Maybe your server is segfaulting when receives a vulnerability scan: http://wiki.combatx.net/W00tw00t.at.ISC.SANS.DFind:)
I tried to reproduce this problem here, running DFind on a test machine, without success. Can you try to scan your server with DFind and see what happens? http://heapoverflow.com/f0rums/projects/tools/20-dfind-port-scanner/ On Feb 13, 2011, at 1:20 PM, Michal Kumžák wrote: > Hello > > I studied dump of processes of apache and discover this, always crash > multiplexer. From this results question, why processes of multiplexers lists > in apache status dump? After restart apache is no multiplexer in this list. I > think the problem occurs when multiplexer processes appears in list of server > status processes. > > Sorry for my terrible english. > > Best regards > Michal Kumzak > > Dne 13.2.2011 15:30, Michal Kumžák napsal(a): >> Hello >> >> This is dump of apache before this segfault: [Sun Feb 13 15:18:18 2011] >> [notice] child pid 43589 exit signal Segmentation fault (11), possible >> coredump in /tmp >> >> Look at process with pid 43589. >> >> Srv PID Acc M CPU SS Req Conn Child Slot >> Client VHost Request >> 0-15 86413 0/0/5261 _ 0.05 13 40 0.0 0.00 >> 8.33 208.80.194.29 www.starhost.cz GET / HTTP/1.0 >> 1-15 43589 0/0/2267 _ 0.07 14 321 0.0 0.00 >> 16.37 178.32.174.7 www.starhost.cz GET /w00tw00t.at.ISC.SANS.DFind:) >> HTTP/1.1 >> 2-15 6015 0/0/8495 _ 0.02 8 56 0.0 0.00 >> 40.92 188.165.226.251 www.starhost.cz GET / HTTP/1.1 >> 3-15 - 0/0/11047 . 0.04 0 0 0.0 0.00 >> 73.15 188.165.226.210 antispam.starhost.cz GET >> /themes/ocean_surf/images/buttonbg.gif HTTP/1.1 >> 4-15 - 0/0/7982 . 0.07 55078 38 0.0 0.00 >> 35.72 188.165.226.251 www.starhost.cz GET / HTTP/1.1 >> 5-15 6016 0/0/11697 W 0.05 0 0 0.0 0.00 >> 47.32 88.146.225.6 www.starhost.cz GET /server-status HTTP/1.1 >> 6-15 - 0/0/17522 . 0.00 0 0 0.0 0.00 >> 77.95 188.165.226.210 antispam.starhost.cz GET >> /themes/ocean_surf/images/admin-int.png HTTP/1.1 >> 7-15 - 0/0/14050 . 0.20 32 0 0.0 0.00 >> 51.74 77.75.77.39 jezinka.cz GET /zastavsenachvili/ HTTP/1.1 >> 8-15 - 0/0/13190 . 0.11 55078 145 0.0 0.00 >> 42.03 66.249.66.105 www.tvorim.cz GET >> /cz/kalendar-akci/view_day-3788.html HTTP/1.1 >> 9-15 - 0/0/14722 . 0.25 33 28 0.0 0.00 >> 61.01 77.75.77.39 www.svet-betonu.cz GET / HTTP/1.1 >> 10-15 5947 0/2/6909 _ 0.00 45 0 0.0 >> 0.00 24.72 77.75.77.39 bezpecnyvuz.cz GET / HTTP/1.1 >> 11-15 - 0/0/13372 . 1.57 28 70 0.0 >> 0.00 46.68 77.75.77.39 kekorenum.com GET >> /main.php?g2_controller=cart.AddToCart&g2_itemId=6088&g2_re >> 12-15 - 0/0/12161 . 0.00 30 0 0.0 >> 0.00 55.43 77.75.77.39 equilibrium.cz GET >> /editor/assets/jirovec_part.jpg HTTP/1.1 >> 13-15 43451 0/0/7096 _ 0.00 0 6 0.0 >> 0.00 34.46 88.100.55.248 www.tvorim.cz GET >> /modules/mod_jflanguageselection.css HTTP/1.1 >> 14-15 - 0/0/10532 . 0.00 55078 0 0.0 >> 0.00 36.46 119.63.192.137 equilibrium.cz GET >> /en/advise-bureaus/bach-s-flower-therapy/individual-extract >> 15-15 - 0/0/7048 . 0.04 0 149 0.0 >> 0.00 34.21 188.165.226.210 antispam.starhost.cz GET >> /list-cache.php?cache_type=spam HTTP/1.1 >> 16-15 - 0/0/5034 . 0.00 29 0 0.0 >> 0.00 27.33 90.176.175.214 jezinka.cz GET /favicon.ico HTTP/1.1 >> 17-15 - 0/0/3272 . 0.00 30 5 0.0 >> 0.00 20.21 90.176.175.214 jezinka.cz GET >> /zastavsenachvili/img/copyright.jpg HTTP/1.1 >> 18-15 - 0/0/2062 . 0.00 33 0 0.0 >> 0.00 17.72 90.176.175.214 jezinka.cz GET >> /zastavsenachvili/img/footer_shadow.gif HTTP/1.1 >> 19-15 - 0/0/1485 . 0.00 30 0 0.0 >> 0.00 9.83 77.75.77.39 equilibrium.cz GET /robots.txt HTTP/1.1 >> 20-15 - 0/0/986 . 0.00 30 0 0.0 0.00 >> 7.62 194.212.23.58 kekorenum.com GET >> /modules/imageframe/frames/polaroid/BR.gif HTTP/1.0 >> 21-15 - 0/0/830 . 0.04 1093 0 0.0 0.00 >> 5.01 194.212.23.58 kekorenum.com GET /images/gallery.gif HTTP/1.0 >> 22-15 - 0/0/498 . 0.00 1090 0 0.0 0.00 >> 3.57 194.212.23.58 kekorenum.com GET >> /modules/rating/images/star_u_noborder.gif HTTP/1.0 >> 23-15 - 0/0/319 . 0.01 1997 5 0.0 0.00 >> 3.05 194.212.23.58 kekorenum.com GET >> /stahnout/3857-2/2007-02-14_jarni+vykvet.jpg HTTP/1.0 >> 24-15 - 0/0/233 . 0.01 1998 5 0.0 0.00 >> 1.97 194.212.23.58 kekorenum.com GET /stahnout/1382-2/2006-07-08.jpg >> HTTP/1.0 >> 25-15 - 0/0/171 . 0.00 1997 6 0.0 0.00 >> 0.88 194.212.23.58 kekorenum.com GET >> /stahnout/11408-2/2010-05-27_drevita_pivonka.jpg HTTP/1.0 >> 26-15 - 0/0/167 . 0.01 1997 6 0.0 0.00 >> 1.17 194.212.23.58 kekorenum.com GET >> /stahnout/5576-2/2007-04-20_nakvetla+jarni+zahrada.jpg HTTP >> 27-15 - 0/0/112 . 0.00 1997 4 0.0 0.00 >> 0.55 194.212.23.58 kekorenum.com GET >> /stahnout/5598-2/2007-04-27_tulipany.jpg HTTP/1.0 >> 28-15 - 0/0/92 . 0.00 1997 6 0.0 0.00 >> 0.44 194.212.23.58 kekorenum.com GET >> /stahnout/5675-2/2007-05-11_rousovic+zahrada.jpg HTTP/1.0 >> 29-15 - 0/0/85 . 0.00 8191 0 0.0 0.00 >> 0.24 77.240.98.26 kekorenum.com GET >> /themes/matrix/images/nav_last.gif HTTP/1.1 >> 30-15 - 0/0/19 . 0.15 8186 163 0.0 0.00 >> 0.09 66.249.66.134 kekorenum.com GET >> /galerie/kovarna/neni_muze_nad_kovare/2008-10-04_kovarsky_k >> 31-15 - 0/0/11 . 0.00 8192 0 0.0 0.00 >> 0.03 77.240.98.26 kekorenum.com GET >> /themes/matrix/images/nav_prev.gif HTTP/1.1 >> 32-15 - 0/0/10 . 0.00 8192 0 0.0 0.00 >> 0.01 77.240.98.26 kekorenum.com GET /favicon.ico HTTP/1.1 >> 33-15 - 0/0/6 . 0.00 8191 0 0.0 0.00 >> 0.00 77.240.98.26 kekorenum.com GET /images/gallery.gif HTTP/1.1 >> 34-13 - 0/0/3 . 0.00 167203 0 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET >> /modules/icons/iconpacks/silk/cart_add.png HTTP/1.1 >> 35-13 - 0/0/3 . 0.00 167203 0 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET >> /modules/icons/iconpacks/silk/view_slideshow.png HTTP/1.1 >> 36-13 - 0/0/3 . 0.00 167203 0 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET >> /themes/matrix/images/nav_next.gif HTTP/1.1 >> 37-13 - 0/0/3 . 0.00 167203 0 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET >> /themes/matrix/images/nav_last.gif HTTP/1.1 >> 38-13 - 0/0/6 . 0.27 167162 88 0.0 0.00 >> 0.00 157.55.116.80 kekorenum.com GET >> /main.php?g2_view=core.UserAdmin&g2_subView=register.UserSe >> 39-13 - 0/0/3 . 0.00 167162 0 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET >> /themes/matrix/images/nav_prev.gif HTTP/1.1 >> 40-13 - 0/0/4 . 0.01 167179 222 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET >> /stahnout/11318-2/citronovy-kolac HTTP/1.1 >> 41-13 - 0/0/4 . 0.00 167194 0 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET >> /modules/rating/images/star_r_1.0.gif HTTP/1.1 >> 42-13 - 0/0/8 . 0.33 167149 40 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET /stahnout/5962-2/imgp0846.jpg >> HTTP/1.1 >> 43-13 - 0/0/3 . 0.00 167194 0 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET >> /modules/rating/images/star_07.gif HTTP/1.1 >> 44-13 - 0/0/3 . 0.00 167194 0 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET >> /modules/rating/images/star_u_1.0.gif HTTP/1.1 >> 45-13 - 0/0/3 . 0.00 167193 0 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET >> /modules/rating/images/transparent.gif HTTP/1.1 >> 46-13 - 0/0/4 . 0.00 167204 0 0.0 0.00 >> 0.00 89.217.29.78 kekorenum.com GET /favicon.ico HTTP/1.1 >> 47-13 - 0/0/2 . 0.05 167204 27 0.0 0.00 >> 0.00 85.114.137.57 www.kekorenum.com GET >> //phpMyAdmin-2.8.0/scripts/setup.php HTTP/1.1 >> 48-13 - 0/0/2 . 0.06 167192 28 0.0 0.00 >> 0.00 85.114.137.57 www.kekorenum.com GET >> //phpMyAdmin-2.8.0.2/scripts/setup.php HTTP/1.1 >> 49-12 - 0/0/2 . 0.05 254087 27 0.0 0.00 >> 0.00 85.114.137.57 www.kekorenum.com GET >> //p/m/a/scripts/setup.php HTTP/1.1 >> 50-12 - 0/0/2 . 0.05 254087 27 0.0 0.00 >> 0.00 85.114.137.57 www.kekorenum.com GET >> //mysql-admin/scripts/setup.php HTTP/1.1 >> 51-12 - 0/0/1 . 0.03 254087 33 0.0 0.00 >> 0.00 85.114.137.57 www.kekorenum.com GET >> //phpMyAdmin-2.6.4-pl4/scripts/setup.php HTTP/1.1 >> 52-12 - 0/0/1 . 0.02 254085 33 0.0 0.00 >> 0.00 85.114.137.57 www.kekorenum.com GET >> //phpMyAdmin-2.8.0-rc2/scripts/setup.php HTTP/1.1 >> 53-12 - 0/0/2 . 0.06 254019 196 0.0 0.00 >> 0.00 84.42.153.145 www.svet-krasy.cz POST >> /cz/administrace/moduly/eshop/products/save.html HTTP/1.1 >> peruser status >> >> ID PID STATUS SB STATUS Type Processor Active Idle >> Max AVAIL CPU Stopped CPU Usage CPU Total >> 0 86413 READY READY MULTIPLEXER Multiplexer 4 3 >> 20 100% 0 0.0% 0.0% >> 1 43589 READY READY MULTIPLEXER Multiplexer 4 3 >> 20 100% 0 0.0% 0.0% >> 2 6015 READY READY MULTIPLEXER Multiplexer 4 3 >> 20 100% 0 0.0% 0.0% >> 3 0 STARTING DEAD WORKER starhost.cz 1 1 >> 50 100% 0 0.0% 0.0% >> 4 0 STANDBY DEAD PROCESSOR starhost.cz 1 >> 1 50 100% 0 0.0% 0.0% >> 5 6016 ACTIVE BUSY_WRITE PROCESSOR starhost.cz 1 >> 1 50 100% 0 0.0% 0.0% >> 7 0 STANDBY DEAD PROCESSOR u5000 0 0 >> 100 100% 0 0.0% 0.0% >> 8 0 STANDBY DEAD PROCESSOR u5004 0 0 >> 50 100% 0 0.0% 0.0% >> 9 0 STANDBY DEAD PROCESSOR u5002 0 0 >> 50 100% 0 0.0% 0.0% >> 10 5947 READY READY PROCESSOR u5003 1 1 50 >> 100% 0 0.0% 0.0% >> 11 0 STANDBY DEAD PROCESSOR u5004 0 0 >> 50 100% 0 0.0% 0.0% >> 12 0 STANDBY DEAD PROCESSOR u5005 0 0 >> 50 100% 0 0.0% 0.0% >> 13 43451 READY READY MULTIPLEXER Multiplexer 4 3 >> 20 100% 0 0.0% 0.0% >> 14 0 STANDBY DEAD PROCESSOR u5005 0 0 >> 50 100% 0 0.0% 0.0% >> >> Best regards >> Michal Kumzak >> >> _______________________________________________ >> Peruser mailing list >> >> [email protected] >> http://www.telana.com/mailman/listinfo/peruser > _______________________________________________ > Peruser mailing list > [email protected] > http://www.telana.com/mailman/listinfo/peruser _______________________________________________ Peruser mailing list [email protected] http://www.telana.com/mailman/listinfo/peruser
