Portal Home > Knowledgebase > Articles Database > httpd issue
httpd issue
| Posted by madpato, 08-18-2008, 04:45 PM |
| Hi
I know that there are a lot of posts about this but... i have a problem w my apache... it was working fine until today... i get this e-mail from WHM whenever httpd fails... and its pretty often:
I wanna know how to check in the error log the entries of just today. because when i put "cat error_log" i start receiving things from last week and this is happening today...
i've tried /scripts/rebuildhttpdconf and then restarted, but still the same.
any help? please
|
| Posted by krisanta, 08-18-2008, 05:02 PM |
| You can check for a possible server overload. You can use commands such as "top" or "ps -aux" to look for clues what is causing this.
You can check Apche lo files maybe under the directory /var/log/httpd or /usr/local/httpd/logs.
|
| Posted by madpato, 08-18-2008, 05:12 PM |
| its not a server overload... its a random issue... ive also checked if it was a syn flood attack with:
but i dont think its that... it has barely 30 connections per ip...
I dont know w to do! :cry:
Im rebuilding with easy apache... hope it fixes it.
now i just got:
|
| Posted by Xaurora, 08-18-2008, 05:22 PM |
| http://www.linuxquestions.org/questi...-failed-97275/
google "httpd failed"
hope this helps some..
|
| Posted by madpato, 08-18-2008, 06:04 PM |
| just for the record how many SYN_RECV means an attack? like 200 or more?? because i did netstat -na | grep :80 and this is the output:
|
| Posted by madpato, 08-18-2008, 06:14 PM |
| nevermind.... i just runned easyapache (without doing any change on the config) and its fixed ¬¬ still didnt knew why it happened.
|
| Posted by DemonElite, 08-19-2008, 02:10 AM |
| DDos Attack From Botnet Possible
|
| Posted by ragubhat, 08-19-2008, 04:15 AM |
| mad pato
>> tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN
>> tcp 0 0 64.76.136.223:80 190.47.130.72:51352 SYN_RECV
>> tcp 0 0 64.76.136.223:80 190.47.130.72:51436 SYN_RECV
>> tcp 0 0 64.76.136.223:80 201.246.67.101:59909 SYN_RECV
>> tcp 0 0 64.76.136.223:80 190.44.161.241:4364 SYN_RECV
>> tcp 0 0 64.76.136.223:80 190.47.130.72:51394 SYN_RECV
Please pipe your screen dumps and attach the dumpfiles instead
of pasting 5 screen pages of some output here. The admin of
this forum should award pain-points to this guy! Some guys' top
post instead of quoting relevant lines but this is really bad.
<>
Last edited by bear; 08-19-2008 at 07:43 AM.
|
Add to Favourites 
Print this Article
Also Read
Dade 2 review (Views: 767)
Shared Hosting
Shared Hosting
