Hi,

Disable mod-php and test. If you find php to be the culprit, check new php scripts running on the server.

Regards
SSR


From: julien Beauviala <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: apache is seg faulting. why ?
Date: Fri, 30 Jan 2004 13:40:34 +0100

Hello,

since about four days, the daily security logs are reporting
the following :

> pid 72041 (httpd), uid 80: exited on signal 11
> pid 72040 (httpd), uid 80: exited on signal 11
> pid 72099 (httpd), uid 80: exited on signal 11
> pid 72039 (httpd), uid 80: exited on signal 11
> pid 74202 (httpd), uid 80: exited on signal 11
[etc... lots of lines]

When I look at /var/log/messages I find :

Jan 30 10:53:49 webserver /kernel: pid 20682 (httpd), uid 80: exited on signal 11
Jan 30 11:43:29 webserver /kernel: pid 24874 (httpd), uid 80: exited on signal 11
Jan 30 13:12:37 webserver /kernel: pid 32084 (httpd), uid 80: exited on signal 11
Jan 30 13:20:49 webserver /kernel: pid 32628 (httpd), uid 80: exited on signal 11
Jan 30 13:20:54 webserver /kernel: pid 32605 (httpd), uid 80: exited on signal 11
Jan 30 13:21:01 webserver /kernel: pid 32629 (httpd), uid 80: exited on signal 11


No idea what is going on, it started four days ago for no reason
I can guess. In the apache logs I find no actions that would be in sync with
those timestamps. Google was not much help either.


How should I go about investigating this ? How can I find out more infos about
what is causing this ?


I'm puzzled and a bit worried. Many thanks for any hints.

j.


_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

_________________________________________________________________
MSN Hotmail now on your Mobile phone. http://server1.msn.co.in/sp03/mobilesms/ Click here.


_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to