The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Apache keeps crashing - Ton of "READING" requests

Discussion in 'EasyApache' started by fishfreek, Jan 24, 2005.

  1. fishfreek

    fishfreek Well-Known Member

    Joined:
    Jan 2, 2004
    Messages:
    238
    Likes Received:
    0
    Trophy Points:
    16
    Something is afoot and I cant seem to find a log file to help me figure out whats going on. On a few of my servers today I have seen this. In the apache status section of WHM there are a TON of Reding requests enteries with no IP, Host or Vhost enteries. It just says ...reading...

    The end result is apache keeps crashing.
     
  2. 0utlier

    0utlier Well-Known Member

    Joined:
    Aug 7, 2002
    Messages:
    46
    Likes Received:
    0
    Trophy Points:
    6
    Yes... I've just noticed this on one server of mine. Anyone else?
     
  3. Stream

    Stream Well-Known Member

    Joined:
    Feb 7, 2004
    Messages:
    64
    Likes Received:
    0
    Trophy Points:
    6
    My Apache just started crashing all the time a couple of hours ago. I'm only able to keep it up and running for 20-30 seconds before it crashes.
     
  4. fishfreek

    fishfreek Well-Known Member

    Joined:
    Jan 2, 2004
    Messages:
    238
    Likes Received:
    0
    Trophy Points:
    16
    When I say a ton of reading requests I mean out of 150 apache status enteries 10-15 might be acutal requsts where its requesting or getting info and the balance are these reading reqests.

    My guess is its some kind of massave DOS attack but how to stop/block it I am lost as I have yet to find a log file that has useful info.

    I am running Apache/1.3.33 with ModSecurity/1.8.6-1.00RC2
     
  5. Myacen

    Myacen Well-Known Member

    Joined:
    Apr 6, 2002
    Messages:
    222
    Likes Received:
    0
    Trophy Points:
    16
    Having the same problem, I believe it's the easyapache on the server
     
  6. manokiss

    manokiss Well-Known Member

    Joined:
    Mar 31, 2002
    Messages:
    571
    Likes Received:
    0
    Trophy Points:
    16
    In many of our servers also, can someone from cPanel confirm this is not a daily upcp problem or something like that caused this?

    Thank you!
     
  7. linux-image

    linux-image Well-Known Member

    Joined:
    Jun 8, 2004
    Messages:
    1,192
    Likes Received:
    1
    Trophy Points:
    38
    Location:
    India
    cPanel Access Level:
    Root Administrator
    what does #ipcs on shell as root give u ?
     
  8. Stream

    Stream Well-Known Member

    Joined:
    Feb 7, 2004
    Messages:
    64
    Likes Received:
    0
    Trophy Points:
    6
    This is what my error_log says over and over again:

    Code:
    [Mon Jan 24 17:50:36 2005] [notice] Accept mutex: sysvsem (Default: sysvsem)
    [Mon Jan 24 17:50:53 2005] [error] server reached MaxClients setting, consider raising the MaxClients setting
    [Mon Jan 24 17:53:54 2005] [notice] caught SIGTERM, shutting down
    [Mon Jan 24 17:53:54 2005] [notice] Apache/1.3.33 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.10 FrontPage/5.0.2.2635 mod_ssl/2.8.22 OpenSSL/0.9.7a configured -- resuming normal operations
    [Mon Jan 24 17:53:54 2005] [notice] suEXEC mechanism enabled (wrapper: /usr/local/apache/bin/suexec)
    [Mon Jan 24 17:53:54 2005] [notice] Accept mutex: sysvsem (Default: sysvsem)
    [Mon Jan 24 17:54:08 2005] [error] server reached MaxClients setting, consider raising the MaxClients setting
    I have MaxClients set to 170 in httpd.conf and it's never been a problem before. Now the webserver stays up for just a couple of seconds before shutting down...

    access_log says nothing interesting. What other log-files could I check?
     
  9. Myacen

    Myacen Well-Known Member

    Joined:
    Apr 6, 2002
    Messages:
    222
    Likes Received:
    0
    Trophy Points:
    16
    [Mon Jan 24 18:02:21 2005] [notice] caught SIGTERM, shutting down
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.47:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.21:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.9:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.15:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.13:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.13:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.13:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.13:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.7:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.7:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [warn] NameVirtualHost 67.18.234.7:80 has no VirtualHosts
    [Mon Jan 24 18:02:22 2005] [notice] Apache configured -- resuming normal operations
    [Mon Jan 24 18:02:22 2005] [notice] suEXEC mechanism enabled (wrapper: /usr/local/apache/bin/suexec)
    [Mon Jan 24 18:02:22 2005] [notice] Accept mutex: sysvsem (Default: sysvsem)
    [Mon Jan 24 18:02:29 2005] [error] [client 66.249.65.8] File does not exist: /home/hestonwe/public_html/robots.txt
    [Mon Jan 24 18:02:29 2005] [error] [client 66.249.65.8] File does not exist: /home/hestonwe/public_html/404.shtml
    [Mon Jan 24 18:02:31 2005] [error] [client 24.69.0.126] File does not exist: /home/coreylee/public_html/favicon.ico
    [Mon Jan 24 18:02:31 2005] [error] [client 24.69.0.126] File does not exist: /home/coreylee/public_html/404.shtml
    [Mon Jan 24 18:02:33 2005] [error] server reached MaxClients setting, consider raising the MaxClients setting

    That's after a couple of seconds after starting up 4 servers having problems heh
     
  10. linux-image

    linux-image Well-Known Member

    Joined:
    Jun 8, 2004
    Messages:
    1,192
    Likes Received:
    1
    Trophy Points:
    38
    Location:
    India
    cPanel Access Level:
    Root Administrator
  11. hunet

    hunet Member

    Joined:
    Mar 29, 2003
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    1
    Exactly the same thing happening here.

    Doesn't look too good :(
     
  12. brainx

    brainx Member

    Joined:
    Jul 9, 2003
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    1
    We have the same problem here:(
     
  13. linux-image

    linux-image Well-Known Member

    Joined:
    Jun 8, 2004
    Messages:
    1,192
    Likes Received:
    1
    Trophy Points:
    38
    Location:
    India
    cPanel Access Level:
    Root Administrator
    what version of cpanel are u guys running ? try switching to stable and try ?
     
    #13 linux-image, Jan 24, 2005
    Last edited: Jan 24, 2005
  14. fishfreek

    fishfreek Well-Known Member

    Joined:
    Jan 2, 2004
    Messages:
    238
    Likes Received:
    0
    Trophy Points:
    16
    My max clients was 150 and normal traffic on that server comes no where close to that. I upped it to 250 cause of this issue and its still having issues. I expect if I upped it to 500 the problem would STILL exist.
     
  15. timdorr

    timdorr Well-Known Member
    PartnerNOC

    Joined:
    Jul 9, 2002
    Messages:
    93
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Atlanta, GA
    My servers, as well. I originally started out by blocking IPs, but that's not working. So, as a very weak workaround, I have my crontab set up to restart apache every 2 minutes, thereby clearing the connection queue.
     
  16. Myacen

    Myacen Well-Known Member

    Joined:
    Apr 6, 2002
    Messages:
    222
    Likes Received:
    0
    Trophy Points:
    16
    Stable nothing has changed on our end, another is running 9.9.9 e 36 so I dont know.
     
  17. timdorr

    timdorr Well-Known Member
    PartnerNOC

    Joined:
    Jul 9, 2002
    Messages:
    93
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Atlanta, GA
    By the way, this has nothing to do with cPanel. It appears to be some sort of worm going around.
     
  18. fishfreek

    fishfreek Well-Known Member

    Joined:
    Jan 2, 2004
    Messages:
    238
    Likes Received:
    0
    Trophy Points:
    16
    I get this.

    Im running WHM 10.0.0 cPanel 10.0.0-C6

    I have been running the C6 release of cpanel since at least Thursday of last week.
     
  19. fishfreek

    fishfreek Well-Known Member

    Joined:
    Jan 2, 2004
    Messages:
    238
    Likes Received:
    0
    Trophy Points:
    16
    An example of what I am seeing in Apache Status.

    I have the modsecurity rule %27 installed to catch the majority of the php worm hits but this must be something new or a new varient.

     
  20. linux-image

    linux-image Well-Known Member

    Joined:
    Jun 8, 2004
    Messages:
    1,192
    Likes Received:
    1
    Trophy Points:
    38
    Location:
    India
    cPanel Access Level:
    Root Administrator
Loading...

Share This Page