From owner-freebsd-questions Thu Aug 1 14:45: 8 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BDEB337B400 for ; Thu, 1 Aug 2002 14:45:04 -0700 (PDT) Received: from buffnet4.buffnet.net (buffnet4.buffnet.net [205.246.19.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id DEE1D43E84 for ; Thu, 1 Aug 2002 14:45:03 -0700 (PDT) (envelope-from mtech@buffnet.net) Received: from buffnet5.buffnet.net (buffnet5.buffnet.net [205.246.19.14]) by buffnet4.buffnet.net (8.9.3/8.8.7) with ESMTP id RAA69444; Thu, 1 Aug 2002 17:45:09 -0400 (EDT) (envelope-from mtech@buffnet.net) Date: Thu, 1 Aug 2002 17:44:55 -0400 (EDT) From: Mohsin Rahman To: lists@brenius.com Cc: William Palfreman , questions@FreeBSD.ORG Subject: Re: Very High HTTPD Usage (Pls help, was urgent) In-Reply-To: <007e01c23994$2b454c20$7b01a8c0@afi> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG try "sockstat" to see if there is an IP pattern. Could it be that you are getting hit hard w/ nimda and the like? check you access-logs. Try putting this in your httpd.conf, doing a configtest and then keep an eye on the virus_log file. SetEnvIf Request_URI \.exe$ microsoft_bs SetEnvIf Request_URI \.dll$ microsoft_bs SetEnvIf Request_URI \.default.ida$ microsoft_bs CustomLog /logs/virus_log combined env=microsoft_bs If you have PHP support built into apache, set a max_execution time in php.ini and keep us posted. Good luck! Mohsin AbdulRahman MTech@BuffNET.Net On Thu, 1 Aug 2002 lists@brenius.com wrote: > Hello Bill, you wrote: > > I'm getting the same thing with my Slash installation every day about 2 > > o'clock in the morning. Except for me it is a perl process that is > > wreaking havoc, swallowing all the swap then getting killed off by the > > OS. > > We are still trying to track down the problem, but so far to temporarily > the kill the sucker, we did the following: > > -Sendmail died, because the load went over 12.##. > > -/usr/local/apache/bin/ > -./apachectl retart > > That taimed it down for the time being. > > Then another FreeBSD server, we had an httpd process hoovering around > 97% while looking at a "top". > > Did the same as above and that slowed things down to near normal. > > > As for you, are you doing anything funny with your webserver? > > Not out of the ordinary. Apache 1.3.26, PHP 4.2.1, mySQL 3.23.51...(or close) > > Well things have settled down, but I would really like to track down the problem. > > Thank you. > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message