Date: Fri, 21 Mar 2003 11:43:47 -0600 From: Peter Elsner <peter@servplex.com> To: "Dave [Hawk-Systems]" <dave@hawk-systems.com> Cc: freebsd-questions@FreeBSD.ORG Subject: RE: apache exiting signal 11, high request period Message-ID: <5.2.0.9.2.20030321113902.01c126f0@mail.servplex.com> In-Reply-To: <DBEIKNMKGOBGNDHAAKGNOEJJKKAB.dave@hawk-systems.com> References: <DBEIKNMKGOBGNDHAAKGNCENEKHAB.dave@hawk-systems.com>
next in thread | previous in thread | raw e-mail | index | archive | help
I had the same problem with Apache 1.3.23 (or 24). I thought it was a memory problem (sig 11 usually is). So I replaced the memory stick, and the problem went away for about 2 weeks, and started again. I upgraded to the latest release of Apache (at that time 1.3.26), and the problem went away completely... Haven't seen it since. So perhaps an upgrade is in order. Peter At 11:46 AM 3/21/2003 -0500, you wrote: >no takers on this? > > >-----Original Message----- ><clip> > >Subject: apache exiting signal 11, high request period > > > > > > > >Following showed up in our morning security mailer > >Unusual System Events > >=-=-=-=-=-=-=-=-=-=-= > >Mar 19 06:01:00 web1 /kernel: pid 62342 (httpd), uid 65534: exited on > signal 11 > >Mar 19 06:01:00 web1 /kernel: pid 62343 (httpd), uid 65534: exited on > signal 11 > >Mar 19 06:01:00 web1 /kernel: pid 62344 (httpd), uid 65534: exited on > signal 11 > >Mar 19 06:01:01 web1 /kernel: pid 62345 (httpd), uid 65534: exited on > signal 11 > >... > > > >and doing a cat of the /var/log/httpd*.log > >[Wed Mar 19 06:31:00 2003] [notice] child pid 69197 exit signal Segmentation > >fault (11) > >[Wed Mar 19 06:31:00 2003] [notice] child pid 69196 exit signal Segmentation > >fault (11) > >[Wed Mar 19 06:31:00 2003] [notice] child pid 69195 exit signal Segmentation > >fault (11) > >[Wed Mar 19 06:31:00 2003] [notice] child pid 69194 exit signal Segmentation > >fault (11) > >... > > > >Looking at the input and output of the NIC for that period of time, > there was a > >burst of access attempts between 5am-7am (same period covered by the > above log > >anomalies) > > > >doing a cat of all the log files for virtual host directories showed > >the culprit > >(or suspected culprit at least) > >[Sun Feb 23 06:31:00 2003] [error] [client 208.10.47.119] user cobras > >not found: > >/members/members.htm > >[Sun Feb 23 06:31:00 2003] [error] [client 208.10.47.119] user loredana not > >found: /members/members.htm > >[Sun Feb 23 06:31:00 2003] [error] [client 208.10.47.119] user steve not > found: > >/members/members.htm > >[Sun Feb 23 06:31:00 2003] [error] [client 208.10.47.119] user e not found: > >/members/members.htm > >[Sun Feb 23 06:31:00 2003] [error] [client 208.10.47.119] user horno not > found: > >/members/members.htm > >... > > > >Now aside from the fact that this schmuck is trying to get in and won't > given > >the password and userid scheme that this hosting client is using(and the > method > >he is using to circumvent this), it does concern me that the httpd > process is > >crashing. > > > >Is it just child processes? > >Is the cause likely the burst of traffic, and if so, is there a tweak to > allow > >apache to weather a volume of requests more successfully? > >Or is there other mitigating factors that need to be investigated? > > > >Server Version: FreeBSD 4.3(with patches) Apache/1.3.19 (Unix) mod_ssl/2.8.2 > >OpenSSL/0.9.6 PHP/4.2.2 > > > >Appreciate any insight. > > > >Dave > > > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org > >with "unsubscribe freebsd-questions" in the body of the message > > > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-questions" in the body of the message ---------------------------------------------------------------------------------------------------------- Peter Elsner <peter@servplex.com> Vice President Of Customer Service (And System Administrator) 1835 S. Carrier Parkway Grand Prairie, Texas 75051 (972) 263-2080 - Voice (972) 263-2082 - Fax (972) 489-4838 - Cell Phone (425) 988-8061 - eFax I worry about my child and the Internet all the time, even though she's too young to have logged on yet. Here's what I worry about. I worry that 10 or 15 years from now, she will come to me and say "Daddy, where were you when they took freedom of the press away from the Internet?" -- Mike Godwin Unix IS user friendly... It's just selective about who its friends are. System Administration - It's a dirty job, but somebody said I had to do it. If you receive something that says 'Send this to everyone you know, pretend you don't know me. Standard $500/message proofreading fee applies for UCE. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.2.0.9.2.20030321113902.01c126f0>