Re: Denial of Service due to multiplication of httpd running

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I was too quick to cry ignorance. I have now gotten mod_status working and
here is the output. For some bizarre reason the number of servers is
multiplying

68.58.140.236 was downloading another page with lots of pictures on it.
(http://axion.physics.ubc.ca/titanic/-- axion is an ancient pseudonym for
www.theory.physics.ubc.ca)

Why are these idle servers multiplying? As I said this all started out by my
having 160 of them which was causing swapping death for the system.

How do I tell apache not to do this multiplication of servers?

Note that the aggregator requests keep coming even though the virtual host
which hosted them is disconnected (commented out in the httpd configuratio
nfiles)



-------------------------------------------------------------

Apache Server Status for www.theory.physics.ubc.ca

Server Version: Apache/2.2.22 (Mandriva Linux/PREFORK-0.1mdv2010.2)
mod_ssl/2.2.22 OpenSSL/1.0.0a PHP/5.3.13 with Suhosin-Patch mod_perl/2.0.4
Perl/v5.10.1
Server Built: Feb 1 2012 12:26:04

Current Time: Thursday, 24-May-2012 09:18:07 PDT
Restart Time: Thursday, 24-May-2012 08:55:18 PDT
Parent Server Generation: 0
Server uptime: 22 minutes 48 seconds
Total accesses: 172 - Total Traffic: 3.9 MB
CPU Usage: u.01 s.02 cu0 cs0 - .00219% CPU load
.126 requests/sec - 2976 B/second - 23.1 kB/request
1 requests currently being processed, 14 idle workers

______________W.................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"C" Closing connection, "L" Logging, "G" Gracefully finishing,
"I" Idle cleanup of worker, "." Open slot with no current process

Srv	PID	Acc	M	CPU 	SS	Req	Conn	Child	Slot Client	VHost	Request
0-0	11536	0/38/38	_ 	0.01	117	1	0.0	0.55	0.55 68.58.140.236	www.theory.physics.ubc.ca	NULL
1-0	11537	0/13/13	_ 	0.00	117	332	0.0	0.51	0.51 68.58.140.236	www.theory.physics.ubc.ca	NULL
2-0	11538	0/11/11	_ 	0.00	117	5	0.0	0.47	0.47 68.58.140.236	www.theory.physics.ubc.ca	NULL
3-0	11539	0/14/14	_ 	0.00	117	1	0.0	0.61	0.61 68.58.140.236	www.theory.physics.ubc.ca	NULL
4-0	11540	0/19/19	_ 	0.00	117	1	0.0	0.67	0.67 68.58.140.236	www.theory.physics.ubc.ca	NULL
5-0	11541	0/17/17	_ 	0.00	117	0	0.0	0.30	0.30 66.249.68.41	www.theory.physics.ubc.ca	GET /aggregator/www.guardian.co.uk/world/2012/jan/17/node/node/
6-0	11542	0/6/6	_ 	0.00	1159	1	0.0	0.01	0.01 24.82.146.42	www.theory.physics.ubc.ca	NULL
7-0	11544	0/49/49	_ 	0.02	117	1	0.0	0.77	0.77 68.58.140.236	www.theory.physics.ubc.ca	NULL
8-0	11737	0/4/4	_ 	0.00	3	0	0.0	0.00	0.00 66.249.68.193	www.theory.physics.ubc.ca	GET /aggregator/www.youtube.com/www.iaea.org/Publications/Docum
14-0	11743	0/1/1	W 	0.00	0	0	0.0	0.00	0.00 24.82.146.42	www.theory.physics.ubc.ca	GET /server-status HTTP/1.1
Srv	Child Server number - generation
PID	OS process ID
Acc	Number of accesses this connection / this child / this slot
M	Mode of operation
CPU	CPU usage, number of seconds
SS	Seconds since beginning of most recent request
Req	Milliseconds required to process most recent request
Conn	Kilobytes transferred this connection
Child	Megabytes transferred this child
Slot	Total megabytes transferred this slot





On Thu, 24 May 2012, Pete Houston wrote:

On Wed, May 23, 2012 at 07:47:37PM -0700, Bill Unruh wrote:
But this is clearly a horrible kludge. Is there any way I can figure
out what is triggering these versions of httpd
to be piling up?

Since you've looked at the logs and not found anything there (or at
least eliminated what problems you have found), mod_status would be
a good next step.

If there is some reason why you cannot enable mod_status, then check who
is holding the connections open with netstat.

Pete


--
William G. Unruh   |  Canadian Institute for|     Tel: +1(604)822-3273
Physics&Astronomy  |     Advanced Research  |     Fax: +1(604)822-5324
UBC, Vancouver,BC  |   Program in Cosmology |     unruh@xxxxxxxxxxxxxx
Canada V6T 1Z1     |      and Gravity       |  www.theory.physics.ubc.ca/

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux