Hi Lauren and all others,
Sooo... we have a problem.
Our server seems to be restarting randomly all the time.
Everytime it happens we get the following error from Litespeed:
LiteSpeed Web server [host] on [host] restarts automatically to fix run away extapp group Errors
So first question:
1. Munin shows a restart, but is this only a LiteSpeed server restart? We have not gotten any alerts from the server, only munin and "uptime" command, shows a restart. So maybe Munin is reflecting litespeed and not nessesary the physical server?
Leading up to this one user has been limited in CPU and we have got 20+ admin email with the above error on that user:
In LiteSpeed Web Console i Have found a External App setting (extapp) called External Application Abort, where i can set LiteSpeed to abort proccesses.
So question 2.
2. Do you think this will limit the user and solve the problem? The user has previously state that he is running "Xenu scraper" on the site from time to time on his (very large) site, but should this be enough to restart Litespeed?
Thanks!
Sooo... we have a problem.
Our server seems to be restarting randomly all the time.
Everytime it happens we get the following error from Litespeed:
LiteSpeed Web server [host] on [host] restarts automatically to fix run away extapp group Errors
So first question:
1. Munin shows a restart, but is this only a LiteSpeed server restart? We have not gotten any alerts from the server, only munin and "uptime" command, shows a restart. So maybe Munin is reflecting litespeed and not nessesary the physical server?
Leading up to this one user has been limited in CPU and we have got 20+ admin email with the above error on that user:
Code:
Executable:
/opt/cpanel/ea-php72/root/usr/bin/lsphp.cagefs
Command Line (often faked in exploits):
lsphp:/home/user/public_html/index.php
Network connections by the process (if any):
tcp: our.server.ip:57666 -> our.server.ip:3306
Files open by the process (if any):
/dev/null
/var/log/apache2/stderr.log
/var/log/apache2/stderr.log
/tmp/.ZendSem.5K3G8w (deleted)
/dev/null
/var/cpanel/php/sessions/ea-php72/sess_26e230aff8e7aa52fc5bf645b90fbc75
So question 2.
2. Do you think this will limit the user and solve the problem? The user has previously state that he is running "Xenu scraper" on the site from time to time on his (very large) site, but should this be enough to restart Litespeed?
Thanks!