在Windows上TUN疑似无法正确嗅探高权限进程的名称引发error
Author: Kc2353Created Jul 24, 2026Updated Aug 4, 2026
### 完整性要求
- [x] 我读完了 issue 模板中的所有注释，确保填写符合要求。
- [x] 我保证阅读了文档，了解所有我编写的配置文件项的含义，而不是大量堆砌看似有用的选项或默认值。
- [x] 我提供了完整的配置文件和日志，而不是出于自己的判断只给出截取的部分。
- [x] 我搜索了 issues, 没有发现已提出的类似问题。
- [x] 问题在 Release 最新的版本上可以成功复现
### 描述
（从日志上下文判断，原因不一定准确）在Windows上TUN疑似无法正确嗅探高权限进程的名称，例如卡巴斯基，引发
[Error] app/router: Unables to find local process name: common/net: not found
### 重现方式
不确定，根据日志上下文判断是卡巴斯基更新相关
### 客户端配置
{
"log": {
"loglevel": "debug"
},
"dns": {
"hosts": {
"dns.google": [
"8.8.8.8",
"8.8.4.4",
"2001:4860:4860::8888",
"2001:4860:4860::8844"
],
"dns.alidns.com": [
"223.5.5.5",
"223.6.6.6",
"2400:3200::1",
"2400:3200:baba::1"
],
"one.one.one.one": [
"1.1.1.1",
"1.0.0.1",
"2606:4700:4700::1111",
"2606:4700:4700::1001"
]
},
"servers": [
{
"address": "https://cloudflare-dns.com/dns-query",
"domains": [
"domain:cloudflare-dns.com",
"domain:one.one.one.one",
"domain:dns.google",
"domain:adguard-dns.com",
"domain:opendns.com",
"domain:umbrella.com",
"domain:quad9.net",
"domain:yandex.net"
],
"skipFallback": true
},
{
"address": "https://dns.google/dns-query",
"domains": [
"domain:cloudflare-dns.com",
"domain:one.one.one.one",
"domain:dns.google",
"domain:adguard-dns.com",
"domain:opendns.com",
"domain:umbrella.com",
"domain:quad9.net",
"domain:yandex.net"
],
"skipFallback": true
},
{
"address": "8.8.8.8",
"domains": [
"domain:cloudflare-dns.com",
"domain:one.one.one.one",
"domain:dns.google",
"domain:adguard-dns.com",
"domain:opendns.com",
"domain:umbrella.com",
"domain:quad9.net",
"domain:yandex.net"
],
"skipFallback": true
},
{
"address": "119.29.29.29",
"domains": [
""
],
"skipFallback": true,
"tag": "direct-dns-1"
},
{
"address": "223.5.5.5",
"domains": [
""
],
"skipFallback": true,
"tag": "direct-dns-2"
},
{
"address": "119.29.29.29",
"domains": [
"geosite:cn",
"geosite:private"
],
"skipFallback": true,
"tag": "direct-dns-3"
},
{
"address": "223.5.5.5",
"domains": [
"geosite:cn",
"geosite:private"
],
"skipFallback": true,
"tag": "direct-dns-4"
},
{
"address": "119.29.29.29",
"domains": [
"full:cloudflare-dns.com",
"full:dns.google"
],
"skipFallback": true
},
{
"address": "119.29.29.29",
"skipFallback": false,
"tag": "direct-dns-5"
},
{
"address": "223.5.5.5",
"skipFallback": false,
"tag": "direct-dns-6"
}
],
"serveStale": true,
"tag": "dns-module"
},
"inbounds": [
{
"tag": "socks",
"port": 7890,
"listen": "127.0.0.1",
"protocol": "mixed",
"sniffing": {
"enabled": false,
"destOverride": [
"http",
"tls",
"quic"
],
"routeOnly": false
},
"settings": {
"auth": "noauth",
"udp": true,
"allowTransparent": false
}
},
{
"tag": "tun",
"protocol": "tun",
"sniffing": {
"enabled": false,
"destOverride": [
"http",
"tls",
"quic"
],
"routeOnly": false
},
"settings": {
"name": "xray_tun",
"MTU": 9000,
"gateway": [
"172.18.0.1/30"
],
"autoSystemRoutingTable": [
"0.0.0.0/0"
],
"autoOutboundsInterface": "auto",
"dns": [
"172.18.0.1"
]
}
}
],
"outbounds": [
{
"tag": "direct",
"protocol": "freedom"
},
{
"tag": "block",
"protocol": "blackhole"
},
{
"tag": "dns",
"protocol": "dns"
}
],
"routing": {
"domainStrategy": "AsIs",
"rules": [
{
"port": "135,137-139,5353",
"network": "udp",
"outboundTag": "block"
},
{
"outboundTag": "block",
"ip": [
"224.0.0.0/3",
"ff00::/8"
]
},
{
"port": "53",
"outboundTag": "dns",
"process": [
"v2ray.exe",
"mihomo-windows-amd64-v1.exe",
"mihomo-windows-amd64-compatible.exe",
"mihomo-windows-amd64.exe",
"mihomo-windows-arm64.exe",
"clash.exe",
"mihomo.exe"
]
},
{
"outboundTag": "direct",
"process": [
"v2ray.exe",
"xray.exe",
"self/"
]
},
{
"port": "53",
"inboundTag": [
"tun"
],
"outboundTag": "dns"
},
{
"type": "field",
"outboundTag": "block",
"domain": [
"geosite:facebook",
"geosite:netflix",
"geosite:telegram",
"geosite:twitter",
"keyword:x.com"
]
},
{
"type": "field",
"outboundTag": "block",
"ip": [
"geoip:facebook",
"geoip:netflix",
"geoip:telegram",
"geoip:twitter"
]
},
{
"type": "field",
"outboundTag": "direct",
"ip": [
"geoip:private"
]
},
{
"type": "field",
"outboundTag": "direct",
"domain": [
"geosite:cn"
],
"protocol": [
"http",
"tls",
"quic"
]
},
{
"type": "field",
"outboundTag": "direct",
"domain": [
"geosite:private"
]
},
{
"type": "field",
"outboundTag": "proxy",
"process": [
"VBoxNetNAT.exe",
"VBoxNetNAT",
"VirtualBoxVM.exe",
"VBoxHeadless.exe"
]
},
{
"type": "field",
"outboundTag": "direct",
"domain": [
"domain:cloudflare-dns.com",
"domain:one.one.one.one",
"domain:dns.google",
"domain:adguard-dns.com",
"domain:opendns.com",
"domain:umbrella.com",
"domain:quad9.net",
"domain:yandex.net"
]
},
{
"type": "field",
"outboundTag": "direct",
"ip": [
"1.1.1.1",
"1.0.0.1",
"2606:4700:4700::1111",
"2606:4700:4700::1001",
"1.1.1.2",
"1.0.0.2",
"2606:4700:4700::1112",
"2606:4700:4700::1002",
"1.1.1.3",
"1.0.0.3",
"2606:4700:4700::1113",
"2606:4700:4700::1003",
"8.8.8.8",
"8.8.4.4",
"2001:4860:4860::8888",
"2001:4860:4860::8844",
"94.140.14.14",
"94.140.15.15"
]
},
{
"type": "field",
"outboundTag": "direct",
"process": [
"java",
"javaw"
]
},
{
"type": "field",
"outboundTag": "direct",
"process": [
"AdGuardHome"
]
},
{
"type": "field",
"port": "0-65535",
"outboundTag": "direct"
},
{
"type": "field",
"inboundTag": [
"direct-dns-1",
"direct-dns-2",
"direct-dns-3",
"direct-dns-4",
"direct-dns-5",
"direct-dns-6"
],
"outboundTag": "direct"
},
{
"type": "field",
"inboundTag": [
"dns-module"
],
"outboundTag": "direct"
}
]
},
"metrics": {
"listen": "127.0.0.1:63735"
},
"policy": {
"system": {
"statsOutboundUplink": true,
"statsOutboundDownlink": true
}
},
"stats": {}
}
Xray 26.7.11 (Xray, Penetrates Everything.) 50231ea (go1.26.5 windows/amd64)
A unified platform for anti-censorship.
2026/07/24 11:15:56.377399 [Info] infra/conf/serial: Reading config: &{Name:..\bugreport\tuntest26711-noserver.json Format:json}
2026/07/24 11:15:56.396993 [Warning] common/errors: The feature WebSocket transport (with ALPN http/1.1, etc.) is deprecated, not recommended for using and might be removed. Please migrate to XHTTP H2 & H3 as soon as possible.
2026/07/24 11:15:56.398053 [Debug] app/log: Logger started
2026/07/24 11:15:56.400118 [Info] app/dns: DNS: created DOH client for https://cloudflare-dns.com/dns-query, with h2c false
2026/07/24 11:15:56.400118 [Info] app/dns: DNS: created DOH client for https://dns.google/dns-query, with h2c false
2026/07/24 11:15:56.400118 [Info] app/dns: DNS: created UDP client initialized for 8.8.8.8:53
2026/07/24 11:15:56.400118 [Info] app/dns: DNS: created UDP client initialized for 119.29.29.29:53
2026/07/24 11:15:56.400118 [Info] app/dns: DNS: created UDP client initialized for 223.5.5.5:53
2026/07/24 11:15:56.400118 [Info] app/dns: DNS: created UDP client initialized for 119.29.29.29:53
2026/07/24 11:15:56.400118 [Info] app/dns: DNS: created UDP client initialized for 223.5.5.5:53
2026/07/24 11:15:56.400118 [Info] app/dns: DNS: created UDP client initialized for 119.29.29.29:53
2026/07/24 11:15:56.400118 [Info] app/dns: DNS: created UDP client initialized for 119.29.29.29:53
2026/07/24 11:15:56.400118 [Info] app/dns: DNS: created UDP client initialized for 223.5.5.5:53
2026/07/24 11:15:56.400118 [Debug] common/geodata: geodata mph domain matcher cache MISS for 32 rules
2026/07/24 11:15:56.701877 [Debug] common/geodata: geodata mph domain matcher cache MISS for 5 rules
2026/07/24 11:15:56.731918 [Debug] common/geodata: geodata geoip matcher cache MISS geoip.dat:FACEBOOK,geoip.dat:NETFLIX,geoip.dat:TELEGRAM,geoip.dat:TWITTER,
2026/07/24 11:15:56.765788 [Debug] common/geodata: geodata geoip matcher cache MISS geoip.dat:PRIVATE,
2026/07/24 11:15:56.778292 [Debug] common/geodata: geodata mph domain matcher cache MISS for 1 rules
2026/07/24 11:15:57.004450 [Debug] common/geodata: geodata mph domain matcher cache MISS for 1 rules
2026/07/24 11:15:57.045134 [Debug] app/proxyman/inbound: creating stream worker on 127.0.0.1:7890
2026/07/24 11:15:57.045134 [Debug] app/stats: create new counter outbound>>>proxy>>>traffic>>>uplink
2026/07/24 11:15:57.045134 [Debug] app/stats: create new counter outbound>>>proxy>>>traffic>>>downlink
2026/07/24 11:15:57.045134 [Debug] app/stats: create new counter outbound>>>direct>>>traffic>>>uplink
2026/07/24 11:15:57.045134 [Debug] app/stats: create new counter outbound>>>direct>>>traffic>>>downlink
2026/07/24 11:15:57.045134 [Debug] app/stats: create new counter outbound>>>block>>>traffic>>>uplink
2026/07/24 11:15:57.045134 [Debug] app/stats: create new counter outbound>>>block>>>traffic>>>downlink
2026/07/24 11:15:57.045134 [Debug] app/stats: create new counter outbound>>>dns>>>traffic>>>uplink
2026/07/24 11:15:57.045134 [Debug] app/stats: create new counter outbound>>>dns>>>traffic>>>downlink
2026/07/24 11:15:57.045134 [Info] transport/internet/tcp: listening TCP on 127.0.0.1:7890
2026/07/24 11:15:57.355501 [Info] proxy/tun: [tun] update interface WLAN 16
2026/07/24 11:15:57.355501 [Info] proxy/tun: xray_tun created
2026/07/24 11:15:57.387517 [Info] proxy/tun: xray_tun up
2026/07/24 11:15:57.387517 [Info] app/metrics: Metrics server listening on 127.0.0.1:63735
2026/07/24 11:15:57.400320 [Warning] core: Xray 26.7.11 started
2026/07/24 11:15:57.451464 [Info] [596817840] proxy/tun: processing from udp:172.18.0.1:137 to udp:172.18.0.3:137
2026/07/24 11:15:57.451464 [Info] [596817840] app/dispatcher: taking detour [block] for [udp:172.18.0.3:137]
2026/07/24 11:15:57.451978 from udp:172.18.0.1:137 accepted udp:172.18.0.3:137 [tun -> block]
2026/07/24 11:15:57.554782 [Info] [485912737] proxy/tun: processing from udp:172.18.0.1:58313 to udp:223.5.5.5:53
2026/07/24 11:15:57.559418 [Info] [485912737] app/dispatcher: taking detour [dns] for [udp:223.5.5.5:53]
2026/07/24 11:15:57.559927 [Info] [485912737] proxy/dns: handling DNS traffic to udp:223.5.5.5:53
2026/07/24 11:15:57.559927 from udp:172.18.0.1:58313 accepted udp:223.5.5.5:53 [tun -> dns]
2026/07/24 11:15:57.559927 [Debug] app/dns: domain p05.upd3.kaspersky.com will use DNS in order: [UDP:119.29.29.29:53 UDP:223.5.5.5:53]
2026/07/24 11:15:57.559927 [Info] app/dns: UDP:119.29.29.29:53 querying DNS for: p05.upd3.kaspersky.com.
2026/07/24 11:15:57.559927 [Debug] transport/internet/udp: dispatch request to: udp:119.29.29.29:53
2026/07/24 11:15:57.559927 [Info] transport/internet/udp: establishing new connection for udp:119.29.29.29:53
2026/07/24 11:15:57.559927 [Info] app/dispatcher: taking detour [direct] for [udp:119.29.29.29:53]
2026/07/24 11:15:57.559927 from DNS accepted udp:119.29.29.29:53 [direct-dns-5 -> direct]
2026/07/24 11:15:57.559927 [Debug] transport/internet: dialing to udp:119.29.29.29:53
2026/07/24 11:15:57.560475 [Info] proxy/freedom: connection opened to udp:119.29.29.29:53, local endpoint [::]:58314, remote endpoint 119.29.29.29:53
2026/07/24 11:15:57.566538 [Info] [1642296055] proxy/tun: processing from udp:172.18.0.1:58317 to udp:114.114.114.114:53
2026/07/24 11:15:57.567043 [Info] [3147016791] proxy/tun: processing from udp:172.18.0.1:58320 to udp:114.114.114.114:53
2026/07/24 11:15:57.567569 [Error] app/router: Unables to find local process name: common/net: not found
2026/07/24 11:15:57.567569 [Info] [1642296055] app/dispatcher: taking detour [dns] for [udp:114.114.114.114:53]
2026/07/24 11:15:57.567569 from udp:172.18.0.1:58317 accepted udp:114.114.114.114:53 [tun -> dns]
2026/07/24 11:15:57.567569 [Info] [1642296055] proxy/dns: handling DNS traffic to udp:114.114.114.114:53
2026/07/24 11:15:57.567569 [Info] [2076862219] proxy/tun: processing from udp:172.18.0.1:58321 to udp:202.101.226.68:53
2026/07/24 11:15:57.568117 [Error] app/router: Unables to find local process name: common/net: not found
2026/07/24 11:15:57.568117 [Info] [2288894319] proxy/tun: processing from udp:172.18.0.1:58322 to udp:220.248.192.12:53
2026/07/24 11:15:57.568117 [Info] [3615271909] proxy/tun: processing from udp:172.18.0.1:58323 to udp:202.101.226.68:53
2026/07/24 11:15:57.568117 [Debug] app/dns: domain p05.upd3.kaspersky.com will use DNS in order: [UDP:119.29.29.29:53 UDP:223.5.5.5:53]
2026/07/24 11:15:57.568117 [Info] [4012608980] proxy/tun: processing from udp:172.18.0.1:58325 to udp:220.248.192.12:53
2026/07/24 11:15:57.568117 [Error] app/router: Unables to find local process name: common/net: not found
2026/07/24 11:15:57.568117 [Info] [3147016791] app/dispatcher: taking detour [dns] for [udp:114.114.114.114:53]
2026/07/24 11:15:57.568117 [Info] [3147016791] proxy/dns: handling DNS traffic to udp:114.114.114.114:53
2026/07/24 11:15:57.568117 from udp:172.18.0.1:58320 accepted udp:114.114.114.114:53 [tun -> dns]
2026/07/24 11:15:57.568641 [Debug] app/dns: domain p05.upd3.kaspersky.com will use DNS in order: [UDP:119.29.29.29:53 UDP:223.5.5.5:53]
2026/07/24 11:15:57.568641 [Info] app/dns: UDP:119.29.29.29:53 querying DNS for: p05.upd3.kaspersky.com.
2026/07/24 11:15:57.568641 [Info] [3615271909] app/dispatcher: taking detour [dns] for [udp:202.101.226.68:53]
2026/07/24 11:15:57.568641 [Info] [3615271909] proxy/dns: handling DNS traffic to udp:202.101.226.68:53
2026/07/24 11:15:57.568641 [Debug] transport/internet/udp: dispatch request to: udp:119.29.29.29:53
2026/07/24 11:15:57.568641 from udp:172.18.0.1:58323 accepted udp:202.101.226.68:53 [tun -> dns]
2026/07/24 11:15:57.568641 [Info] app/dns: returning 2 IP(s) for domain dns.alidns.com -> [223.5.5.5 223.6.6.6]
2026/07/24 11:15:57.568641 from udp:172.18.0.1:58321 accepted udp:202.101.226.68:53 [tun -> dns]
2026/07/24 11:15:57.568641 from udp:172.18.0.1:58325 accepted udp:220.248.192.12:53 [tun -> dns]
2026/07/24 11:15:57.568641 [Info] [4012608980] app/dispatcher: taking detour [dns] for [udp:220.248.192.12:53]
2026/07/24 11:15:57.568641 [Info] [2076862219] app/dispatcher: taking detour [dns] for [udp:202.101.226.68:53]
2026/07/24 11:15:57.568641 [Info] [4012608980] proxy/dns: handling DNS traffic to udp:220.248.192.12:53
2026/07/24 11:15:57.568641 [Info] [2076862219] proxy/dns: handling DNS traffic to udp:202.101.226.68:53
2026/07/24 11:15:57.568641 [Info] app/dns: returning 2 IP(s) for domain dns.alidns.com -> [223.5.5.5 223.6.6.6]
2026/07/24 11:15:57.568641 [Info] app/dns: returning 2 IP(s) for domain dns.alidns.com -> [[2400:3200::1] [2400:3200:baba::1]]
2026/07/24 11:15:57.569157 [Info] [2288894319] app/dispatcher: taking detour [dns] for [udp:220.248.192.12:53]
2026/07/24 11:15:57.569157 [Info] [2288894319] proxy/dns: handling DNS traffic to udp:220.248.192.12:53
2026/07/24 11:15:57.569157 from udp:172.18.0.1:58322 accepted udp:220.248.192.12:53 [tun -> dns]
2026/07/24 11:15:57.569157 [Info] app/dns: returning 2 IP(s) for domain dns.alidns.com -> [[2400:3200::1] [2400:3200:baba::1]]
2026/07/24 11:15:57.569157 [Info] [426802023] proxy/tun: processing from tcp:172.18.0.1:62322 to tcp:4.28.136.38:80
2026/07/24 11:15:57.569674 [Error] app/router: Unables to find local process name: common/net: not found
2026/07/24 11:15:57.570196 [Error] app/router: Unables to find local process name: common/net: not found
2026/07/24 11:15:57.570196 [Error] app/router: Unables to find local process name: common/net: not found
2026/07/24 11:15:57.570713 [Error] app/router: Unables to find local process name: common/net: not found
2026/07/24 11:15:57.570713 [Info] [426802023] app/dispatcher: taking detour [direct] for [tcp:4.28.136.38:80]
2026/07/24 11:15:57.570713 [Info] [426802023] transport/internet/tcp: dialing TCP to tcp:4.28.136.38:80
2026/07/24 11:15:57.570713 from tcp:172.18.0.1:62322 accepted tcp:4.28.136.38:80 [tun -> direct]
2026/07/24 11:15:57.570713 [Debug] [426802023] transport/internet: dialing to tcp:4.28.136.38:80
2026/07/24 11:15:57.718629 [Info] [802715731] proxy/tun: processing from tcp:172.18.0.1:62325 to tcp:96.16.53.142:80
2026/07/24 11:15:57.721722 [Info] [802715731] app/dispatcher: taking detour [direct] for [tcp:96.16.53.142:80]
2026/07/24 11:15:57.721722 [Info] [802715731] transport/internet/tcp: dialing TCP to tcp:96.16.53.142:80
2026/07/24 11:15:57.721722 [Debug] [802715731] transport/internet: dialing to tcp:96.16.53.142:80
2026/07/24 11:15:57.721722 from tcp:172.18.0.1:62325 accepted tcp:96.16.53.142:80 [tun -> direct]
2026/07/24 11:15:57.819924 [Info] [426802023] proxy/freedom: connection opened to tcp:4.28.136.38:80, local endpoint 172.25.185.141:62323, remote endpoint 4.28.136.38:80
2026/07/24 11:15:57.819924 [Debug] [426802023] proxy: CopyRawConn (maybe) readv
2026/07/24 11:15:57.922835 [Info] [802715731] proxy/freedom: connection opened to tcp:96.16.53.142:80, local endpoint 172.25.185.141:62326, remote endpoint 96.16.53.142:80
2026/07/24 11:15:57.922835 [Debug] [802715731] proxy: CopyRawConn (maybe) readv
2026/07/24 11:15:57.927100 [Info] [1215391963] proxy/tun: processing from udp:172.18.0.1:56863 to udp:223.5.5.5:53
2026/07/24 11:15:57.927647 [Info] [1215391963] app/dispatcher: taking detour [dns] for [udp:223.5.5.5:53]
2026/07/24 11:15:57.927647 [Info] [1215391963] proxy/dns: handling DNS traffic to udp:223.5.5.5:53
2026/07/24 11:15:57.927647 from udp:172.18.0.1:56863 accepted udp:223.5.5.5:53 [tun -> dns]
2026/07/24 11:15:57.927647 [Info] [4123966998] proxy/tun: processing from tcp:172.18.0.1:62327 to tcp:72.1Source: XTLS/Xray-core