Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 14 Sep 2007 13:35:19 -0700
From:      Chuck Swiger <cswiger@mac.com>
To:        Ian Lord <mailing-lists@msdi.ca>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: kernel log messages
Message-ID:  <880CEEF8-EC4C-4E28-AAB6-2E1F85B1B5DA@mac.com>
In-Reply-To: <0b9d01c7f6f1$6ecedb30$6400a8c0@msdi.local>
References:  <0b9d01c7f6f1$6ecedb30$6400a8c0@msdi.local>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sep 14, 2007, at 10:05 AM, Ian Lord wrote:
> +++ /tmp/security.iwonKikI   Thu Sep 13 03:02:27 2007
>
> +pid 85092 (httpd), uid 80: exited on signal 11 pid 85097 (httpd), uid
> +80: exited on signal 11 pid 85099 (httpd), uid 80: exited on  
> signal 11
> +pid 85091 (httpd), uid 80: exited on signal 11 pid 85090 (httpd), uid
> +80: exited on signal 11 pid 85094 (httpd), uid 80: exited on  
> signal 11
> [ ... ]
> Is this something I should care about ? First time I see this, and  
> since the
> os mention it to me, I guess it's something important :-)

Well, it could indicate something going wrong with your hardware--  
failing memory or an overheating CPU would tend to make long-running  
daemon processes die.

However, it can also indicate that there was a bug in Apache or one  
of the modules which is being exposed by the incoming requests.  In  
some cases, that may mean that someone malicious is trying to exploit  
a security problem.  You might want to run portaudit and check to  
make sure you're current....

-- 
-Chuck




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?880CEEF8-EC4C-4E28-AAB6-2E1F85B1B5DA>