Date: Tue, 18 Jul 2006 11:25:07 -0700 From: Doug Barton <dougb@FreeBSD.org> To: John Von Essen <john@essenz.com> Cc: freebsd-hackers@freebsd.org Subject: Re: odd behavior in apache 2.0.58 today Message-ID: <44BD2783.1000609@FreeBSD.org> In-Reply-To: <20060718140354.V64880@beck.quonix.net> References: <20060718140354.V64880@beck.quonix.net>
next in thread | previous in thread | raw e-mail | index | archive | help
John Von Essen wrote: > Had a little crash today, that appears to be apache related, but is > confusing nonetheless. > > My server hosts a fair amount of websites, but nothing crazy. Uptime is > usually only 0.5. Anyway, it got real slow, when I finally logged in, > uptime was 152, ps -aux showed alot of apache pids, over a 100 (its > usually 10 or so), and a netstat -an showed alot of connections to port > 80. The odd thing though was all the connections were CLOSED_WAIT > > Machine is running 6-STABLE, and has 1Gb of memory, with a HT P4 3.2 > GHz. And the HT has been turned on, even though its disabled by default. > > Any ideas as to what is going on? Is there maybe an issue with apache > that triggered something, or maybe it was just a random DoS attack. Back when I was doing hosting I saw that same behavior with Apache 1.x when a very aggressive spider went after sites on our systems. Restarting Apache was usually all it took to set things right again. hth, Doug -- This .signature sanitized for your protection
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44BD2783.1000609>