Forcerdj

Well-Known Member
Nov 30, 2009
68
1
58
I recently switched to FastCGI and now I regularly get errors either 'Excessive Resource Usage' or 'Suspicious Process Running'.

Code:
Uptime:  129 seconds

Executable:
/usr/selector/php

Command Line (often faked in exploits):
/usr/bin/php


Network connections by the process (if any):

tcp: <IP>:42728 -> <IP>:443

Files open by the process (if any):

/usr/local/apache/logs/error_log
/usr/local/apache/logs/error_log
(deleted)/tmp/ZCUD4t6Ivq
/dev/urandom
/tmp/cloudflare.3.0.2-ZSAdSA.tmp
I get these maybe 2/3 times per day from various accounts, seems quite random.

I'm assuming I just need to change/increase some settings values somewhere, I've googled the problem and tried a few things but I must be missing it because i'm not seeing an improvement.

Here is some settings:

Post VirtualHost Include

Code:
<IfModule mod_fcgid.c>
FcgidMinProcessesPerClass 0
FcgidMaxProcessesPerClass 15
FcgidMaxProcesses 300
FcgidIdleTimeout 60
FcgidProcessLifeTime 120
FcgidIdleScanInterval 30
FcgidMaxRequestsPerProcess 5000
FcgidIOTimeout 2000
</IfModule>
Apache:
Code:
Start Servers 10
Minimum Spare Servers 20
Maximum Spare Servers 40
Server Limit (Maximum: 20,000) 256
Max Request Workers 150
Max Connections Per Child 10000
Keep-Alive On
Keep-Alive Timeout 5
Max Keep-Alive Requests 150
Timeout 300
Thanks
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,910
2,213
363
Hello,

These notifications come from CSF/LFD as opposed to cPanel. Do you notice any particular error messages in /usr/local/apache/logs/error_log at the times referenced in those notifications?

Thank you.
 

Forcerdj

Well-Known Member
Nov 30, 2009
68
1
58
Hello,

These notifications come from CSF/LFD as opposed to cPanel. Do you notice any particular error messages in /usr/local/apache/logs/error_log at the times referenced in those notifications?

Thank you.
Hi, thanks for the reply.. here is a more recent one:

Code:
Time:    Wed Sep 28 20:14:29 2016 +0100
PID:     676227 (Parent PID:675813)
Account: <username>
Uptime:  144 seconds


Executable:

/usr/selector/php


Command Line (often faked in exploits):

/usr/bin/php


Network connections by the process (if any):

tcp: 109.203.110.214:53854 -> 104.31.66.22:443


Files open by the process (if any):

/usr/local/apache/logs/error_log
/usr/local/apache/logs/error_log
(deleted)/tmp/ZCUDboV4ye


Memory maps by the process (if any):

00400000-00edd000 r-xp 00000000 103:02 1731989                           /usr/selector/php
010dc000-011a8000 rw-p 00adc000 103:02 1731989                           /usr/selector/php
011a8000-011cc000 rw-p 00000000 00:00 0
01759000-061c2000 rw-p 00000000 00:00 0                                  [heap]
7ff7726fa000-7ff77271b000 rw-p 00000000 00:00 0
7ff77280b000-7ff772810000 r-xp 00000000 103:01 37                        /lib64/libnss_dns-2.12.so
7ff772810000-7ff772a0f000 ---p 00005000 103:01 37                        /lib64/libnss_dns-2.12.so
7ff772a0f000-7ff772a10000 r--p 00004000 103:01 37                        /lib64/libnss_dns-2.12.so
7ff772a10000-7ff772a11000 rw-p 00005000 103:01 37                        /lib64/libnss_dns-2.12.so
7ff772a11000-7ff772a91000 rw-s 00000000 00:04 1693188108                  (deleted)/VE0-SYSV00000000
7ff772a91000-7ff772a9e000 r-xp 00000000 103:01 588                       /lib64/libnss_files-2.12.so
7ff772a9e000-7ff772c9d000 ---p 0000d000 103:01 588                       /lib64/libnss_files-2.12.so
7ff772c9d000-7ff772c9e000 r--p 0000c000 103:01 588                       /lib64/libnss_files-2.12.so
7ff772c9e000-7ff772c9f000 rw-p 0000d000 103:01 588                       /lib64/libnss_files-2.12.so
7ff772c9f000-7ff772ca5000 r-xp 00000000 103:02 788845                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/pdo_mysql.so
7ff772ca5000-7ff772ea5000 ---p 00006000 103:02 788845                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/pdo_mysql.so
7ff772ea5000-7ff772ea6000 rw-p 00006000 103:02 788845                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/pdo_mysql.so
7ff772ea6000-7ff772eb1000 r-xp 00000000 103:02 1579106                   /usr/lib64/libicuio.so.42.1
7ff772eb1000-7ff7730b0000 ---p 0000b000 103:02 1579106                   /usr/lib64/libicuio.so.42.1
7ff7730b0000-7ff7730b2000 rw-p 0000a000 103:02 1579106                   /usr/lib64/libicuio.so.42.1
7ff7730b2000-7ff773ffd000 r-xp 00000000 103:02 1577266                   /usr/lib64/libicudata.so.42.1
7ff773ffd000-7ff7741fc000 ---p 00f4b000 103:02 1577266                   /usr/lib64/libicudata.so.42.1
7ff7741fc000-7ff7741fd000 rw-p 00f4a000 103:02 1577266                   /usr/lib64/libicudata.so.42.1
7ff7741fd000-7ff77433c000 r-xp 00000000 103:02 1579114                   /usr/lib64/libicuuc.so.42.1
7ff77433c000-7ff77453c000 ---p 0013f000 103:02 1579114                   /usr/lib64/libicuuc.so.42.1
7ff77453c000-7ff77454d000 rw-p 0013f000 103:02 1579114                   /usr/lib64/libicuuc.so.42.1
7ff77454d000-7ff77454f000 rw-p 00000000 00:00 0
7ff77454f000-7ff7746d7000 r-xp 00000000 103:02 1579104                   /usr/lib64/libicui18n.so.42.1
7ff7746d7000-7ff7748d7000 ---p 00188000 103:02 1579104                   /usr/lib64/libicui18n.so.42.1
7ff7748d7000-7ff7748e4000 rw-p 00188000 103:02 1579104                   /usr/lib64/libicui18n.so.42.1
7ff7748e4000-7ff7748e5000 rw-p 00000000 00:00 0
7ff7748e5000-7ff77493b000 r-xp 00000000 103:02 789147                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/intl.so
7ff77493b000-7ff774b3b000 ---p 00056000 103:02 789147                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/intl.so
7ff774b3b000-7ff774b44000 rw-p 00056000 103:02 789147                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/intl.so
7ff774b44000-7ff774b45000 rw-p 00000000 00:00 0
7ff774b45000-7ff774bfd000 r-xp 00000000 103:02 788844                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/pdo_sqlite.so
7ff774bfd000-7ff774dfc000 ---p 000b8000 103:02 788844                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/pdo_sqlite.so
7ff774dfc000-7ff774e01000 rw-p 000b7000 103:02 788844                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/pdo_sqlite.so
7ff774e01000-7ff774e17000 r-xp 00000000 103:02 788821                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/pdo.so
7ff774e17000-7ff775017000 ---p 00016000 103:02 788821                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/pdo.so
7ff775017000-7ff77501a000 rw-p 00016000 103:02 788821                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/pdo.so
7ff77501a000-7ff77503a000 r-xp 00000000 103:02 789180                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/suhosin.so
7ff77503a000-7ff775239000 ---p 00020000 103:02 789180                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/suhosin.so
7ff775239000-7ff77523f000 rw-p 0001f000 103:02 789180                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/suhosin.so
7ff77523f000-7ff775241000 rw-p 00000000 00:00 0
7ff775241000-7ff775264000 r-xp 00000000 103:02 789182                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/xcache.so
7ff775264000-7ff775463000 ---p 00023000 103:02 789182                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/xcache.so
7ff775463000-7ff775466000 rw-p 00022000 103:02 789182                    /usr/local/lib/php/extensions/no-debug-non-zts-20131226/xcache.so
7ff775466000-7ff77547c000 r-xp 00000000 103:01 6242                      /lib64/libgcc_s-4.4.7-20120601.so.1
7ff77547c000-7ff77567b000 ---p 00016000 103:01 6242                      /lib64/libgcc_s-4.4.7-20120601.so.1
7ff77567b000-7ff77567c000 rw-p 00015000 103:01 6242                      /lib64/libgcc_s-4.4.7-20120601.so.1
7ff77567c000-7ff775764000 r-xp 00000000 103:02 1573148                   /usr/lib64/libstdc++.so.6.0.13
7ff775764000-7ff775964000 ---p 000e8000 103:02 1573148                   /usr/lib64/libstdc++.so.6.0.13
7ff775964000-7ff77596b000 r--p 000e8000 103:02 1573148                   /usr/lib64/libstdc++.so.6.0.13
7ff77596b000-7ff77596d000 rw-p 000ef000 103:02 1573148                   /usr/lib64/libstdc++.so.6.0.13
7ff77596d000-7ff775982000 rw-p 00000000 00:00 0
7ff775982000-7ff775ac8000 r-xp 00000000 103:02 1731990                   /usr/local/Zend/lib/Guard-7.0.0/php-5.6.x/ZendGuardLoader.so
7ff775ac8000-7ff775cc8000 ---p 00146000 103:02 1731990                   /usr/local/Zend/lib/Guard-7.0.0/php-5.6.x/ZendGuardLoader.so
7ff775cc8000-7ff775ce5000 rw-p 00146000 103:02 1731990                   /usr/local/Zend/lib/Guard-7.0.0/php-5.6.x/ZendGuardLoader.so
7ff775ce5000-7ff775ceb000 rw-p 00000000 00:00 0
7ff775ceb000-7ff775e46000 r-xp 00000000 103:02 1731991                   /usr/local/IonCube/ioncube_loader_lin_5.6.so
7ff775e46000-7ff775f45000 ---p 0015b000 103:02 1731991                   /usr/local/IonCube/ioncube_loader_lin_5.6.so
7ff775f45000-7ff775f54000 rw-p 0015a000 103:02 1731991                   /usr/local/IonCube/ioncube_loader_lin_5.6.so
7ff775f54000-7ff775f57000 rw-p 00000000 00:00 0
7ff775f57000-7ff775f74000 r-xp 00000000 103:01 554                       /lib64/libselinux.so.1
7ff775f74000-7ff776173000 ---p 0001d000 103:01 554                       /lib64/libselinux.so.1
7ff776173000-7ff776174000 r--p 0001c000 103:01 554                       /lib64/libselinux.so.1
7ff776174000-7ff776175000 rw-p 0001d000 103:01 554                       /lib64/libselinux.so.1
7ff776175000-7ff776176000 rw-p 00000000 00:00 0
7ff776176000-7ff776178000 r-xp 00000000 103:02 1575816                   /usr/lib64/libXau.so.6.0.0
7ff776178000-7ff776378000 ---p 00002000 103:02 1575816                   /usr/lib64/libXau.so.6.0.0
7ff776378000-7ff776379000 rw-p 00002000 103:02 1575816                   /usr/lib64/libXau.so.6.0.0
7ff776379000-7ff77637b000 r-xp 00000000 103:01 256                       /lib64/libkeyutils.so.1.3
7ff77637b000-7ff77657a000 ---p 00002000 103:01 256                       /lib64/libkeyutils.so.1.3
7ff77657a000-7ff77657b000 r--p 00001000 103:01 256                       /lib64/libkeyutils.so.1.3
7ff77657b000-7ff77657c000 rw-p 00002000 103:01 256                       /lib64/libkeyutils.so.1.3
7ff77657c000-7ff776586000 r-xp 00000000 103:01 53                        /lib64/libkrb5support.so.0.1
7ff776586000-7ff776785000 ---p 0000a000 103:01 53                        /lib64/libkrb5support.so.0.1
7ff776785000-7ff776786000 r--p 00009000 103:01 53                        /lib64/libkrb5support.so.0.1
7ff776786000-7ff776787000 rw-p 0000a000 103:01 53                        /lib64/libkrb5support.so.0.1
7ff776787000-7ff7767a5000 r-xp 00000000 103:02 1575859                   /usr/lib64/libxcb.so.1.1.0
7ff7767a5000-7ff7769a5000 ---p 0001e000 103:02 1575859                   /usr/lib64/libxcb.so.1.1.0
7ff7769a5000-7ff7769a6000 rw-p 0001e000 103:02 1575859                   /usr/lib64/libxcb.so.1.1.0
7ff7769a6000-7ff7769be000 r-xp 00000000 103:01 81                        /lib64/libaudit.so.1.0.0
7ff7769be000-7ff776bbd000 ---p 00018000 103:01 81                        /lib64/libaudit.so.1.0.0
7ff776bbd000-7ff776bbf000 r--p 00017000 103:01 81                        /lib64/libaudit.so.1.0.0
7ff776bbf000-7ff776bca000 rw-p 00019000 103:01 81                        /lib64/libaudit.so.1.0.0
7ff776bca000-7ff776be1000 r-xp 00000000 103:01 47                        /lib64/libpthread-2.12.so
7ff776be1000-7ff776de1000 ---p 00017000 103:01 47                        /lib64/libpthread-2.12.so
7ff776de1000-7ff776de2000 r--p 00017000 103:01 47                        /lib64/libpthread-2.12.so
7ff776de2000-7ff776de3000 rw-p 00018000 103:01 47                        /lib64/libpthread-2.12.so
7ff776de3000-7ff776de7000 rw-p 00000000 00:00 0
7ff776de7000-7ff776de9000 r-xp 00000000 103:01 62                        /lib64/libfreebl3.so
7ff776de9000-7ff776fe8000 ---p 00002000 103:01 62                        /lib64/libfreebl3.so
7ff776fe8000-7ff776fe9000 r--p 00001000 103:01 62                        /lib64/libfreebl3.so
7ff776fe9000-7ff776fea000 rw-p 00002000 103:01 62                        /lib64/libfreebl3.so
7ff776fea000-7ff777000000 r-xp 00000000 103:01 590                       /lib64/libresolv-2.12.so
7ff777000000-7ff777200000 ---p 00016000 103:01 590                       /lib64/libresolv-2.12.so
7ff777200000-7ff777201000 r--p 00016000 103:01 590                       /lib64/libresolv-2.12.so
7ff777201000-7ff777202000 rw-p 00017000 103:01 590                       /lib64/libresolv-2.12.so
7ff777202000-7ff777204000 rw-p 00000000 00:00 0
7ff777204000-7ff77738e000 r-xp 00000000 103:01 23                        /lib64/libc-2.12.so
7ff77738e000-7ff77758e000 ---p 0018a000 103:01 23                        /lib64/libc-2.12.so
7ff77758e000-7ff777592000 r--p 0018a000 103:01 23                        /lib64/libc-2.12.so
7ff777592000-7ff777594000 rw-p 0018e000 103:01 23                        /lib64/libc-2.12.so
7ff777594000-7ff777598000 rw-p 00000000 00:00 0
7ff777598000-7ff7776e8000 r-xp 00000000 103:01 394216                    /opt/xml2/lib/libxml2.so.2.9.2
7ff7776e8000-7ff7778e7000 ---p 00150000 103:01 394216                    /opt/xml2/lib/libxml2.so.2.9.2
7ff7778e7000-7ff7778f1000 rw-p 0014f000 103:01 394216                    /opt/xml2/lib/libxml2.so.2.9.2
7ff7778f1000-7ff7778f2000 rw-p 00000000 00:00 0
7ff7778f2000-7ff77792e000 r-xp 00000000 103:01 394356                    /opt/xslt/lib/libxslt.so.1.1.28
7ff77792e000-7ff777b2d000 ---p 0003c000 103:01 394356                    /opt/xslt/lib/libxslt.so.1.1.28
7ff777b2d000-7ff777b2f000 rw-p 0003b000 103:01 394356                    /opt/xslt/lib/libxslt.so.1.1.28
7ff777b2f000-7ff777bc7000 r-xp 00000000 103:02 1573185                   /usr/lib64/libfreetype.so.6.3.22
7ff777bc7000-7ff777dc6000 ---p 00098000 103:02 1573185                   /usr/lib64/libfreetype.so.6.3.22
7ff777dc6000-7ff777dcc000 rw-p 00097000 103:02 1573185                   /usr/lib64/libfreetype.so.6.3.22
7ff777dcc000-7ff777dfe000 r-xp 00000000 103:01 118                       /lib64/libidn.so.11.6.1
7ff777dfe000-7ff777ffd000 ---p 00032000 103:01 118                       /lib64/libidn.so.11.6.1
7ff777ffd000-7ff777ffe000 rw-p 00031000 103:01 118                       /lib64/libidn.so.11.6.1
7ff777ffe000-7ff77805b000 r-xp 00000000 103:01 393769                    /opt/curlssl/lib/libcurl.so.4.3.0
7ff77805b000-7ff77825a000 ---p 0005d000 103:01 393769                    /opt/curlssl/lib/libcurl.so.4.3.0
7ff77825a000-7ff77825d000 rw-p 0005c000 103:01 393769                    /opt/curlssl/lib/libcurl.so.4.3.0
7ff77825d000-7ff778260000 r-xp 00000000 103:01 86                        /lib64/libcom_err.so.2.1
7ff778260000-7ff77845f000 ---p 00003000 103:01 86                        /lib64/libcom_err.so.2.1
7ff77845f000-7ff778460000 r--p 00002000 103:01 86                        /lib64/libcom_err.so.2.1
7ff778460000-7ff778461000 rw-p 00003000 103:01 86                        /lib64/libcom_err.so.2.1
7ff778461000-7ff77848a000 r-xp 00000000 103:01 35                        /lib64/libk5crypto.so.3.1
7ff77848a000-7ff77868a000 ---p 00029000 103:01 35                        /lib64/libk5crypto.so.3.1
7ff77868a000-7ff77868b000 r--p 00029000 103:01 35                        /lib64/libk5crypto.so.3.1
7ff77868b000-7ff77868c000 rw-p 0002a000 103:01 35                        /lib64/libk5crypto.so.3.1
7ff77868c000-7ff77868d000 rw-p 00000000 00:00 0
7ff77868d000-7ff778768000 r-xp 00000000 103:01 49                        /lib64/libkrb5.so.3.3
7ff778768000-7ff778968000 ---p 000db000 103:01 49                        /lib64/libkrb5.so.3.3
7ff778968000-7ff778972000 r--p 000db000 103:01 49                        /lib64/libkrb5.so.3.3
7ff778972000-7ff778974000 rw-p 000e5000 103:01 49                        /lib64/libkrb5.so.3.3
7ff778974000-7ff7789b5000 r-xp 00000000 103:01 25                        /lib64/libgssapi_krb5.so.2.2
7ff7789b5000-7ff778bb5000 ---p 00041000 103:01 25                        /lib64/libgssapi_krb5.so.2.2
7ff778bb5000-7ff778bb6000 r--p 00041000 103:01 25                        /lib64/libgssapi_krb5.so.2.2
7ff778bb6000-7ff778bb8000 rw-p 00042000 103:01 25                        /lib64/libgssapi_krb5.so.2.2
7ff778bb8000-7ff778bce000 r-xp 00000000 103:01 583                       /lib64/libnsl-2.12.so
7ff778bce000-7ff778dcd000 ---p 00016000 103:01 583                       /lib64/libnsl-2.12.so
7ff778dcd000-7ff778dce000 r--p 00015000 103:01 583                       /lib64/libnsl-2.12.so
7ff778dce000-7ff778dcf000 rw-p 00016000 103:01 583                       /lib64/libnsl-2.12.so
7ff778dcf000-7ff778dd1000 rw-p 00000000 00:00 0
7ff778dd1000-7ff778e14000 r-xp 00000000 103:01 395864                    /opt/pcre/lib/libpcre.so.1.2.6
7ff778e14000-7ff779013000 ---p 00043000 103:01 395864                    /opt/pcre/lib/libpcre.so.1.2.6
7ff779013000-7ff779014000 rw-p 00042000 103:01 395864                    /opt/pcre/lib/libpcre.so.1.2.6
7ff779014000-7ff779053000 r-xp 00000000 103:02 1573300                   /usr/lib64/libjpeg.so.62.0.0
7ff779053000-7ff779253000 ---p 0003f000 103:02 1573300                   /usr/lib64/libjpeg.so.62.0.0
7ff779253000-7ff779254000 rw-p 0003f000 103:02 1573300                   /usr/lib64/libjpeg.so.62.0.0
7ff779254000-7ff779264000 rw-p 00000000 00:00 0
7ff779264000-7ff779289000 r-xp 00000000 103:02 1575796                   /usr/lib64/libpng12.so.0.49.0
7ff779289000-7ff779489000 ---p 00025000 103:02 1575796                   /usr/lib64/libpng12.so.0.49.0
7ff779489000-7ff77948a000 rw-p 00025000 103:02 1575796                   /usr/lib64/libpng12.so.0.49.0
7ff77948a000-7ff77949b000 r-xp 00000000 103:02 1575929                   /usr/lib64/libXpm.so.4.11.0
7ff77949b000-7ff77969a000 ---p 00011000 103:02 1575929                   /usr/lib64/libXpm.so.4.11.0
7ff77969a000-7ff77969b000 rw-p 00010000 103:02 1575929                   /usr/lib64/libXpm.so.4.11.0
7ff77969b000-7ff7797d2000 r-xp 00000000 103:02 1575922                   /usr/lib64/libX11.so.6.3.0
7ff7797d2000-7ff7799d2000 ---p 00137000 103:02 1575922                   /usr/lib64/libX11.so.6.3.0
7ff7799d2000-7ff7799d8000 rw-p 00137000 103:02 1575922                   /usr/lib64/libX11.so.6.3.0
7ff7799d8000-7ff7799e4000 r-xp 00000000 103:01 192                       /lib64/libpam.so.0.82.2
7ff7799e4000-7ff779be4000 ---p 0000c000 103:01 192                       /lib64/libpam.so.0.82.2
7ff779be4000-7ff779be5000 r--p 0000c000 103:01 192                       /lib64/libpam.so.0.82.2
7ff779be5000-7ff779be6000 rw-p 0000d000 103:01 192                       /lib64/libpam.so.0.82.2
7ff779be6000-7ff779bef000 r-xp 00000000 103:02 1576227                   /usr/lib64/libltdl.so.7.2.1
7ff779bef000-7ff779dee000 ---p 00009000 103:02 1576227                   /usr/lib64/libltdl.so.7.2.1
7ff779dee000-7ff779def000 rw-p 00008000 103:02 1576227                   /usr/lib64/libltdl.so.7.2.1
7ff779def000-7ff779e19000 r-xp 00000000 103:01 393236                    /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7ff779e19000-7ff77a018000 ---p 0002a000 103:01 393236                    /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7ff77a018000-7ff77a01c000 rw-p 00029000 103:01 393236                    /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7ff77a01c000-7ff77a021000 rw-p 00000000 00:00 0
7ff77a021000-7ff77a047000 r-xp 00000000 103:01 120                       /lib64/libexpat.so.1.5.2
7ff77a047000-7ff77a246000 ---p 00026000 103:01 120                       /lib64/libexpat.so.1.5.2
7ff77a246000-7ff77a249000 rw-p 00025000 103:01 120                       /lib64/libexpat.so.1.5.2
7ff77a249000-7ff77a250000 r-xp 00000000 103:01 595                       /lib64/librt-2.12.so
7ff77a250000-7ff77a44f000 ---p 00007000 103:01 595                       /lib64/librt-2.12.so
7ff77a44f000-7ff77a450000 r--p 00006000 103:01 595                       /lib64/librt-2.12.so
7ff77a450000-7ff77a451000 rw-p 00007000 103:01 595                       /lib64/librt-2.12.so
7ff77a451000-7ff77a453000 r-xp 00000000 103:01 537                       /lib64/libdl-2.12.so
7ff77a453000-7ff77a653000 ---p 00002000 103:01 537                       /lib64/libdl-2.12.so
7ff77a653000-7ff77a654000 r--p 00002000 103:01 537                       /lib64/libdl-2.12.so
7ff77a654000-7ff77a655000 rw-p 00003000 103:01 537                       /lib64/libdl-2.12.so
7ff77a655000-7ff77a6d8000 r-xp 00000000 103:01 539                       /lib64/libm-2.12.so
7ff77a6d8000-7ff77a8d7000 ---p 00083000 103:01 539                       /lib64/libm-2.12.so
7ff77a8d7000-7ff77a8d8000 r--p 00082000 103:01 539                       /lib64/libm-2.12.so
7ff77a8d8000-7ff77a8d9000 rw-p 00083000 103:01 539                       /lib64/libm-2.12.so
7ff77a8d9000-7ff77a8eb000 r-xp 00000000 103:01 394389                    /opt/xslt/lib/libexslt.so.0.8.17
7ff77a8eb000-7ff77aaeb000 ---p 00012000 103:01 394389                    /opt/xslt/lib/libexslt.so.0.8.17
7ff77aaeb000-7ff77aaec000 rw-p 00012000 103:01 394389                    /opt/xslt/lib/libexslt.so.0.8.17
7ff77aaec000-7ff77ab01000 r-xp 00000000 103:01 78                        /lib64/libz.so.1.2.3
7ff77ab01000-7ff77ad00000 ---p 00015000 103:01 78                        /lib64/libz.so.1.2.3
7ff77ad00000-7ff77ad01000 r--p 00014000 103:01 78                        /lib64/libz.so.1.2.3
7ff77ad01000-7ff77ad02000 rw-p 00015000 103:01 78                        /lib64/libz.so.1.2.3
7ff77ad02000-7ff77ad64000 r-xp 00000000 103:02 1583759                   /usr/lib64/libssl.so.1.0.1e
7ff77ad64000-7ff77af64000 ---p 00062000 103:02 1583759                   /usr/lib64/libssl.so.1.0.1e
7ff77af64000-7ff77af68000 r--p 00062000 103:02 1583759                   /usr/lib64/libssl.so.1.0.1e
7ff77af68000-7ff77af6f000 rw-p 00066000 103:02 1583759                   /usr/lib64/libssl.so.1.0.1e
7ff77af6f000-7ff77b129000 r-xp 00000000 103:02 1573262                   /usr/lib64/libcrypto.so.1.0.1e
7ff77b129000-7ff77b328000 ---p 001ba000 103:02 1573262                   /usr/lib64/libcrypto.so.1.0.1e
7ff77b328000-7ff77b343000 r--p 001b9000 103:02 1573262                   /usr/lib64/libcrypto.so.1.0.1e
7ff77b343000-7ff77b34f000 rw-p 001d4000 103:02 1573262                   /usr/lib64/libcrypto.so.1.0.1e
7ff77b34f000-7ff77b353000 rw-p 00000000 00:00 0
7ff77b353000-7ff77b35a000 r-xp 00000000 103:01 27                        /lib64/libcrypt-2.12.so
7ff77b35a000-7ff77b55a000 ---p 00007000 103:01 27                        /lib64/libcrypt-2.12.so
7ff77b55a000-7ff77b55b000 r--p 00007000 103:01 27                        /lib64/libcrypt-2.12.so
7ff77b55b000-7ff77b55c000 rw-p 00008000 103:01 27                        /lib64/libcrypt-2.12.so
7ff77b55c000-7ff77b58a000 rw-p 00000000 00:00 0
7ff77b58a000-7ff77b5aa000 r-xp 00000000 103:01 13                        /lib64/ld-2.12.so
7ff77b5f8000-7ff77b79c000 rw-p 00000000 00:00 0
7ff77b7a7000-7ff77b7a9000 rw-p 00000000 00:00 0
7ff77b7a9000-7ff77b7aa000 r--p 0001f000 103:01 13                        /lib64/ld-2.12.so
7ff77b7aa000-7ff77b7ab000 rw-p 00020000 103:01 13                        /lib64/ld-2.12.so
7ff77b7ab000-7ff77b7ac000 rw-p 00000000 00:00 0
7ffec9c5f000-7ffec9c74000 rw-p 00000000 00:00 0                          [stack]
7ffec9c8f000-7ffec9c91000 r-xp 00000000 00:00 0                          [vdso]
No errors for this exact time: Wed Sep 28 20:14:29 2016 +0100

Here are the nearest errors:

Code:
[Wed Sep 28 19:25:37.618756 2016] [fcgid:warn] [pid 665122] (104)Connection reset by peer: [client 185.27.106.69:59794] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Sep 28 20:08:26.032500 2016] [mpm_prefork:notice] [pid 307517] AH00171: Graceful restart requested, doing restart
[Wed Sep 28 20:08:29.174342 2016] [:notice] [pid 307517] mod_hostinglimits: use Min UID 500
[Wed Sep 28 20:08:29.174359 2016] [:notice] [pid 307517] mod_hostinglimits: use old style for LVE exit
[Wed Sep 28 20:08:29.174362 2016] [:notice] [pid 307517] mod_hostinglimits: version 1.0-23. LVE mechanism enabled
[Wed Sep 28 20:08:29.174364 2016] [:notice] [pid 307517] mod_hostinglimits: found apr extention version 3
[Wed Sep 28 20:08:29.174370 2016] [:notice] [pid 307517] mod_hostinglimits: apr_lve_environment_init_group_minuid check ok
[Wed Sep 28 20:08:30.035167 2016] [lbmethod_heartbeat:notice] [pid 307517] AH02282: No slotmem from mod_heartmonitor
[Wed Sep 28 20:08:30.037577 2016] [mpm_prefork:notice] [pid 307517] AH00163: Apache/2.4.23 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9 configured -- resuming normal operations
[Wed Sep 28 20:08:30.037591 2016] [core:notice] [pid 307517] AH00094: Command line: '/usr/local/apache/bin/httpd'
[Wed Sep 28 20:16:42.328440 2016] [fcgid:warn] [pid 675824] (70007)The timeout specified has expired: [client 93.56.224.53:51243] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Sep 28 20:16:45.146129 2016] [fcgid:warn] [pid 675820] (70007)The timeout specified has expired: [client 93.56.224.53:56185] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Sep 28 20:16:48.010442 2016] [fcgid:warn] [pid 675821] (70007)The timeout specified has expired: [client 93.56.224.53:61262] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Sep 28 20:16:48.513129 2016] [fcgid:warn] [pid 675845] (70007)The timeout specified has expired: [client 93.56.224.53:63265] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Sep 28 20:19:06.680415 2016] [fcgid:warn] [pid 675830] (32)Broken pipe: [client 188.220.26.231:64888] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function, referer: http://www.<snipped>.org.uk/
[Wed Sep 28 20:19:07.713810 2016] [fcgid:warn] [pid 675831] (32)Broken pipe: [client 188.220.26.231:64889] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function, referer: http://www.<snipped>.org.uk/
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,910
2,213
363
Hello,

You may need to increase some of the FCGI configuration values such as MaxRequestsPerProcess in order to prevent this error message from occurring. Note that cPanel does not recommend an FCGI configuration for your PHP handler. FCGI requires fine tuning of mod_fcgid to ensure that the server does not become overloaded with idle PHP processes. Instead, you may want to consider using suPHP or DSO with Mod_Ruid2. If you prefer to use FCGI, these cPanel and StackOverflow threads might help:

cPanel fastcgi settings
ap_pass_brigade failed in handle_request_ipc function
PHP and mod_fcgid: ap_pass_brigade failed in handle_request_ipc function

Thank you.
 

Forcerdj

Well-Known Member
Nov 30, 2009
68
1
58
Hello,

You may need to increase some of the FCGI configuration values such as MaxRequestsPerProcess in order to prevent this error message from occurring. Note that cPanel does not recommend an FCGI configuration for your PHP handler. FCGI requires fine tuning of mod_fcgid to ensure that the server does not become overloaded with idle PHP processes. Instead, you may want to consider using suPHP or DSO with Mod_Ruid2. If you prefer to use FCGI, these cPanel and StackOverflow threads might help:

cPanel fastcgi settings
ap_pass_brigade failed in handle_request_ipc function
PHP and mod_fcgid: ap_pass_brigade failed in handle_request_ipc function

Thank you.
I learned from these forums that a shared hosting server is best to use FastCGI with XCache... Would you recommend switching back to SuPHP?

Thanks for your links, I tried some changes however I am not sure where PHP_FCGI_MAX_REQUESTS is set on my CentOS/CloudLinux Server, do you have any idea? should it be set to 500 along with MaxRequestsPerProcess ?
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,910
2,213
363
You can add custom configuration values like the ones referenced in the link from the first URL in my previous response via "WHM Home » Service Configuration » Apache Configuration » Include Editor » Pre VirtualHost Include". The exact value to use depends on your server's traffic, so you may need to try some of the values suggested in those other URLs. You are welcome to switch to suPHP, but note you may encounter increased memory usage.

Thank you.