7 [Info] bin info:c:/windows/system32/net.exe 7467ec1d75804df9357a0660919e9831 612 2022-10-30 02:05:08 [Info] bin info:c:/windows/system32/net1.exe a3f48d90ee53fdf2547b41f87a7c8080 1636 2022-10-30 02:05:08 [Warn] bin info size limit:c:/programdata/aliyun/assist/2.1.3.349/aliyun_assist_service.exe,31007744,20971520 2022-10-30 02:05:08 [Info] bin info:c:/windows/system32/windowspowershell/v1.0/powershell.exe b3ad5364cf04b6ab05616dd483aaf618 2284 2022-10-30 02:10:25 [Info] start to update proc chain rule, path C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_11_38/rule/procchain.data 2022-10-30 02:10:25 [Warn] No Type about proc_chain_windows 2022-10-30 02:10:25 [Info] start to update script rule, path C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_11_38/rule/scriptfilter.data 2022-10-30 02:10:25 [Warn] No Type about script_filter_windows 2022-10-30 02:10:25 [Info] start to update event log rule, path C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_11_38/rule/evtlog.data 2022-10-30 02:10:25 [Warn] No Type about win_evt_log 2022-10-30 02:14:47 [Info] cmdchain cache limit:50000 and over time cache clean now size :[0] 2022-10-30 02:14:47 [Info] cmdchain cache new limit:50000 and over time cache clean now size :[169] 2022-10-30 02:14:47 [Info] cmdchain cache limit:50000 and over time cache clean now size :[0] 2022-10-30 02:14:47 [Info] cmdchain cache new limit:50000 and over time cache clean now size :[171] 2022-10-30 02:15:26 [Info] cmdchain cache limit:50000 and over time cache clean now size :[0] 2022-10-30 02:15:26 [Info] cmdchain cache new limit:50000 and over time cache clean now size :[9315] 2022-10-30 02:42:10 [Info] exception info: {"bin_file_list_drop":"0","conn_first_work_time":"5","conn_work_time":"21","connect_filter_total_count":"390","connect_filter_total_length":"1024291","connect_merge_cache_count":"2","connect_merge_filter_count":"213","connect_merge_filter_count1":"213","connect_merge_filter_length":"651866","connect_profile_cache_count":"171","connect_profile_cache_limit":"0","connect_profile_filter_count":"166","connect_profile_filter_count1":"166","connect_profile_filter_length":"363190","connect_profile_no_ccp_count":"0","connect_static_filter_count":"0","connect_static_filter_length":"0","cpu_avg":"0.01","cpu_limit_enable":"1","cpu_limit_error_code":"0","cpu_limit_param_error_code":"0","cpu_warn_count":"0","fanotify_rate_limit":"0","fd_count":"562","file_change_list_drop":"0","inotify_node_limit":"0","ipc_msg_list_drop":"0","md5_file_not_exist":"1","md5_web_file_not_exist":"0","mem_avg":"48162.09","module_load_failed":"0","net_connect_list_drop_count":"0","net_connect_positive_drop_count":"0","net_connect_send_count":"390","net_connect_total_count":"390","net_connect_valid_send_count":"390","net_list_length":"0","net_tx_overflow":"0","network_rx_err":"0","network_tx_drop":"0","network_tx_overflow":"0","proc_filter_level":"2","proc_filter_total_count":"76","proc_filter_total_length":"92297","proc_first_work_time":"10","proc_list_drop_count":"0","proc_list_length":"0","proc_merge_cache_count":"1","proc_merge_filter_count":"15","proc_merge_filter_count1":"15","proc_merge_filter_length":"17545","proc_positive_drop_count":"0","proc_profile_cache_count":"169","proc_profile_cache_limit":"0","proc_profile_filter_count":"27","proc_profile_filter_count1":"27","proc_profile_filter_length":"32453","proc_profile_no_ccp_count":"0","proc_send_count":"76","proc_static_filter_count":"0","proc_static_filter_length":"0","proc_total_count":"76","proc_tx_overflow":"0","proc_valid_send_count":"72","proc_work_time":"952","procfile_filter_total_count":"168","procfile_filter_total_length":"159635","procfile_first_work_time":"452","procfile_merge_cache_count":"0","procfile_merge_filter_count":"0","procfile_merge_filter_count1":"0","procfile_merge_filter_length":"0","procfile_profile_cache_count":"9326","procfile_profile_cache_limit":"0","procfile_profile_filter_count":"82","procfile_profile_filter_count1":"82","procfile_profile_filter_length":"67974","procfile_profile_no_ccp_count":"0","progInfo,preferredOrder,userBlockedState,isUserOverride"/>