Analyzing the Configuration

Oct 13, 2025 by recoveryshake.com 55 views

Introduction

In this article, we will investigate the issue of multiple instances of "router: failed to search process: process not found" in the log of a TUN mode setup. We will analyze the configuration and logs to identify the cause of this issue and provide a solution.

Understanding the Issue

The log contains multiple instances of "router: failed to search process: process not found" in TUN mode. This issue is not causing any problems with the functionality of the setup, but it is still a concern as it may indicate a potential problem in the future.

Analyzing the Configuration

The configuration provided is a JSON object that defines the settings for the TUN mode setup. We will analyze the configuration to identify any potential causes of the issue.

{
  "dns": {
    "rules": [
      {
        "action": "route",
        "domain": [],
        "domain_keyword": [],
        "domain_regex": [],
        "domain_suffix": ["msftconnecttest.com", "msftncsi.com"],
        "rule_set": ["adobe-activation_SITE", "geolocation-cn_SITE", "cn_SITE"],
        "server": "dns-direct"
      }
    ],
    "servers": [
      {
        "address": "https://1.1.1.1/dns-query",
        "address_resolver": "dns-local",
        "detour": "proxy",
        "strategy": "ipv4_only",
        "tag": "dns-remote"
      },
      {
        "address": "https://223.5.5.5/dns-query",
        "address_resolver": "dns-local",
        "detour": "direct",
        "strategy": "ipv4_only",
        "tag": "dns-direct"
      },
      { "address": "rcode://success", "tag": "dns-block" },
      {
        "address": "underlying://0.0.0.0",
        "detour": "direct",
        "tag": "dns-local"
      }
    ]
  },
  "endpoints": [],
  "experimental": { "clash_api": { "default_mode": "" } },
  "inbounds": [
    {
      "domain_strategy": "ipv4_only",
      "listen": "127.0.0.1",
      "listen_port": 10800,
      "tag": "mixed-in",
      "type": "mixed"
    },
    {
      "address": ["172.19.0.1/24"],
      "auto_redirect": false,
      "auto_route": true,
      "domain_strategy": "ipv4_only",
      "interface_name": "nekoray-tun",
      "mtu": 1500,
      "stack": "system",
      "strict_route": true,
      "tag": "tun-in",
      "type": "tun"
    }
  ],
  "log": { "level": "info" },
  "outbounds": [
    {
      "alter_id": 0,
      "domain_strategy": "ipv4_only",
      "packet_encoding": "",
      "security": "auto",
      "server": "xxxxxxxxxxx",
      "server_port": 443,
      "tag": "proxy",
      "type": "vmess",
      "uuid": "xxxxxxxxxxxxxxxxxxxx"
    },
    { "tag": "direct", "type": "direct" }
  ],
  "route": {
    "auto_detect_interface": true,
    "final": "proxy",
    "find_process": true,
    "rule_set": [
      {
        "format": "binary",
        "path": "rule_sets/adobe-activation_SITE.srs",
        "tag": "adobe-activation_SITE",
        "type": "local"
      },
      {
        "format": "binary",
        "path": "rule_sets/geolocation-!cn_SITE.srs",
        "tag": "geolocation-!cn_SITE",
        "type": "local"
      },
      {
        "format": "binary",
        "path": "rule_sets/cn_IP.srs",
        "tag": "cn_IP",
        "type": "local"
      },
      {
        "format": "binary",
        "path": "rule_sets/geolocation-cn_SITE.srs",
        "tag": "geolocation-cn_SITE",
        "type": "local"
      },
      {
        "format": "binary",
        "path": "rule_sets/cn_SITE.srs",
        "tag": "cn_SITE",
        "type": "local"
      }
    ],
    "rules": [
      { "action": "sniff", "inbound": ["mixed-in", "tun-in"] },
      { "action": "hijack-dns", "protocol": "dns" },
      { "action": "reject", "rule_set": ["adobe-activation_SITE"] },
      {
        "action": "route",
        "outbound": "proxy",
        "rule_set": ["geolocation-!cn_SITE"]
      },
      {
        "action": "route",
        "outbound": "direct",
        "rule_set": ["cn_IP", "geolocation-cn_SITE", "cn_SITE"]
      },
      { "action": "route", "ip_is_private": true, "outbound": "direct" },
      {
        "action": "route",
        "domain_suffix": ["msftconnecttest.com", "msftncsi.com"],
        "outbound": "direct"
      },
      {
        "action": "route",
        "outbound": "direct",
        "process_name": ["avp.exe"]
      }
    ]
  }
}

Analyzing the Logs

The logs provided show multiple instances of "router: failed to search process: process not found" in TUN mode. We will analyze the logs to identify any patterns or clues that may help us understand the cause of this issue.

INFO[0002] router: failed to search process: process not found
INFO[0002] [4264502029 0ms] inbound/tun[tun-in]: inbound connection from 172.19.0.1:2794
INFO[0002] [4264502029 0ms] inbound/tun[tun-in]: inbound connection to 66.110.49.80:443
INFO[0002] [4264502029 0ms] router: failed to search process: process not found
INFO[0002] [4264502029 0ms] outbound/vmess[proxy]: outbound connection to 66.110.49.80:443
INFO[0002] router: found process path: C:\Windows\System32\svchost.exe
INFO[0002] [3981624903 0ms] inbound/tun[tun-in]: inbound packet connection from 172.19.0.1:59578
INFO[0002] [3981624903 0ms] inbound/tun[tun-in]: inbound packet connection to 172.19.0.2:53
INFO[0002] [3981624903 0ms] router: found process path: C:\Windows\System32\svchost.exe
INFO[0002] [3981624903 10ms] dns: exchanged CNAME www.msftconnecttest.com. 13 IN CNAME ncsi-geo.trafficmanager.net.
INFO[0002] [3981624903 10ms] dns: exchanged CNAME ncsi-geo.trafficmanager.net. 13 IN CNAME www.msftncsi.com.edgesuite.net.
INFO[0002] [3981624903 10ms] dns: exchanged CNAME www.msftncsi.com.edgesuite.net. 13 IN CNAME a1961.g2.akamai.net.
INFO[0002] [3981624903 10ms] dns: exchanged A a1961.g2.akamai.net. 13 IN A 96.7.244.134
INFO[0002] [3981624903 10ms] dns: exchanged A a1961.g2.akamai.net. 13 IN A 96.7.244.139
INFO[0002] router: failed to search process: process not found

Conclusion

In conclusion, the issue of multiple instances of "router: failed to search process: process not found" in TUN mode is not causing any problems with the functionality of the setup. However, it is still a concern as it may indicate a potential problem in the future. We have analyzed the configuration and logs to identify any potential causes of this issue, but we were unable to find any clear patterns or clues. Further investigation is required to determine the cause of this issue.

Recommendations

Based on our analysis, we recommend the following:

Increase logging level: Increase the logging level to debug to get more detailed information about the issue.
Check process list: Check the process list to ensure that all processes are running correctly.
Verify DNS settings: Verify the DNS settings to ensure that they are correct and not causing any issues.
Check network configuration: Check the network configuration to ensure that it is correct and not causing any issues.

Q: What is the issue with the log containing many instances of "router: failed to search process: process not found" in TUN mode?

A: The issue is not causing any problems with the functionality of the setup, but it is still a concern as it may indicate a potential problem in the future.

Q: What is the cause of this issue?

A: We were unable to find any clear patterns or clues in the configuration and logs to determine the cause of this issue. Further investigation is required to determine the cause of this issue.

Q: What are the potential causes of this issue?

A: The potential causes of this issue are:

Incorrect DNS settings: Incorrect DNS settings may cause the router to fail to search for processes.
Network configuration issues: Network configuration issues may cause the router to fail to search for processes.
Process list issues: Issues with the process list may cause the router to fail to search for processes.
Other system issues: Other system issues may cause the router to fail to search for processes.

Q: How can I troubleshoot this issue?

A: To troubleshoot this issue, you can:

Increase logging level: Increase the logging level to debug to get more detailed information about the issue.
Check process list: Check the process list to ensure that all processes are running correctly.
Verify DNS settings: Verify the DNS settings to ensure that they are correct and not causing any issues.
Check network configuration: Check the network configuration to ensure that it is correct and not causing any issues.

Q: What are the potential consequences of this issue?

A: The potential consequences of this issue are:

Loss of connectivity: If the issue is not resolved, it may cause loss of connectivity to the internet.
Data corruption: If the issue is not resolved, it may cause data corruption.
System crashes: If the issue is not resolved, it may cause system crashes.

Q: How can I prevent this issue from occurring in the future?

A: To prevent this issue from occurring in the future, you can:

Regularly check the process list: Regularly check the process list to ensure that all processes are running correctly.
Verify DNS settings: Verify the DNS settings to ensure that they are correct and not causing any issues.
Check network configuration: Check the network configuration to ensure that it is correct and not causing any issues.
Regularly update the system: Regularly update the system to ensure that all software is up-to-date and secure.

Q: What are the best practices for troubleshooting this issue?

A: The best practices for troubleshooting this issue are:

Gather detailed information: Gather detailed information about the issue, including logs and system information.
Isolate the issue: Isolate the issue to determine the root cause.
Test solutions: Test solutions to determine if they resolve the issue.
Document the solution: Document the solution to ensure that it can be repeated in the future.