The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Apache restarted...

Discussion in 'EasyApache' started by ThunderHostingDotCom, Sep 30, 2003.

  1. ThunderHostingDotCom

    ThunderHostingDotCom Well-Known Member

    Joined:
    Nov 18, 2002
    Messages:
    450
    Likes Received:
    1
    Trophy Points:
    16
    Location:
    All over!
    I just signed up a new reseller just the other day & yesterday Monday 9/29 apache failed & restarted 2 times, once at 4:25am & again at 9:39pm. I want to be on top of this before it becomes a problem. What logs should I check & what should I look for to see what the problem could be? Thanks in advance for your help!

    cPanel.net Support Ticket Number:
     
  2. casey

    casey Well-Known Member

    Joined:
    Jan 17, 2003
    Messages:
    2,303
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    If there is trouble, it will find me
    /usr/local/apache/logs/error_log

    Should tell you why apache failed.

    cPanel.net Support Ticket Number:
     
  3. ThunderHostingDotCom

    ThunderHostingDotCom Well-Known Member

    Joined:
    Nov 18, 2002
    Messages:
    450
    Likes Received:
    1
    Trophy Points:
    16
    Location:
    All over!
    Thanks, CPU has been at 99% for the past hour. In WHM under Server Status > CPU/Memory/MySQL Usage the top line is in RED which reads the below. How can I find out what is causing this?

    User - root
    Domain - (it is blank of course)
    %CPU - 47.97
    %MEM - 5.70
    Mysql Processes - 2.0

    Some things I found some things in the log file around both times that I don't like. I pasted some below. I see there are other warnings & notices also so if anyone can tell me what to do to fix it all I would appreciate it.

    [Mon Sep 29 04:17:38 2003] [notice] SIGUSR1 received. Doing graceful restart
    [Mon Sep 29 04:17:38 2003] [error] Cannot remove module mod_jrun.c: not found in module list
    [Mon Sep 29 04:17:38 2003] [warn] Loaded DSO /opt/coldfusionmx/runtime/lib/wsconfig/1/mod_jrun.so uses plain Apache 1.3 API, this module might crash under EAPI! (please recompile it with -DEAP$
    httpd: module "mod_auth_passthrough.c" could not be loaded, because the dynamic
    module limit was reached. Please increase DYNAMIC_MODULE_LIMIT and recompile.
    Zend Optimizer requires Zend Engine API version 20020429.
    The Zend Engine API version 20021010 which is installed, is newer.
    Contact Zend Technologies at http://www.zend.com/ for a later version of Zend Optimizer.

    [Mon Sep 29 04:25:24 2003] [error] Cannot remove module mod_jrun.c: not found in module list
    [Mon Sep 29 04:25:25 2003] [warn] Loaded DSO /opt/coldfusionmx/runtime/lib/wsconfig/1/mod_jrun.so uses plain Apache 1.3 API, this module might crash under EAPI! (please recompile it with -DEAP$
    [Mon Sep 29 04:25:25 2003] [warn] NameVirtualHost 209.51.146.252:80 has no VirtualHosts
    [Mon Sep 29 04:25:25 2003] [warn] NameVirtualHost 209.51.146.225:80 has no VirtualHosts
    [Mon Sep 29 04:25:25 2003] [warn] NameVirtualHost 209.51.146.227:80 has no VirtualHosts
    [Mon Sep 29 04:25:25 2003] [warn] pid file /usr/local/apache/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
    Zend Optimizer requires Zend Engine API version 20020429.
    The Zend Engine API version 20021010 which is installed, is newer.
    Contact Zend Technologies at http://www.zend.com/ for a later version of Zend Optimizer.

    Zend Optimizer requires Zend Engine API version 20020429.
    The Zend Engine API version 20021010 which is installed, is newer.
    Contact Zend Technologies at http://www.zend.com/ for a later version of Zend Optimizer.

    [Mon Sep 29 04:25:25 2003] [notice] Apache/1.3.28 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.0 PHP/4.3.2 FrontPage/5.0.2.2634 mod_ssl/2.8.15 OpenSSL/0.9.6b configured --$
    [Mon Sep 29 04:25:25 2003] [notice] suEXEC mechanism enabled (wrapper: /usr/local/apache/bin/suexec)
    [Mon Sep 29 04:25:25 2003] [notice] Accept mutex: sysvsem (Default: sysvsem)
    [Mon Sep 29 04:25:26 2003] [error] Cannot remove module mod_jrun.c: not found in module list
    [Mon Sep 29 04:25:26 2003] [warn] Loaded DSO /opt/coldfusionmx/runtime/lib/wsconfig/1/mod_jrun.so uses plain Apache 1.3 API, this module might crash under EAPI! (please recompile it with -DEAP$
    [Mon Sep 29 04:25:26 2003] [warn] NameVirtualHost 209.51.146.252:80 has no VirtualHosts
    [Mon Sep 29 04:25:26 2003] [warn] NameVirtualHost 209.51.146.225:80 has no VirtualHosts
    [Mon Sep 29 04:25:26 2003] [warn] NameVirtualHost 209.51.146.227:80 has no VirtualHosts
    [Mon Sep 29 04:30:00 2003] [error] mod_ssl: Cannot open SSLSessionCache DBM file `/usr/local/apache/logs/ssl_scache' for status retrival (System error follows)
    [Mon Sep 29 04:30:00 2003] [error] System: No such file or directory (errno: 2)


    [Tue Sep 30 07:30:06 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:06 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/cheapwsh/public_html/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/cheapwsh/public_html/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/inet/public_html/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/inet/public_html/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/luckycom/public_html/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/luckycom/public_html/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/maiyeube/public_html/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/maiyeube/public_html/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/ww/public_html/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/ww/public_html/404.shtml
     
    #3 ThunderHostingDotCom, Sep 30, 2003
    Last edited: Sep 30, 2003
  4. B12Org

    B12Org Well-Known Member

    Joined:
    Jul 15, 2003
    Messages:
    692
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Seattle Washington
    cPanel Access Level:
    Root Administrator
    This is happening to me now, any ideas?
     
  5. ThunderHostingDotCom

    ThunderHostingDotCom Well-Known Member

    Joined:
    Nov 18, 2002
    Messages:
    450
    Likes Received:
    1
    Trophy Points:
    16
    Location:
    All over!
    I am not sure what caused it but it cleared up after a day or so.
     
  6. B12Org

    B12Org Well-Known Member

    Joined:
    Jul 15, 2003
    Messages:
    692
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Seattle Washington
    cPanel Access Level:
    Root Administrator
    I am not sure that I can wait two or so days for httpd to start working again. It is currently in a failed status, and I have lots of clients who want to see their web sites . . .
     
  7. damainman

    damainman Well-Known Member

    Joined:
    Nov 13, 2003
    Messages:
    515
    Likes Received:
    0
    Trophy Points:
    16
    ur last block of logs with all the cmd.exe errors looks like a machine infected with the NIMDA virus visted your server.

    If your running windows it might be a problem.. if your running linux, you have nothing to worry about because linux machines cannot be infected by NIMDA.

    For first block of logs looks like theres a problem with your coldfusion configuration, or the way its running.

    "[Mon Sep 29 04:17:38 2003] [warn] Loaded DSO /opt/coldfusionmx/runtime/lib/wsconfig/1/mod_jrun.so uses plain Apache 1.3 API, this module might crash under EAPI! (please recompile it with -DEAP$"

    Also what machine are you using?
     
  8. brad_d

    brad_d Registered

    Joined:
    Feb 16, 2004
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    0 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/maiyeube/public_html/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/maiyeube/public_html/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Tue Sep 30 07:30:07 2003] [error] [client 168.243.168.1] File does not exist: /home/ww/public_html/scripts/..%5c%5c../winnt/system32






    this is a worm attempting to attack you if you are running windows and IIs.
     
  9. B12Org

    B12Org Well-Known Member

    Joined:
    Jul 15, 2003
    Messages:
    692
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Seattle Washington
    cPanel Access Level:
    Root Administrator
    Well, I dont thinkcpanel is even available for windows, so I am not sure that bears any relevance.
     
Loading...

Share This Page