From owner-freebsd-security@FreeBSD.ORG Mon Sep 29 00:12:32 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9959616A4B3 for ; Mon, 29 Sep 2003 00:12:32 -0700 (PDT) Received: from amsfep15-int.chello.nl (amsfep15-int.chello.nl [213.46.243.28]) by mx1.FreeBSD.org (Postfix) with ESMTP id 16EDD44032 for ; Mon, 29 Sep 2003 00:12:31 -0700 (PDT) (envelope-from dodell@sitetronics.com) Received: from sitetronics.com ([213.46.142.207]) by amsfep15-int.chello.nl (InterMail vM.5.01.05.17 201-253-122-126-117-20021021) with ESMTP id <20030929071229.SNSB8709.amsfep15-int.chello.nl@sitetronics.com>; Mon, 29 Sep 2003 09:12:29 +0200 Message-ID: <3F77DB06.7020902@sitetronics.com> Date: Mon, 29 Sep 2003 09:11:02 +0200 From: "Devon H. O'Dell" User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.4) Gecko/20030820 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Philip Paeps References: <20030928235939.GH629@hermes.home.paeps.cx> <20030929022753.GC334@silverwraith.com> <20030929062920.GB760@hermes.nixsys.be> <3F77D2A8.10409@sitetronics.com> <20030929070542.GE760@hermes.nixsys.be> In-Reply-To: <20030929070542.GE760@hermes.nixsys.be> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: security@freebsd.org Subject: Re: Apache under attack and eating resources? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Sep 2003 07:12:32 -0000 >I'll look into that, thanks. Problem is that it's a production server and >debugging symbols and debuggers might be a bit of a hard sell. I'll see what >I can do though. > > If it's really impossible to do (get debugging and such approvied) and these problems are happening with any frequency, you could ktrace some processes. You're bound to have some luck there. --Devon