| Server IP : 123.56.80.60 / Your IP : 216.73.216.78 Web Server : Apache/2.4.54 (Win32) OpenSSL/1.1.1s PHP/7.4.33 mod_fcgid/2.3.10-dev System : Windows NT iZhx3sob14hnz7Z 10.0 build 14393 (Windows Server 2016) i586 User : SYSTEM ( 0) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_90/data/ |
Upload File : |
2026-04-28 18:22:47 [Info] try get sys version
2026-04-28 18:22:47 [Info] win sys info:2/10:0:3
2026-04-28 18:22:47 [Info] suit legal version, enable cpu control
2026-04-28 18:22:47 [Info] timer 1 magic num is 0x737953744d43, interval is 86400000ms, class name is CMtSys
2026-04-28 18:22:47 [Info] there is no cache
2026-04-28 18:22:47 [Info] Aegis root path is C:/Program Files (x86)/Alibaba/Aegis
2026-04-28 18:22:47 [Info] timer 2 magic num is 0x6c50656772654d43, interval is 60000ms, class name is CMergePluginHeartbeat
2026-04-28 18:22:47 [Info] ipc client:network_ipc_client Reg msg_type:INTERNAL_MSG_REQUEST_CONTAINER_INFO on BlackList
2026-04-28 18:22:47 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_ALIYUNDUNMONITOR_IPC_HEART on BlackList
2026-04-28 18:22:47 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_ALI_DETECT_EVENT_ALINET on BlackList
2026-04-28 18:22:47 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_LOCAL_SCAN on BlackList
2026-04-28 18:22:47 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_LOCAL_SCAN_RSP on BlackList
2026-04-28 18:22:47 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_SERVICE_SWITCH on BlackList
2026-04-28 18:22:47 [Info] ipc client:network_ipc_client Reg msg_type:T_MSG_UPDATE_IPC_HEART on BlackList
2026-04-28 18:22:47 [Info] ipc client:network_ipc_client Reg client_name:ipc_only on BlackList
2026-04-28 18:22:47 [Info] ipc client:network_ipc_client Reg client_name:monitor_ipc_client on BlackList
2026-04-28 18:22:47 [Info] ipc client:network_ipc_client Reg client_name:protocol_ipc_client on BlackList
2026-04-28 18:22:47 [Info] network msg stat report at 2026-04-29 01:00:49
2026-04-28 18:22:47 [Info] timer 3 magic num is 0x5367734d646e6553, interval is 60000ms, class name is class CNetWork
2026-04-28 18:22:47 [Info] timer 4 magic num is 0x654e796669746f4e, interval is 60000ms, class name is class CNetWork
2026-04-28 18:22:47 [Info] timer 5 magic num is 0x69676f4c646e6553, interval is 3600000ms, class name is class CNetWork
2026-04-28 18:22:47 [Info] timer 6 magic num is 0x6f44796669726556, interval is 10800000ms, class name is class CNetWork
2026-04-28 18:22:47 [Info] timer 7 magic num is 0x64697555746547, interval is 600000ms, class name is class CNetWork
2026-04-28 18:22:47 [Info] ====================Start Agent : aegis_12_90,Jan 30 2026 11:56:32====================
2026-04-28 18:22:47 [Info] ipc client:self_guard_client Reg msg_type:T_MSG_IPC_NETWORK_NOTIFY on WhiteList
2026-04-28 18:22:47 [Info] ipc client:self_guard_client Reg msg_type:T_MSG_LOGIN_RSP on WhiteList
2026-04-28 18:22:47 [Info] ipc client:self_guard_client Reg msg_type:T_MSG_SERVICE_SWITCH on WhiteList
2026-04-28 18:22:47 [Info] timer 8 magic num is 0x75614c7261656c43, interval is 86400000ms, class name is class CLaunchPluginAfterReboot
2026-04-28 18:22:47 [Info] pid is 2388
2026-04-28 18:22:47 [Info] resource mode user conf:3
2026-04-28 18:22:47 [Info] resource cpu user conf:10
2026-04-28 18:22:47 [Info] resource get res:2
2026-04-28 18:22:47 [Info] not match 0 try to start resource limit
2026-04-28 18:22:47 [Info] get AssignProcessToJobObject handle [000003E8]
2026-04-28 18:22:47 [Info] Set setJobExtended.
2026-04-28 18:22:47 [Info] Set cpu [9%]
2026-04-28 18:22:47 [Info] Set cpu success
2026-04-28 18:22:47 [Info] limit cpu success
2026-04-28 18:22:47 [Info] timer 9 magic num is 0x6165685f6e69616d, interval is 60000ms, class name is class CMonitorPri
2026-04-28 18:22:47 [Info] ipc server init success.
2026-04-28 18:22:47 [Info] Server_Init: 0
2026-04-28 18:22:47 [Info] ipc listen success.
2026-04-28 18:22:47 [Info] Server_Listen: 0
2026-04-28 18:22:47 [Info] timer 10 magic num is 0x696e6f6d5f726576, interval is 1800000ms, class name is class CMonitorYunDunAndMonitorVersion
2026-04-28 18:22:47 [Info] ModuleLoad conf:[C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_90/conf/module_config]
2026-04-28 18:22:47 [Info] timer 11 magic num is 0x7250657461647055, interval is 180000ms, class name is class CModuleUpdate
2026-04-28 18:22:47 [Info] timer 12 magic num is 0x50726f74696e6f4d, interval is 10000ms, class name is class CModuleUpdate
2026-04-28 18:22:47 [Info] LoadModule : C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_90/ModuleUpdate.dll
2026-04-28 18:22:47 [Info] timer 13 magic num is 0x43656c75646f4d43, interval is 60000ms, class name is CModuleCheckPrivate
2026-04-28 18:22:47 [Info] LoadModule : C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_90/ModuleCheck.dll
2026-04-28 18:22:47 [Info] CProtocolHandlerThread::run Enter
2026-04-28 18:22:47 [Info] GetNetWorkLoopTime 20
2026-04-28 18:22:47 [Info] CSelfGuardMainThread::run Enter
2026-04-28 18:22:47 [Info] os reboot: 0
2026-04-28 18:22:47 [Info] COsAbnormalMonitor::run Enter
2026-04-28 18:22:47 [Info] CResourceMonitor::run Enter
2026-04-28 18:22:47 [Info] ipc connect running, tid is 1468
2026-04-28 18:22:47 [Info] ipc read thread running, tid is 5008
2026-04-28 18:22:47 [Info] aegisIpc::run Enter
2026-04-28 18:22:47 [Info] begin to monitor thread :IpcPrivate, c38
2026-04-28 18:22:47 [Info] alihips is not exits
2026-04-28 18:22:47 [Info] begin to monitor thread :Network, e70
2026-04-28 18:22:47 [Info] RTAP max work num is 4
2026-04-28 18:22:47 [Warn] driver owner C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_80/AliYunDun.exe is not self
2026-04-28 18:22:47 [Info] alisecguard is not exits
2026-04-28 18:22:47 [Info] LoadModule : C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_90/ModuleRtap.dll
2026-04-28 18:22:47 [Info] timer 14 magic num is 0x76697250744d43, interval is 30000ms, class name is CMtPriv
2026-04-28 18:22:47 [Info] ipc client:monitor_ipc_client Reg msg_type:T_MSG_ALIYUNDUNMONITOR_IPC_HEART on WhiteList
2026-04-28 18:22:47 [Info] ipc client:monitor_ipc_client Reg msg_type:T_MSG_UPDATE_IPC_HEART on WhiteList
2026-04-28 18:22:47 [Info] timer 15 magic num is 0x5074636574654443, interval is 120000ms, class name is CDetectProcessHang
2026-04-28 18:22:47 [Info] start wait dns work
2026-04-28 18:22:47 [Info] begin to monitor thread :Protocol, 1324
2026-04-28 18:22:47 [Info] dns work ok
2026-04-28 18:22:47 [Info] get meta data success by v2
2026-04-28 18:22:47 [Info] get empty metaserver config
2026-04-28 18:22:47 [Info] cpu_sig:AliyunKVM
2026-04-28 18:22:48 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-28 18:22:48 [Warn] high cpu, cpu is 11
2026-04-28 18:22:48 [Info] log fd cnt is [250], real fd cnt is [315]
2026-04-28 18:22:48 [Info] TotalPhys:2047,AvailPhys:300,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6605,AvailPageFile:1398,SelfWorkingSet:13972, SelfPageFile:12552
2026-04-28 18:22:48 [Info] CommitTotal:5206,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:300,SystemCache:196,KernelTotal:263,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27540,ProcessCount:53,ThreadCount:771
2026-04-28 18:22:49 [Info] log memory size is 20480KB, real memory size is 14184KB
2026-04-28 18:22:49 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-28 18:22:49 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-28 18:22:49 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-28 18:22:49 [Info] start DownLoadBuffer update-vpc.aegis.aliyuncs.com/download/cert/root.md5
2026-04-28 18:22:49 [Info] start do http get request for update-vpc.aegis.aliyuncs.com/download/cert/root.md5
2026-04-28 18:22:49 [Info] http request success : https://update-vpc.aegis.aliyuncs.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-28 18:22:49 [Info] download cert compare md5 same
2026-04-28 18:22:49 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-28 18:22:49 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-28 18:22:49 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-28 18:22:49 [Info] connect domain index is 0
2026-04-28 18:22:49 [Info] cache domain is jsrv2.aegis.aliyun.com, cache ip is 100.100.30.26
2026-04-28 18:22:49 [Info] try connect url jsrv2.aegis.aliyun.com, ip : 100.100.30.26, port : 80
2026-04-28 18:22:49 [Info] Connect Success : jsrv2.aegis.aliyun.com
2026-04-28 18:22:49 [Info] GetLocalSockIp :172.17.42.239
2026-04-28 18:22:49 [Info] GetLocalSockIp : 172.17.42.239
2026-04-28 18:22:49 [Info] timer 16 magic num is 0x63656e6e6f436552, interval is 1000ms, class name is class CNetWork
2026-04-28 18:22:49 [Info] cost 2s to login
2026-04-28 18:22:50 [Info] SendMessage T_MSG_LOGIN
2026-04-28 18:22:50 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-28 18:22:50 [Info] begin to enable self guard after reconnect
2026-04-28 18:22:50 [Info] state is not disable, current state is 2
2026-04-28 18:22:50 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-28 18:22:50 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-28 18:22:50 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-28 18:22:50 [Info] key : cpu, value : 10
2026-04-28 18:22:50 [Info] key : rio, value : 20480
2026-04-28 18:22:50 [Info] key : wio, value : 20480
2026-04-28 18:22:50 [Info] key : cpu_all, value : 0
2026-04-28 18:22:50 [Info] key : max_pid_check, value : 200
2026-04-28 18:22:50 [Info] key : throw_dump, value : 0
2026-04-28 18:22:50 [Info] key : hash_mode, value : 1
2026-04-28 18:22:50 [Info] key : mem, value : 200
2026-04-28 18:22:50 [Info] can not find key max_fd in online conf
2026-04-28 18:22:50 [Info] key : proc_limit, value : 1
2026-04-28 18:22:50 [Info] key : resource_limit_mode, value : 3
2026-04-28 18:22:50 [Info] key : rtap_update_mode, value : 1
2026-04-28 18:22:50 [Info] can not find key debug in online conf
2026-04-28 18:22:50 [Info] can not find key update_mode in online conf
2026-04-28 18:22:50 [Info] can not find key http_mode in online conf
2026-04-28 18:22:50 [Info] can not find key rtap_enable in online conf
2026-04-28 18:22:50 [Info] can not find key rtap_new_agent in online conf
2026-04-28 18:22:50 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-28 18:22:50 [Info] can not find key mem_low_mark in online conf
2026-04-28 18:22:50 [Info] can not find key obnormal_report_interval in online conf
2026-04-28 18:22:50 [Info] key : cache_mode, value : 0
2026-04-28 18:22:50 [Info] key : abnormal_monitor_mode, value : 3
2026-04-28 18:22:50 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-28 18:22:50 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-28 18:22:50 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-28 18:22:50 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-28 18:22:50 [Info] key : queue_size_ratio, value : 80
2026-04-28 18:22:50 [Info] queue_size_ratio is 80
2026-04-28 18:22:50 [Info] resource limit mode and max limit cpu is not change
2026-04-28 18:22:50 [Info] set hash mode 1
2026-04-28 18:22:50 [Info] RTAP timeout config:9600000
2026-04-28 18:22:50 [Info] self_guard_mode config is 0
2026-04-28 18:22:50 [Info] GetMessage : T_MSG_CHECK
2026-04-28 18:22:50 [Info] task f3ae0db9-72f5-4181-bd28-1e9dfec19af6 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-28 18:22:51 [Info] end to wait self guard config
2026-04-28 18:22:52 [Info] there is no AliSecGuard
2026-04-28 18:22:52 [Info] driver owner is not AliSecGuard, do not uninstall driver
2026-04-28 18:22:52 [Info] uninstall old AliSecGuard success
2026-04-28 18:23:00 [Info] New ClientConnectNotify : AliYunDunUpdate, id is 00000434
2026-04-28 18:23:00 [Info] ipc client:AliYunDunUpdate Reg msg_type:T_MSG_ALIYUNDUN_IPC_HEART on WhiteList
2026-04-28 18:23:00 [Info] ipc client:AliYunDunUpdate Reg msg_type:T_MSG_SERVICE_SWITCH_RSP on WhiteList
2026-04-28 18:23:00 [Info] start run monitor:[C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_90/AliYunDunMonitor.exe]
2026-04-28 18:23:00 [Info] ipc client:AliYunDunUpdate UnReg client_name:protocol_ipc_client on WhiteList
2026-04-28 18:23:01 [Info] RunMonitor Success
2026-04-28 18:23:04 [Info] New ClientConnectNotify : AliYunDunMonitor, id is 00000518
2026-04-28 18:23:04 [Info] ipc client:AliYunDunMonitor Reg msg_type:T_MSG_CLIENT_RULE_PUSH on BlackList
2026-04-28 18:23:04 [Info] ipc client:AliYunDunMonitor Reg msg_type:T_MSG_PLUGIN_HEARTS_ACK on BlackList
2026-04-28 18:23:04 [Info] ipc client:AliYunDunMonitor Reg msg_type:INTERNAL_MSG_REQUEST_CONTAINER_INFO on WhiteList
2026-04-28 18:23:04 [Info] ipc client:AliYunDunMonitor Reg msg_type:T_MSG_NEW_AEGIS_INFO on WhiteList
2026-04-28 18:23:04 [Info] ipc client:AliYunDunMonitor Reg client_name:protocol_ipc_client_with_obj_id on WhiteList
2026-04-28 18:23:04 [Info] begin to monitor thread :rtap, fc4
2026-04-28 18:23:04 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-28 18:23:04 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-28 18:23:04 [Info] key : cpu, value : 10
2026-04-28 18:23:04 [Info] key : rio, value : 20480
2026-04-28 18:23:04 [Info] key : wio, value : 20480
2026-04-28 18:23:04 [Info] key : cpu_all, value : 0
2026-04-28 18:23:04 [Info] key : max_pid_check, value : 200
2026-04-28 18:23:04 [Info] key : throw_dump, value : 0
2026-04-28 18:23:04 [Info] key : hash_mode, value : 1
2026-04-28 18:23:04 [Info] key : mem, value : 200
2026-04-28 18:23:04 [Info] can not find key max_fd in online conf
2026-04-28 18:23:04 [Info] key : proc_limit, value : 1
2026-04-28 18:23:04 [Info] key : resource_limit_mode, value : 3
2026-04-28 18:23:04 [Info] key : rtap_update_mode, value : 1
2026-04-28 18:23:04 [Info] can not find key debug in online conf
2026-04-28 18:23:04 [Info] can not find key update_mode in online conf
2026-04-28 18:23:04 [Info] can not find key http_mode in online conf
2026-04-28 18:23:04 [Info] can not find key rtap_enable in online conf
2026-04-28 18:23:04 [Info] can not find key rtap_new_agent in online conf
2026-04-28 18:23:04 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-28 18:23:04 [Info] can not find key mem_low_mark in online conf
2026-04-28 18:23:04 [Info] can not find key obnormal_report_interval in online conf
2026-04-28 18:23:04 [Info] key : cache_mode, value : 0
2026-04-28 18:23:04 [Info] key : abnormal_monitor_mode, value : 3
2026-04-28 18:23:04 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-28 18:23:04 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-28 18:23:04 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-28 18:23:04 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-28 18:23:04 [Info] key : queue_size_ratio, value : 80
2026-04-28 18:23:04 [Info] queue_size_ratio is 80
2026-04-28 18:23:04 [Info] resource limit mode and max limit cpu is not change
2026-04-28 18:23:04 [Info] set hash mode 1
2026-04-28 18:23:04 [Info] RTAP timeout config:9600000
2026-04-28 18:23:04 [Info] self_guard_mode config is 0
2026-04-28 18:23:04 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-28 18:23:04 [Info] ipc client:Rtap181051777371784_handler Reg client_name:Rtap181051777371784 on WhiteList
2026-04-28 18:23:05 [Info] start rtap process success, pid is 4308, argument is Rtap181051777371784
2026-04-28 18:23:05 [Info] New ClientConnectNotify : Rtap181051777371784, id is 00000524
2026-04-28 18:23:05 [Info] Rtap Platform Rtap181051777371784 execv work --windows-sysinfoext-check on pid 4308
2026-04-28 18:23:06 [Info] GetMessage : T_MSG_CLIENT_RULE_PUSH_ALIYUNDUNMONITOR
2026-04-28 18:23:06 [Info] ipc client:Rtap181051777371784 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-28 18:23:17 [Info] Done Work --windows-sysinfoext-check:1
2026-04-28 18:23:17 [Info] Rtap Platform Rtap181051777371784 Exit:normal exit
2026-04-28 18:23:19 [Info] ClientDisConnectNotify : Rtap181051777371784, id is 00000524
2026-04-28 18:23:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"89","aliyundun_avg_fd_count":"315","aliyundun_avg_mem":"15035","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"1","aliyundun_max_cpu":"11","aliyundun_max_mem":"15220","aliyundun_upload_time":"1777371805","aliyundun_write_pid_times":"0","ipc_send_count":"7","launch_count":"1","login_time":"2","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"1","timer_skew":"0","update_update_fail":"0"}
2026-04-28 18:23:25 [Info] mt report at 2026-04-28 19:06:09
2026-04-28 18:23:49 [Info] log fd cnt is [300], real fd cnt is [332]
2026-04-28 18:23:58 [Info] begin to monitor thread :main, f74
2026-04-28 18:24:49 [Info] log fd cnt is [350], real fd cnt is [333]
2026-04-28 18:25:05 [Info] GetMessage : T_MSG_CLIENT_RULE_PUSH_ALISECCHECK
2026-04-28 18:25:05 [Info] GetMessage : T_MSG_CHECK
2026-04-28 18:25:05 [Info] get --alisecguard-config message, cmd index is 0ee57647-6c05-4696-8735-d262a6b73b15
2026-04-28 18:25:06 [Info] GetMessage : T_MSG_PLUGIN_CLIENT_CONFIG
2026-04-28 18:25:06 [Info] state is not disable, current state is 1
2026-04-28 18:25:06 [Warn] enable self guard driver fail when handle T_MSG_PLUGIN_CLIENT_CONFIG message
2026-04-28 18:25:07 [Info] begin to install self guard
2026-04-28 18:25:07 [Info] os version:10--0--0
2026-04-28 18:25:08 [Info] self guard driver is running
2026-04-28 18:25:08 [Info] os version:10--0--0
2026-04-28 18:25:08 [Info] os version:10--0--0
2026-04-28 18:25:08 [Info] driver bin is same, no need to update it
2026-04-28 18:25:08 [Info] driver is installed, and no need to update
2026-04-28 18:25:08 [Info] os version:10--0--0
2026-04-28 18:25:08 [Info] service pid is 516
2026-04-28 18:25:08 [Info] set sp status to 1
2026-04-28 18:25:08 [Info] install self guard error code is 0, error is ,last error is 2
2026-04-28 18:25:08 [Info] csrss.exe open proc 2388 AliYunDun.exe
2026-04-28 18:25:11 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:12 [Info] csrss.exe open thread 4788 AliYunDunMonit
2026-04-28 18:25:13 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:14 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:15 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:16 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:17 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:18 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:20 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:21 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:22 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:23 [Info] csrss.exe open proc 4788 AliYunDunMonit
2026-04-28 18:25:25 [Info] csrss.exe open thread 2388 AliYunDun.exe
2026-04-28 18:25:26 [Info] csrss.exe open proc 4308 AliSecCheck.ex
2026-04-28 18:25:27 [Info] csrss.exe open thread 4308 AliSecCheck.ex
2026-04-28 18:26:10 [Info] alisecguard update, old version is aegis_12_80, new version is aegis_12_90
2026-04-28 19:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15410","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15452","aliyundun_upload_time":"1777374370","aliyundun_write_pid_times":"0","ipc_send_count":"100","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-28 19:23:06 [Info] TotalPhys:2047,AvailPhys:314,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6605,AvailPageFile:1376,SelfWorkingSet:15488, SelfPageFile:12620
2026-04-28 19:23:06 [Info] CommitTotal:5228,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:314,SystemCache:183,KernelTotal:263,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27567,ProcessCount:52,ThreadCount:764
2026-04-28 19:28:26 [Info] GetMessage : T_MSG_GET_GRAY_FILE_PUSH
2026-04-28 19:28:26 [Info] GetMessage : T_MSG_GET_GRAY_FILE_PUSH
2026-04-28 19:28:26 [Info] GetMessage : T_MSG_GET_GRAY_FILE_PUSH
2026-04-28 19:28:26 [Info] GetMessage : T_MSG_GET_GRAY_FILE_PUSH
2026-04-28 19:28:26 [Info] GetMessage : T_MSG_GET_GRAY_FILE_PUSH
2026-04-28 20:06:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15423","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15448","aliyundun_upload_time":"1777377993","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-28 20:23:23 [Info] TotalPhys:2047,AvailPhys:307,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6605,AvailPageFile:1369,SelfWorkingSet:15488, SelfPageFile:12604
2026-04-28 20:23:23 [Info] CommitTotal:5235,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:307,SystemCache:180,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27627,ProcessCount:52,ThreadCount:769
2026-04-28 21:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15430","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15476","aliyundun_upload_time":"1777381600","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-28 21:23:40 [Info] TotalPhys:2047,AvailPhys:310,TotalVirtual:2047,AvailVirtual:1984,TotalPageFile:6605,AvailPageFile:1372,SelfWorkingSet:15428, SelfPageFile:12468
2026-04-28 21:23:40 [Info] CommitTotal:5232,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:310,SystemCache:184,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27754,ProcessCount:52,ThreadCount:769
2026-04-28 21:38:46 [Info] get meta data success by v2
2026-04-28 21:38:46 [Info] get empty metaserver config
2026-04-28 21:38:46 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-28 21:38:47 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-28 21:38:47 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-28 21:38:47 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-28 21:38:47 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-28 21:38:47 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-28 21:38:47 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-28 21:38:47 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-28 21:38:47 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-28 21:38:47 [Info] download cert compare md5 same
2026-04-28 21:38:47 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-28 21:38:47 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-28 21:38:47 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-28 22:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15518","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15724","aliyundun_upload_time":"1777385186","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-28 22:23:57 [Info] TotalPhys:2047,AvailPhys:309,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1357,SelfWorkingSet:15584, SelfPageFile:12632
2026-04-28 22:23:57 [Info] CommitTotal:5248,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:309,SystemCache:181,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27704,ProcessCount:52,ThreadCount:773
2026-04-28 23:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15590","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"15724","aliyundun_upload_time":"1777388775","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"86","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-28 23:24:18 [Info] TotalPhys:2047,AvailPhys:284,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1361,SelfWorkingSet:15664, SelfPageFile:12720
2026-04-28 23:24:18 [Info] CommitTotal:5243,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:284,SystemCache:203,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27649,ProcessCount:52,ThreadCount:773
2026-04-28 23:50:02 [Info] nCurrentClock is 18001600, nCurrentTime is 1777391402
2026-04-28 23:50:02 [Info] SendMessage T_MSG_LOGIN
2026-04-28 23:50:02 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-28 23:50:02 [Info] begin to enable self guard after reconnect
2026-04-28 23:50:02 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-28 23:50:02 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-28 23:50:02 [Info] GetMessage : T_MSG_CHECK
2026-04-28 23:50:02 [Info] task 11a0ebf2-4a60-4f5a-abcd-7ad8a04216aa has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-28 23:50:04 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-28 23:50:04 [Info] key : cpu, value : 10
2026-04-28 23:50:04 [Info] key : rio, value : 20480
2026-04-28 23:50:04 [Info] key : wio, value : 20480
2026-04-28 23:50:04 [Info] key : cpu_all, value : 0
2026-04-28 23:50:04 [Info] key : max_pid_check, value : 200
2026-04-28 23:50:04 [Info] key : throw_dump, value : 0
2026-04-28 23:50:04 [Info] key : hash_mode, value : 1
2026-04-28 23:50:04 [Info] key : mem, value : 200
2026-04-28 23:50:04 [Info] can not find key max_fd in online conf
2026-04-28 23:50:04 [Info] key : proc_limit, value : 1
2026-04-28 23:50:04 [Info] key : resource_limit_mode, value : 3
2026-04-28 23:50:04 [Info] key : rtap_update_mode, value : 1
2026-04-28 23:50:04 [Info] can not find key debug in online conf
2026-04-28 23:50:04 [Info] can not find key update_mode in online conf
2026-04-28 23:50:04 [Info] can not find key http_mode in online conf
2026-04-28 23:50:04 [Info] can not find key rtap_enable in online conf
2026-04-28 23:50:04 [Info] can not find key rtap_new_agent in online conf
2026-04-28 23:50:04 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-28 23:50:04 [Info] can not find key mem_low_mark in online conf
2026-04-28 23:50:04 [Info] can not find key obnormal_report_interval in online conf
2026-04-28 23:50:04 [Info] key : cache_mode, value : 0
2026-04-28 23:50:04 [Info] key : abnormal_monitor_mode, value : 3
2026-04-28 23:50:04 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-28 23:50:04 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-28 23:50:04 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-28 23:50:04 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-28 23:50:04 [Info] key : queue_size_ratio, value : 80
2026-04-28 23:50:04 [Info] queue_size_ratio is 80
2026-04-28 23:50:04 [Info] resource limit mode and max limit cpu is not change
2026-04-28 23:50:04 [Info] set hash mode 1
2026-04-28 23:50:04 [Info] RTAP timeout config:9600000
2026-04-28 23:50:04 [Info] self_guard_mode config is 0
2026-04-28 23:50:08 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-28 23:50:08 [Info] ipc client:Rtap166521777391408_handler Reg client_name:Rtap166521777391408 on WhiteList
2026-04-28 23:50:08 [Info] start rtap process success, pid is 4388, argument is Rtap166521777391408
2026-04-28 23:50:08 [Info] New ClientConnectNotify : Rtap166521777391408, id is 0000052C
2026-04-28 23:50:08 [Info] ipc client:Rtap166521777391408 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-28 23:50:08 [Info] Rtap Platform Rtap166521777391408 execv work --windows-sysinfoext-check on pid 4388
2026-04-28 23:50:11 [Info] csrss.exe open proc 4388 AliSecCheck.ex
2026-04-28 23:50:12 [Info] csrss.exe open thread 4388 AliSecCheck.ex
2026-04-28 23:50:51 [Info] Done Work --windows-sysinfoext-check:1
2026-04-28 23:50:51 [Info] Rtap Platform Rtap166521777391408 Exit:normal exit
2026-04-28 23:50:54 [Info] ClientDisConnectNotify : Rtap166521777391408, id is 0000052C
2026-04-29 00:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15677","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15856","aliyundun_upload_time":"1777392395","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 00:17:26 [Info] TotalPhys:2047,AvailPhys:538,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1347,SelfWorkingSet:16328, SelfPageFile:13580
2026-05-05 00:17:26 [Info] CommitTotal:4742,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:538,SystemCache:350,KernelTotal:261,KernelPaged:175,KernelNonpaged:85,PageSize:4096,HandleCount:27496,ProcessCount:51,ThreadCount:764
2026-05-05 01:00:06 [Info] get meta data success by v2
2026-05-05 01:00:06 [Info] get empty metaserver config
2026-05-05 01:00:06 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 01:00:06 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 01:00:06 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-05 01:00:06 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-05 01:00:06 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-05 01:00:06 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-05 01:00:06 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 01:00:06 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 01:00:06 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-05 01:00:06 [Info] download cert compare md5 same
2026-05-05 01:00:06 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 01:00:06 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 01:00:06 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-05 01:06:22 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16326","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16404","aliyundun_upload_time":"1777914382","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 01:17:43 [Info] TotalPhys:2047,AvailPhys:519,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6089,AvailPageFile:1340,SelfWorkingSet:16356, SelfPageFile:13656
2026-05-05 01:17:43 [Info] CommitTotal:4749,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:519,SystemCache:353,KernelTotal:261,KernelPaged:175,KernelNonpaged:86,PageSize:4096,HandleCount:27444,ProcessCount:51,ThreadCount:761
2026-05-05 01:44:14 [Info] GetMessage : T_MSG_CHECK
2026-05-05 01:44:14 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc5MTY2NTQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3MzM1MDk4LCJleHAiOjE3Nzc5NTk4NTQsInN1YiI6IlJUQVBfSURYXzE4MDgyMF8xNzc3OTE2NjU0MTgxIn0.8K11iiWivihqf0-zgNOEoTYBL_y7FjbElb4xkrH_Wwo has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 01:44:19 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 01:44:19 [Info] ipc client:Rtap279651777916659_handler Reg client_name:Rtap279651777916659 on WhiteList
2026-05-05 01:44:19 [Info] start rtap process success, pid is 3748, argument is Rtap279651777916659
2026-05-05 01:44:19 [Info] New ClientConnectNotify : Rtap279651777916659, id is 00000540
2026-05-05 01:44:19 [Info] ipc client:Rtap279651777916659 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 01:44:20 [Info] Rtap Platform Rtap279651777916659 execv work --sca on pid 3748
2026-05-05 01:44:22 [Info] csrss.exe open proc 3748 AliSecCheck.ex
2026-05-05 01:44:23 [Info] csrss.exe open thread 3748 AliSecCheck.ex
2026-05-05 01:44:43 [Info] csrss.exe open thread 3748 AliSecCheck.ex
2026-05-05 01:45:03 [Info] Done Work --sca:1
2026-05-05 01:45:03 [Info] Rtap Platform Rtap279651777916659 Exit:normal exit
2026-05-05 01:45:05 [Info] ClientDisConnectNotify : Rtap279651777916659, id is 00000540
2026-05-05 02:06:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16338","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16380","aliyundun_upload_time":"1777918002","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 02:18:00 [Info] TotalPhys:2047,AvailPhys:537,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1341,SelfWorkingSet:16320, SelfPageFile:13628
2026-05-05 02:18:00 [Info] CommitTotal:4747,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:537,SystemCache:365,KernelTotal:262,KernelPaged:175,KernelNonpaged:86,PageSize:4096,HandleCount:27470,ProcessCount:51,ThreadCount:763
2026-05-05 03:06:28 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16315","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16428","aliyundun_upload_time":"1777921588","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 03:10:51 [Info] nCurrentClock is 504031200, nCurrentTime is 1777921851
2026-05-05 03:10:51 [Info] SendMessage T_MSG_LOGIN
2026-05-05 03:10:51 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-05 03:10:51 [Info] begin to enable self guard after reconnect
2026-05-05 03:10:52 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-05 03:10:52 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-05 03:10:52 [Info] GetMessage : T_MSG_CHECK
2026-05-05 03:10:52 [Info] task 7ecc1863-a7e6-40d7-bd96-4154d370aa38 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 03:10:54 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-05 03:10:54 [Info] key : cpu, value : 10
2026-05-05 03:10:54 [Info] key : rio, value : 20480
2026-05-05 03:10:54 [Info] key : wio, value : 20480
2026-05-05 03:10:54 [Info] key : cpu_all, value : 0
2026-05-05 03:10:54 [Info] key : max_pid_check, value : 200
2026-05-05 03:10:54 [Info] key : throw_dump, value : 0
2026-05-05 03:10:54 [Info] key : hash_mode, value : 1
2026-05-05 03:10:54 [Info] key : mem, value : 200
2026-05-05 03:10:54 [Info] can not find key max_fd in online conf
2026-05-05 03:10:54 [Info] key : proc_limit, value : 1
2026-05-05 03:10:54 [Info] key : resource_limit_mode, value : 3
2026-05-05 03:10:54 [Info] key : rtap_update_mode, value : 1
2026-05-05 03:10:54 [Info] can not find key debug in online conf
2026-05-05 03:10:54 [Info] can not find key update_mode in online conf
2026-05-05 03:10:54 [Info] can not find key http_mode in online conf
2026-05-05 03:10:54 [Info] can not find key rtap_enable in online conf
2026-05-05 03:10:54 [Info] can not find key rtap_new_agent in online conf
2026-05-05 03:10:54 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-05 03:10:54 [Info] can not find key mem_low_mark in online conf
2026-05-05 03:10:54 [Info] can not find key obnormal_report_interval in online conf
2026-05-05 03:10:54 [Info] key : cache_mode, value : 0
2026-05-05 03:10:54 [Info] key : abnormal_monitor_mode, value : 3
2026-05-05 03:10:54 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-05 03:10:54 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-05 03:10:54 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-05 03:10:54 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-05 03:10:54 [Info] key : queue_size_ratio, value : 80
2026-05-05 03:10:54 [Info] queue_size_ratio is 80
2026-05-05 03:10:54 [Info] resource limit mode and max limit cpu is not change
2026-05-05 03:10:54 [Info] set hash mode 1
2026-05-05 03:10:54 [Info] RTAP timeout config:9600000
2026-05-05 03:10:54 [Info] self_guard_mode config is 0
2026-05-05 03:11:00 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 03:11:00 [Info] ipc client:Rtap121811777921860_handler Reg client_name:Rtap121811777921860 on WhiteList
2026-05-05 03:11:00 [Info] start rtap process success, pid is 4696, argument is Rtap121811777921860
2026-05-05 03:11:00 [Info] New ClientConnectNotify : Rtap121811777921860, id is 000001E4
2026-05-05 03:11:00 [Info] ipc client:Rtap121811777921860 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 03:11:00 [Info] Rtap Platform Rtap121811777921860 execv work --windows-sysinfoext-check on pid 4696
2026-05-05 03:11:02 [Info] csrss.exe open proc 4696 AliSecCheck.ex
2026-05-05 03:11:04 [Info] csrss.exe open thread 4696 AliSecCheck.ex
2026-05-05 03:11:07 [Info] Done Work --windows-sysinfoext-check:1
2026-05-05 03:11:07 [Info] Rtap Platform Rtap121811777921860 Exit:normal exit
2026-05-05 03:11:09 [Info] ClientDisConnectNotify : Rtap121811777921860, id is 000001E4
2026-05-05 03:18:17 [Info] TotalPhys:2047,AvailPhys:516,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1336,SelfWorkingSet:16268, SelfPageFile:13560
2026-05-05 03:18:17 [Info] CommitTotal:4752,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:516,SystemCache:356,KernelTotal:261,KernelPaged:175,KernelNonpaged:86,PageSize:4096,HandleCount:27631,ProcessCount:52,ThreadCount:769
2026-05-05 04:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16242","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16340","aliyundun_upload_time":"1777925173","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 04:16:12 [Info] get meta data success by v2
2026-05-05 04:16:12 [Info] get empty metaserver config
2026-05-05 04:16:12 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 04:16:12 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 04:16:12 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-05 04:16:12 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-05 04:16:12 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-05 04:16:12 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-05 04:16:12 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 04:16:12 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 04:16:12 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-05 04:16:12 [Info] download cert compare md5 same
2026-05-05 04:16:12 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 04:16:12 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 04:16:12 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-05 04:18:34 [Info] TotalPhys:2047,AvailPhys:521,TotalVirtual:2047,AvailVirtual:1977,TotalPageFile:6089,AvailPageFile:1341,SelfWorkingSet:16268, SelfPageFile:13696
2026-05-05 04:18:34 [Info] CommitTotal:4747,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:521,SystemCache:387,KernelTotal:262,KernelPaged:176,KernelNonpaged:86,PageSize:4096,HandleCount:27438,ProcessCount:51,ThreadCount:761
2026-05-05 05:06:30 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16235","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16296","aliyundun_upload_time":"1777928790","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 05:18:51 [Info] TotalPhys:2047,AvailPhys:509,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1329,SelfWorkingSet:16264, SelfPageFile:13588
2026-05-05 05:18:51 [Info] CommitTotal:4759,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:509,SystemCache:383,KernelTotal:262,KernelPaged:176,KernelNonpaged:86,PageSize:4096,HandleCount:27460,ProcessCount:51,ThreadCount:769
2026-05-05 06:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16229","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16296","aliyundun_upload_time":"1777932370","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 06:19:07 [Info] TotalPhys:2047,AvailPhys:497,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1317,SelfWorkingSet:16188, SelfPageFile:13500
2026-05-05 06:19:07 [Info] CommitTotal:4771,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:497,SystemCache:384,KernelTotal:262,KernelPaged:176,KernelNonpaged:86,PageSize:4096,HandleCount:27495,ProcessCount:51,ThreadCount:769
2026-05-05 07:06:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16227","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16292","aliyundun_upload_time":"1777935991","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 07:19:24 [Info] TotalPhys:2047,AvailPhys:515,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1322,SelfWorkingSet:16248, SelfPageFile:13520
2026-05-05 07:19:24 [Info] CommitTotal:4766,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:515,SystemCache:382,KernelTotal:262,KernelPaged:176,KernelNonpaged:86,PageSize:4096,HandleCount:27431,ProcessCount:51,ThreadCount:758
2026-05-05 07:32:04 [Info] get meta data success by v2
2026-05-05 07:32:04 [Info] get empty metaserver config
2026-05-05 07:32:04 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 07:32:05 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 07:32:05 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-05 07:32:05 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-05 07:32:05 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-05 07:32:05 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-05 07:32:05 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 07:32:05 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 07:32:05 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-05 07:32:05 [Info] download cert compare md5 same
2026-05-05 07:32:05 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 07:32:05 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 07:32:05 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-05 07:44:15 [Info] GetMessage : T_MSG_CHECK
2026-05-05 07:44:15 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc5MzgyNTUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTgxNDU1LCJzdWIiOiJSVEFQX0lEWF8xODA4MjJfMTc3NzkzODI1NTExMyJ9.Y3qTTiEFtrIOEAZgN3m1xVZ6OUuWLUgxHIDft5wey0E has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 07:44:18 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 07:44:18 [Info] ipc client:Rtap1941777938258_handler Reg client_name:Rtap1941777938258 on WhiteList
2026-05-05 07:44:18 [Info] start rtap process success, pid is 2216, argument is Rtap1941777938258
2026-05-05 07:44:18 [Info] New ClientConnectNotify : Rtap1941777938258, id is 00000540
2026-05-05 07:44:18 [Info] ipc client:Rtap1941777938258 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 07:44:19 [Info] Rtap Platform Rtap1941777938258 execv work --windows-vul-clean on pid 2216
2026-05-05 07:44:20 [Info] csrss.exe open proc 2216 AliSecCheck.ex
2026-05-05 07:44:21 [Info] csrss.exe open thread 2216 AliSecCheck.ex
2026-05-05 07:44:26 [Info] Done Work --windows-vul-clean:1
2026-05-05 07:44:26 [Info] Rtap Platform Rtap1941777938258 Exit:normal exit
2026-05-05 07:44:28 [Info] ClientDisConnectNotify : Rtap1941777938258, id is 00000540
2026-05-05 08:06:30 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16249","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"16356","aliyundun_upload_time":"1777939590","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-05-05 08:19:50 [Info] TotalPhys:2047,AvailPhys:446,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1306,SelfWorkingSet:16224, SelfPageFile:13592
2026-05-05 08:19:50 [Info] CommitTotal:4783,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:446,SystemCache:356,KernelTotal:275,KernelPaged:186,KernelNonpaged:88,PageSize:4096,HandleCount:27433,ProcessCount:51,ThreadCount:759
2026-05-05 08:38:26 [Info] nCurrentClock is 522032200, nCurrentTime is 1777941506
2026-05-05 08:38:26 [Info] SendMessage T_MSG_LOGIN
2026-05-05 08:38:26 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-05 08:38:26 [Info] begin to enable self guard after reconnect
2026-05-05 08:38:26 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-05 08:38:26 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-05 08:38:26 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-05 08:38:26 [Info] key : cpu, value : 10
2026-05-05 08:38:26 [Info] key : rio, value : 20480
2026-05-05 08:38:26 [Info] key : wio, value : 20480
2026-05-05 08:38:26 [Info] key : cpu_all, value : 0
2026-05-05 08:38:26 [Info] key : max_pid_check, value : 200
2026-05-05 08:38:26 [Info] key : throw_dump, value : 0
2026-05-05 08:38:26 [Info] key : hash_mode, value : 1
2026-05-05 08:38:26 [Info] key : mem, value : 200
2026-05-05 08:38:26 [Info] can not find key max_fd in online conf
2026-05-05 08:38:26 [Info] key : proc_limit, value : 1
2026-05-05 08:38:26 [Info] key : resource_limit_mode, value : 3
2026-05-05 08:38:26 [Info] key : rtap_update_mode, value : 1
2026-05-05 08:38:26 [Info] can not find key debug in online conf
2026-05-05 08:38:26 [Info] can not find key update_mode in online conf
2026-05-05 08:38:26 [Info] can not find key http_mode in online conf
2026-05-05 08:38:26 [Info] can not find key rtap_enable in online conf
2026-05-05 08:38:26 [Info] can not find key rtap_new_agent in online conf
2026-05-05 08:38:26 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-05 08:38:26 [Info] can not find key mem_low_mark in online conf
2026-05-05 08:38:26 [Info] can not find key obnormal_report_interval in online conf
2026-05-05 08:38:26 [Info] key : cache_mode, value : 0
2026-05-05 08:38:26 [Info] key : abnormal_monitor_mode, value : 3
2026-05-05 08:38:26 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-05 08:38:26 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-05 08:38:26 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-05 08:38:26 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-05 08:38:26 [Info] key : queue_size_ratio, value : 80
2026-05-05 08:38:26 [Info] queue_size_ratio is 80
2026-05-05 08:38:26 [Info] resource limit mode and max limit cpu is not change
2026-05-05 08:38:26 [Info] set hash mode 1
2026-05-05 08:38:26 [Info] RTAP timeout config:9600000
2026-05-05 08:38:26 [Info] self_guard_mode config is 0
2026-05-05 08:38:26 [Info] GetMessage : T_MSG_CHECK
2026-05-05 08:38:26 [Info] task f2469212-7348-4b72-b8da-62cf7f36624a has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 08:38:32 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 08:38:32 [Info] ipc client:Rtap108211777941512_handler Reg client_name:Rtap108211777941512 on WhiteList
2026-05-05 08:38:32 [Info] start rtap process success, pid is 588, argument is Rtap108211777941512
2026-05-05 08:38:32 [Info] New ClientConnectNotify : Rtap108211777941512, id is 00000504
2026-05-05 08:38:32 [Info] ipc client:Rtap108211777941512 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 08:38:32 [Info] Rtap Platform Rtap108211777941512 execv work --windows-sysinfoext-check on pid 588
2026-05-05 08:38:34 [Info] csrss.exe open proc 588 AliSecCheck.ex
2026-05-05 08:38:35 [Info] csrss.exe open thread 588 AliSecCheck.ex
2026-05-05 08:38:39 [Info] Done Work --windows-sysinfoext-check:1
2026-05-05 08:38:39 [Info] Rtap Platform Rtap108211777941512 Exit:normal exit
2026-05-05 08:38:41 [Info] ClientDisConnectNotify : Rtap108211777941512, id is 00000504
2026-05-05 08:42:18 [Info] GetMessage : T_MSG_CHECK
2026-05-05 08:42:18 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc5NDE3MzgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTg0OTM4LCJzdWIiOiJSVEFQX0lEWF8xODA4MTFfMTc3Nzk0MTczODI2NyJ9.Mi5o4DhFJJASqkDxDKlHu2byJZKAwekzrZwpe4aiIMA has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 08:42:24 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 08:42:24 [Info] ipc client:Rtap115781777941744_handler Reg client_name:Rtap115781777941744 on WhiteList
2026-05-05 08:42:24 [Info] start rtap process success, pid is 1912, argument is Rtap115781777941744
2026-05-05 08:42:24 [Info] New ClientConnectNotify : Rtap115781777941744, id is 0000052C
2026-05-05 08:42:25 [Info] ipc client:Rtap115781777941744 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 08:42:25 [Info] Rtap Platform Rtap115781777941744 execv work --windows-process-check on pid 1912
2026-05-05 08:42:26 [Info] csrss.exe open proc 1912 AliSecCheck.ex
2026-05-05 08:42:27 [Info] csrss.exe open thread 1912 AliSecCheck.ex
2026-05-05 08:42:48 [Info] Done Work --windows-process-check:1
2026-05-05 08:42:48 [Info] Rtap Platform Rtap115781777941744 Exit:normal exit
2026-05-05 08:42:50 [Info] ClientDisConnectNotify : Rtap115781777941744, id is 0000052C
2026-05-05 09:06:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16267","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16392","aliyundun_upload_time":"1777943201","aliyundun_write_pid_times":"0","ipc_send_count":"151","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 09:20:07 [Info] TotalPhys:2047,AvailPhys:449,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1292,SelfWorkingSet:16356, SelfPageFile:13660
2026-05-05 09:20:07 [Info] CommitTotal:4796,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:449,SystemCache:348,KernelTotal:275,KernelPaged:187,KernelNonpaged:88,PageSize:4096,HandleCount:27483,ProcessCount:51,ThreadCount:765
2026-05-05 10:06:29 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16341","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16396","aliyundun_upload_time":"1777946789","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 10:20:23 [Info] TotalPhys:2047,AvailPhys:456,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1300,SelfWorkingSet:16384, SelfPageFile:13672
2026-05-05 10:20:23 [Info] CommitTotal:4789,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:456,SystemCache:316,KernelTotal:276,KernelPaged:187,KernelNonpaged:88,PageSize:4096,HandleCount:27455,ProcessCount:51,ThreadCount:762
2026-05-05 10:24:12 [Info] GetMessage : T_MSG_CHECK
2026-05-05 10:24:12 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc5NDc4NTIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3MzM1NjQ1LCJleHAiOjE3Nzc5OTEwNTIsInN1YiI6IlJUQVBfSURYXzE4MDgxNF8xNzc3OTQ3ODUyMTc0In0.wOVcsFulXW1O5pf9-p6atoJqWhSL46NQ4R_XgNaJYiU has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 10:24:18 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 10:24:18 [Info] ipc client:Rtap315441777947858_handler Reg client_name:Rtap315441777947858 on WhiteList
2026-05-05 10:24:18 [Info] start rtap process success, pid is 3984, argument is Rtap315441777947858
2026-05-05 10:24:18 [Info] New ClientConnectNotify : Rtap315441777947858, id is 00000504
2026-05-05 10:24:18 [Info] ipc client:Rtap315441777947858 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 10:24:19 [Info] Rtap Platform Rtap315441777947858 execv work --windows-schedule-task-check on pid 3984
2026-05-05 10:24:21 [Info] csrss.exe open proc 3984 AliSecCheck.ex
2026-05-05 10:24:22 [Info] csrss.exe open thread 3984 AliSecCheck.ex
2026-05-05 10:24:28 [Info] GetMessage : T_MSG_CHECK
2026-05-05 10:24:28 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc5NDc4NjgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTkxMDY4LCJzdWIiOiJSVEFQX0lEWF8xODA4MTlfMTc3Nzk0Nzg2ODAyMCJ9.ALy9kU0U6hU_pSMpuBCf5iCRheZi9JXoD3m11GAr3bM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 10:24:31 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 10:24:31 [Info] ipc client:Rtap315861777947871_handler Reg client_name:Rtap315861777947871 on WhiteList
2026-05-05 10:24:31 [Info] start rtap process success, pid is 8, argument is Rtap315861777947871
2026-05-05 10:24:31 [Info] New ClientConnectNotify : Rtap315861777947871, id is 0000052C
2026-05-05 10:24:32 [Info] ipc client:Rtap315861777947871 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 10:24:32 [Info] Rtap Platform Rtap315861777947871 execv work --windows-registry-check on pid 8
2026-05-05 10:24:33 [Info] csrss.exe open proc 8 AliSecCheck.ex
2026-05-05 10:24:34 [Info] csrss.exe open thread 8 AliSecCheck.ex
2026-05-05 10:24:59 [Info] Done Work --windows-schedule-task-check:1
2026-05-05 10:24:59 [Info] Rtap Platform Rtap315441777947858 Exit:normal exit
2026-05-05 10:25:01 [Info] ClientDisConnectNotify : Rtap315441777947858, id is 00000504
2026-05-05 10:25:05 [Info] Done Work --windows-registry-check:1
2026-05-05 10:25:05 [Info] Rtap Platform Rtap315861777947871 Exit:normal exit
2026-05-05 10:25:07 [Info] ClientDisConnectNotify : Rtap315861777947871, id is 0000052C
2026-05-05 10:25:34 [Info] GetMessage : T_MSG_CHECK
2026-05-05 10:25:34 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc5NDc5MzQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3MzM0MDg2LCJleHAiOjE3Nzc5OTExMzQsInN1YiI6IlJUQVBfSURYXzE4MDgyNV8xNzc3OTQ3OTM0MzU4In0.qRsQ5cRUcThy0MQsCqPRbuvXnQ4WqWOfdL8rj2RVgNA has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 10:25:37 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 10:25:37 [Info] ipc client:Rtap318021777947937_handler Reg client_name:Rtap318021777947937 on WhiteList
2026-05-05 10:25:37 [Info] start rtap process success, pid is 2736, argument is Rtap318021777947937
2026-05-05 10:25:37 [Info] New ClientConnectNotify : Rtap318021777947937, id is 000004DC
2026-05-05 10:25:37 [Info] ipc client:Rtap318021777947937 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 10:25:38 [Info] Rtap Platform Rtap318021777947937 execv work --windows-driver-version-check on pid 2736
2026-05-05 10:25:38 [Info] csrss.exe open proc 2736 AliSecCheck.ex
2026-05-05 10:25:39 [Info] csrss.exe open thread 2736 AliSecCheck.ex
2026-05-05 10:25:45 [Info] Done Work --windows-driver-version-check:1
2026-05-05 10:25:45 [Info] Rtap Platform Rtap318021777947937 Exit:normal exit
2026-05-05 10:25:47 [Info] ClientDisConnectNotify : Rtap318021777947937, id is 000004DC
2026-05-05 10:28:34 [Info] GetMessage : T_MSG_CHECK
2026-05-05 10:28:34 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc5NDgxMTQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTkxMzE0LCJzdWIiOiJSVEFQX0lEWF8xODA4MTJfMTc3Nzk0ODExNDI2OCJ9.sWh-bvun84Xbl2ji_dmACvkEkWBi_wplJ4oEVuOMlvI has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 10:28:37 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 10:28:37 [Info] ipc client:Rtap323901777948117_handler Reg client_name:Rtap323901777948117 on WhiteList
2026-05-05 10:28:37 [Info] start rtap process success, pid is 2596, argument is Rtap323901777948117
2026-05-05 10:28:37 [Info] New ClientConnectNotify : Rtap323901777948117, id is 0000052C
2026-05-05 10:28:37 [Info] ipc client:Rtap323901777948117 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 10:28:38 [Info] Rtap Platform Rtap323901777948117 execv work --tcp-connect-check on pid 2596
2026-05-05 10:28:40 [Info] csrss.exe open proc 2596 AliSecCheck.ex
2026-05-05 10:28:41 [Info] csrss.exe open thread 2596 AliSecCheck.ex
2026-05-05 10:28:49 [Info] Done Work --tcp-connect-check:1
2026-05-05 10:28:49 [Info] Rtap Platform Rtap323901777948117 Exit:normal exit
2026-05-05 10:28:51 [Info] ClientDisConnectNotify : Rtap323901777948117, id is 0000052C
2026-05-05 10:48:28 [Info] get meta data success by v2
2026-05-05 10:48:28 [Info] get empty metaserver config
2026-05-05 10:48:28 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 10:48:29 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 10:48:29 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-05 10:48:29 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-05 10:48:29 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-05 10:48:29 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-05 10:48:29 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 10:48:29 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 10:48:29 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-05 10:48:29 [Info] download cert compare md5 same
2026-05-05 10:48:29 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 10:48:29 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 10:48:29 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-05 11:06:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16429","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16524","aliyundun_upload_time":"1777950392","aliyundun_write_pid_times":"0","ipc_send_count":"156","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 11:10:42 [Info] GetMessage : T_MSG_CHECK
2026-05-05 11:10:42 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc5NTA2NDIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTkzODQyLCJzdWIiOiJSVEFQX0lEWF8xODA4MTZfMTc3Nzk1MDY0MjUzOSJ9.bhqIfWgHoa6PGrL7pSWd9Je5yunvgr_fxBHPO2jeXfg has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 11:10:49 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 11:10:49 [Info] ipc client:Rtap78901777950649_handler Reg client_name:Rtap78901777950649 on WhiteList
2026-05-05 11:10:49 [Info] start rtap process success, pid is 2628, argument is Rtap78901777950649
2026-05-05 11:10:49 [Info] New ClientConnectNotify : Rtap78901777950649, id is 000004DC
2026-05-05 11:10:49 [Info] ipc client:Rtap78901777950649 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 11:10:49 [Info] Rtap Platform Rtap78901777950649 execv work --windows-autorun-item-check on pid 2628
2026-05-05 11:10:51 [Info] csrss.exe open proc 2628 AliSecCheck.ex
2026-05-05 11:10:52 [Info] csrss.exe open thread 2628 AliSecCheck.ex
2026-05-05 11:11:04 [Info] Done Work --windows-autorun-item-check:1
2026-05-05 11:11:04 [Info] Rtap Platform Rtap78901777950649 Exit:normal exit
2026-05-05 11:11:06 [Info] ClientDisConnectNotify : Rtap78901777950649, id is 000004DC
2026-05-05 11:20:41 [Info] TotalPhys:2047,AvailPhys:448,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1307,SelfWorkingSet:16400, SelfPageFile:13876
2026-05-05 11:20:41 [Info] CommitTotal:4781,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:448,SystemCache:332,KernelTotal:275,KernelPaged:187,KernelNonpaged:88,PageSize:4096,HandleCount:27458,ProcessCount:51,ThreadCount:757
2026-05-05 12:06:23 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16425","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16464","aliyundun_upload_time":"1777953983","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 12:20:57 [Info] TotalPhys:2047,AvailPhys:446,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1305,SelfWorkingSet:16472, SelfPageFile:13684
2026-05-05 12:20:57 [Info] CommitTotal:4784,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:446,SystemCache:342,KernelTotal:276,KernelPaged:188,KernelNonpaged:88,PageSize:4096,HandleCount:27462,ProcessCount:51,ThreadCount:759
2026-05-05 13:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16491","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16552","aliyundun_upload_time":"1777957578","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 13:21:13 [Info] TotalPhys:2047,AvailPhys:443,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1302,SelfWorkingSet:16412, SelfPageFile:13868
2026-05-05 13:21:13 [Info] CommitTotal:4786,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:443,SystemCache:345,KernelTotal:275,KernelPaged:187,KernelNonpaged:88,PageSize:4096,HandleCount:27491,ProcessCount:51,ThreadCount:757
2026-05-05 14:04:20 [Info] get meta data success by v2
2026-05-05 14:04:20 [Info] get empty metaserver config
2026-05-05 14:04:20 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 14:04:21 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 14:04:21 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-05 14:04:21 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-05 14:04:21 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-05 14:04:21 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-05 14:04:21 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 14:04:21 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 14:04:21 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-05 14:04:21 [Info] download cert compare md5 same
2026-05-05 14:04:21 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 14:04:21 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 14:04:21 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-05 14:04:21 [Info] nCurrentClock is 540033200, nCurrentTime is 1777961061
2026-05-05 14:04:21 [Info] SendMessage T_MSG_LOGIN
2026-05-05 14:04:21 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-05 14:04:21 [Info] begin to enable self guard after reconnect
2026-05-05 14:04:21 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-05 14:04:21 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-05 14:04:21 [Info] GetMessage : T_MSG_CHECK
2026-05-05 14:04:21 [Info] task ec2c6120-f1e9-4f39-8b73-f189e8d96722 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 14:04:24 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-05 14:04:24 [Info] key : cpu, value : 10
2026-05-05 14:04:24 [Info] key : rio, value : 20480
2026-05-05 14:04:24 [Info] key : wio, value : 20480
2026-05-05 14:04:24 [Info] key : cpu_all, value : 0
2026-05-05 14:04:24 [Info] key : max_pid_check, value : 200
2026-05-05 14:04:24 [Info] key : throw_dump, value : 0
2026-05-05 14:04:24 [Info] key : hash_mode, value : 1
2026-05-05 14:04:24 [Info] key : mem, value : 200
2026-05-05 14:04:24 [Info] can not find key max_fd in online conf
2026-05-05 14:04:24 [Info] key : proc_limit, value : 1
2026-05-05 14:04:24 [Info] key : resource_limit_mode, value : 3
2026-05-05 14:04:24 [Info] key : rtap_update_mode, value : 1
2026-05-05 14:04:24 [Info] can not find key debug in online conf
2026-05-05 14:04:24 [Info] can not find key update_mode in online conf
2026-05-05 14:04:24 [Info] can not find key http_mode in online conf
2026-05-05 14:04:24 [Info] can not find key rtap_enable in online conf
2026-05-05 14:04:24 [Info] can not find key rtap_new_agent in online conf
2026-05-05 14:04:24 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-05 14:04:24 [Info] can not find key mem_low_mark in online conf
2026-05-05 14:04:24 [Info] can not find key obnormal_report_interval in online conf
2026-05-05 14:04:24 [Info] key : cache_mode, value : 0
2026-05-05 14:04:24 [Info] key : abnormal_monitor_mode, value : 3
2026-05-05 14:04:24 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-05 14:04:24 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-05 14:04:24 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-05 14:04:24 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-05 14:04:24 [Info] key : queue_size_ratio, value : 80
2026-05-05 14:04:24 [Info] queue_size_ratio is 80
2026-05-05 14:04:24 [Info] resource limit mode and max limit cpu is not change
2026-05-05 14:04:24 [Info] set hash mode 1
2026-05-05 14:04:24 [Info] RTAP timeout config:9600000
2026-05-05 14:04:24 [Info] self_guard_mode config is 0
2026-05-05 14:04:24 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-05 14:04:28 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 14:04:28 [Info] ipc client:Rtap91461777961068_handler Reg client_name:Rtap91461777961068 on WhiteList
2026-05-05 14:04:28 [Info] start rtap process success, pid is 2768, argument is Rtap91461777961068
2026-05-05 14:04:28 [Info] New ClientConnectNotify : Rtap91461777961068, id is 0000052C
2026-05-05 14:04:29 [Info] ipc client:Rtap91461777961068 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 14:04:29 [Info] Rtap Platform Rtap91461777961068 execv work --windows-sysinfoext-check on pid 2768
2026-05-05 14:04:31 [Info] csrss.exe open proc 2768 AliSecCheck.ex
2026-05-05 14:04:32 [Info] csrss.exe open thread 2768 AliSecCheck.ex
2026-05-05 14:04:36 [Info] Done Work --windows-sysinfoext-check:1
2026-05-05 14:04:36 [Info] Rtap Platform Rtap91461777961068 Exit:normal exit
2026-05-05 14:04:38 [Info] ClientDisConnectNotify : Rtap91461777961068, id is 0000052C
2026-05-05 14:06:43 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16488","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16572","aliyundun_upload_time":"1777961203","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 14:21:31 [Info] TotalPhys:2047,AvailPhys:476,TotalVirtual:2047,AvailVirtual:1979,TotalPageFile:6089,AvailPageFile:1300,SelfWorkingSet:16440, SelfPageFile:13980
2026-05-05 14:21:31 [Info] CommitTotal:4788,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:476,SystemCache:290,KernelTotal:273,KernelPaged:185,KernelNonpaged:88,PageSize:4096,HandleCount:27957,ProcessCount:53,ThreadCount:784
2026-05-05 15:06:22 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16429","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"7","aliyundun_max_mem":"16572","aliyundun_upload_time":"1777964782","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 15:21:48 [Info] TotalPhys:2047,AvailPhys:455,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1293,SelfWorkingSet:16480, SelfPageFile:13704
2026-05-05 15:21:48 [Info] CommitTotal:4795,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:455,SystemCache:249,KernelTotal:283,KernelPaged:194,KernelNonpaged:88,PageSize:4096,HandleCount:27765,ProcessCount:52,ThreadCount:764
2026-05-05 16:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16424","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16480","aliyundun_upload_time":"1777968396","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 16:22:05 [Info] TotalPhys:2047,AvailPhys:444,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1293,SelfWorkingSet:16384, SelfPageFile:13624
2026-05-05 16:22:05 [Info] CommitTotal:4796,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:444,SystemCache:258,KernelTotal:284,KernelPaged:196,KernelNonpaged:88,PageSize:4096,HandleCount:27755,ProcessCount:52,ThreadCount:767
2026-05-05 17:06:24 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16394","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16416","aliyundun_upload_time":"1777971984","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 17:20:19 [Info] get meta data success by v2
2026-05-05 17:20:19 [Info] get empty metaserver config
2026-05-05 17:20:19 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 17:20:19 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 17:20:19 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-05 17:20:19 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-05 17:20:19 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-05 17:20:19 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-05 17:20:19 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 17:20:19 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 17:20:19 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-05 17:20:19 [Info] download cert compare md5 same
2026-05-05 17:20:19 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 17:20:19 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 17:20:19 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-05 17:22:22 [Info] TotalPhys:2047,AvailPhys:456,TotalVirtual:2047,AvailVirtual:1977,TotalPageFile:6089,AvailPageFile:1292,SelfWorkingSet:16444, SelfPageFile:13776
2026-05-05 17:22:22 [Info] CommitTotal:4796,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:456,SystemCache:325,KernelTotal:288,KernelPaged:200,KernelNonpaged:87,PageSize:4096,HandleCount:27792,ProcessCount:52,ThreadCount:772
2026-05-05 18:02:03 [Info] GetMessage : T_MSG_CHECK
2026-05-05 18:02:03 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc5NzUzMjMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDE4NTIzLCJzdWIiOiJSVEFQX0lEWF8xODA4ODFfMTc3Nzk3NTMyMzE5NiJ9.0TppDfCh6DDmsGo-tfnhoKzhzLqHw-rgvJZBNp_PnQQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 18:02:06 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 18:02:06 [Info] ipc client:Rtap229391777975326_handler Reg client_name:Rtap229391777975326 on WhiteList
2026-05-05 18:02:06 [Info] start rtap process success, pid is 4336, argument is Rtap229391777975326
2026-05-05 18:02:07 [Info] New ClientConnectNotify : Rtap229391777975326, id is 000001E4
2026-05-05 18:02:07 [Info] Rtap Platform Rtap229391777975326 execv work --secnet_rasp_agent on pid 4336
2026-05-05 18:02:07 [Info] csrss.exe open proc 4336 AliSecCheck.ex
2026-05-05 18:02:08 [Info] ipc client:Rtap229391777975326 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 18:02:08 [Info] csrss.exe open thread 4336 AliSecCheck.ex
2026-05-05 18:02:09 [Info] csrss.exe open thread 4336 AliSecCheck.ex
2026-05-05 18:02:10 [Info] csrss.exe open thread 4336 AliSecCheck.ex
2026-05-05 18:02:12 [Info] csrss.exe open thread 4336 AliSecCheck.ex
2026-05-05 18:02:13 [Info] csrss.exe open thread 4336 AliSecCheck.ex
2026-05-05 18:02:14 [Info] Done Work --secnet_rasp_agent:1
2026-05-05 18:02:14 [Info] Rtap Platform Rtap229391777975326 Exit:normal exit
2026-05-05 18:02:16 [Info] ClientDisConnectNotify : Rtap229391777975326, id is 000001E4
2026-05-05 18:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16393","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16468","aliyundun_upload_time":"1777975600","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 18:22:39 [Info] TotalPhys:2047,AvailPhys:431,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1277,SelfWorkingSet:16432, SelfPageFile:13628
2026-05-05 18:22:39 [Info] CommitTotal:4811,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:431,SystemCache:334,KernelTotal:288,KernelPaged:199,KernelNonpaged:88,PageSize:4096,HandleCount:27732,ProcessCount:52,ThreadCount:770
2026-05-05 19:06:29 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16388","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16432","aliyundun_upload_time":"1777979189","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 19:22:56 [Info] TotalPhys:2047,AvailPhys:436,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1270,SelfWorkingSet:16352, SelfPageFile:13556
2026-05-05 19:22:56 [Info] CommitTotal:4819,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:436,SystemCache:339,KernelTotal:288,KernelPaged:200,KernelNonpaged:88,PageSize:4096,HandleCount:27809,ProcessCount:52,ThreadCount:767
2026-05-05 19:30:59 [Info] nCurrentClock is 558033900, nCurrentTime is 1777980659
2026-05-05 19:31:00 [Info] SendMessage T_MSG_LOGIN
2026-05-05 19:31:00 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-05 19:31:00 [Info] begin to enable self guard after reconnect
2026-05-05 19:31:00 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-05 19:31:00 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-05 19:31:01 [Info] GetMessage : T_MSG_CHECK
2026-05-05 19:31:01 [Info] task 3a1b21e2-5e3a-4e4a-885f-104a39365b6b has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 19:31:03 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-05 19:31:03 [Info] key : cpu, value : 10
2026-05-05 19:31:03 [Info] key : rio, value : 20480
2026-05-05 19:31:03 [Info] key : wio, value : 20480
2026-05-05 19:31:03 [Info] key : cpu_all, value : 0
2026-05-05 19:31:03 [Info] key : max_pid_check, value : 200
2026-05-05 19:31:03 [Info] key : throw_dump, value : 0
2026-05-05 19:31:03 [Info] key : hash_mode, value : 1
2026-05-05 19:31:03 [Info] key : mem, value : 200
2026-05-05 19:31:03 [Info] can not find key max_fd in online conf
2026-05-05 19:31:03 [Info] key : proc_limit, value : 1
2026-05-05 19:31:03 [Info] key : resource_limit_mode, value : 3
2026-05-05 19:31:03 [Info] key : rtap_update_mode, value : 1
2026-05-05 19:31:03 [Info] can not find key debug in online conf
2026-05-05 19:31:03 [Info] can not find key update_mode in online conf
2026-05-05 19:31:03 [Info] can not find key http_mode in online conf
2026-05-05 19:31:03 [Info] can not find key rtap_enable in online conf
2026-05-05 19:31:03 [Info] can not find key rtap_new_agent in online conf
2026-05-05 19:31:03 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-05 19:31:03 [Info] can not find key mem_low_mark in online conf
2026-05-05 19:31:03 [Info] can not find key obnormal_report_interval in online conf
2026-05-05 19:31:03 [Info] key : cache_mode, value : 0
2026-05-05 19:31:03 [Info] key : abnormal_monitor_mode, value : 3
2026-05-05 19:31:03 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-05 19:31:03 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-05 19:31:03 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-05 19:31:03 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-05 19:31:03 [Info] key : queue_size_ratio, value : 80
2026-05-05 19:31:03 [Info] queue_size_ratio is 80
2026-05-05 19:31:03 [Info] resource limit mode and max limit cpu is not change
2026-05-05 19:31:03 [Info] set hash mode 1
2026-05-05 19:31:03 [Info] RTAP timeout config:9600000
2026-05-05 19:31:03 [Info] self_guard_mode config is 0
2026-05-05 19:31:05 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 19:31:05 [Info] ipc client:Rtap76061777980665_handler Reg client_name:Rtap76061777980665 on WhiteList
2026-05-05 19:31:05 [Info] start rtap process success, pid is 792, argument is Rtap76061777980665
2026-05-05 19:31:06 [Info] New ClientConnectNotify : Rtap76061777980665, id is 000004D8
2026-05-05 19:31:07 [Info] Rtap Platform Rtap76061777980665 execv work --windows-sysinfoext-check on pid 792
2026-05-05 19:31:07 [Info] csrss.exe open proc 792 AliSecCheck.ex
2026-05-05 19:31:07 [Info] ipc client:Rtap76061777980665 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 19:31:08 [Info] csrss.exe open thread 792 AliSecCheck.ex
2026-05-05 19:31:09 [Info] GetMessage : T_MSG_CHECK
2026-05-05 19:31:09 [Info] task ea40cd4c0be38c1622f7351fe2995e58 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-05 19:31:11 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-05 19:31:11 [Info] ipc client:Rtap76251777980671_handler Reg client_name:Rtap76251777980671 on WhiteList
2026-05-05 19:31:11 [Info] start rtap process success, pid is 984, argument is Rtap76251777980671
2026-05-05 19:31:11 [Info] New ClientConnectNotify : Rtap76251777980671, id is 000001E4
2026-05-05 19:31:11 [Info] ipc client:Rtap76251777980671 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-05 19:31:12 [Info] Rtap Platform Rtap76251777980671 execv work --windows-vul-check on pid 984
2026-05-05 19:31:14 [Info] csrss.exe open proc 984 AliSecCheck.ex
2026-05-05 19:31:15 [Info] Done Work --windows-sysinfoext-check:1
2026-05-05 19:31:15 [Info] Rtap Platform Rtap76061777980665 Exit:normal exit
2026-05-05 19:31:15 [Info] csrss.exe open thread 984 AliSecCheck.ex
2026-05-05 19:31:17 [Info] ClientDisConnectNotify : Rtap76061777980665, id is 000004D8
2026-05-05 19:31:21 [Info] Done Work --windows-vul-check:1
2026-05-05 19:31:21 [Info] Rtap Platform Rtap76251777980671 Exit:normal exit
2026-05-05 19:31:23 [Info] ClientDisConnectNotify : Rtap76251777980671, id is 000001E4
2026-05-05 20:06:12 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16388","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16464","aliyundun_upload_time":"1777982772","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 20:23:15 [Info] TotalPhys:2047,AvailPhys:450,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1285,SelfWorkingSet:16468, SelfPageFile:13720
2026-05-05 20:23:15 [Info] CommitTotal:4803,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:450,SystemCache:318,KernelTotal:286,KernelPaged:198,KernelNonpaged:87,PageSize:4096,HandleCount:27723,ProcessCount:52,ThreadCount:763
2026-05-05 20:36:20 [Info] get meta data success by v2
2026-05-05 20:36:20 [Info] get empty metaserver config
2026-05-05 20:36:20 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 20:36:20 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 20:36:20 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-05 20:36:20 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-05 20:36:20 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-05 20:36:20 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-05 20:36:20 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 20:36:20 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 20:36:20 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-05 20:36:20 [Info] download cert compare md5 same
2026-05-05 20:36:20 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 20:36:20 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 20:36:20 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-05 21:06:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16467","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16564","aliyundun_upload_time":"1777986392","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 21:23:32 [Info] TotalPhys:2047,AvailPhys:411,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1241,SelfWorkingSet:16456, SelfPageFile:13692
2026-05-05 21:23:32 [Info] CommitTotal:4847,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:411,SystemCache:300,KernelTotal:285,KernelPaged:197,KernelNonpaged:87,PageSize:4096,HandleCount:27866,ProcessCount:52,ThreadCount:764
2026-05-05 22:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16447","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16508","aliyundun_upload_time":"1777989973","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 22:23:49 [Info] TotalPhys:2047,AvailPhys:402,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1241,SelfWorkingSet:16484, SelfPageFile:13672
2026-05-05 22:23:49 [Info] CommitTotal:4847,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:402,SystemCache:280,KernelTotal:266,KernelPaged:179,KernelNonpaged:87,PageSize:4096,HandleCount:27976,ProcessCount:52,ThreadCount:792
2026-05-05 23:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16493","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16604","aliyundun_upload_time":"1777993581","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-05 23:24:07 [Info] TotalPhys:2047,AvailPhys:405,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1227,SelfWorkingSet:16456, SelfPageFile:13672
2026-05-05 23:24:07 [Info] CommitTotal:4862,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:405,SystemCache:306,KernelTotal:265,KernelPaged:178,KernelNonpaged:87,PageSize:4096,HandleCount:27795,ProcessCount:52,ThreadCount:765
2026-05-05 23:52:12 [Info] get meta data success by v2
2026-05-05 23:52:12 [Info] get empty metaserver config
2026-05-05 23:52:12 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 23:52:13 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-05 23:52:13 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-05 23:52:13 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-05 23:52:13 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-05 23:52:13 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-05 23:52:13 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 23:52:13 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-05 23:52:13 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-05 23:52:13 [Info] download cert compare md5 same
2026-05-05 23:52:13 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 23:52:13 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-05 23:52:13 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 00:06:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16500","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16676","aliyundun_upload_time":"1777997199","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}