2026-05-02 00:49:35 [Info] TotalPhys:2047,AvailPhys:418,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1384,SelfWorkingSet:16340, SelfPageFile:13532
2026-05-02 00:49:35 [Info] CommitTotal:5284,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:418,SystemCache:286,KernelTotal:266,KernelPaged:173,KernelNonpaged:93,PageSize:4096,HandleCount:27613,ProcessCount:52,ThreadCount:767
2026-05-02 00:54:41 [Info] get meta data success by v2
2026-05-02 00:54:41 [Info] get empty metaserver config
2026-05-02 00:54:41 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 00:54:41 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 00:54:41 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-02 00:54:41 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-02 00:54:41 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-02 00:54:41 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-02 00:54:41 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 00:54:41 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 00:54:42 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-02 00:54:42 [Info] download cert compare md5 same
2026-05-02 00:54:42 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 00:54:42 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 00:54:42 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-02 01:06:14 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16384","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16604","aliyundun_upload_time":"1777655174","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-05-02 01:44:23 [Info] GetMessage : T_MSG_CHECK
2026-05-02 01:44:23 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2NTc0NjMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NzAwNjYzLCJzdWIiOiJSVEFQX0lEWF8xODA1OTVfMTc3NzY1NzQ2Mzc4NCJ9.IDVMcoPHfsi8MEAIUfSlyXIV6_kFuiRGFHpuI8md7HQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 01:44:27 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 01:44:27 [Info] ipc client:Rtap7531777657467_handler Reg client_name:Rtap7531777657467 on WhiteList
2026-05-02 01:44:27 [Info] start rtap process success, pid is 3044, argument is Rtap7531777657467
2026-05-02 01:44:28 [Info] New ClientConnectNotify : Rtap7531777657467, id is 000004C8
2026-05-02 01:44:28 [Info] ipc client:Rtap7531777657467 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 01:44:28 [Info] Rtap Platform Rtap7531777657467 execv work --sca on pid 3044
2026-05-02 01:44:30 [Info] csrss.exe open proc 3044 AliSecCheck.ex
2026-05-02 01:44:31 [Info] csrss.exe open thread 3044 AliSecCheck.ex
2026-05-02 01:44:53 [Info] csrss.exe open thread 3044 AliSecCheck.ex
2026-05-02 01:45:11 [Info] Done Work --sca:1
2026-05-02 01:45:11 [Info] Rtap Platform Rtap7531777657467 Exit:normal exit
2026-05-02 01:45:14 [Info] ClientDisConnectNotify : Rtap7531777657467, id is 000004C8
2026-05-02 01:50:05 [Info] TotalPhys:2047,AvailPhys:357,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1380,SelfWorkingSet:16440, SelfPageFile:13632
2026-05-02 01:50:05 [Info] CommitTotal:5288,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:357,SystemCache:247,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27618,ProcessCount:52,ThreadCount:766
2026-05-02 02:06:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16395","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16508","aliyundun_upload_time":"1777658791","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 02:50:30 [Info] TotalPhys:2047,AvailPhys:372,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1382,SelfWorkingSet:16480, SelfPageFile:13704
2026-05-02 02:50:30 [Info] CommitTotal:5286,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:372,SystemCache:252,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27637,ProcessCount:52,ThreadCount:765
2026-05-02 03:06:24 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16437","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16516","aliyundun_upload_time":"1777662384","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 03:50:55 [Info] TotalPhys:2047,AvailPhys:380,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1402,SelfWorkingSet:16524, SelfPageFile:13716
2026-05-02 03:50:55 [Info] CommitTotal:5266,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:380,SystemCache:264,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27648,ProcessCount:52,ThreadCount:767
2026-05-02 04:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16468","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16524","aliyundun_upload_time":"1777665986","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 04:11:52 [Info] get meta data success by v2
2026-05-02 04:11:52 [Info] get empty metaserver config
2026-05-02 04:11:52 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 04:11:53 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 04:11:53 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-02 04:11:53 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-02 04:11:53 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-02 04:11:53 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-02 04:11:53 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 04:11:53 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 04:11:53 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-02 04:11:53 [Info] download cert compare md5 same
2026-05-02 04:11:53 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 04:11:53 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 04:11:53 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-02 04:11:53 [Info] nCurrentClock is 270018100, nCurrentTime is 1777666313
2026-05-02 04:11:53 [Info] SendMessage T_MSG_LOGIN
2026-05-02 04:11:53 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-02 04:11:53 [Info] begin to enable self guard after reconnect
2026-05-02 04:11:53 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-02 04:11:53 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-02 04:11:53 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-02 04:11:53 [Info] key : cpu, value : 10
2026-05-02 04:11:53 [Info] key : rio, value : 20480
2026-05-02 04:11:53 [Info] key : wio, value : 20480
2026-05-02 04:11:53 [Info] key : cpu_all, value : 0
2026-05-02 04:11:53 [Info] key : max_pid_check, value : 200
2026-05-02 04:11:53 [Info] key : throw_dump, value : 0
2026-05-02 04:11:53 [Info] key : hash_mode, value : 1
2026-05-02 04:11:53 [Info] key : mem, value : 200
2026-05-02 04:11:53 [Info] can not find key max_fd in online conf
2026-05-02 04:11:53 [Info] key : proc_limit, value : 1
2026-05-02 04:11:53 [Info] key : resource_limit_mode, value : 3
2026-05-02 04:11:53 [Info] key : rtap_update_mode, value : 1
2026-05-02 04:11:53 [Info] can not find key debug in online conf
2026-05-02 04:11:53 [Info] can not find key update_mode in online conf
2026-05-02 04:11:53 [Info] can not find key http_mode in online conf
2026-05-02 04:11:53 [Info] can not find key rtap_enable in online conf
2026-05-02 04:11:53 [Info] can not find key rtap_new_agent in online conf
2026-05-02 04:11:53 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-02 04:11:53 [Info] can not find key mem_low_mark in online conf
2026-05-02 04:11:53 [Info] can not find key obnormal_report_interval in online conf
2026-05-02 04:11:53 [Info] key : cache_mode, value : 0
2026-05-02 04:11:53 [Info] key : abnormal_monitor_mode, value : 3
2026-05-02 04:11:53 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-02 04:11:53 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-02 04:11:53 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-02 04:11:53 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-02 04:11:53 [Info] key : queue_size_ratio, value : 80
2026-05-02 04:11:53 [Info] queue_size_ratio is 80
2026-05-02 04:11:53 [Info] resource limit mode and max limit cpu is not change
2026-05-02 04:11:53 [Info] set hash mode 1
2026-05-02 04:11:53 [Info] RTAP timeout config:9600000
2026-05-02 04:11:53 [Info] self_guard_mode config is 0
2026-05-02 04:11:54 [Info] GetMessage : T_MSG_CHECK
2026-05-02 04:11:54 [Info] task cdf9c1c0-6259-4d49-aa56-ae47e5c0aff3 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 04:11:56 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-02 04:12:00 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 04:12:00 [Info] ipc client:Rtap296631777666320_handler Reg client_name:Rtap296631777666320 on WhiteList
2026-05-02 04:12:00 [Info] start rtap process success, pid is 1912, argument is Rtap296631777666320
2026-05-02 04:12:00 [Info] New ClientConnectNotify : Rtap296631777666320, id is 000001E4
2026-05-02 04:12:01 [Info] ipc client:Rtap296631777666320 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 04:12:01 [Info] Rtap Platform Rtap296631777666320 execv work --windows-sysinfoext-check on pid 1912
2026-05-02 04:12:03 [Info] csrss.exe open proc 1912 AliSecCheck.ex
2026-05-02 04:12:04 [Info] csrss.exe open thread 1912 AliSecCheck.ex
2026-05-02 04:12:12 [Info] Done Work --windows-sysinfoext-check:1
2026-05-02 04:12:12 [Info] Rtap Platform Rtap296631777666320 Exit:normal exit
2026-05-02 04:12:14 [Info] ClientDisConnectNotify : Rtap296631777666320, id is 000001E4
2026-05-02 04:51:20 [Info] TotalPhys:2047,AvailPhys:374,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1396,SelfWorkingSet:16360, SelfPageFile:13648
2026-05-02 04:51:20 [Info] CommitTotal:5272,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:374,SystemCache:269,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27622,ProcessCount:52,ThreadCount:767
2026-05-02 05:06:28 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16362","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"7","aliyundun_max_mem":"16532","aliyundun_upload_time":"1777669588","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 05:51:46 [Info] TotalPhys:2047,AvailPhys:364,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1382,SelfWorkingSet:16388, SelfPageFile:13640
2026-05-02 05:51:46 [Info] CommitTotal:5286,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:364,SystemCache:270,KernelTotal:271,KernelPaged:177,KernelNonpaged:93,PageSize:4096,HandleCount:27624,ProcessCount:52,ThreadCount:768
2026-05-02 06:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16374","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16452","aliyundun_upload_time":"1777673186","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 06:52:10 [Info] TotalPhys:2047,AvailPhys:370,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1389,SelfWorkingSet:16268, SelfPageFile:13544
2026-05-02 06:52:10 [Info] CommitTotal:5279,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:370,SystemCache:273,KernelTotal:270,KernelPaged:177,KernelNonpaged:93,PageSize:4096,HandleCount:27616,ProcessCount:52,ThreadCount:768
2026-05-02 07:06:22 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16279","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16372","aliyundun_upload_time":"1777676782","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 07:28:36 [Info] get meta data success by v2
2026-05-02 07:28:36 [Info] get empty metaserver config
2026-05-02 07:28:36 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 07:28:36 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 07:28:36 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-02 07:28:36 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-02 07:28:36 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-02 07:28:36 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-02 07:28:36 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 07:28:36 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 07:28:36 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-02 07:28:36 [Info] download cert compare md5 same
2026-05-02 07:28:36 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 07:28:36 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 07:28:36 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-02 07:44:31 [Info] GetMessage : T_MSG_CHECK
2026-05-02 07:44:31 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2NzkwNzEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NzIyMjcxLCJzdWIiOiJSVEFQX0lEWF8xODA1OTdfMTc3NzY3OTA3MTUwMSJ9.SER4GSc-Ym8jUMZNjU7rpTFoJer3EMKEyKVMCUCuA9I has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 07:44:35 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 07:44:35 [Info] ipc client:Rtap57801777679075_handler Reg client_name:Rtap57801777679075 on WhiteList
2026-05-02 07:44:35 [Info] start rtap process success, pid is 2940, argument is Rtap57801777679075
2026-05-02 07:44:35 [Info] New ClientConnectNotify : Rtap57801777679075, id is 00000504
2026-05-02 07:44:35 [Info] ipc client:Rtap57801777679075 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 07:44:36 [Info] Rtap Platform Rtap57801777679075 execv work --windows-vul-clean on pid 2940
2026-05-02 07:44:37 [Info] csrss.exe open proc 2940 AliSecCheck.ex
2026-05-02 07:44:38 [Info] csrss.exe open thread 2940 AliSecCheck.ex
2026-05-02 07:44:43 [Info] Done Work --windows-vul-clean:1
2026-05-02 07:44:43 [Info] Rtap Platform Rtap57801777679075 Exit:normal exit
2026-05-02 07:44:45 [Info] ClientDisConnectNotify : Rtap57801777679075, id is 00000504
2026-05-02 07:52:35 [Info] TotalPhys:2047,AvailPhys:360,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1381,SelfWorkingSet:16384, SelfPageFile:13692
2026-05-02 07:52:35 [Info] CommitTotal:5287,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:360,SystemCache:269,KernelTotal:271,KernelPaged:178,KernelNonpaged:93,PageSize:4096,HandleCount:27721,ProcessCount:52,ThreadCount:766
2026-05-02 08:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16269","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16404","aliyundun_upload_time":"1777680376","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 08:49:11 [Info] GetMessage : T_MSG_CHECK
2026-05-02 08:49:11 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2ODI5NTEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NzI2MTUxLCJzdWIiOiJSVEFQX0lEWF8xODA1ODVfMTc3NzY4Mjk1MTQzNSJ9.aC2Oyrj6980a3tp6_mF-boFL9sDlUQfp21VaCzgmJro has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 08:49:17 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 08:49:17 [Info] ipc client:Rtap184571777682957_handler Reg client_name:Rtap184571777682957 on WhiteList
2026-05-02 08:49:17 [Info] start rtap process success, pid is 3404, argument is Rtap184571777682957
2026-05-02 08:49:18 [Info] New ClientConnectNotify : Rtap184571777682957, id is 0000052C
2026-05-02 08:49:18 [Info] ipc client:Rtap184571777682957 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 08:49:18 [Info] Rtap Platform Rtap184571777682957 execv work --windows-process-check on pid 3404
2026-05-02 08:49:19 [Info] csrss.exe open proc 3404 AliSecCheck.ex
2026-05-02 08:49:20 [Info] csrss.exe open thread 3404 AliSecCheck.ex
2026-05-02 08:49:41 [Info] Done Work --windows-process-check:1
2026-05-02 08:49:41 [Info] Rtap Platform Rtap184571777682957 Exit:normal exit
2026-05-02 08:49:43 [Info] ClientDisConnectNotify : Rtap184571777682957, id is 0000052C
2026-05-02 08:53:01 [Info] TotalPhys:2047,AvailPhys:380,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1401,SelfWorkingSet:16416, SelfPageFile:13636
2026-05-02 08:53:01 [Info] CommitTotal:5267,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:380,SystemCache:294,KernelTotal:270,KernelPaged:177,KernelNonpaged:93,PageSize:4096,HandleCount:27705,ProcessCount:52,ThreadCount:765
2026-05-02 09:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16303","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16416","aliyundun_upload_time":"1777683985","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"82","module_load_failed":"0","network_recv_buff_size":"4","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 09:39:10 [Info] nCurrentClock is 288019000, nCurrentTime is 1777685950
2026-05-02 09:39:10 [Info] SendMessage T_MSG_LOGIN
2026-05-02 09:39:10 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-02 09:39:10 [Info] begin to enable self guard after reconnect
2026-05-02 09:39:11 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-02 09:39:11 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-02 09:39:11 [Info] GetMessage : T_MSG_CHECK
2026-05-02 09:39:11 [Info] task ca26b351-4b2f-4029-8759-fa9dbc3751b7 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 09:39:13 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-02 09:39:13 [Info] key : cpu, value : 10
2026-05-02 09:39:13 [Info] key : rio, value : 20480
2026-05-02 09:39:13 [Info] key : wio, value : 20480
2026-05-02 09:39:13 [Info] key : cpu_all, value : 0
2026-05-02 09:39:13 [Info] key : max_pid_check, value : 200
2026-05-02 09:39:13 [Info] key : throw_dump, value : 0
2026-05-02 09:39:13 [Info] key : hash_mode, value : 1
2026-05-02 09:39:13 [Info] key : mem, value : 200
2026-05-02 09:39:13 [Info] can not find key max_fd in online conf
2026-05-02 09:39:13 [Info] key : proc_limit, value : 1
2026-05-02 09:39:13 [Info] key : resource_limit_mode, value : 3
2026-05-02 09:39:13 [Info] key : rtap_update_mode, value : 1
2026-05-02 09:39:13 [Info] can not find key debug in online conf
2026-05-02 09:39:13 [Info] can not find key update_mode in online conf
2026-05-02 09:39:13 [Info] can not find key http_mode in online conf
2026-05-02 09:39:13 [Info] can not find key rtap_enable in online conf
2026-05-02 09:39:13 [Info] can not find key rtap_new_agent in online conf
2026-05-02 09:39:13 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-02 09:39:13 [Info] can not find key mem_low_mark in online conf
2026-05-02 09:39:13 [Info] can not find key obnormal_report_interval in online conf
2026-05-02 09:39:13 [Info] key : cache_mode, value : 0
2026-05-02 09:39:13 [Info] key : abnormal_monitor_mode, value : 3
2026-05-02 09:39:13 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-02 09:39:13 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-02 09:39:13 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-02 09:39:13 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-02 09:39:13 [Info] key : queue_size_ratio, value : 80
2026-05-02 09:39:13 [Info] queue_size_ratio is 80
2026-05-02 09:39:13 [Info] resource limit mode and max limit cpu is not change
2026-05-02 09:39:13 [Info] set hash mode 1
2026-05-02 09:39:13 [Info] RTAP timeout config:9600000
2026-05-02 09:39:13 [Info] self_guard_mode config is 0
2026-05-02 09:39:17 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 09:39:17 [Info] ipc client:Rtap282531777685957_handler Reg client_name:Rtap282531777685957 on WhiteList
2026-05-02 09:39:17 [Info] start rtap process success, pid is 4956, argument is Rtap282531777685957
2026-05-02 09:39:17 [Info] New ClientConnectNotify : Rtap282531777685957, id is 00000504
2026-05-02 09:39:17 [Info] ipc client:Rtap282531777685957 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 09:39:18 [Info] Rtap Platform Rtap282531777685957 execv work --windows-sysinfoext-check on pid 4956
2026-05-02 09:39:19 [Info] csrss.exe open proc 4956 AliSecCheck.ex
2026-05-02 09:39:20 [Info] csrss.exe open thread 4956 AliSecCheck.ex
2026-05-02 09:39:25 [Info] Done Work --windows-sysinfoext-check:1
2026-05-02 09:39:25 [Info] Rtap Platform Rtap282531777685957 Exit:normal exit
2026-05-02 09:39:27 [Info] ClientDisConnectNotify : Rtap282531777685957, id is 00000504
2026-05-02 09:53:24 [Info] TotalPhys:2047,AvailPhys:363,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1388,SelfWorkingSet:16356, SelfPageFile:13516
2026-05-02 09:53:24 [Info] CommitTotal:5281,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:363,SystemCache:270,KernelTotal:267,KernelPaged:174,KernelNonpaged:93,PageSize:4096,HandleCount:27975,ProcessCount:53,ThreadCount:781
2026-05-02 10:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16358","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16480","aliyundun_upload_time":"1777687578","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 10:25:01 [Info] GetMessage : T_MSG_CHECK
2026-05-02 10:25:01 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2ODg3MDEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NzMxOTAxLCJzdWIiOiJSVEFQX0lEWF8xODA1ODhfMTc3NzY4ODcwMTQzNCJ9.l5tXtipNMxHnETKAOhwjgWgq9tXO7IFU1t90FSkkFbU has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 10:25:05 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 10:25:05 [Info] ipc client:Rtap44591777688705_handler Reg client_name:Rtap44591777688705 on WhiteList
2026-05-02 10:25:05 [Info] start rtap process success, pid is 1760, argument is Rtap44591777688705
2026-05-02 10:25:05 [Info] New ClientConnectNotify : Rtap44591777688705, id is 00000524
2026-05-02 10:25:05 [Info] ipc client:Rtap44591777688705 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 10:25:05 [Info] Rtap Platform Rtap44591777688705 execv work --windows-schedule-task-check on pid 1760
2026-05-02 10:25:06 [Info] csrss.exe open proc 1760 AliSecCheck.ex
2026-05-02 10:25:07 [Info] csrss.exe open thread 1760 AliSecCheck.ex
2026-05-02 10:25:45 [Info] Done Work --windows-schedule-task-check:1
2026-05-02 10:25:45 [Info] Rtap Platform Rtap44591777688705 Exit:normal exit
2026-05-02 10:25:47 [Info] ClientDisConnectNotify : Rtap44591777688705, id is 00000524
2026-05-02 10:25:48 [Info] GetMessage : T_MSG_CHECK
2026-05-02 10:25:48 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2ODg3NDgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3MzM1NjQ1LCJleHAiOjE3Nzc3MzE5NDgsInN1YiI6IlJUQVBfSURYXzE4MDYwMF8xNzc3Njg4NzQ4MzAwIn0.n5VUKRqCgz4EOYmGUNcuQGMJgZDm55KBYFFpygg9jkg has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 10:25:52 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 10:25:52 [Info] ipc client:Rtap46131777688752_handler Reg client_name:Rtap46131777688752 on WhiteList
2026-05-02 10:25:52 [Info] start rtap process success, pid is 3328, argument is Rtap46131777688752
2026-05-02 10:25:52 [Info] New ClientConnectNotify : Rtap46131777688752, id is 00000504
2026-05-02 10:25:53 [Info] ipc client:Rtap46131777688752 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 10:25:53 [Info] Rtap Platform Rtap46131777688752 execv work --windows-driver-version-check on pid 3328
2026-05-02 10:25:54 [Info] csrss.exe open proc 3328 AliSecCheck.ex
2026-05-02 10:25:55 [Info] csrss.exe open thread 3328 AliSecCheck.ex
2026-05-02 10:26:00 [Info] Done Work --windows-driver-version-check:1
2026-05-02 10:26:00 [Info] Rtap Platform Rtap46131777688752 Exit:normal exit
2026-05-02 10:26:03 [Info] ClientDisConnectNotify : Rtap46131777688752, id is 00000504
2026-05-02 10:31:20 [Info] GetMessage : T_MSG_CHECK
2026-05-02 10:31:20 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2ODkwODAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NzMyMjgwLCJzdWIiOiJSVEFQX0lEWF8xODA1OTRfMTc3NzY4OTA4MDgwNSJ9.83r7FhuKZcnkOlmHwBhFKLxfwbA7xAkxe3uYoT-MwQs has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 10:31:26 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 10:31:26 [Info] ipc client:Rtap57031777689086_handler Reg client_name:Rtap57031777689086 on WhiteList
2026-05-02 10:31:26 [Info] start rtap process success, pid is 1560, argument is Rtap57031777689086
2026-05-02 10:31:26 [Info] New ClientConnectNotify : Rtap57031777689086, id is 00000524
2026-05-02 10:31:26 [Info] ipc client:Rtap57031777689086 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 10:31:27 [Info] Rtap Platform Rtap57031777689086 execv work --windows-registry-check on pid 1560
2026-05-02 10:31:29 [Info] csrss.exe open proc 1560 AliSecCheck.ex
2026-05-02 10:31:30 [Info] csrss.exe open thread 1560 AliSecCheck.ex
2026-05-02 10:32:02 [Info] Done Work --windows-registry-check:1
2026-05-02 10:32:02 [Info] Rtap Platform Rtap57031777689086 Exit:normal exit
2026-05-02 10:32:04 [Info] ClientDisConnectNotify : Rtap57031777689086, id is 00000524
2026-05-02 10:45:04 [Info] get meta data success by v2
2026-05-02 10:45:04 [Info] get empty metaserver config
2026-05-02 10:45:04 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 10:45:04 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 10:45:04 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-02 10:45:05 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-02 10:45:05 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-02 10:45:05 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-02 10:45:05 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 10:45:05 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 10:45:05 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-02 10:45:05 [Info] download cert compare md5 same
2026-05-02 10:45:05 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 10:45:05 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 10:45:05 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-02 10:53:51 [Info] TotalPhys:2047,AvailPhys:403,TotalVirtual:2047,AvailVirtual:1979,TotalPageFile:6669,AvailPageFile:1388,SelfWorkingSet:16528, SelfPageFile:13844
2026-05-02 10:53:51 [Info] CommitTotal:5280,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:403,SystemCache:200,KernelTotal:265,KernelPaged:172,KernelNonpaged:93,PageSize:4096,HandleCount:27724,ProcessCount:52,ThreadCount:765
2026-05-02 10:55:51 [Info] GetMessage : T_MSG_CHECK
2026-05-02 10:55:51 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2OTA1NTEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NzMzNzUxLCJzdWIiOiJSVEFQX0lEWF8xODA1ODZfMTc3NzY5MDU1MTIwOCJ9.dGabn19lJQr-xWff_zRilNUw9_AIuJCzPOGP2IZsxHo has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 10:55:57 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 10:55:57 [Info] ipc client:Rtap105071777690557_handler Reg client_name:Rtap105071777690557 on WhiteList
2026-05-02 10:55:57 [Info] start rtap process success, pid is 232, argument is Rtap105071777690557
2026-05-02 10:55:57 [Info] New ClientConnectNotify : Rtap105071777690557, id is 0000052C
2026-05-02 10:55:57 [Info] ipc client:Rtap105071777690557 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 10:55:57 [Info] Rtap Platform Rtap105071777690557 execv work --tcp-connect-check on pid 232
2026-05-02 10:55:59 [Info] csrss.exe open proc 232 AliSecCheck.ex
2026-05-02 10:56:00 [Info] csrss.exe open thread 232 AliSecCheck.ex
2026-05-02 10:56:08 [Info] Done Work --tcp-connect-check:1
2026-05-02 10:56:08 [Info] Rtap Platform Rtap105071777690557 Exit:normal exit
2026-05-02 10:56:11 [Info] ClientDisConnectNotify : Rtap105071777690557, id is 0000052C
2026-05-02 11:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16446","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"16672","aliyundun_upload_time":"1777691197","aliyundun_write_pid_times":"0","ipc_send_count":"154","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 11:09:07 [Info] GetMessage : T_MSG_CHECK
2026-05-02 11:09:07 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc2OTEzNDcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NzM0NTQ3LCJzdWIiOiJSVEFQX0lEWF8xODA1OTFfMTc3NzY5MTM0NzU3MSJ9.dcJD2cKXX9yvM1ptT36-A0rKpO5F7sVZncffTWSphJM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 11:09:14 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 11:09:14 [Info] ipc client:Rtap131101777691354_handler Reg client_name:Rtap131101777691354 on WhiteList
2026-05-02 11:09:14 [Info] start rtap process success, pid is 1696, argument is Rtap131101777691354
2026-05-02 11:09:14 [Info] New ClientConnectNotify : Rtap131101777691354, id is 000001E4
2026-05-02 11:09:14 [Info] ipc client:Rtap131101777691354 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 11:09:14 [Info] Rtap Platform Rtap131101777691354 execv work --windows-autorun-item-check on pid 1696
2026-05-02 11:09:16 [Info] csrss.exe open proc 1696 AliSecCheck.ex
2026-05-02 11:09:17 [Info] csrss.exe open thread 1696 AliSecCheck.ex
2026-05-02 11:09:29 [Info] Done Work --windows-autorun-item-check:1
2026-05-02 11:09:29 [Info] Rtap Platform Rtap131101777691354 Exit:normal exit
2026-05-02 11:09:31 [Info] ClientDisConnectNotify : Rtap131101777691354, id is 000001E4
2026-05-02 11:54:17 [Info] TotalPhys:2047,AvailPhys:395,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1394,SelfWorkingSet:16492, SelfPageFile:13716
2026-05-02 11:54:17 [Info] CommitTotal:5274,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:395,SystemCache:203,KernelTotal:266,KernelPaged:173,KernelNonpaged:93,PageSize:4096,HandleCount:27739,ProcessCount:52,ThreadCount:763
2026-05-02 12:06:11 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16467","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16504","aliyundun_upload_time":"1777694771","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 12:54:42 [Info] TotalPhys:2047,AvailPhys:407,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1392,SelfWorkingSet:16456, SelfPageFile:13716
2026-05-02 12:54:42 [Info] CommitTotal:5276,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:407,SystemCache:273,KernelTotal:269,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27763,ProcessCount:52,ThreadCount:764
2026-05-02 13:06:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16442","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16580","aliyundun_upload_time":"1777698391","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 13:55:05 [Info] TotalPhys:2047,AvailPhys:387,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1383,SelfWorkingSet:16416, SelfPageFile:13588
2026-05-02 13:55:05 [Info] CommitTotal:5285,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:387,SystemCache:279,KernelTotal:269,KernelPaged:176,KernelNonpaged:92,PageSize:4096,HandleCount:27792,ProcessCount:52,ThreadCount:769
2026-05-02 14:01:54 [Info] get meta data success by v2
2026-05-02 14:01:54 [Info] get empty metaserver config
2026-05-02 14:01:54 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 14:01:54 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 14:01:54 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-02 14:01:54 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-02 14:01:54 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-02 14:01:54 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-02 14:01:54 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 14:01:54 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 14:01:54 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-02 14:01:54 [Info] download cert compare md5 same
2026-05-02 14:01:54 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 14:01:54 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 14:01:54 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-02 14:06:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16411","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16596","aliyundun_upload_time":"1777701991","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 14:55:30 [Info] TotalPhys:2047,AvailPhys:458,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1410,SelfWorkingSet:16492, SelfPageFile:13704
2026-05-02 14:55:30 [Info] CommitTotal:5259,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:458,SystemCache:183,KernelTotal:253,KernelPaged:168,KernelNonpaged:85,PageSize:4096,HandleCount:27828,ProcessCount:52,ThreadCount:779
2026-05-02 15:06:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16498","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16596","aliyundun_upload_time":"1777705592","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 15:07:33 [Info] nCurrentClock is 306020100, nCurrentTime is 1777705653
2026-05-02 15:07:33 [Info] SendMessage T_MSG_LOGIN
2026-05-02 15:07:33 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-02 15:07:33 [Info] begin to enable self guard after reconnect
2026-05-02 15:07:33 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-02 15:07:33 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-02 15:07:34 [Info] GetMessage : T_MSG_CHECK
2026-05-02 15:07:34 [Info] task a118d59b-5071-462d-b74f-329d2c06463a has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 15:07:36 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-02 15:07:36 [Info] key : cpu, value : 10
2026-05-02 15:07:36 [Info] key : rio, value : 20480
2026-05-02 15:07:36 [Info] key : wio, value : 20480
2026-05-02 15:07:36 [Info] key : cpu_all, value : 0
2026-05-02 15:07:36 [Info] key : max_pid_check, value : 200
2026-05-02 15:07:36 [Info] key : throw_dump, value : 0
2026-05-02 15:07:36 [Info] key : hash_mode, value : 1
2026-05-02 15:07:36 [Info] key : mem, value : 200
2026-05-02 15:07:36 [Info] can not find key max_fd in online conf
2026-05-02 15:07:36 [Info] key : proc_limit, value : 1
2026-05-02 15:07:36 [Info] key : resource_limit_mode, value : 3
2026-05-02 15:07:36 [Info] key : rtap_update_mode, value : 1
2026-05-02 15:07:36 [Info] can not find key debug in online conf
2026-05-02 15:07:36 [Info] can not find key update_mode in online conf
2026-05-02 15:07:36 [Info] can not find key http_mode in online conf
2026-05-02 15:07:36 [Info] can not find key rtap_enable in online conf
2026-05-02 15:07:36 [Info] can not find key rtap_new_agent in online conf
2026-05-02 15:07:36 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-02 15:07:36 [Info] can not find key mem_low_mark in online conf
2026-05-02 15:07:36 [Info] can not find key obnormal_report_interval in online conf
2026-05-02 15:07:36 [Info] key : cache_mode, value : 0
2026-05-02 15:07:36 [Info] key : abnormal_monitor_mode, value : 3
2026-05-02 15:07:36 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-02 15:07:36 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-02 15:07:36 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-02 15:07:36 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-02 15:07:36 [Info] key : queue_size_ratio, value : 80
2026-05-02 15:07:36 [Info] queue_size_ratio is 80
2026-05-02 15:07:36 [Info] resource limit mode and max limit cpu is not change
2026-05-02 15:07:36 [Info] set hash mode 1
2026-05-02 15:07:36 [Info] RTAP timeout config:9600000
2026-05-02 15:07:36 [Info] self_guard_mode config is 0
2026-05-02 15:07:40 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 15:07:40 [Info] ipc client:Rtap270591777705660_handler Reg client_name:Rtap270591777705660 on WhiteList
2026-05-02 15:07:40 [Info] start rtap process success, pid is 1560, argument is Rtap270591777705660
2026-05-02 15:07:43 [Info] csrss.exe open proc 1560 AliSecCheck.ex
2026-05-02 15:07:44 [Info] csrss.exe open thread 1560 AliSecCheck.ex
2026-05-02 15:07:45 [Info] csrss.exe open thread 1560 AliSecCheck.ex
2026-05-02 15:07:46 [Info] csrss.exe open thread 1560 AliSecCheck.ex
2026-05-02 15:07:47 [Info] New ClientConnectNotify : Rtap270591777705660, id is 00000504
2026-05-02 15:07:47 [Info] Rtap Platform Rtap270591777705660 execv work --windows-sysinfoext-check on pid 1560
2026-05-02 15:07:47 [Info] csrss.exe open thread 1560 AliSecCheck.ex
2026-05-02 15:07:48 [Info] ipc client:Rtap270591777705660 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 15:07:58 [Info] Done Work --windows-sysinfoext-check:1
2026-05-02 15:07:58 [Info] Rtap Platform Rtap270591777705660 Exit:normal exit
2026-05-02 15:08:00 [Info] ClientDisConnectNotify : Rtap270591777705660, id is 00000504
2026-05-02 15:55:57 [Info] TotalPhys:2047,AvailPhys:438,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1413,SelfWorkingSet:16296, SelfPageFile:13556
2026-05-02 15:55:57 [Info] CommitTotal:5255,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:438,SystemCache:238,KernelTotal:253,KernelPaged:169,KernelNonpaged:84,PageSize:4096,HandleCount:27811,ProcessCount:52,ThreadCount:766
2026-05-02 16:06:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16346","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16496","aliyundun_upload_time":"1777709201","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 16:56:22 [Info] TotalPhys:2047,AvailPhys:429,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1406,SelfWorkingSet:16240, SelfPageFile:13556
2026-05-02 16:56:22 [Info] CommitTotal:5262,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:429,SystemCache:261,KernelTotal:254,KernelPaged:169,KernelNonpaged:84,PageSize:4096,HandleCount:27722,ProcessCount:52,ThreadCount:758
2026-05-02 17:06:12 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16252","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16296","aliyundun_upload_time":"1777712772","aliyundun_write_pid_times":"0","ipc_msg_buff_count":"1","ipc_send_count":"135","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 17:18:51 [Info] get meta data success by v2
2026-05-02 17:18:51 [Info] get empty metaserver config
2026-05-02 17:18:51 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 17:18:52 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 17:18:52 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-02 17:18:52 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-02 17:18:52 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-02 17:18:52 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-02 17:18:52 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 17:18:52 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 17:18:52 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-02 17:18:52 [Info] download cert compare md5 same
2026-05-02 17:18:52 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 17:18:52 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 17:18:52 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-02 17:56:47 [Info] TotalPhys:2047,AvailPhys:442,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1408,SelfWorkingSet:16192, SelfPageFile:13316
2026-05-02 17:56:47 [Info] CommitTotal:5260,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:442,SystemCache:233,KernelTotal:254,KernelPaged:169,KernelNonpaged:84,PageSize:4096,HandleCount:27707,ProcessCount:52,ThreadCount:760
2026-05-02 18:02:08 [Info] GetMessage : T_MSG_CHECK
2026-05-02 18:02:08 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc3MTYxMjgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NzU5MzI4LCJzdWIiOiJSVEFQX0lEWF8xODA2NTZfMTc3NzcxNjEyODIzNiJ9.OgoszWeeE_YcPjoRFT579qRf8KW-eLoth6GuKROq8xY has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 18:02:14 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 18:02:14 [Info] ipc client:Rtap284951777716134_handler Reg client_name:Rtap284951777716134 on WhiteList
2026-05-02 18:02:14 [Info] start rtap process success, pid is 2888, argument is Rtap284951777716134
2026-05-02 18:02:14 [Info] New ClientConnectNotify : Rtap284951777716134, id is 000004C8
2026-05-02 18:02:14 [Info] ipc client:Rtap284951777716134 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 18:02:14 [Info] Rtap Platform Rtap284951777716134 execv work --secnet_rasp_agent on pid 2888
2026-05-02 18:02:16 [Info] csrss.exe open proc 2888 AliSecCheck.ex
2026-05-02 18:02:17 [Info] csrss.exe open thread 2888 AliSecCheck.ex
2026-05-02 18:02:18 [Info] csrss.exe open thread 2888 AliSecCheck.ex
2026-05-02 18:02:21 [Info] Done Work --secnet_rasp_agent:1
2026-05-02 18:02:21 [Info] Rtap Platform Rtap284951777716134 Exit:normal exit
2026-05-02 18:02:23 [Info] ClientDisConnectNotify : Rtap284951777716134, id is 000004C8
2026-05-02 18:06:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16263","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16312","aliyundun_upload_time":"1777716401","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 18:57:11 [Info] TotalPhys:2047,AvailPhys:460,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1420,SelfWorkingSet:16244, SelfPageFile:13520
2026-05-02 18:57:11 [Info] CommitTotal:5248,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:460,SystemCache:242,KernelTotal:254,KernelPaged:169,KernelNonpaged:84,PageSize:4096,HandleCount:27715,ProcessCount:52,ThreadCount:758
2026-05-02 19:06:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16279","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16384","aliyundun_upload_time":"1777719999","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 19:57:37 [Info] TotalPhys:2047,AvailPhys:446,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1413,SelfWorkingSet:16236, SelfPageFile:13496
2026-05-02 19:57:37 [Info] CommitTotal:5255,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:446,SystemCache:301,KernelTotal:256,KernelPaged:172,KernelNonpaged:84,PageSize:4096,HandleCount:27737,ProcessCount:52,ThreadCount:761
2026-05-02 20:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16244","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16272","aliyundun_upload_time":"1777723600","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 20:35:40 [Info] get meta data success by v2
2026-05-02 20:35:40 [Info] get empty metaserver config
2026-05-02 20:35:40 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 20:35:40 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 20:35:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-02 20:35:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-02 20:35:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-02 20:35:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-02 20:35:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 20:35:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 20:35:40 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-02 20:35:40 [Info] download cert compare md5 same
2026-05-02 20:35:40 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 20:35:40 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 20:35:40 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-02 20:35:41 [Info] nCurrentClock is 324021200, nCurrentTime is 1777725341
2026-05-02 20:35:41 [Info] SendMessage T_MSG_LOGIN
2026-05-02 20:35:41 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-02 20:35:41 [Info] begin to enable self guard after reconnect
2026-05-02 20:35:41 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-02 20:35:42 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-02 20:35:42 [Info] GetMessage : T_MSG_CHECK
2026-05-02 20:35:42 [Info] task 0c0b4741-0f45-47c0-922a-0cda1b7cb5f8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-02 20:35:44 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-02 20:35:44 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-02 20:35:44 [Info] key : cpu, value : 10
2026-05-02 20:35:44 [Info] key : rio, value : 20480
2026-05-02 20:35:44 [Info] key : wio, value : 20480
2026-05-02 20:35:44 [Info] key : cpu_all, value : 0
2026-05-02 20:35:44 [Info] key : max_pid_check, value : 200
2026-05-02 20:35:44 [Info] key : throw_dump, value : 0
2026-05-02 20:35:44 [Info] key : hash_mode, value : 1
2026-05-02 20:35:44 [Info] key : mem, value : 200
2026-05-02 20:35:44 [Info] can not find key max_fd in online conf
2026-05-02 20:35:44 [Info] key : proc_limit, value : 1
2026-05-02 20:35:44 [Info] key : resource_limit_mode, value : 3
2026-05-02 20:35:44 [Info] key : rtap_update_mode, value : 1
2026-05-02 20:35:44 [Info] can not find key debug in online conf
2026-05-02 20:35:44 [Info] can not find key update_mode in online conf
2026-05-02 20:35:44 [Info] can not find key http_mode in online conf
2026-05-02 20:35:44 [Info] can not find key rtap_enable in online conf
2026-05-02 20:35:44 [Info] can not find key rtap_new_agent in online conf
2026-05-02 20:35:44 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-02 20:35:44 [Info] can not find key mem_low_mark in online conf
2026-05-02 20:35:44 [Info] can not find key obnormal_report_interval in online conf
2026-05-02 20:35:44 [Info] key : cache_mode, value : 0
2026-05-02 20:35:44 [Info] key : abnormal_monitor_mode, value : 3
2026-05-02 20:35:44 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-02 20:35:44 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-02 20:35:44 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-02 20:35:44 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-02 20:35:44 [Info] key : queue_size_ratio, value : 80
2026-05-02 20:35:44 [Info] queue_size_ratio is 80
2026-05-02 20:35:44 [Info] resource limit mode and max limit cpu is not change
2026-05-02 20:35:44 [Info] set hash mode 1
2026-05-02 20:35:44 [Info] RTAP timeout config:9600000
2026-05-02 20:35:44 [Info] self_guard_mode config is 0
2026-05-02 20:35:48 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-02 20:35:48 [Info] ipc client:Rtap258161777725348_handler Reg client_name:Rtap258161777725348 on WhiteList
2026-05-02 20:35:48 [Info] start rtap process success, pid is 4324, argument is Rtap258161777725348
2026-05-02 20:35:49 [Info] system memory usage is 80
2026-05-02 20:35:49 [Info] system memory usage is 81
2026-05-02 20:35:50 [Info] system memory usage is 80
2026-05-02 20:35:50 [Info] system memory usage is 80
2026-05-02 20:35:50 [Info] csrss.exe open proc 4324 AliSecCheck.ex
2026-05-02 20:35:51 [Info] system memory usage is 80
2026-05-02 20:35:51 [Info] New ClientConnectNotify : Rtap258161777725348, id is 0000052C
2026-05-02 20:35:51 [Info] Rtap Platform Rtap258161777725348 execv work --windows-sysinfoext-check on pid 4324
2026-05-02 20:35:51 [Info] ipc client:Rtap258161777725348 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-02 20:35:51 [Info] csrss.exe open thread 4324 AliSecCheck.ex
2026-05-02 20:35:52 [Info] csrss.exe open thread 4324 AliSecCheck.ex
2026-05-02 20:35:53 [Info] csrss.exe open thread 4324 AliSecCheck.ex
2026-05-02 20:35:54 [Info] csrss.exe open thread 4324 AliSecCheck.ex
2026-05-02 20:36:42 [Info] Done Work --windows-sysinfoext-check:1
2026-05-02 20:36:42 [Info] Rtap Platform Rtap258161777725348 Exit:normal exit
2026-05-02 20:36:45 [Info] ClientDisConnectNotify : Rtap258161777725348, id is 0000052C
2026-05-02 20:58:02 [Info] TotalPhys:2047,AvailPhys:408,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1402,SelfWorkingSet:16500, SelfPageFile:13780
2026-05-02 20:58:02 [Info] CommitTotal:5267,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:408,SystemCache:261,KernelTotal:259,KernelPaged:175,KernelNonpaged:84,PageSize:4096,HandleCount:28005,ProcessCount:53,ThreadCount:774
2026-05-02 21:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16410","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"16688","aliyundun_upload_time":"1777727196","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 21:58:27 [Info] TotalPhys:2047,AvailPhys:427,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1406,SelfWorkingSet:16496, SelfPageFile:13852
2026-05-02 21:58:27 [Info] CommitTotal:5263,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:427,SystemCache:261,KernelTotal:260,KernelPaged:175,KernelNonpaged:84,PageSize:4096,HandleCount:27754,ProcessCount:52,ThreadCount:756
2026-05-02 22:06:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16520","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16592","aliyundun_upload_time":"1777730799","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 22:58:52 [Info] TotalPhys:2047,AvailPhys:430,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1410,SelfWorkingSet:16528, SelfPageFile:13872
2026-05-02 22:58:52 [Info] CommitTotal:5258,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:430,SystemCache:263,KernelTotal:260,KernelPaged:175,KernelNonpaged:84,PageSize:4096,HandleCount:27762,ProcessCount:52,ThreadCount:757
2026-05-02 23:06:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16499","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16580","aliyundun_upload_time":"1777734401","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-02 23:52:21 [Info] get meta data success by v2
2026-05-02 23:52:21 [Info] get empty metaserver config
2026-05-02 23:52:21 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 23:52:21 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-02 23:52:21 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-02 23:52:21 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-02 23:52:21 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-02 23:52:21 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-02 23:52:21 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 23:52:21 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-02 23:52:22 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-02 23:52:22 [Info] download cert compare md5 same
2026-05-02 23:52:22 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 23:52:22 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-02 23:52:22 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-02 23:59:15 [Info] TotalPhys:2047,AvailPhys:428,TotalVirtual:2047,AvailVirtual:1979,TotalPageFile:6669,AvailPageFile:1405,SelfWorkingSet:16544, SelfPageFile:13924
2026-05-02 23:59:15 [Info] CommitTotal:5264,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:428,SystemCache:268,KernelTotal:260,KernelPaged:175,KernelNonpaged:85,PageSize:4096,HandleCount:27759,ProcessCount:52,ThreadCount:763
2026-05-03 00:06:29 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16512","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16596","aliyundun_upload_time":"1777737989","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}