Zion Ahead

Well-Known Member
Nov 10, 2006
347
0
166
/var/log/messages


Dec 8 21:22:31 server filelimits: Increasing file system limits succeeded
Dec 8 21:22:40 server sshd(pam_unix)[12853]: session opened for user username by (uid=0)
Dec 8 21:22:41 server su(pam_unix)[12888]: session opened for user root by username(uid=33706)
Dec 8 21:22:59 server init: cannot execute "/usr/local/bin/monit"
Dec 8 21:22:59 server last message repeated 9 times
Dec 8 21:22:59 server init: Id "mo" respawning too fast: disabled for 5 minutes

Another example

Dec 8 21:24:32 server kernel: Firewall: *TCP_OUT Blocked* IN= OUT=eth0 SRC=xxx.xxx.65.172 DST=74.6.86.166 LEN=1500 TOS=0x00 PREC=0x00 TTL=64 ID=17780 DF PROTO=TCP SPT=80 DPT=48999 WINDOW=6432 RES=0x00 ACK PSH URGP=0
 

jayh38

Well-Known Member
Mar 3, 2006
1,213
0
166
Monit is a daemon monitoring tool that will restart failed daemons.
It looks like monit was trying to start something that failed.
 

Zion Ahead

Well-Known Member
Nov 10, 2006
347
0
166
Apache logs keeps showing this

server reached MaxClients setting, consider raising the MaxClients setting

I had it on 200, changed it to 250 and it still shows this, even 5 minutes after reboot.

Why?
 

jayh38

Well-Known Member
Mar 3, 2006
1,213
0
166
Is your server very busy? Run this to see how many unique addresses
are actually connected to you.

netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | wc -l