2026-05-01 00:39:35 [Info] TotalPhys:2047,AvailPhys:366,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1402,SelfWorkingSet:16376, SelfPageFile:13708
2026-05-01 00:39:35 [Info] CommitTotal:5267,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:366,SystemCache:174,KernelTotal:266,KernelPaged:173,KernelNonpaged:92,PageSize:4096,HandleCount:27640,ProcessCount:52,ThreadCount:772
2026-05-01 00:51:31 [Info] nCurrentClock is 180012400, nCurrentTime is 1777567891
2026-05-01 00:51:31 [Info] SendMessage T_MSG_LOGIN
2026-05-01 00:51:31 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-01 00:51:31 [Info] begin to enable self guard after reconnect
2026-05-01 00:51:31 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-01 00:51:32 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-01 00:51:32 [Info] GetMessage : T_MSG_CHECK
2026-05-01 00:51:32 [Info] task c6eb5fac-4fcd-41be-958b-8d963449928d has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 00:51:34 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-01 00:51:34 [Info] key : cpu, value : 10
2026-05-01 00:51:34 [Info] key : rio, value : 20480
2026-05-01 00:51:34 [Info] key : wio, value : 20480
2026-05-01 00:51:34 [Info] key : cpu_all, value : 0
2026-05-01 00:51:34 [Info] key : max_pid_check, value : 200
2026-05-01 00:51:34 [Info] key : throw_dump, value : 0
2026-05-01 00:51:34 [Info] key : hash_mode, value : 1
2026-05-01 00:51:34 [Info] key : mem, value : 200
2026-05-01 00:51:34 [Info] can not find key max_fd in online conf
2026-05-01 00:51:34 [Info] key : proc_limit, value : 1
2026-05-01 00:51:34 [Info] key : resource_limit_mode, value : 3
2026-05-01 00:51:34 [Info] key : rtap_update_mode, value : 1
2026-05-01 00:51:34 [Info] can not find key debug in online conf
2026-05-01 00:51:34 [Info] can not find key update_mode in online conf
2026-05-01 00:51:34 [Info] can not find key http_mode in online conf
2026-05-01 00:51:34 [Info] can not find key rtap_enable in online conf
2026-05-01 00:51:34 [Info] can not find key rtap_new_agent in online conf
2026-05-01 00:51:34 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-01 00:51:34 [Info] can not find key mem_low_mark in online conf
2026-05-01 00:51:34 [Info] can not find key obnormal_report_interval in online conf
2026-05-01 00:51:34 [Info] key : cache_mode, value : 0
2026-05-01 00:51:34 [Info] key : abnormal_monitor_mode, value : 3
2026-05-01 00:51:34 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-01 00:51:34 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-01 00:51:34 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-01 00:51:34 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-01 00:51:34 [Info] key : queue_size_ratio, value : 80
2026-05-01 00:51:34 [Info] queue_size_ratio is 80
2026-05-01 00:51:34 [Info] resource limit mode and max limit cpu is not change
2026-05-01 00:51:34 [Info] set hash mode 1
2026-05-01 00:51:34 [Info] RTAP timeout config:9600000
2026-05-01 00:51:34 [Info] self_guard_mode config is 0
2026-05-01 00:51:37 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 00:51:37 [Info] ipc client:Rtap31671777567897_handler Reg client_name:Rtap31671777567897 on WhiteList
2026-05-01 00:51:37 [Info] start rtap process success, pid is 3404, argument is Rtap31671777567897
2026-05-01 00:51:37 [Info] New ClientConnectNotify : Rtap31671777567897, id is 00000504
2026-05-01 00:51:38 [Info] ipc client:Rtap31671777567897 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 00:51:38 [Info] Rtap Platform Rtap31671777567897 execv work --windows-sysinfoext-check on pid 3404
2026-05-01 00:51:40 [Info] csrss.exe open proc 3404 AliSecCheck.ex
2026-05-01 00:51:41 [Info] csrss.exe open thread 3404 AliSecCheck.ex
2026-05-01 00:51:45 [Info] Done Work --windows-sysinfoext-check:1
2026-05-01 00:51:45 [Info] Rtap Platform Rtap31671777567897 Exit:normal exit
2026-05-01 00:51:47 [Info] ClientDisConnectNotify : Rtap31671777567897, id is 00000504
2026-05-01 01:06:11 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16235","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16376","aliyundun_upload_time":"1777568771","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 01:40:00 [Info] TotalPhys:2047,AvailPhys:359,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1398,SelfWorkingSet:16312, SelfPageFile:13548
2026-05-01 01:40:00 [Info] CommitTotal:5271,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:359,SystemCache:250,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27583,ProcessCount:52,ThreadCount:772
2026-05-01 01:57:05 [Info] get meta data success by v2
2026-05-01 01:57:05 [Info] get empty metaserver config
2026-05-01 01:57:05 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 01:57:05 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 01:57:05 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-01 01:57:05 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-01 01:57:05 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-01 01:57:05 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-01 01:57:05 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 01:57:05 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 01:57:05 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-01 01:57:05 [Info] download cert compare md5 same
2026-05-01 01:57:05 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 01:57:05 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 01:57:05 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-01 02:05:26 [Info] GetMessage : T_MSG_CHECK
2026-05-01 02:05:26 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1NzIzMjYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NjE1NTI2LCJzdWIiOiJSVEFQX0lEWF8xODA1MTlfMTc3NzU3MjMyNjI2NSJ9.SRVoIv1gaoYtFmRZWAocPyuW3Ng2PuvnWskLYVBlxVk has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 02:05:31 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 02:05:31 [Info] ipc client:Rtap176471777572331_handler Reg client_name:Rtap176471777572331 on WhiteList
2026-05-01 02:05:31 [Info] start rtap process success, pid is 1664, argument is Rtap176471777572331
2026-05-01 02:05:31 [Info] New ClientConnectNotify : Rtap176471777572331, id is 00000548
2026-05-01 02:05:31 [Info] ipc client:Rtap176471777572331 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 02:05:31 [Info] Rtap Platform Rtap176471777572331 execv work --sca on pid 1664
2026-05-01 02:05:33 [Info] csrss.exe open proc 1664 AliSecCheck.ex
2026-05-01 02:05:34 [Info] csrss.exe open thread 1664 AliSecCheck.ex
2026-05-01 02:05:56 [Info] csrss.exe open thread 1664 AliSecCheck.ex
2026-05-01 02:06:15 [Info] Done Work --sca:1
2026-05-01 02:06:15 [Info] Rtap Platform Rtap176471777572331 Exit:normal exit
2026-05-01 02:06:17 [Info] ClientDisConnectNotify : Rtap176471777572331, id is 00000548
2026-05-01 02:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16274","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16436","aliyundun_upload_time":"1777572397","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 02:40:25 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1406,SelfWorkingSet:16400, SelfPageFile:13640
2026-05-01 02:40:25 [Info] CommitTotal:5263,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:232,KernelTotal:267,KernelPaged:174,KernelNonpaged:93,PageSize:4096,HandleCount:27410,ProcessCount:51,ThreadCount:762
2026-05-01 03:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16410","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16508","aliyundun_upload_time":"1777575998","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 03:40:50 [Info] TotalPhys:2047,AvailPhys:351,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1394,SelfWorkingSet:16332, SelfPageFile:13592
2026-05-01 03:40:50 [Info] CommitTotal:5274,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:351,SystemCache:243,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27349,ProcessCount:51,ThreadCount:758
2026-05-01 04:06:14 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16349","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16448","aliyundun_upload_time":"1777579574","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 04:41:14 [Info] TotalPhys:2047,AvailPhys:332,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1386,SelfWorkingSet:16440, SelfPageFile:13688
2026-05-01 04:41:14 [Info] CommitTotal:5283,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:332,SystemCache:250,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:28167,ProcessCount:54,ThreadCount:791
2026-05-01 05:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16349","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16472","aliyundun_upload_time":"1777583196","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 05:13:52 [Info] get meta data success by v2
2026-05-01 05:13:52 [Info] get empty metaserver config
2026-05-01 05:13:52 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 05:13:52 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 05:13:52 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-01 05:13:53 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-01 05:13:53 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-01 05:13:53 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-01 05:13:53 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 05:13:53 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 05:13:53 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-01 05:13:53 [Info] download cert compare md5 same
2026-05-01 05:13:53 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 05:13:53 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 05:13:53 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-01 05:41:39 [Info] TotalPhys:2047,AvailPhys:368,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1399,SelfWorkingSet:16416, SelfPageFile:13684
2026-05-01 05:41:39 [Info] CommitTotal:5269,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:368,SystemCache:258,KernelTotal:266,KernelPaged:173,KernelNonpaged:93,PageSize:4096,HandleCount:27385,ProcessCount:51,ThreadCount:762
2026-05-01 06:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16360","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16536","aliyundun_upload_time":"1777586795","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 06:19:22 [Info] nCurrentClock is 198013400, nCurrentTime is 1777587562
2026-05-01 06:19:22 [Info] SendMessage T_MSG_LOGIN
2026-05-01 06:19:23 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-01 06:19:23 [Info] begin to enable self guard after reconnect
2026-05-01 06:19:23 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-01 06:19:23 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-01 06:19:23 [Info] GetMessage : T_MSG_CHECK
2026-05-01 06:19:23 [Info] task 597c4dd5-d428-4021-b1fc-52345694ad19 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 06:19:25 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-01 06:19:25 [Info] key : cpu, value : 10
2026-05-01 06:19:25 [Info] key : rio, value : 20480
2026-05-01 06:19:25 [Info] key : wio, value : 20480
2026-05-01 06:19:25 [Info] key : cpu_all, value : 0
2026-05-01 06:19:25 [Info] key : max_pid_check, value : 200
2026-05-01 06:19:25 [Info] key : throw_dump, value : 0
2026-05-01 06:19:25 [Info] key : hash_mode, value : 1
2026-05-01 06:19:25 [Info] key : mem, value : 200
2026-05-01 06:19:25 [Info] can not find key max_fd in online conf
2026-05-01 06:19:25 [Info] key : proc_limit, value : 1
2026-05-01 06:19:25 [Info] key : resource_limit_mode, value : 3
2026-05-01 06:19:25 [Info] key : rtap_update_mode, value : 1
2026-05-01 06:19:25 [Info] can not find key debug in online conf
2026-05-01 06:19:25 [Info] can not find key update_mode in online conf
2026-05-01 06:19:25 [Info] can not find key http_mode in online conf
2026-05-01 06:19:25 [Info] can not find key rtap_enable in online conf
2026-05-01 06:19:25 [Info] can not find key rtap_new_agent in online conf
2026-05-01 06:19:25 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-01 06:19:25 [Info] can not find key mem_low_mark in online conf
2026-05-01 06:19:25 [Info] can not find key obnormal_report_interval in online conf
2026-05-01 06:19:25 [Info] key : cache_mode, value : 0
2026-05-01 06:19:25 [Info] key : abnormal_monitor_mode, value : 3
2026-05-01 06:19:25 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-01 06:19:25 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-01 06:19:25 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-01 06:19:25 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-01 06:19:25 [Info] key : queue_size_ratio, value : 80
2026-05-01 06:19:25 [Info] queue_size_ratio is 80
2026-05-01 06:19:25 [Info] resource limit mode and max limit cpu is not change
2026-05-01 06:19:25 [Info] set hash mode 1
2026-05-01 06:19:25 [Info] RTAP timeout config:9600000
2026-05-01 06:19:25 [Info] self_guard_mode config is 0
2026-05-01 06:19:27 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 06:19:27 [Info] ipc client:Rtap18651777587567_handler Reg client_name:Rtap18651777587567 on WhiteList
2026-05-01 06:19:27 [Info] start rtap process success, pid is 4624, argument is Rtap18651777587567
2026-05-01 06:19:28 [Info] New ClientConnectNotify : Rtap18651777587567, id is 00000540
2026-05-01 06:19:28 [Info] ipc client:Rtap18651777587567 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 06:19:28 [Info] Rtap Platform Rtap18651777587567 execv work --windows-sysinfoext-check on pid 4624
2026-05-01 06:19:30 [Info] csrss.exe open proc 4624 AliSecCheck.ex
2026-05-01 06:19:31 [Info] csrss.exe open thread 4624 AliSecCheck.ex
2026-05-01 06:19:35 [Info] Done Work --windows-sysinfoext-check:1
2026-05-01 06:19:35 [Info] Rtap Platform Rtap18651777587567 Exit:normal exit
2026-05-01 06:19:37 [Info] ClientDisConnectNotify : Rtap18651777587567, id is 00000540
2026-05-01 06:42:04 [Info] TotalPhys:2047,AvailPhys:358,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1392,SelfWorkingSet:16276, SelfPageFile:13504
2026-05-01 06:42:04 [Info] CommitTotal:5276,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:358,SystemCache:247,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27352,ProcessCount:51,ThreadCount:761
2026-05-01 07:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16215","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"2","aliyundun_max_mem":"16372","aliyundun_upload_time":"1777590395","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 07:42:29 [Info] TotalPhys:2047,AvailPhys:338,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1387,SelfWorkingSet:16128, SelfPageFile:13404
2026-05-01 07:42:29 [Info] CommitTotal:5281,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:338,SystemCache:241,KernelTotal:266,KernelPaged:173,KernelNonpaged:93,PageSize:4096,HandleCount:27446,ProcessCount:51,ThreadCount:766
2026-05-01 07:44:36 [Info] GetMessage : T_MSG_CHECK
2026-05-01 07:44:36 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1OTI2NzYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NjM1ODc2LCJzdWIiOiJSVEFQX0lEWF8xODA1MjFfMTc3NzU5MjY3NjAwMiJ9.mr314R_MDN6Fw3ycchm5lzWSpN-hWi0XHLDxKKJiV_c has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 07:44:42 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 07:44:42 [Info] ipc client:Rtap185691777592682_handler Reg client_name:Rtap185691777592682 on WhiteList
2026-05-01 07:44:42 [Info] start rtap process success, pid is 4236, argument is Rtap185691777592682
2026-05-01 07:44:42 [Info] New ClientConnectNotify : Rtap185691777592682, id is 000004C8
2026-05-01 07:44:42 [Info] ipc client:Rtap185691777592682 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 07:44:42 [Info] Rtap Platform Rtap185691777592682 execv work --windows-vul-clean on pid 4236
2026-05-01 07:44:44 [Info] csrss.exe open proc 4236 AliSecCheck.ex
2026-05-01 07:44:45 [Info] csrss.exe open thread 4236 AliSecCheck.ex
2026-05-01 07:44:49 [Info] Done Work --windows-vul-clean:1
2026-05-01 07:44:49 [Info] Rtap Platform Rtap185691777592682 Exit:normal exit
2026-05-01 07:44:52 [Info] ClientDisConnectNotify : Rtap185691777592682, id is 000004C8
2026-05-01 08:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16155","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16284","aliyundun_upload_time":"1777593995","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 08:30:43 [Info] get meta data success by v2
2026-05-01 08:30:43 [Info] get empty metaserver config
2026-05-01 08:30:43 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 08:30:45 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 08:30:45 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-01 08:30:45 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-01 08:30:45 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-01 08:30:45 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-01 08:30:45 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 08:30:45 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 08:30:45 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-01 08:30:45 [Info] download cert compare md5 same
2026-05-01 08:30:45 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 08:30:45 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 08:30:45 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-01 08:42:55 [Info] TotalPhys:2047,AvailPhys:373,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6669,AvailPageFile:1403,SelfWorkingSet:16232, SelfPageFile:13516
2026-05-01 08:42:55 [Info] CommitTotal:5265,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:373,SystemCache:268,KernelTotal:268,KernelPaged:176,KernelNonpaged:92,PageSize:4096,HandleCount:27443,ProcessCount:51,ThreadCount:765
2026-05-01 08:49:41 [Info] GetMessage : T_MSG_CHECK
2026-05-01 08:49:41 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1OTY1ODEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3MzM0MDYzLCJleHAiOjE3Nzc2Mzk3ODEsInN1YiI6IlJUQVBfSURYXzE4MDUxMF8xNzc3NTk2NTgxMjc4In0.sW5MwPCz-M_FrHuj7BfqiRU7cgPvVrU4K3ZyXymdv80 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 08:49:44 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 08:49:44 [Info] ipc client:Rtap313111777596584_handler Reg client_name:Rtap313111777596584 on WhiteList
2026-05-01 08:49:44 [Info] start rtap process success, pid is 4820, argument is Rtap313111777596584
2026-05-01 08:49:44 [Info] New ClientConnectNotify : Rtap313111777596584, id is 00000548
2026-05-01 08:49:45 [Info] ipc client:Rtap313111777596584 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 08:49:45 [Info] Rtap Platform Rtap313111777596584 execv work --windows-process-check on pid 4820
2026-05-01 08:49:46 [Info] csrss.exe open proc 4820 AliSecCheck.ex
2026-05-01 08:49:47 [Info] csrss.exe open thread 4820 AliSecCheck.ex
2026-05-01 08:50:08 [Info] Done Work --windows-process-check:1
2026-05-01 08:50:08 [Info] Rtap Platform Rtap313111777596584 Exit:normal exit
2026-05-01 08:50:10 [Info] ClientDisConnectNotify : Rtap313111777596584, id is 00000548
2026-05-01 09:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16216","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16372","aliyundun_upload_time":"1777597576","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 09:43:18 [Info] TotalPhys:2047,AvailPhys:377,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1402,SelfWorkingSet:16380, SelfPageFile:13540
2026-05-01 09:43:18 [Info] CommitTotal:5266,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:377,SystemCache:191,KernelTotal:264,KernelPaged:171,KernelNonpaged:93,PageSize:4096,HandleCount:27430,ProcessCount:51,ThreadCount:760
2026-05-01 10:06:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16314","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16380","aliyundun_upload_time":"1777601194","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 10:24:38 [Info] GetMessage : T_MSG_CHECK
2026-05-01 10:24:38 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2MDIyNzgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NjQ1NDc4LCJzdWIiOiJSVEFQX0lEWF8xODA1MTNfMTc3NzYwMjI3ODM3NSJ9.XVb_TVKL4zEbZbm6bN8qKCphTFlrPweYk81cmqEh1Eo has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 10:24:45 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 10:24:45 [Info] ipc client:Rtap171601777602285_handler Reg client_name:Rtap171601777602285 on WhiteList
2026-05-01 10:24:45 [Info] start rtap process success, pid is 2704, argument is Rtap171601777602285
2026-05-01 10:24:45 [Info] New ClientConnectNotify : Rtap171601777602285, id is 0000052C
2026-05-01 10:24:45 [Info] ipc client:Rtap171601777602285 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 10:24:45 [Info] Rtap Platform Rtap171601777602285 execv work --windows-schedule-task-check on pid 2704
2026-05-01 10:24:47 [Info] csrss.exe open proc 2704 AliSecCheck.ex
2026-05-01 10:24:48 [Info] csrss.exe open thread 2704 AliSecCheck.ex
2026-05-01 10:25:21 [Info] Done Work --windows-schedule-task-check:1
2026-05-01 10:25:21 [Info] Rtap Platform Rtap171601777602285 Exit:normal exit
2026-05-01 10:25:23 [Info] ClientDisConnectNotify : Rtap171601777602285, id is 0000052C
2026-05-01 10:25:39 [Info] GetMessage : T_MSG_CHECK
2026-05-01 10:25:39 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2MDIzMzgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NjQ1NTM4LCJzdWIiOiJSVEFQX0lEWF8xODA1MjRfMTc3NzYwMjMzODk1MiJ9.kJCfuPmGrwCNtkY_U8yXajd5X7CznQfslkhjDHMEsQs has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 10:25:44 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 10:25:44 [Info] ipc client:Rtap173531777602344_handler Reg client_name:Rtap173531777602344 on WhiteList
2026-05-01 10:25:44 [Info] start rtap process success, pid is 1244, argument is Rtap173531777602344
2026-05-01 10:25:45 [Info] New ClientConnectNotify : Rtap173531777602344, id is 00000540
2026-05-01 10:25:45 [Info] ipc client:Rtap173531777602344 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 10:25:45 [Info] Rtap Platform Rtap173531777602344 execv work --windows-driver-version-check on pid 1244
2026-05-01 10:25:45 [Info] csrss.exe open proc 1244 AliSecCheck.ex
2026-05-01 10:25:47 [Info] csrss.exe open thread 1244 AliSecCheck.ex
2026-05-01 10:25:52 [Info] Done Work --windows-driver-version-check:1
2026-05-01 10:25:52 [Info] Rtap Platform Rtap173531777602344 Exit:normal exit
2026-05-01 10:25:54 [Info] ClientDisConnectNotify : Rtap173531777602344, id is 00000540
2026-05-01 10:30:40 [Info] GetMessage : T_MSG_CHECK
2026-05-01 10:30:40 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2MDI2NDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NjQ1ODQwLCJzdWIiOiJSVEFQX0lEWF8xODA1MThfMTc3NzYwMjY0MDQ1MiJ9.0Ykmz853JnVHTRzA3vqi2hnZ-t57KwLWpLlk0WorpiI has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 10:30:46 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 10:30:46 [Info] ipc client:Rtap183391777602646_handler Reg client_name:Rtap183391777602646 on WhiteList
2026-05-01 10:30:46 [Info] start rtap process success, pid is 2860, argument is Rtap183391777602646
2026-05-01 10:30:46 [Info] New ClientConnectNotify : Rtap183391777602646, id is 0000052C
2026-05-01 10:30:46 [Info] ipc client:Rtap183391777602646 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 10:30:47 [Info] Rtap Platform Rtap183391777602646 execv work --windows-registry-check on pid 2860
2026-05-01 10:30:48 [Info] csrss.exe open proc 2860 AliSecCheck.ex
2026-05-01 10:30:49 [Info] csrss.exe open thread 2860 AliSecCheck.ex
2026-05-01 10:31:07 [Info] GetMessage : T_MSG_CHECK
2026-05-01 10:31:07 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2MDI2NjcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NjQ1ODY3LCJzdWIiOiJSVEFQX0lEWF8xODA1MTFfMTc3NzYwMjY2Nzg5NCJ9.PsRjcMQBeP-EaVyLrvEwe7aCLHLyDaGkYX2_i97mjqw has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 10:31:11 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 10:31:11 [Info] ipc client:Rtap184201777602671_handler Reg client_name:Rtap184201777602671 on WhiteList
2026-05-01 10:31:11 [Info] start rtap process success, pid is 184, argument is Rtap184201777602671
2026-05-01 10:31:11 [Info] New ClientConnectNotify : Rtap184201777602671, id is 00000540
2026-05-01 10:31:12 [Info] ipc client:Rtap184201777602671 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 10:31:12 [Info] Rtap Platform Rtap184201777602671 execv work --tcp-connect-check on pid 184
2026-05-01 10:31:13 [Info] csrss.exe open proc 184 AliSecCheck.ex
2026-05-01 10:31:14 [Info] csrss.exe open thread 184 AliSecCheck.ex
2026-05-01 10:31:23 [Info] Done Work --windows-registry-check:1
2026-05-01 10:31:23 [Info] Rtap Platform Rtap183391777602646 Exit:normal exit
2026-05-01 10:31:25 [Info] ClientDisConnectNotify : Rtap183391777602646, id is 0000052C
2026-05-01 10:31:25 [Info] Done Work --tcp-connect-check:1
2026-05-01 10:31:25 [Info] Rtap Platform Rtap184201777602671 Exit:normal exit
2026-05-01 10:31:28 [Info] ClientDisConnectNotify : Rtap184201777602671, id is 00000540
2026-05-01 10:43:43 [Info] TotalPhys:2047,AvailPhys:375,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1400,SelfWorkingSet:16356, SelfPageFile:13596
2026-05-01 10:43:43 [Info] CommitTotal:5268,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:375,SystemCache:198,KernelTotal:265,KernelPaged:172,KernelNonpaged:93,PageSize:4096,HandleCount:27497,ProcessCount:51,ThreadCount:759
2026-05-01 11:06:20 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16334","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16444","aliyundun_upload_time":"1777604780","aliyundun_write_pid_times":"0","ipc_send_count":"155","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 11:08:53 [Info] GetMessage : T_MSG_CHECK
2026-05-01 11:08:53 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2MDQ5MzMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NjQ4MTMzLCJzdWIiOiJSVEFQX0lEWF8xODA1MTVfMTc3NzYwNDkzMzc1MCJ9.5iWMK7XJF2O1e9Ert-HEX7OiZxtZZwFd8G8xvxWmgF0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 11:08:57 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 11:08:57 [Info] ipc client:Rtap258201777604937_handler Reg client_name:Rtap258201777604937 on WhiteList
2026-05-01 11:08:57 [Info] start rtap process success, pid is 2056, argument is Rtap258201777604937
2026-05-01 11:08:57 [Info] New ClientConnectNotify : Rtap258201777604937, id is 000004C8
2026-05-01 11:08:58 [Info] ipc client:Rtap258201777604937 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 11:08:58 [Info] Rtap Platform Rtap258201777604937 execv work --windows-autorun-item-check on pid 2056
2026-05-01 11:08:59 [Info] csrss.exe open proc 2056 AliSecCheck.ex
2026-05-01 11:09:00 [Info] csrss.exe open thread 2056 AliSecCheck.ex
2026-05-01 11:09:17 [Info] Done Work --windows-autorun-item-check:1
2026-05-01 11:09:17 [Info] Rtap Platform Rtap258201777604937 Exit:normal exit
2026-05-01 11:09:19 [Info] ClientDisConnectNotify : Rtap258201777604937, id is 000004C8
2026-05-01 11:44:10 [Info] TotalPhys:2047,AvailPhys:363,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1396,SelfWorkingSet:16388, SelfPageFile:13636
2026-05-01 11:44:10 [Info] CommitTotal:5272,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:363,SystemCache:205,KernelTotal:264,KernelPaged:171,KernelNonpaged:93,PageSize:4096,HandleCount:27452,ProcessCount:51,ThreadCount:762
2026-05-01 11:47:22 [Info] get meta data success by v2
2026-05-01 11:47:22 [Info] get empty metaserver config
2026-05-01 11:47:22 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 11:47:22 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 11:47:22 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-01 11:47:22 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-01 11:47:22 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-01 11:47:22 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-01 11:47:22 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 11:47:22 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 11:47:22 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-01 11:47:22 [Info] download cert compare md5 same
2026-05-01 11:47:22 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 11:47:22 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 11:47:22 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-01 11:47:22 [Info] nCurrentClock is 216015300, nCurrentTime is 1777607242
2026-05-01 11:47:22 [Info] SendMessage T_MSG_LOGIN
2026-05-01 11:47:22 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-01 11:47:22 [Info] begin to enable self guard after reconnect
2026-05-01 11:47:23 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-01 11:47:23 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-01 11:47:23 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-01 11:47:23 [Info] key : cpu, value : 10
2026-05-01 11:47:23 [Info] key : rio, value : 20480
2026-05-01 11:47:23 [Info] key : wio, value : 20480
2026-05-01 11:47:23 [Info] key : cpu_all, value : 0
2026-05-01 11:47:23 [Info] key : max_pid_check, value : 200
2026-05-01 11:47:23 [Info] key : throw_dump, value : 0
2026-05-01 11:47:23 [Info] key : hash_mode, value : 1
2026-05-01 11:47:23 [Info] key : mem, value : 200
2026-05-01 11:47:23 [Info] can not find key max_fd in online conf
2026-05-01 11:47:23 [Info] key : proc_limit, value : 1
2026-05-01 11:47:23 [Info] key : resource_limit_mode, value : 3
2026-05-01 11:47:23 [Info] key : rtap_update_mode, value : 1
2026-05-01 11:47:23 [Info] can not find key debug in online conf
2026-05-01 11:47:23 [Info] can not find key update_mode in online conf
2026-05-01 11:47:23 [Info] can not find key http_mode in online conf
2026-05-01 11:47:23 [Info] can not find key rtap_enable in online conf
2026-05-01 11:47:23 [Info] can not find key rtap_new_agent in online conf
2026-05-01 11:47:23 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-01 11:47:23 [Info] can not find key mem_low_mark in online conf
2026-05-01 11:47:23 [Info] can not find key obnormal_report_interval in online conf
2026-05-01 11:47:23 [Info] key : cache_mode, value : 0
2026-05-01 11:47:23 [Info] key : abnormal_monitor_mode, value : 3
2026-05-01 11:47:23 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-01 11:47:23 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-01 11:47:23 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-01 11:47:23 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-01 11:47:23 [Info] key : queue_size_ratio, value : 80
2026-05-01 11:47:23 [Info] queue_size_ratio is 80
2026-05-01 11:47:23 [Info] resource limit mode and max limit cpu is not change
2026-05-01 11:47:23 [Info] set hash mode 1
2026-05-01 11:47:23 [Info] RTAP timeout config:9600000
2026-05-01 11:47:23 [Info] self_guard_mode config is 0
2026-05-01 11:47:23 [Info] GetMessage : T_MSG_CHECK
2026-05-01 11:47:23 [Info] task 3171a45e-41a9-4780-90f1-50278ee3beba has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 11:47:26 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-01 11:47:26 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 11:47:26 [Info] ipc client:Rtap5921777607246_handler Reg client_name:Rtap5921777607246 on WhiteList
2026-05-01 11:47:26 [Info] start rtap process success, pid is 1420, argument is Rtap5921777607246
2026-05-01 11:47:26 [Info] New ClientConnectNotify : Rtap5921777607246, id is 00000540
2026-05-01 11:47:26 [Info] Rtap Platform Rtap5921777607246 execv work --windows-sysinfoext-check on pid 1420
2026-05-01 11:47:26 [Info] ipc client:Rtap5921777607246 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 11:47:27 [Info] csrss.exe open proc 1420 AliSecCheck.ex
2026-05-01 11:47:28 [Info] csrss.exe open thread 1420 AliSecCheck.ex
2026-05-01 11:47:33 [Info] Done Work --windows-sysinfoext-check:1
2026-05-01 11:47:33 [Info] Rtap Platform Rtap5921777607246 Exit:normal exit
2026-05-01 11:47:36 [Info] ClientDisConnectNotify : Rtap5921777607246, id is 00000540
2026-05-01 12:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16392","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16620","aliyundun_upload_time":"1777608398","aliyundun_write_pid_times":"0","ipc_send_count":"151","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 12:44:35 [Info] TotalPhys:2047,AvailPhys:358,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1391,SelfWorkingSet:16368, SelfPageFile:13616
2026-05-01 12:44:35 [Info] CommitTotal:5277,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:358,SystemCache:209,KernelTotal:265,KernelPaged:172,KernelNonpaged:93,PageSize:4096,HandleCount:27391,ProcessCount:51,ThreadCount:761
2026-05-01 13:06:22 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16378","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16472","aliyundun_upload_time":"1777611982","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 13:44:59 [Info] TotalPhys:2047,AvailPhys:361,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1386,SelfWorkingSet:16332, SelfPageFile:13480
2026-05-01 13:44:59 [Info] CommitTotal:5282,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:361,SystemCache:204,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27839,ProcessCount:53,ThreadCount:777
2026-05-01 14:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16383","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16496","aliyundun_upload_time":"1777615581","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 14:45:24 [Info] TotalPhys:2047,AvailPhys:425,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1396,SelfWorkingSet:16476, SelfPageFile:13716
2026-05-01 14:45:24 [Info] CommitTotal:5272,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:425,SystemCache:304,KernelTotal:262,KernelPaged:168,KernelNonpaged:93,PageSize:4096,HandleCount:27739,ProcessCount:52,ThreadCount:763
2026-05-01 15:03:56 [Info] get meta data success by v2
2026-05-01 15:03:56 [Info] get empty metaserver config
2026-05-01 15:03:56 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 15:03:56 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 15:03:56 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-01 15:03:56 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-01 15:03:56 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-01 15:03:56 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-01 15:03:56 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 15:03:56 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 15:03:56 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-01 15:03:56 [Info] download cert compare md5 same
2026-05-01 15:03:56 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 15:03:56 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 15:03:56 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-01 15:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16385","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16476","aliyundun_upload_time":"1777619175","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 15:45:48 [Info] TotalPhys:2047,AvailPhys:401,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1386,SelfWorkingSet:16424, SelfPageFile:13716
2026-05-01 15:45:48 [Info] CommitTotal:5283,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:401,SystemCache:308,KernelTotal:265,KernelPaged:172,KernelNonpaged:93,PageSize:4096,HandleCount:27636,ProcessCount:52,ThreadCount:771
2026-05-01 16:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16392","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16540","aliyundun_upload_time":"1777622776","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 16:46:13 [Info] TotalPhys:2047,AvailPhys:414,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1384,SelfWorkingSet:16432, SelfPageFile:13664
2026-05-01 16:46:13 [Info] CommitTotal:5284,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:414,SystemCache:314,KernelTotal:266,KernelPaged:173,KernelNonpaged:92,PageSize:4096,HandleCount:27634,ProcessCount:52,ThreadCount:760
2026-05-01 17:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16410","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16492","aliyundun_upload_time":"1777626376","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 17:15:08 [Info] nCurrentClock is 234016100, nCurrentTime is 1777626908
2026-05-01 17:15:08 [Info] SendMessage T_MSG_LOGIN
2026-05-01 17:15:08 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-01 17:15:08 [Info] begin to enable self guard after reconnect
2026-05-01 17:15:08 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-01 17:15:08 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-01 17:15:08 [Info] GetMessage : T_MSG_CHECK
2026-05-01 17:15:08 [Info] task 43a64331-9083-42ab-b3af-6c6cf576927f has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 17:15:10 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-01 17:15:10 [Info] key : cpu, value : 10
2026-05-01 17:15:10 [Info] key : rio, value : 20480
2026-05-01 17:15:10 [Info] key : wio, value : 20480
2026-05-01 17:15:10 [Info] key : cpu_all, value : 0
2026-05-01 17:15:10 [Info] key : max_pid_check, value : 200
2026-05-01 17:15:10 [Info] key : throw_dump, value : 0
2026-05-01 17:15:10 [Info] key : hash_mode, value : 1
2026-05-01 17:15:10 [Info] key : mem, value : 200
2026-05-01 17:15:10 [Info] can not find key max_fd in online conf
2026-05-01 17:15:10 [Info] key : proc_limit, value : 1
2026-05-01 17:15:10 [Info] key : resource_limit_mode, value : 3
2026-05-01 17:15:10 [Info] key : rtap_update_mode, value : 1
2026-05-01 17:15:10 [Info] can not find key debug in online conf
2026-05-01 17:15:10 [Info] can not find key update_mode in online conf
2026-05-01 17:15:10 [Info] can not find key http_mode in online conf
2026-05-01 17:15:10 [Info] can not find key rtap_enable in online conf
2026-05-01 17:15:10 [Info] can not find key rtap_new_agent in online conf
2026-05-01 17:15:10 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-01 17:15:10 [Info] can not find key mem_low_mark in online conf
2026-05-01 17:15:10 [Info] can not find key obnormal_report_interval in online conf
2026-05-01 17:15:10 [Info] key : cache_mode, value : 0
2026-05-01 17:15:10 [Info] key : abnormal_monitor_mode, value : 3
2026-05-01 17:15:10 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-01 17:15:10 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-01 17:15:10 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-01 17:15:10 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-01 17:15:10 [Info] key : queue_size_ratio, value : 80
2026-05-01 17:15:10 [Info] queue_size_ratio is 80
2026-05-01 17:15:10 [Info] resource limit mode and max limit cpu is not change
2026-05-01 17:15:10 [Info] set hash mode 1
2026-05-01 17:15:10 [Info] RTAP timeout config:9600000
2026-05-01 17:15:10 [Info] self_guard_mode config is 0
2026-05-01 17:15:15 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 17:15:15 [Info] ipc client:Rtap320551777626915_handler Reg client_name:Rtap320551777626915 on WhiteList
2026-05-01 17:15:15 [Info] start rtap process success, pid is 2680, argument is Rtap320551777626915
2026-05-01 17:15:16 [Info] system memory usage is 81
2026-05-01 17:15:16 [Info] system memory usage is 81
2026-05-01 17:15:17 [Info] New ClientConnectNotify : Rtap320551777626915, id is 0000052C
2026-05-01 17:15:17 [Info] Rtap Platform Rtap320551777626915 execv work --windows-sysinfoext-check on pid 2680
2026-05-01 17:15:17 [Info] ipc client:Rtap320551777626915 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 17:15:17 [Info] csrss.exe open proc 2680 AliSecCheck.ex
2026-05-01 17:15:18 [Info] csrss.exe open thread 2680 AliSecCheck.ex
2026-05-01 17:15:19 [Info] csrss.exe open thread 2680 AliSecCheck.ex
2026-05-01 17:15:20 [Info] csrss.exe open thread 2680 AliSecCheck.ex
2026-05-01 17:15:21 [Info] csrss.exe open thread 2680 AliSecCheck.ex
2026-05-01 17:15:28 [Info] Done Work --windows-sysinfoext-check:1
2026-05-01 17:15:28 [Info] Rtap Platform Rtap320551777626915 Exit:normal exit
2026-05-01 17:15:30 [Info] ClientDisConnectNotify : Rtap320551777626915, id is 0000052C
2026-05-01 17:46:39 [Info] TotalPhys:2047,AvailPhys:407,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1387,SelfWorkingSet:16432, SelfPageFile:13708
2026-05-01 17:46:39 [Info] CommitTotal:5281,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:407,SystemCache:292,KernelTotal:265,KernelPaged:172,KernelNonpaged:93,PageSize:4096,HandleCount:27620,ProcessCount:52,ThreadCount:762
2026-05-01 18:04:00 [Info] GetMessage : T_MSG_CHECK
2026-05-01 18:04:00 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2Mjk4MzksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NjczMDM5LCJzdWIiOiJSVEFQX0lEWF8xODA1ODBfMTc3NzYyOTgzOTg5MCJ9.eu091MetEILMvm-tK5v3B1of2R7cGFhPBM-JbJkkup0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 18:04:05 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 18:04:05 [Info] ipc client:Rtap88551777629845_handler Reg client_name:Rtap88551777629845 on WhiteList
2026-05-01 18:04:05 [Info] start rtap process success, pid is 1696, argument is Rtap88551777629845
2026-05-01 18:04:05 [Info] New ClientConnectNotify : Rtap88551777629845, id is 00000504
2026-05-01 18:04:05 [Info] ipc client:Rtap88551777629845 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 18:04:05 [Info] Rtap Platform Rtap88551777629845 execv work --secnet_rasp_agent on pid 1696
2026-05-01 18:04:07 [Info] csrss.exe open proc 1696 AliSecCheck.ex
2026-05-01 18:04:08 [Info] csrss.exe open thread 1696 AliSecCheck.ex
2026-05-01 18:04:09 [Info] csrss.exe open thread 1696 AliSecCheck.ex
2026-05-01 18:04:12 [Info] Done Work --secnet_rasp_agent:1
2026-05-01 18:04:12 [Info] Rtap Platform Rtap88551777629845 Exit:normal exit
2026-05-01 18:04:14 [Info] ClientDisConnectNotify : Rtap88551777629845, id is 00000504
2026-05-01 18:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16388","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16448","aliyundun_upload_time":"1777629986","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 18:20:49 [Info] get meta data success by v2
2026-05-01 18:20:49 [Info] get empty metaserver config
2026-05-01 18:20:49 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 18:20:49 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 18:20:49 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-01 18:20:49 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-01 18:20:49 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-01 18:20:49 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-01 18:20:49 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 18:20:49 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 18:20:50 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-01 18:20:50 [Info] download cert compare md5 same
2026-05-01 18:20:50 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 18:20:50 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 18:20:50 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-01 18:47:04 [Info] TotalPhys:2047,AvailPhys:406,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1388,SelfWorkingSet:16328, SelfPageFile:13544
2026-05-01 18:47:04 [Info] CommitTotal:5280,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:406,SystemCache:298,KernelTotal:264,KernelPaged:170,KernelNonpaged:94,PageSize:4096,HandleCount:27664,ProcessCount:52,ThreadCount:761
2026-05-01 19:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16406","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"16508","aliyundun_upload_time":"1777633575","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 19:47:29 [Info] TotalPhys:2047,AvailPhys:407,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1401,SelfWorkingSet:16336, SelfPageFile:13604
2026-05-01 19:47:29 [Info] CommitTotal:5267,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:407,SystemCache:302,KernelTotal:262,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27612,ProcessCount:52,ThreadCount:759
2026-05-01 20:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16325","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16428","aliyundun_upload_time":"1777637173","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 20:47:55 [Info] TotalPhys:2047,AvailPhys:437,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1407,SelfWorkingSet:16340, SelfPageFile:13668
2026-05-01 20:47:55 [Info] CommitTotal:5261,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:437,SystemCache:209,KernelTotal:262,KernelPaged:169,KernelNonpaged:92,PageSize:4096,HandleCount:27671,ProcessCount:52,ThreadCount:764
2026-05-01 21:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16293","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16340","aliyundun_upload_time":"1777640775","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 21:37:39 [Info] get meta data success by v2
2026-05-01 21:37:39 [Info] get empty metaserver config
2026-05-01 21:37:39 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 21:37:39 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-01 21:37:39 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-01 21:37:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-01 21:37:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-01 21:37:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-01 21:37:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 21:37:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-01 21:37:40 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-01 21:37:40 [Info] download cert compare md5 same
2026-05-01 21:37:40 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 21:37:40 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-01 21:37:40 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-01 21:48:20 [Info] TotalPhys:2047,AvailPhys:443,TotalVirtual:2047,AvailVirtual:1979,TotalPageFile:6669,AvailPageFile:1400,SelfWorkingSet:16408, SelfPageFile:13844
2026-05-01 21:48:20 [Info] CommitTotal:5268,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:443,SystemCache:212,KernelTotal:262,KernelPaged:169,KernelNonpaged:92,PageSize:4096,HandleCount:27707,ProcessCount:52,ThreadCount:770
2026-05-01 22:06:24 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16327","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16436","aliyundun_upload_time":"1777644384","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 22:43:23 [Info] nCurrentClock is 252017100, nCurrentTime is 1777646603
2026-05-01 22:43:23 [Info] SendMessage T_MSG_LOGIN
2026-05-01 22:43:23 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-01 22:43:23 [Info] begin to enable self guard after reconnect
2026-05-01 22:43:23 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-01 22:43:23 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-01 22:43:23 [Info] GetMessage : T_MSG_CHECK
2026-05-01 22:43:23 [Info] task 6059091a-d7d0-4279-b758-23cf6b4eeec5 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 22:43:26 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-01 22:43:26 [Info] key : cpu, value : 10
2026-05-01 22:43:26 [Info] key : rio, value : 20480
2026-05-01 22:43:26 [Info] key : wio, value : 20480
2026-05-01 22:43:26 [Info] key : cpu_all, value : 0
2026-05-01 22:43:26 [Info] key : max_pid_check, value : 200
2026-05-01 22:43:26 [Info] key : throw_dump, value : 0
2026-05-01 22:43:26 [Info] key : hash_mode, value : 1
2026-05-01 22:43:26 [Info] key : mem, value : 200
2026-05-01 22:43:26 [Info] can not find key max_fd in online conf
2026-05-01 22:43:26 [Info] key : proc_limit, value : 1
2026-05-01 22:43:26 [Info] key : resource_limit_mode, value : 3
2026-05-01 22:43:26 [Info] key : rtap_update_mode, value : 1
2026-05-01 22:43:26 [Info] can not find key debug in online conf
2026-05-01 22:43:26 [Info] can not find key update_mode in online conf
2026-05-01 22:43:26 [Info] can not find key http_mode in online conf
2026-05-01 22:43:26 [Info] can not find key rtap_enable in online conf
2026-05-01 22:43:26 [Info] can not find key rtap_new_agent in online conf
2026-05-01 22:43:26 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-01 22:43:26 [Info] can not find key mem_low_mark in online conf
2026-05-01 22:43:26 [Info] can not find key obnormal_report_interval in online conf
2026-05-01 22:43:26 [Info] key : cache_mode, value : 0
2026-05-01 22:43:26 [Info] key : abnormal_monitor_mode, value : 3
2026-05-01 22:43:26 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-01 22:43:26 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-01 22:43:26 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-01 22:43:26 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-01 22:43:26 [Info] key : queue_size_ratio, value : 80
2026-05-01 22:43:26 [Info] queue_size_ratio is 80
2026-05-01 22:43:26 [Info] resource limit mode and max limit cpu is not change
2026-05-01 22:43:26 [Info] set hash mode 1
2026-05-01 22:43:26 [Info] RTAP timeout config:9600000
2026-05-01 22:43:26 [Info] self_guard_mode config is 0
2026-05-01 22:43:29 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 22:43:29 [Info] ipc client:Rtap308311777646609_handler Reg client_name:Rtap308311777646609 on WhiteList
2026-05-01 22:43:29 [Info] start rtap process success, pid is 4288, argument is Rtap308311777646609
2026-05-01 22:43:29 [Info] New ClientConnectNotify : Rtap308311777646609, id is 0000052C
2026-05-01 22:43:30 [Info] Rtap Platform Rtap308311777646609 execv work --windows-sysinfoext-check on pid 4288
2026-05-01 22:43:30 [Info] ipc client:Rtap308311777646609 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 22:43:30 [Info] csrss.exe open proc 4288 AliSecCheck.ex
2026-05-01 22:43:31 [Info] csrss.exe open thread 4288 AliSecCheck.ex
2026-05-01 22:43:31 [Info] GetMessage : T_MSG_CHECK
2026-05-01 22:43:31 [Info] task 1fde7af194c0db1fcbfcdf0259afc892 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-01 22:43:34 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-01 22:43:34 [Info] ipc client:Rtap308481777646614_handler Reg client_name:Rtap308481777646614 on WhiteList
2026-05-01 22:43:34 [Info] start rtap process success, pid is 3640, argument is Rtap308481777646614
2026-05-01 22:43:34 [Info] New ClientConnectNotify : Rtap308481777646614, id is 000001E4
2026-05-01 22:43:34 [Info] ipc client:Rtap308481777646614 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-01 22:43:35 [Info] Rtap Platform Rtap308481777646614 execv work --windows-vul-check on pid 3640
2026-05-01 22:43:37 [Info] csrss.exe open proc 3640 AliSecCheck.ex
2026-05-01 22:43:38 [Info] csrss.exe open thread 3640 AliSecCheck.ex
2026-05-01 22:43:38 [Info] Done Work --windows-sysinfoext-check:1
2026-05-01 22:43:38 [Info] Rtap Platform Rtap308311777646609 Exit:normal exit
2026-05-01 22:43:40 [Info] ClientDisConnectNotify : Rtap308311777646609, id is 0000052C
2026-05-01 22:43:44 [Info] Done Work --windows-vul-check:1
2026-05-01 22:43:44 [Info] Rtap Platform Rtap308481777646614 Exit:normal exit
2026-05-01 22:43:46 [Info] ClientDisConnectNotify : Rtap308481777646614, id is 000001E4
2026-05-01 22:48:46 [Info] TotalPhys:2047,AvailPhys:417,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1396,SelfWorkingSet:16272, SelfPageFile:13420
2026-05-01 22:48:46 [Info] CommitTotal:5272,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:417,SystemCache:280,KernelTotal:266,KernelPaged:172,KernelNonpaged:93,PageSize:4096,HandleCount:27789,ProcessCount:53,ThreadCount:778
2026-05-01 23:06:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16302","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16364","aliyundun_upload_time":"1777647992","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-01 23:49:10 [Info] TotalPhys:2047,AvailPhys:405,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1382,SelfWorkingSet:16328, SelfPageFile:13616
2026-05-01 23:49:10 [Info] CommitTotal:5287,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:405,SystemCache:283,KernelTotal:266,KernelPaged:173,KernelNonpaged:93,PageSize:4096,HandleCount:27615,ProcessCount:52,ThreadCount:771
2026-05-02 00:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16336","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16412","aliyundun_upload_time":"1777651595","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}