Enable status module, enable extended status, then run apachectl fullstatus. Returns a list of all current and past connections to workers with their IP and the target URL.
If you have a ton of users, this may be normal. If it suddenly spiked it may be a exploit scan or DOS? - Sebastian > On 10 Feb 2015, at 13:51, Giuseppe Perna <[email protected]> wrote: > > hello, > i have this problem whit my server: > the httpd process allocates many resources and blocks nearly the server. > how can I see who stops me the server? > > > top - 13:06:40 up 3 days, 21:35, 2 users, load average: 14.42, 18.17, 29.27 > Tasks: 267 total, 8 running, 259 sleeping, 0 stopped, 0 zombie > Cpu(s): 96.8% us, 3.1% sy, 0.0% ni, 0.0% id, 0.0% wa, 0.1% hi, 0.0% si > Mem: 4147308k total, 4078692k used, 68616k free, 194268k buffers > Swap: 1052280k total, 208k used, 1052072k free, 2769732k cached > > PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND > 11392 apache 25 0 33932 16m 5164 R 71.0 0.4 14:18.90 httpd > 8669 apache 25 0 33940 15m 4648 R 36.8 0.4 14:28.61 httpd > 8668 apache 25 0 33996 16m 4972 R 36.5 0.4 14:08.75 httpd > 13379 apache 25 0 33876 15m 4480 R 36.1 0.4 14:26.00 httpd > 13380 apache 25 0 33876 15m 4484 R 36.1 0.4 14:23.78 httpd > 22068 apache 25 0 33972 15m 4660 R 36.1 0.4 34:29.64 httpd > 28017 apache 15 0 27320 9904 4964 S 5.6 0.2 0:03.08 httpd > 30771 apache 16 0 27252 9964 5008 S 5.3 0.2 0:02.36 httpd > 30406 apache 16 0 34268 16m 4900 S 3.0 0.4 0:01.34 httpd > 29621 apache 16 0 27436 9952 4884 S 2.6 0.2 0:02.24 httpd > 30753 apache 15 0 27196 9956 5132 S 2.6 0.2 0:00.89 httpd > 31726 apache 17 0 26972 9024 4444 S 2.6 0.2 0:00.08 httpd > 28752 apache 16 0 33224 14m 4660 S 2.3 0.4 0:01.69 httpd > 29972 apache 16 0 27432 9932 4876 S 2.0 0.2 0:01.15 httpd > 30728 apache 19 0 27120 9388 4616 S 2.0 0.2 0:00.91 httpd > 29958 apache 16 0 27196 9.9m 5244 S 1.6 0.2 0:01.94 httpd > 32322 vpopmail 16 0 4520 868 692 S 1.3 0.0 0:00.04 imapd > 3614 mysql 15 0 173m 38m 5120 S 0.7 0.9 5:26.43 mysqld > 31347 vpopmail 15 0 6800 1376 1024 S 0.7 0.0 0:00.50 qmail-smtpd > 22439 root 16 0 6892 1452 968 S 0.3 0.0 0:04.44 authdaemond > 24859 apache 16 0 27344 10m 5532 S 0.3 0.3 0:04.73 httpd > 30426 apache 15 0 27320 9924 4996 S 0.3 0.2 0:01.36 httpd > 31277 vpopmail 15 0 3900 1596 1276 S 0.3 0.0 0:00.30 spamdyke > 1 root 16 0 3640 544 464 S 0.0 0.0 0:01.49 init > > > > > > # qtp-whatami > qtp-whatami v0.2.4 > DISTRO=CentOS > OSVER=4.8 > ARCH=i686 > BUILD_DIST=cnt40 > BUILD_DIR=/usr/src/redhat > This machine's OS is supported, but this version/arch has not been tested. > > > > # rpm -qa | grep toaster > control-panel-toaster-0.5-1.3.4 > courier-authlib-toaster-0.59.2-1.3.6 > qmailtoaster-plus-0.2.14-1.3.17 > avvertimento: only V3 signatures can be verified, skipping V4 signature > ezmlm-cgi-toaster-0.53.324-1.3.3 > ripmime-toaster-1.4.0.6-1.3.3 > ucspi-tcp-toaster-0.88-1.3.5 > isoqlog-toaster-2.1-1.3.4 > vpopmail-toaster-5.4.17-1.3.4 > vqadmin-toaster-2.3.4-1.3.3 > avvertimento: only V3 signatures can be verified, skipping V4 signature > libdomainkeys-toaster-0.68-1.3.3 > ezmlm-toaster-0.53.324-1.3.3 > squirrelmail-toaster-1.4.9a-1.3.6 > libsrs2-toaster-1.0.18-1.3.3 > spamassassin-toaster-3.1.8-1.3.8 > clamav-toaster-0.95.2-1.3.30 > qmailmrtg-toaster-4.2-1.3.3 > qmail-toaster-1.03-1.3.15 > qmailadmin-toaster-1.2.11-1.3.4 > simscan-toaster-1.3.1-1.3.6 > daemontools-toaster-0.76-1.3.3 > maildrop-toaster-devel-2.0.3-1.3.5 > maildrop-toaster-2.0.3-1.3.5 > qmail-pop3d-toaster-1.03-1.3.15 > autorespond-toaster-2.0.4-1.3.3 > courier-imap-toaster-4.1.2-1.3.7 > > > > -- > > > > > Giuseppe > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
