From owner-freebsd-isp  Wed Mar 11 15:05:08 1998
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id PAA03070
          for freebsd-isp-outgoing; Wed, 11 Mar 1998 15:05:08 -0800 (PST)
          (envelope-from owner-freebsd-isp@FreeBSD.ORG)
Received: from home.dragondata.com (toasty@home.dragondata.com [204.137.237.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA03061
          for <isp@FreeBSD.ORG>; Wed, 11 Mar 1998 15:05:05 -0800 (PST)
          (envelope-from toasty@home.dragondata.com)
Received: (from toasty@localhost)
	by home.dragondata.com (8.8.8/8.8.5) id RAA18688;
	Wed, 11 Mar 1998 17:04:53 -0600 (CST)
From: Kevin Day <toasty@home.dragondata.com>
Message-Id: <199803112304.RAA18688@home.dragondata.com>
Subject: Re: Runaway web server.
In-Reply-To: <Pine.BSF.3.95q.980311174734.6707A-100000@wopr.inetu.net> from Dev at "Mar 11, 98 05:52:13 pm"
To: dev@wopr.inetu.net (Dev)
Date: Wed, 11 Mar 1998 17:04:53 -0600 (CST)
Cc: isp@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL31 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> 
> We have a freebsd 2.2.5 server w/96 megs of ram
> running 13 instances of apache. (each spawning
> about 5-10 children).
> 
> it seems something triggers _all_ of the servers
> to become in the run state. about 4 or 5 children
> seem to be using about 8 mb of ram. it is very
> hard to actually kill the processes. (not just
> from lag, but the process not dying after being
> sent a kill signal).
> 
> when trying to kill the session leader it does not
> seem to die.
> 
> The servers get stuck in a "waiting for reply"
> state and never seem to respond. This server has
> been up for over 40 days running fine.
> 
> We have finally rebooted the machine, and after
> about four hours it happened again. 
> 
> Anyone have any suggestions?
> 

Is this a somewhat old version of apache?

If so, someone's exploiting a bug...  adding a ton of /'s in a URL will
cause apache to come to a crawl...

Kevin

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message