exe open proc 308 AliSecCheck.ex
2025-09-06 18:53:00 [Info] csrss.exe open thread 308 AliSecCheck.ex
2025-09-06 18:53:01 [Info] csrss.exe open thread 308 AliSecCheck.ex
2025-09-06 18:53:02 [Info] csrss.exe open thread 308 AliSecCheck.ex
2025-09-06 18:53:03 [Info] csrss.exe open thread 308 AliSecCheck.ex
2025-09-06 18:53:04 [Info] csrss.exe open thread 308 AliSecCheck.ex
2025-09-06 18:53:04 [Info] Done Work --secnet_rasp_agent:1
2025-09-06 18:53:04 [Info] Rtap Platform Rtap293021757155976 Exit:normal exit
2025-09-06 18:53:06 [Info] ClientDisConnectNotify : Rtap293021757155976, id is 000001E4
2025-09-06 18:57:50 [Info] nCurrentClock is 4752200800, nCurrentTime is 1757156270
2025-09-06 18:57:50 [Info] SendMessage T_MSG_LOGIN
2025-09-06 18:57:50 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-06 18:57:50 [Info] begin to enable self guard after reconnect
2025-09-06 18:57:50 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-06 18:57:50 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-06 18:57:50 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-06 18:57:50 [Info] key : cpu, value : 10
2025-09-06 18:57:50 [Info] key : rio, value : 20480
2025-09-06 18:57:50 [Info] key : wio, value : 20480
2025-09-06 18:57:50 [Info] key : cpu_all, value : 0
2025-09-06 18:57:50 [Info] key : max_pid_check, value : 200
2025-09-06 18:57:50 [Info] key : throw_dump, value : 0
2025-09-06 18:57:50 [Info] key : hash_mode, value : 1
2025-09-06 18:57:50 [Info] key : mem, value : 200
2025-09-06 18:57:50 [Info] can not find key max_fd in online conf
2025-09-06 18:57:50 [Info] key : proc_limit, value : 1
2025-09-06 18:57:50 [Info] key : resource_limit_mode, value : 3
2025-09-06 18:57:50 [Info] key : rtap_update_mode, value : 1
2025-09-06 18:57:50 [Info] can not find key debug in online conf
2025-09-06 18:57:50 [Info] can not find key update_mode in online conf
2025-09-06 18:57:50 [Info] can not find key http_mode in online conf
2025-09-06 18:57:50 [Info] can not find key rtap_enable in online conf
2025-09-06 18:57:50 [Info] can not find key rtap_new_agent in online conf
2025-09-06 18:57:50 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-06 18:57:50 [Info] can not find key mem_low_mark in online conf
2025-09-06 18:57:50 [Info] can not find key obnormal_report_interval in online conf
2025-09-06 18:57:50 [Info] key : cache_mode, value : 0
2025-09-06 18:57:50 [Info] key : abnormal_monitor_mode, value : 3
2025-09-06 18:57:50 [Info] key : queue_size_ratio, value : 80
2025-09-06 18:57:50 [Info] queue_size_ratio is 80
2025-09-06 18:57:50 [Info] resource limit mode and max limit cpu is not change
2025-09-06 18:57:50 [Info] set hash mode 1
2025-09-06 18:57:50 [Info] RTAP timeout config:9600000
2025-09-06 18:57:50 [Info] self_guard_mode config is 0
2025-09-06 18:57:50 [Info] GetMessage : T_MSG_CHECK
2025-09-06 18:57:50 [Info] task 5b38370a-9768-4756-acda-2a8659d09f91 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 18:58:01 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 18:58:01 [Info] ipc client:Rtap302981757156281_handler Reg client_name:Rtap302981757156281 on WhiteList
2025-09-06 18:58:01 [Info] start rtap process success, pid is 4920, argument is Rtap302981757156281
2025-09-06 18:58:01 [Info] New ClientConnectNotify : Rtap302981757156281, id is 00000548
2025-09-06 18:58:01 [Info] ipc client:Rtap302981757156281 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 18:58:01 [Info] Rtap Platform Rtap302981757156281 execv work --windows-sysinfoext-check on pid 4920
2025-09-06 18:58:03 [Info] csrss.exe open proc 4920 AliSecCheck.ex
2025-09-06 18:58:04 [Info] csrss.exe open thread 4920 AliSecCheck.ex
2025-09-06 18:58:08 [Info] Done Work --windows-sysinfoext-check:1
2025-09-06 18:58:08 [Info] Rtap Platform Rtap302981757156281 Exit:normal exit
2025-09-06 18:58:11 [Info] ClientDisConnectNotify : Rtap302981757156281, id is 00000548
2025-09-06 18:58:45 [Info] get meta data success by v2
2025-09-06 18:58:45 [Info] get empty metaserver config
2025-09-06 18:58:45 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-06 18:58:45 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-06 18:58:45 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-06 18:58:45 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-06 18:58:45 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 18:58:45 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 18:58:45 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-06 18:58:45 [Info] download cert compare md5 same
2025-09-06 18:58:45 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 18:58:45 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 18:58:45 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-06 19:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10003","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10172","aliyundun_upload_time":"1757156912","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"58","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-09-06 19:14:07 [Info] GetMessage : T_MSG_CHECK
2025-09-06 19:14:07 [Info] task c3eafa069a86fc7f5c4c16743dbd9f1d has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-06 19:14:18 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-06 19:14:18 [Info] ipc client:Rtap7211757157258_handler Reg client_name:Rtap7211757157258 on WhiteList
2025-09-06 19:14:18 [Info] start rtap process success, pid is 1376, argument is Rtap7211757157258
2025-09-06 19:14:18 [Info] New ClientConnectNotify : Rtap7211757157258, id is 000001E4
2025-09-06 19:14:18 [Info] ipc client:Rtap7211757157258 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-06 19:14:19 [Info] Rtap Platform Rtap7211757157258 execv work --windows-vul-check on pid 1376
2025-09-06 19:14:19 [Info] csrss.exe open proc 1376 AliSecCheck.ex
2025-09-06 19:14:20 [Info] csrss.exe open thread 1376 AliSecCheck.ex
2025-09-06 19:14:26 [Info] Done Work --windows-vul-check:1
2025-09-06 19:14:26 [Info] Rtap Platform Rtap7211757157258 Exit:normal exit
2025-09-06 19:14:28 [Info] ClientDisConnectNotify : Rtap7211757157258, id is 000001E4
2025-09-06 19:30:28 [Info] TotalPhys:2047,AvailPhys:801,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5850,AvailPageFile:1184,SelfWorkingSet:10144, SelfPageFile:14168
2025-09-06 19:30:28 [Info] CommitTotal:4666,CommitLimit:5850,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:801,SystemCache:34,KernelTotal:276,KernelPaged:195,KernelNonpaged:80,PageSize:4096,HandleCount:28098,ProcessCount:53,ThreadCount:749
2025-09-06 20:08:52 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10136","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10212","aliyundun_upload_time":"1757160532","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"60","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 20:31:27 [Info] TotalPhys:2047,AvailPhys:806,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5850,AvailPageFile:1173,SelfWorkingSet:10216, SelfPageFile:14152
2025-09-06 20:31:27 [Info] CommitTotal:4676,CommitLimit:5850,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:806,SystemCache:108,KernelTotal:291,KernelPaged:206,KernelNonpaged:85,PageSize:4096,HandleCount:28059,ProcessCount:52,ThreadCount:748
2025-09-06 21:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10210","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10320","aliyundun_upload_time":"1757164139","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"61","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 21:32:23 [Info] TotalPhys:2047,AvailPhys:779,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5850,AvailPageFile:1147,SelfWorkingSet:10212, SelfPageFile:14216
2025-09-06 21:32:23 [Info] CommitTotal:4702,CommitLimit:5850,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:779,SystemCache:121,KernelTotal:294,KernelPaged:208,KernelNonpaged:85,PageSize:4096,HandleCount:27868,ProcessCount:52,ThreadCount:735
2025-09-06 22:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10193","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10220","aliyundun_upload_time":"1757167712","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"67","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 22:16:48 [Info] get meta data success by v2
2025-09-06 22:16:48 [Info] get empty metaserver config
2025-09-06 22:16:48 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-06 22:16:48 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-06 22:16:48 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-06 22:16:48 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-06 22:16:48 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 22:16:48 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-06 22:16:48 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-06 22:16:48 [Info] download cert compare md5 same
2025-09-06 22:16:48 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 22:16:48 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-06 22:16:48 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-06 22:33:20 [Info] TotalPhys:2047,AvailPhys:635,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5850,AvailPageFile:1015,SelfWorkingSet:10268, SelfPageFile:14276
2025-09-06 22:33:20 [Info] CommitTotal:4835,CommitLimit:5850,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:635,SystemCache:121,KernelTotal:294,KernelPaged:208,KernelNonpaged:85,PageSize:4096,HandleCount:27869,ProcessCount:52,ThreadCount:729
2025-09-06 23:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10215","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10340","aliyundun_upload_time":"1757171318","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-06 23:34:16 [Info] TotalPhys:2047,AvailPhys:639,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:5850,AvailPageFile:1016,SelfWorkingSet:10080, SelfPageFile:14112
2025-09-06 23:34:16 [Info] CommitTotal:4834,CommitLimit:5850,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:639,SystemCache:122,KernelTotal:294,KernelPaged:208,KernelNonpaged:85,PageSize:4096,HandleCount:27882,ProcessCount:52,ThreadCount:735
2025-09-07 00:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10116","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10192","aliyundun_upload_time":"1757174921","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 00:52:30 [Info] TotalPhys:2047,AvailPhys:397,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1166,SelfWorkingSet:9944, SelfPageFile:13564
2025-09-13 00:52:30 [Info] CommitTotal:5213,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:397,SystemCache:4194303,KernelTotal:263,KernelPaged:186,KernelNonpaged:77,PageSize:4096,HandleCount:27965,ProcessCount:52,ThreadCount:725
2025-09-13 01:08:53 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"9905","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"9988","aliyundun_upload_time":"1757696933","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 01:17:11 [Info] GetMessage : T_MSG_CHECK
2025-09-13 01:17:11 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc2OTc0MzAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NzQwNjMwLCJzdWIiOiJSVEFQX0lEWF8xNjI4NjhfMTc1NzY5NzQzMDk0MiJ9.h3DqYzlwOZBhcNdREua7ZOQXCK1LXt3vLPPzC6JZDXk has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 01:17:21 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 01:17:21 [Info] ipc client:Rtap280271757697441_handler Reg client_name:Rtap280271757697441 on WhiteList
2025-09-13 01:17:21 [Info] start rtap process success, pid is 3000, argument is Rtap280271757697441
2025-09-13 01:17:22 [Info] system memory usage is 81
2025-09-13 01:17:22 [Info] New ClientConnectNotify : Rtap280271757697441, id is 000004F4
2025-09-13 01:17:22 [Info] ipc client:Rtap280271757697441 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 01:17:22 [Info] Rtap Platform Rtap280271757697441 execv work --sca on pid 3000
2025-09-13 01:17:24 [Info] csrss.exe open proc 3000 AliSecCheck.ex
2025-09-13 01:17:25 [Info] csrss.exe open thread 3000 AliSecCheck.ex
2025-09-13 01:18:07 [Info] csrss.exe open thread 3000 AliSecCheck.ex
2025-09-13 01:18:38 [Info] Done Work --sca:1
2025-09-13 01:18:38 [Info] Rtap Platform Rtap280271757697441 Exit:normal exit
2025-09-13 01:18:48 [Info] ClientDisConnectNotify : Rtap280271757697441, id is 000004F4
2025-09-13 01:53:27 [Info] TotalPhys:2047,AvailPhys:388,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1164,SelfWorkingSet:10172, SelfPageFile:13848
2025-09-13 01:53:27 [Info] CommitTotal:5215,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:388,SystemCache:4194303,KernelTotal:263,KernelPaged:186,KernelNonpaged:76,PageSize:4096,HandleCount:27979,ProcessCount:52,ThreadCount:729
2025-09-13 02:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10107","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10224","aliyundun_upload_time":"1757700541","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 02:28:45 [Info] get meta data success by v2
2025-09-13 02:28:45 [Info] get empty metaserver config
2025-09-13 02:28:45 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-13 02:28:46 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-13 02:28:46 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-13 02:28:46 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-13 02:28:46 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 02:28:46 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 02:28:46 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-13 02:28:46 [Info] download cert compare md5 same
2025-09-13 02:28:46 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 02:28:46 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 02:28:46 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-13 02:54:23 [Info] TotalPhys:2047,AvailPhys:391,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1166,SelfWorkingSet:10144, SelfPageFile:14152
2025-09-13 02:54:23 [Info] CommitTotal:5214,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:391,SystemCache:4194303,KernelTotal:263,KernelPaged:186,KernelNonpaged:76,PageSize:4096,HandleCount:28029,ProcessCount:52,ThreadCount:736
2025-09-13 03:08:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10184","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10396","aliyundun_upload_time":"1757704113","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 03:55:20 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1157,SelfWorkingSet:10180, SelfPageFile:14188
2025-09-13 03:55:20 [Info] CommitTotal:5222,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:4194303,KernelTotal:264,KernelPaged:186,KernelNonpaged:77,PageSize:4096,HandleCount:28053,ProcessCount:52,ThreadCount:739
2025-09-13 04:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10137","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10236","aliyundun_upload_time":"1757707720","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 04:39:31 [Info] nCurrentClock is 5256229200, nCurrentTime is 1757709571
2025-09-13 04:39:31 [Info] SendMessage T_MSG_LOGIN
2025-09-13 04:39:32 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-13 04:39:32 [Info] begin to enable self guard after reconnect
2025-09-13 04:39:32 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-13 04:39:32 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-13 04:39:32 [Info] GetMessage : T_MSG_CHECK
2025-09-13 04:39:32 [Info] task fa20f434-4f62-47f7-9068-481ab00bbca6 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 04:39:40 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-13 04:39:40 [Info] key : cpu, value : 10
2025-09-13 04:39:40 [Info] key : rio, value : 20480
2025-09-13 04:39:40 [Info] key : wio, value : 20480
2025-09-13 04:39:40 [Info] key : cpu_all, value : 0
2025-09-13 04:39:40 [Info] key : max_pid_check, value : 200
2025-09-13 04:39:40 [Info] key : throw_dump, value : 0
2025-09-13 04:39:40 [Info] key : hash_mode, value : 1
2025-09-13 04:39:40 [Info] key : mem, value : 200
2025-09-13 04:39:40 [Info] can not find key max_fd in online conf
2025-09-13 04:39:40 [Info] key : proc_limit, value : 1
2025-09-13 04:39:40 [Info] key : resource_limit_mode, value : 3
2025-09-13 04:39:40 [Info] key : rtap_update_mode, value : 1
2025-09-13 04:39:40 [Info] can not find key debug in online conf
2025-09-13 04:39:40 [Info] can not find key update_mode in online conf
2025-09-13 04:39:40 [Info] can not find key http_mode in online conf
2025-09-13 04:39:40 [Info] can not find key rtap_enable in online conf
2025-09-13 04:39:40 [Info] can not find key rtap_new_agent in online conf
2025-09-13 04:39:40 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-13 04:39:40 [Info] can not find key mem_low_mark in online conf
2025-09-13 04:39:40 [Info] can not find key obnormal_report_interval in online conf
2025-09-13 04:39:40 [Info] key : cache_mode, value : 0
2025-09-13 04:39:40 [Info] key : abnormal_monitor_mode, value : 3
2025-09-13 04:39:40 [Info] key : queue_size_ratio, value : 80
2025-09-13 04:39:40 [Info] queue_size_ratio is 80
2025-09-13 04:39:40 [Info] resource limit mode and max limit cpu is not change
2025-09-13 04:39:40 [Info] set hash mode 1
2025-09-13 04:39:40 [Info] RTAP timeout config:9600000
2025-09-13 04:39:40 [Info] self_guard_mode config is 0
2025-09-13 04:39:40 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-09-13 04:39:49 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 04:39:49 [Info] ipc client:Rtap21611757709589_handler Reg client_name:Rtap21611757709589 on WhiteList
2025-09-13 04:39:49 [Info] start rtap process success, pid is 824, argument is Rtap21611757709589
2025-09-13 04:39:49 [Info] New ClientConnectNotify : Rtap21611757709589, id is 00000504
2025-09-13 04:39:49 [Info] ipc client:Rtap21611757709589 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 04:39:50 [Info] Rtap Platform Rtap21611757709589 execv work --windows-sysinfoext-check on pid 824
2025-09-13 04:39:51 [Info] csrss.exe open proc 824 AliSecCheck.ex
2025-09-13 04:39:52 [Info] csrss.exe open thread 824 AliSecCheck.ex
2025-09-13 04:39:57 [Info] Done Work --windows-sysinfoext-check:1
2025-09-13 04:39:57 [Info] Rtap Platform Rtap21611757709589 Exit:normal exit
2025-09-13 04:39:59 [Info] ClientDisConnectNotify : Rtap21611757709589, id is 00000504
2025-09-13 04:56:21 [Info] TotalPhys:2047,AvailPhys:357,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1143,SelfWorkingSet:10120, SelfPageFile:13900
2025-09-13 04:56:21 [Info] CommitTotal:5236,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:357,SystemCache:4194303,KernelTotal:262,KernelPaged:184,KernelNonpaged:77,PageSize:4096,HandleCount:28191,ProcessCount:53,ThreadCount:741
2025-09-13 05:08:58 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10113","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10232","aliyundun_upload_time":"1757711338","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 05:46:09 [Info] get meta data success by v2
2025-09-13 05:46:09 [Info] get empty metaserver config
2025-09-13 05:46:09 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-13 05:46:09 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-13 05:46:09 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-13 05:46:09 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-13 05:46:09 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 05:46:09 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 05:46:09 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-13 05:46:09 [Info] download cert compare md5 same
2025-09-13 05:46:09 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 05:46:09 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 05:46:09 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-13 05:57:18 [Info] TotalPhys:2047,AvailPhys:366,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6380,AvailPageFile:1149,SelfWorkingSet:10180, SelfPageFile:13988
2025-09-13 05:57:18 [Info] CommitTotal:5230,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:366,SystemCache:4194303,KernelTotal:264,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:28086,ProcessCount:52,ThreadCount:731
2025-09-13 06:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10100","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"10208","aliyundun_upload_time":"1757714912","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 06:58:14 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1149,SelfWorkingSet:10088, SelfPageFile:13776
2025-09-13 06:58:14 [Info] CommitTotal:5231,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:4194303,KernelTotal:264,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:28047,ProcessCount:52,ThreadCount:725
2025-09-13 07:08:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10074","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10172","aliyundun_upload_time":"1757718521","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 07:59:11 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1149,SelfWorkingSet:10136, SelfPageFile:13836
2025-09-13 07:59:11 [Info] CommitTotal:5231,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:4194303,KernelTotal:265,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:28052,ProcessCount:52,ThreadCount:728
2025-09-13 08:08:51 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10129","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10164","aliyundun_upload_time":"1757722131","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 08:49:09 [Info] GetMessage : T_MSG_CHECK
2025-09-13 08:49:09 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc3MjQ1NDksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NzY3NzQ5LCJzdWIiOiJSVEFQX0lEWF8xNjI4NThfMTc1NzcyNDU0OTczMyJ9.avhECDBnUmHYBHF0-eDmZBsewAPfLKxXulh2bXo9AJA has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 08:49:19 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 08:49:19 [Info] ipc client:Rtap182791757724559_handler Reg client_name:Rtap182791757724559 on WhiteList
2025-09-13 08:49:20 [Info] start rtap process success, pid is 4936, argument is Rtap182791757724559
2025-09-13 08:49:20 [Info] New ClientConnectNotify : Rtap182791757724559, id is 000001E4
2025-09-13 08:49:20 [Info] ipc client:Rtap182791757724559 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 08:49:20 [Info] Rtap Platform Rtap182791757724559 execv work --windows-process-check on pid 4936
2025-09-13 08:49:21 [Info] csrss.exe open proc 4936 AliSecCheck.ex
2025-09-13 08:49:22 [Info] csrss.exe open thread 4936 AliSecCheck.ex
2025-09-13 08:49:23 [Info] csrss.exe open thread 4936 AliSecCheck.ex
2025-09-13 08:50:00 [Info] Done Work --windows-process-check:1
2025-09-13 08:50:00 [Info] Rtap Platform Rtap182791757724559 Exit:normal exit
2025-09-13 08:50:04 [Info] ClientDisConnectNotify : Rtap182791757724559, id is 000001E4
2025-09-13 09:00:11 [Info] TotalPhys:2047,AvailPhys:318,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1142,SelfWorkingSet:10252, SelfPageFile:13932
2025-09-13 09:00:11 [Info] CommitTotal:5238,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:318,SystemCache:4194303,KernelTotal:271,KernelPaged:191,KernelNonpaged:80,PageSize:4096,HandleCount:28073,ProcessCount:52,ThreadCount:733
2025-09-13 09:04:14 [Info] get meta data success by v2
2025-09-13 09:04:14 [Info] get empty metaserver config
2025-09-13 09:04:14 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-13 09:04:14 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-13 09:04:14 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-13 09:04:14 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-13 09:04:14 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 09:04:14 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 09:04:14 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-13 09:04:14 [Info] download cert compare md5 same
2025-09-13 09:04:14 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 09:04:14 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 09:04:14 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-13 09:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10151","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"10432","aliyundun_upload_time":"1757725729","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2025-09-13 09:57:47 [Info] GetMessage : T_MSG_CHECK
2025-09-13 09:57:47 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc3Mjg2NjYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NzcxODY2LCJzdWIiOiJSVEFQX0lEWF8xNjI4NTlfMTc1NzcyODY2Njg5MCJ9.JmRJYPKgxtGu-QrQD7mjIKsB4tEP9wWw_PnTBb43vic has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 09:57:57 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 09:57:57 [Info] ipc client:Rtap317271757728677_handler Reg client_name:Rtap317271757728677 on WhiteList
2025-09-13 09:57:57 [Info] start rtap process success, pid is 2360, argument is Rtap317271757728677
2025-09-13 09:57:57 [Info] New ClientConnectNotify : Rtap317271757728677, id is 000004F4
2025-09-13 09:57:58 [Info] ipc client:Rtap317271757728677 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 09:57:58 [Info] Rtap Platform Rtap317271757728677 execv work --tcp-connect-check on pid 2360
2025-09-13 09:57:59 [Info] csrss.exe open proc 2360 AliSecCheck.ex
2025-09-13 09:58:00 [Info] csrss.exe open thread 2360 AliSecCheck.ex
2025-09-13 09:58:09 [Info] Done Work --tcp-connect-check:1
2025-09-13 09:58:09 [Info] Rtap Platform Rtap317271757728677 Exit:normal exit
2025-09-13 09:58:11 [Info] ClientDisConnectNotify : Rtap317271757728677, id is 000004F4
2025-09-13 10:01:13 [Info] TotalPhys:2047,AvailPhys:315,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1138,SelfWorkingSet:10288, SelfPageFile:13972
2025-09-13 10:01:13 [Info] CommitTotal:5241,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:315,SystemCache:4194303,KernelTotal:268,KernelPaged:189,KernelNonpaged:79,PageSize:4096,HandleCount:27969,ProcessCount:52,ThreadCount:728
2025-09-13 10:08:45 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10253","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10432","aliyundun_upload_time":"1757729325","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 10:10:08 [Info] nCurrentClock is 5274229700, nCurrentTime is 1757729408
2025-09-13 10:10:08 [Info] SendMessage T_MSG_LOGIN
2025-09-13 10:10:08 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-13 10:10:08 [Info] begin to enable self guard after reconnect
2025-09-13 10:10:08 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-13 10:10:08 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-13 10:10:08 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-13 10:10:08 [Info] key : cpu, value : 10
2025-09-13 10:10:08 [Info] key : rio, value : 20480
2025-09-13 10:10:08 [Info] key : wio, value : 20480
2025-09-13 10:10:08 [Info] key : cpu_all, value : 0
2025-09-13 10:10:08 [Info] key : max_pid_check, value : 200
2025-09-13 10:10:08 [Info] key : throw_dump, value : 0
2025-09-13 10:10:08 [Info] key : hash_mode, value : 1
2025-09-13 10:10:08 [Info] key : mem, value : 200
2025-09-13 10:10:08 [Info] can not find key max_fd in online conf
2025-09-13 10:10:08 [Info] key : proc_limit, value : 1
2025-09-13 10:10:08 [Info] key : resource_limit_mode, value : 3
2025-09-13 10:10:08 [Info] key : rtap_update_mode, value : 1
2025-09-13 10:10:08 [Info] can not find key debug in online conf
2025-09-13 10:10:08 [Info] can not find key update_mode in online conf
2025-09-13 10:10:08 [Info] can not find key http_mode in online conf
2025-09-13 10:10:08 [Info] can not find key rtap_enable in online conf
2025-09-13 10:10:08 [Info] can not find key rtap_new_agent in online conf
2025-09-13 10:10:08 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-13 10:10:08 [Info] can not find key mem_low_mark in online conf
2025-09-13 10:10:08 [Info] can not find key obnormal_report_interval in online conf
2025-09-13 10:10:08 [Info] key : cache_mode, value : 0
2025-09-13 10:10:08 [Info] key : abnormal_monitor_mode, value : 3
2025-09-13 10:10:08 [Info] key : queue_size_ratio, value : 80
2025-09-13 10:10:08 [Info] queue_size_ratio is 80
2025-09-13 10:10:08 [Info] resource limit mode and max limit cpu is not change
2025-09-13 10:10:08 [Info] set hash mode 1
2025-09-13 10:10:08 [Info] RTAP timeout config:9600000
2025-09-13 10:10:08 [Info] self_guard_mode config is 0
2025-09-13 10:10:08 [Info] GetMessage : T_MSG_CHECK
2025-09-13 10:10:08 [Info] task 36161a59-c91c-47e3-8de4-09f5a79fd60a has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 10:10:22 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 10:10:22 [Info] ipc client:Rtap13911757729422_handler Reg client_name:Rtap13911757729422 on WhiteList
2025-09-13 10:10:22 [Info] start rtap process success, pid is 2408, argument is Rtap13911757729422
2025-09-13 10:10:22 [Info] New ClientConnectNotify : Rtap13911757729422, id is 00000504
2025-09-13 10:10:22 [Info] ipc client:Rtap13911757729422 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 10:10:23 [Info] Rtap Platform Rtap13911757729422 execv work --windows-sysinfoext-check on pid 2408
2025-09-13 10:10:25 [Info] csrss.exe open proc 2408 AliSecCheck.ex
2025-09-13 10:10:26 [Info] csrss.exe open thread 2408 AliSecCheck.ex
2025-09-13 10:10:30 [Info] Done Work --windows-sysinfoext-check:1
2025-09-13 10:10:30 [Info] Rtap Platform Rtap13911757729422 Exit:normal exit
2025-09-13 10:10:32 [Info] ClientDisConnectNotify : Rtap13911757729422, id is 00000504
2025-09-13 10:16:00 [Info] GetMessage : T_MSG_CHECK
2025-09-13 10:16:00 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc3Mjk3NjAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NzcyOTYwLCJzdWIiOiJSVEFQX0lEWF8xNjI4NjFfMTc1NzcyOTc2MDA0MiJ9.hietN4t6SDieFEiF9mvTLRyQuB7Jby4v8WE4_sfTIuU has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 10:16:08 [Info] GetMessage : T_MSG_CHECK
2025-09-13 10:16:08 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc3Mjk3NjEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NzcyOTYxLCJzdWIiOiJSVEFQX0lEWF8xNjI4NjdfMTc1NzcyOTc2MTA2OCJ9.R95RBGp0KoYrI9zuWpZcOjMe1YrO6wpeFfaQBGjs8dM has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 10:16:11 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 10:16:11 [Info] ipc client:Rtap25311757729771_handler Reg client_name:Rtap25311757729771 on WhiteList
2025-09-13 10:16:11 [Info] start rtap process success, pid is 4532, argument is Rtap25311757729771
2025-09-13 10:16:11 [Info] New ClientConnectNotify : Rtap25311757729771, id is 000004F4
2025-09-13 10:16:11 [Info] ipc client:Rtap25311757729771 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 10:16:11 [Info] Rtap Platform Rtap25311757729771 execv work --windows-schedule-task-check on pid 4532
2025-09-13 10:16:12 [Info] csrss.exe open proc 4532 AliSecCheck.ex
2025-09-13 10:16:13 [Info] csrss.exe open thread 4532 AliSecCheck.ex
2025-09-13 10:16:20 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 10:16:20 [Info] ipc client:Rtap25601757729780_handler Reg client_name:Rtap25601757729780 on WhiteList
2025-09-13 10:16:20 [Info] start rtap process success, pid is 3248, argument is Rtap25601757729780
2025-09-13 10:16:20 [Info] New ClientConnectNotify : Rtap25601757729780, id is 00000548
2025-09-13 10:16:21 [Info] ipc client:Rtap25601757729780 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 10:16:21 [Info] Rtap Platform Rtap25601757729780 execv work --windows-registry-check on pid 3248
2025-09-13 10:16:22 [Info] csrss.exe open proc 3248 AliSecCheck.ex
2025-09-13 10:16:23 [Info] csrss.exe open thread 3248 AliSecCheck.ex
2025-09-13 10:16:48 [Info] Done Work --windows-schedule-task-check:1
2025-09-13 10:16:48 [Info] Rtap Platform Rtap25311757729771 Exit:normal exit
2025-09-13 10:16:50 [Info] ClientDisConnectNotify : Rtap25311757729771, id is 000004F4
2025-09-13 10:16:54 [Info] Done Work --windows-registry-check:1
2025-09-13 10:16:54 [Info] Rtap Platform Rtap25601757729780 Exit:normal exit
2025-09-13 10:16:56 [Info] ClientDisConnectNotify : Rtap25601757729780, id is 00000548
2025-09-13 10:17:12 [Info] GetMessage : T_MSG_CHECK
2025-09-13 10:17:12 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc3Mjk4MzIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3NzczMDMyLCJzdWIiOiJSVEFQX0lEWF8xNjI4NzVfMTc1NzcyOTgzMjAyMiJ9.PfZqYtWoH9UaGRNVCGJL06LqRNrIJ-fdpasAiF7X4TA has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 10:17:23 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 10:17:23 [Info] ipc client:Rtap27661757729843_handler Reg client_name:Rtap27661757729843 on WhiteList
2025-09-13 10:17:23 [Info] start rtap process success, pid is 3812, argument is Rtap27661757729843
2025-09-13 10:17:23 [Info] New ClientConnectNotify : Rtap27661757729843, id is 000001E4
2025-09-13 10:17:23 [Info] ipc client:Rtap27661757729843 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 10:17:23 [Info] Rtap Platform Rtap27661757729843 execv work --windows-driver-version-check on pid 3812
2025-09-13 10:17:24 [Info] csrss.exe open proc 3812 AliSecCheck.ex
2025-09-13 10:17:25 [Info] csrss.exe open thread 3812 AliSecCheck.ex
2025-09-13 10:17:30 [Info] Done Work --windows-driver-version-check:1
2025-09-13 10:17:30 [Info] Rtap Platform Rtap27661757729843 Exit:normal exit
2025-09-13 10:17:33 [Info] ClientDisConnectNotify : Rtap27661757729843, id is 000001E4
2025-09-13 11:02:16 [Info] TotalPhys:2047,AvailPhys:329,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1141,SelfWorkingSet:10220, SelfPageFile:13972
2025-09-13 11:02:16 [Info] CommitTotal:5238,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:329,SystemCache:4194303,KernelTotal:268,KernelPaged:188,KernelNonpaged:79,PageSize:4096,HandleCount:27995,ProcessCount:52,ThreadCount:734
2025-09-13 11:05:37 [Info] GetMessage : T_MSG_CHECK
2025-09-13 11:05:37 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc3MzI3MzcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3Nzc1OTM3LCJzdWIiOiJSVEFQX0lEWF8xNjI4NjRfMTc1NzczMjczNzY4OSJ9.l0SBMP0jFTOTBvuPt5KgyJpA7Xa8EcBE2SEx10CcAb0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 11:05:47 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 11:05:47 [Info] ipc client:Rtap122491757732747_handler Reg client_name:Rtap122491757732747 on WhiteList
2025-09-13 11:05:47 [Info] start rtap process success, pid is 944, argument is Rtap122491757732747
2025-09-13 11:05:47 [Info] New ClientConnectNotify : Rtap122491757732747, id is 00000548
2025-09-13 11:05:47 [Info] ipc client:Rtap122491757732747 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 11:05:48 [Info] Rtap Platform Rtap122491757732747 execv work --windows-autorun-item-check on pid 944
2025-09-13 11:05:50 [Info] csrss.exe open proc 944 AliSecCheck.ex
2025-09-13 11:05:51 [Info] csrss.exe open thread 944 AliSecCheck.ex
2025-09-13 11:06:03 [Info] Done Work --windows-autorun-item-check:1
2025-09-13 11:06:03 [Info] Rtap Platform Rtap122491757732747 Exit:normal exit
2025-09-13 11:06:05 [Info] ClientDisConnectNotify : Rtap122491757732747, id is 00000548
2025-09-13 11:09:03 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10190","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10356","aliyundun_upload_time":"1757732943","aliyundun_write_pid_times":"0","ipc_send_count":"161","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 12:03:13 [Info] TotalPhys:2047,AvailPhys:324,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1144,SelfWorkingSet:10396, SelfPageFile:14220
2025-09-13 12:03:13 [Info] CommitTotal:5236,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:324,SystemCache:4194303,KernelTotal:268,KernelPaged:189,KernelNonpaged:79,PageSize:4096,HandleCount:27993,ProcessCount:52,ThreadCount:732
2025-09-13 12:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10348","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10460","aliyundun_upload_time":"1757736520","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 12:22:36 [Info] get meta data success by v2
2025-09-13 12:22:36 [Info] get empty metaserver config
2025-09-13 12:22:36 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-13 12:22:36 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-13 12:22:36 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-13 12:22:36 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-13 12:22:36 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 12:22:36 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 12:22:36 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-13 12:22:36 [Info] download cert compare md5 same
2025-09-13 12:22:36 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 12:22:36 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 12:22:36 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-13 13:04:09 [Info] TotalPhys:2047,AvailPhys:334,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6380,AvailPageFile:1147,SelfWorkingSet:10308, SelfPageFile:14016
2025-09-13 13:04:09 [Info] CommitTotal:5232,CommitLimit:6380,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:334,SystemCache:4194303,KernelTotal:269,KernelPaged:190,KernelNonpaged:79,PageSize:4096,HandleCount:27995,ProcessCount:52,ThreadCount:733
2025-09-13 13:08:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10312","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10464","aliyundun_upload_time":"1757740112","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 14:05:05 [Info] TotalPhys:2047,AvailPhys:618,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1416,SelfWorkingSet:10300, SelfPageFile:13904
2025-09-13 14:05:05 [Info] CommitTotal:5248,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:618,SystemCache:4194303,KernelTotal:259,KernelPaged:182,KernelNonpaged:77,PageSize:4096,HandleCount:28365,ProcessCount:52,ThreadCount:737
2025-09-13 14:09:01 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10278","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10300","aliyundun_upload_time":"1757743741","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 15:06:02 [Info] TotalPhys:2047,AvailPhys:623,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1423,SelfWorkingSet:10240, SelfPageFile:13908
2025-09-13 15:06:02 [Info] CommitTotal:5241,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:623,SystemCache:4194303,KernelTotal:260,KernelPaged:183,KernelNonpaged:77,PageSize:4096,HandleCount:28003,ProcessCount:52,ThreadCount:735
2025-09-13 15:08:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10232","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10348","aliyundun_upload_time":"1757747315","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 15:39:07 [Info] nCurrentClock is 5292230300, nCurrentTime is 1757749147
2025-09-13 15:39:07 [Info] SendMessage T_MSG_LOGIN
2025-09-13 15:39:07 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-13 15:39:07 [Info] begin to enable self guard after reconnect
2025-09-13 15:39:07 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-13 15:39:07 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-13 15:39:07 [Info] GetMessage : T_MSG_CHECK
2025-09-13 15:39:07 [Info] task 0a573e42-13a2-4f52-bd89-c4723094bf38 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 15:39:15 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-13 15:39:15 [Info] key : cpu, value : 10
2025-09-13 15:39:15 [Info] key : rio, value : 20480
2025-09-13 15:39:15 [Info] key : wio, value : 20480
2025-09-13 15:39:15 [Info] key : cpu_all, value : 0
2025-09-13 15:39:15 [Info] key : max_pid_check, value : 200
2025-09-13 15:39:15 [Info] key : throw_dump, value : 0
2025-09-13 15:39:15 [Info] key : hash_mode, value : 1
2025-09-13 15:39:15 [Info] key : mem, value : 200
2025-09-13 15:39:15 [Info] can not find key max_fd in online conf
2025-09-13 15:39:15 [Info] key : proc_limit, value : 1
2025-09-13 15:39:15 [Info] key : resource_limit_mode, value : 3
2025-09-13 15:39:15 [Info] key : rtap_update_mode, value : 1
2025-09-13 15:39:15 [Info] can not find key debug in online conf
2025-09-13 15:39:15 [Info] can not find key update_mode in online conf
2025-09-13 15:39:15 [Info] can not find key http_mode in online conf
2025-09-13 15:39:15 [Info] can not find key rtap_enable in online conf
2025-09-13 15:39:15 [Info] can not find key rtap_new_agent in online conf
2025-09-13 15:39:15 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-13 15:39:15 [Info] can not find key mem_low_mark in online conf
2025-09-13 15:39:15 [Info] can not find key obnormal_report_interval in online conf
2025-09-13 15:39:15 [Info] key : cache_mode, value : 0
2025-09-13 15:39:15 [Info] key : abnormal_monitor_mode, value : 3
2025-09-13 15:39:15 [Info] key : queue_size_ratio, value : 80
2025-09-13 15:39:15 [Info] queue_size_ratio is 80
2025-09-13 15:39:15 [Info] resource limit mode and max limit cpu is not change
2025-09-13 15:39:15 [Info] set hash mode 1
2025-09-13 15:39:15 [Info] RTAP timeout config:9600000
2025-09-13 15:39:15 [Info] self_guard_mode config is 0
2025-09-13 15:39:22 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 15:39:22 [Info] ipc client:Rtap3181757749162_handler Reg client_name:Rtap3181757749162 on WhiteList
2025-09-13 15:39:22 [Info] start rtap process success, pid is 3764, argument is Rtap3181757749162
2025-09-13 15:39:23 [Info] New ClientConnectNotify : Rtap3181757749162, id is 0000053C
2025-09-13 15:39:23 [Info] ipc client:Rtap3181757749162 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 15:39:24 [Info] Rtap Platform Rtap3181757749162 execv work --windows-sysinfoext-check on pid 3764
2025-09-13 15:39:25 [Info] csrss.exe open proc 3764 AliSecCheck.ex
2025-09-13 15:39:26 [Info] csrss.exe open thread 3764 AliSecCheck.ex
2025-09-13 15:39:27 [Info] csrss.exe open thread 3764 AliSecCheck.ex
2025-09-13 15:39:28 [Info] csrss.exe open thread 3764 AliSecCheck.ex
2025-09-13 15:39:29 [Info] csrss.exe open thread 3764 AliSecCheck.ex
2025-09-13 15:39:35 [Info] Done Work --windows-sysinfoext-check:1
2025-09-13 15:39:35 [Info] Rtap Platform Rtap3181757749162 Exit:normal exit
2025-09-13 15:39:37 [Info] ClientDisConnectNotify : Rtap3181757749162, id is 0000053C
2025-09-13 15:40:00 [Info] get meta data success by v2
2025-09-13 15:40:00 [Info] get empty metaserver config
2025-09-13 15:40:00 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-13 15:40:00 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-13 15:40:00 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-13 15:40:00 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-13 15:40:00 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 15:40:00 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 15:40:00 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-13 15:40:00 [Info] download cert compare md5 same
2025-09-13 15:40:00 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 15:40:00 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 15:40:00 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-13 16:07:03 [Info] TotalPhys:2047,AvailPhys:631,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1433,SelfWorkingSet:10152, SelfPageFile:13904
2025-09-13 16:07:03 [Info] CommitTotal:5232,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:631,SystemCache:3,KernelTotal:260,KernelPaged:183,KernelNonpaged:77,PageSize:4096,HandleCount:27992,ProcessCount:52,ThreadCount:735
2025-09-13 16:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10226","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10340","aliyundun_upload_time":"1757750929","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 17:08:00 [Info] TotalPhys:2047,AvailPhys:624,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1427,SelfWorkingSet:10208, SelfPageFile:13848
2025-09-13 17:08:00 [Info] CommitTotal:5237,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:624,SystemCache:18,KernelTotal:260,KernelPaged:183,KernelNonpaged:77,PageSize:4096,HandleCount:27998,ProcessCount:52,ThreadCount:734
2025-09-13 17:08:59 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10233","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10320","aliyundun_upload_time":"1757754539","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 18:08:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10183","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10240","aliyundun_upload_time":"1757758116","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 18:08:57 [Info] TotalPhys:2047,AvailPhys:548,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1427,SelfWorkingSet:10128, SelfPageFile:13764
2025-09-13 18:08:57 [Info] CommitTotal:5238,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:548,SystemCache:25,KernelTotal:260,KernelPaged:183,KernelNonpaged:77,PageSize:4096,HandleCount:27993,ProcessCount:52,ThreadCount:736
2025-09-13 18:49:09 [Info] GetMessage : T_MSG_CHECK
2025-09-13 18:49:09 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NTc3NjA1NDgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzU3ODAzNzQ4LCJzdWIiOiJSVEFQX0lEWF8xNjI5MzRfMTc1Nzc2MDU0ODkyNyJ9.9CLULPJz-OaNfGv0o8nU3ojGV1kA_Tb3ftSbFN_7yw8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 18:49:20 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 18:49:20 [Info] ipc client:Rtap47711757760560_handler Reg client_name:Rtap47711757760560 on WhiteList
2025-09-13 18:49:20 [Info] start rtap process success, pid is 4052, argument is Rtap47711757760560
2025-09-13 18:49:20 [Info] New ClientConnectNotify : Rtap47711757760560, id is 0000051C
2025-09-13 18:49:20 [Info] ipc client:Rtap47711757760560 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 18:49:21 [Info] Rtap Platform Rtap47711757760560 execv work --secnet_rasp_agent on pid 4052
2025-09-13 18:49:22 [Info] csrss.exe open proc 4052 AliSecCheck.ex
2025-09-13 18:49:23 [Info] csrss.exe open thread 4052 AliSecCheck.ex
2025-09-13 18:49:24 [Info] csrss.exe open thread 4052 AliSecCheck.ex
2025-09-13 18:49:28 [Info] Done Work --secnet_rasp_agent:1
2025-09-13 18:49:28 [Info] Rtap Platform Rtap47711757760560 Exit:normal exit
2025-09-13 18:49:30 [Info] ClientDisConnectNotify : Rtap47711757760560, id is 0000051C
2025-09-13 18:57:24 [Info] get meta data success by v2
2025-09-13 18:57:24 [Info] get empty metaserver config
2025-09-13 18:57:24 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-13 18:57:25 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-13 18:57:25 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-13 18:57:25 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-13 18:57:25 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 18:57:25 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 18:57:25 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-13 18:57:25 [Info] download cert compare md5 same
2025-09-13 18:57:25 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 18:57:25 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 18:57:25 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-13 19:08:46 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10206","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10360","aliyundun_upload_time":"1757761726","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 19:09:54 [Info] TotalPhys:2047,AvailPhys:543,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6665,AvailPageFile:1418,SelfWorkingSet:10164, SelfPageFile:13884
2025-09-13 19:09:54 [Info] CommitTotal:5247,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:543,SystemCache:11,KernelTotal:264,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:28026,ProcessCount:52,ThreadCount:740
2025-09-13 20:08:57 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10190","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10240","aliyundun_upload_time":"1757765337","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 20:10:51 [Info] TotalPhys:2047,AvailPhys:519,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1400,SelfWorkingSet:10160, SelfPageFile:13848
2025-09-13 20:10:51 [Info] CommitTotal:5265,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:519,SystemCache:4194303,KernelTotal:264,KernelPaged:187,KernelNonpaged:77,PageSize:4096,HandleCount:28066,ProcessCount:52,ThreadCount:727
2025-09-13 21:08:11 [Info] nCurrentClock is 5310230800, nCurrentTime is 1757768891
2025-09-13 21:08:12 [Info] SendMessage T_MSG_LOGIN
2025-09-13 21:08:12 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-09-13 21:08:12 [Info] begin to enable self guard after reconnect
2025-09-13 21:08:12 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-09-13 21:08:12 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-09-13 21:08:12 [Info] GetMessage : T_MSG_CHECK
2025-09-13 21:08:12 [Info] task 2079774f-cd6d-41cb-a07d-d4882ff56f75 has 1 items, priority is 1, aggregate is 0, is restore task 0
2025-09-13 21:08:20 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-09-13 21:08:20 [Info] key : cpu, value : 10
2025-09-13 21:08:20 [Info] key : rio, value : 20480
2025-09-13 21:08:20 [Info] key : wio, value : 20480
2025-09-13 21:08:20 [Info] key : cpu_all, value : 0
2025-09-13 21:08:20 [Info] key : max_pid_check, value : 200
2025-09-13 21:08:20 [Info] key : throw_dump, value : 0
2025-09-13 21:08:20 [Info] key : hash_mode, value : 1
2025-09-13 21:08:20 [Info] key : mem, value : 200
2025-09-13 21:08:20 [Info] can not find key max_fd in online conf
2025-09-13 21:08:20 [Info] key : proc_limit, value : 1
2025-09-13 21:08:20 [Info] key : resource_limit_mode, value : 3
2025-09-13 21:08:20 [Info] key : rtap_update_mode, value : 1
2025-09-13 21:08:20 [Info] can not find key debug in online conf
2025-09-13 21:08:20 [Info] can not find key update_mode in online conf
2025-09-13 21:08:20 [Info] can not find key http_mode in online conf
2025-09-13 21:08:20 [Info] can not find key rtap_enable in online conf
2025-09-13 21:08:20 [Info] can not find key rtap_new_agent in online conf
2025-09-13 21:08:20 [Info] can not find key rtap_proc_reuse_memsize in online conf
2025-09-13 21:08:20 [Info] can not find key mem_low_mark in online conf
2025-09-13 21:08:20 [Info] can not find key obnormal_report_interval in online conf
2025-09-13 21:08:20 [Info] key : cache_mode, value : 0
2025-09-13 21:08:20 [Info] key : abnormal_monitor_mode, value : 3
2025-09-13 21:08:20 [Info] key : queue_size_ratio, value : 80
2025-09-13 21:08:20 [Info] queue_size_ratio is 80
2025-09-13 21:08:20 [Info] resource limit mode and max limit cpu is not change
2025-09-13 21:08:20 [Info] set hash mode 1
2025-09-13 21:08:20 [Info] RTAP timeout config:9600000
2025-09-13 21:08:20 [Info] self_guard_mode config is 0
2025-09-13 21:08:21 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2025-09-13 21:08:24 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp
2025-09-13 21:08:24 [Info] ipc client:Rtap320191757768904_handler Reg client_name:Rtap320191757768904 on WhiteList
2025-09-13 21:08:24 [Info] start rtap process success, pid is 4028, argument is Rtap320191757768904
2025-09-13 21:08:28 [Info] csrss.exe open proc 4028 AliSecCheck.ex
2025-09-13 21:08:28 [Info] New ClientConnectNotify : Rtap320191757768904, id is 000001E4
2025-09-13 21:08:28 [Info] Rtap Platform Rtap320191757768904 execv work --windows-sysinfoext-check on pid 4028
2025-09-13 21:08:28 [Info] ipc client:Rtap320191757768904 UnReg client_name:protocol_ipc_client on WhiteList
2025-09-13 21:08:29 [Info] csrss.exe open thread 4028 AliSecCheck.ex
2025-09-13 21:08:31 [Info] csrss.exe open thread 4028 AliSecCheck.ex
2025-09-13 21:08:32 [Info] csrss.exe open thread 4028 AliSecCheck.ex
2025-09-13 21:08:33 [Info] csrss.exe open thread 4028 AliSecCheck.ex
2025-09-13 21:08:39 [Info] Done Work --windows-sysinfoext-check:1
2025-09-13 21:08:39 [Info] Rtap Platform Rtap320191757768904 Exit:normal exit
2025-09-13 21:08:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10177","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10360","aliyundun_upload_time":"1757768920","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 21:08:41 [Info] ClientDisConnectNotify : Rtap320191757768904, id is 000001E4
2025-09-13 21:11:51 [Info] TotalPhys:2047,AvailPhys:552,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1407,SelfWorkingSet:10260, SelfPageFile:13920
2025-09-13 21:11:51 [Info] CommitTotal:5258,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:552,SystemCache:4194303,KernelTotal:259,KernelPaged:182,KernelNonpaged:76,PageSize:4096,HandleCount:28586,ProcessCount:54,ThreadCount:751
2025-09-13 22:08:49 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"10246","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"0","aliyundun_max_mem":"10308","aliyundun_upload_time":"1757772529","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 22:12:48 [Info] TotalPhys:2047,AvailPhys:550,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1398,SelfWorkingSet:10212, SelfPageFile:13856
2025-09-13 22:12:48 [Info] CommitTotal:5266,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:550,SystemCache:4194303,KernelTotal:260,KernelPaged:183,KernelNonpaged:77,PageSize:4096,HandleCount:28379,ProcessCount:53,ThreadCount:743
2025-09-13 22:14:51 [Info] get meta data success by v2
2025-09-13 22:14:51 [Info] get empty metaserver config
2025-09-13 22:14:51 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2025-09-13 22:14:51 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2025-09-13 22:14:51 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2025-09-13 22:14:51 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2025-09-13 22:14:51 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 22:14:51 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2025-09-13 22:14:51 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2025-09-13 22:14:52 [Info] download cert compare md5 same
2025-09-13 22:14:52 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 22:14:52 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2025-09-13 22:14:52 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2025-09-13 23:08:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"10182","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"10320","aliyundun_upload_time":"1757776118","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"72","module_load_failed":"0","record_login_time":"3","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2025-09-13 23:13:44 [Info] TotalPhys:2047,AvailPhys:554,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6665,AvailPageFile:1405,SelfWorkingSet:10152, SelfPageFile:13792
2025-09-13 23:13:44 [Info] CommitTotal:5260,CommitLimit:6665,CommitPeak:7162,PhysicalTotal:2047,PhysicalAvailable:554,SystemCache:4194303,KernelTotal:259,KernelPaged:182,KernelNonpaged:77,PageSize:4096,HandleCount:28350,ProcessCount:53,ThreadCount:732