Ok I used gdb to a process (that was stuck in reading state) and look at what it told me.. #0 0x003307a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2 #1 0x00408dbd in poll () from /lib/tls/libc.so.6 #2 0x00af595f in apr_poll (aprset=0xbfe55310, num=1, nsds=0xbfe5530c, timeout=300000) at poll.c:130 #3 0x00af5d5f in apr_wait_for_io_or_timeout (f=0x0, s=0x959b4a8, for_read=1) at waitio.c:54 #4 0x00aec19c in apr_socket_recv (sock=0x959b4a8, buf=0x9624688 "\n# AddHandler application/x-httpd-php .php .sc\r\nIndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*\r\nDirectoryIndex home.gc index.gc index.php\r\n\r\n<Limit GET POST>\r\n#The next line modified b"..., len=0xbfe553e8) at sendrecv.c:87 #5 0x00fcc0dc in socket_bucket_read (a=0x95c0468, str=0xbfe553e4, len=0xbfe553e8, block=APR_BLOCK_READ) at apr_buckets_socket.c:36 #6 0x00fcd06a in apr_brigade_split_line (bbOut=0x95d0f50, bbIn=0x959b9a0, block=APR_BLOCK_READ, maxbytes=8192) at apr_brigade.c:289 #7 0x080b9a9b in core_input_filter (f=0x959b968, b=0x95d0f50, mode=AP_MODE_GETLINE, block=APR_BLOCK_READ, readbytes=0) at core.c:3802 #8 0x0806e8db in logio_in_filter (f=0x959b928, bb=0x95d0f50, mode=AP_MODE_GETLINE, block=APR_BLOCK_READ, readbytes=0) at mod_logio.c:115 #9 0x080b3ae3 in ap_rgetline_core (s=0x95d02a0, n=8192, read=0xbfe55528, r=0x95d0288, fold=0, bb=0x95d0f50) at protocol.c:230 #10 0x080b4577 in ap_read_request (conn=0x959b580) at protocol.c:586 #11 0x0808bc6e in ap_process_http_connection (c=0x959b580) at http_core.c:271 ---Type <return> to continue, or q <return> to quit--- #12 0x080b0a62 in ap_run_process_connection (c=0x959b580) at connection.c:43 #13 0x080a5ad1 in child_main (child_num_arg=Variable "child_num_arg" is not available. ) at prefork.c:610 #14 0x080a5cfb in make_child (s=Variable "s" is not available. ) at prefork.c:704 #15 0x080a5d8c in startup_children (number_to_start=5) at prefork.c:722 #16 0x080a645f in ap_mpm_run (_pconf=0x8c2c0a8, plog=0x8c6c1a8, s=0x8c32ed0) at prefork.c:941 #17 0x080ab803 in main (argc=4, argv=0xbfe558c4) at main.c:638 Sander Temme-2 wrote: > > > On Nov 7, 2007, at 9:31 AM, Andrew Rosolino wrote: > >> I restarted apache and all was fine.. but then 20 minutes later >> they went >> back all into a reading state.. it appears as if slowly each >> processes goes >> into the reading state?? I dont understand what the problem is. > > If you have gdb on the box (and have some acumen using it), you can > attach to one of the processes and see if it is hanging in something > obvious. > > If not, and your traffic is plaintext, I recommend the tcpdump > approach to see what is going on traffic-wise, and what triggers the > issue. I'd dump the traffic to disk (tcpdump -i ethX -s 0 -w / > wherever/traffic.dump port 80) and take it over to a box with > Ethereal/Wireshark for some cozy analysis. > > If you're being DOS attacked by trickle requests, you could try > setting a very low timeout (default is 5 minutes which doesn't seem > to be working for you) and perhaps use mod_evasive or somesuch to > flag and firewall the bad clients. > > S. > > -- > Sander Temme > sctemme@xxxxxxxxxx > PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF > > > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > -- View this message in context: http://www.nabble.com/Apache-Hangs..-Server-Status-shows-all-Reading-tf4766110.html#a13693055 Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx