Our web server has crashed three times in as many days, and I'm having
some trouble tracking down the cause.  The machine is a Pentium 233
running RedHat 5 with most of the errata applied, and a 2.0.33 kernel
patched to allow 1024 open fd's per process (so apache can keep logfiles
open for all our virtual hosts).  The problem didn't start until after I
installed the new kernel, but it was four days later, so I'm not certain
this is the cause.

The machine hung for about 20 minutes Saturday night, then rebooted
itself.  Sunday night, it completely locked up and had to be hard-reset.
Neither of these instances left anything conspicuous in the logs, since
(presumably) syslogging was fubar'ed along with the rest of the system.
So now I need to know what caused this and how to prevent it, but I really
don't have many clues to go on.  (Does anyone have any general advice on
how to determine what's going on in an unattended crash like this?)

Today when it crashed, it did leave the following in the log:

Apr 20 16:00:04 multivac kernel: Unable to load interpreter

...and this was the last message before the reboot.  Also, our webmaster
logged in just before the crash, and sent me some of his session output:

[root@multivac bonafede]# w
  3:59pm  up 12:19,  3 users,  load average: 8.52, 4.81, 1.95
USER     TTY      FROM              LOGIN@  IDLE   JCPU   PCPU  WHAT
dwayne   ttyp0    hal.cy-net.net   4:05am  3:35m  0.17s  0.04s
bash
dwayne   ttyp1    hal.cy-net.net   9:07am  5:29   0.59s  0.42s
bash
bonafede ttyp2    shark.cy-net.net 3:58pm  4.00s  0.49s  0.07s  w
[root@multivac bonafede]# top
Segmentation fault

...so whatever's causing it _is_ causing a load spike, but since it also
caused top to segfault we don't know what was hogging resources then.

So, any ideas?
____________________________________________________________________________
I. Dwayne Koonce                                 E-mail:  [EMAIL PROTECTED]
System Administrator                             Phone:   (409) 268-6800
Cybercom Corporation                             Fax:     (409) 260-2652
____________________________________________________________________________


-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
         To unsubscribe: mail [EMAIL PROTECTED] with 
                       "unsubscribe" as the Subject.

Reply via email to