Re: Strange apache logs [SOLVED]
Last month I posted a question to this list, about strange entires in httpd access log, which were connections from localhost, looking like this: ::1 - - [06/Feb/2008:13:43:58 -0500] OPTIONS * HTTP/1.0 200 - After some investigation I found out what is the cause of this. When I turned on in httpd.conf to log UserAgent string as well, found out that UserAgent for this requests is internal dummy connection. Google search for that, gave this page on apache site, which explains what is it about: http://wiki.apache.org/httpd/InternalDummyConnection ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Strange apache logs
Below is output of ps aux. Regarding apache configuration, nothing is changed there, just installed as-is from ports, only included one httpd-vhosts file with number of VirtualHost directives. $ ps -aux USERPID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND root 11 92.0 0.0 0 8 ?? RL Sat05PM 6598:00.73 [idle: cpu0] root 10 89.0 0.0 0 8 ?? RL Sat05PM 6498:48.95 [idle: cpu1] www 92653 0.2 0.6 21960 12280 ?? S 4:47PM 0:00.22 /usr/local/sbin/httpd -k start www 92636 0.2 0.6 21976 12304 ?? S 4:46PM 0:00.08 /usr/local/sbin/httpd -k start www 92652 0.1 0.6 21932 12264 ?? S 4:47PM 0:00.14 /usr/local/sbin/httpd -k start www 92634 0.1 0.6 21948 12272 ?? S 4:46PM 0:00.09 /usr/local/sbin/httpd -k start root 0 0.0 0.0 0 0 ?? WLs Sat05PM 0:00.00 [swapper] root 1 0.0 0.0 772 260 ?? ILs Sat05PM 0:01.31 /sbin/init -s root 2 0.0 0.0 0 8 ?? DL Sat05PM 0:13.33 [g_event] root 3 0.0 0.0 0 8 ?? DL Sat05PM 6:21.41 [g_up] root 4 0.0 0.0 0 8 ?? DL Sat05PM 5:49.45 [g_down] root 5 0.0 0.0 0 8 ?? DL Sat05PM 0:00.00 [thread taskq] root 6 0.0 0.0 0 8 ?? DL Sat05PM 0:00.00 [kqueue taskq] root 7 0.0 0.0 0 8 ?? DL Sat05PM 0:00.00 [acpi_task_0] root 8 0.0 0.0 0 8 ?? DL Sat05PM 0:00.00 [acpi_task_1] root 9 0.0 0.0 0 8 ?? DL Sat05PM 0:00.00 [acpi_task_2] root 12 0.0 0.0 0 8 ?? WL Sat05PM 5:30.04 [swi4: clock sio] root 13 0.0 0.0 0 8 ?? WL Sat05PM 0:00.00 [swi3: vm] root 14 0.0 0.0 0 8 ?? WL Sat05PM 6:53.81 [swi1: net] root 15 0.0 0.0 0 8 ?? DL Sat05PM 1:20.99 [yarrow] root 16 0.0 0.0 0 8 ?? WL Sat05PM 0:00.00 [swi6: Giant taskq] root 17 0.0 0.0 0 8 ?? WL Sat05PM 0:00.00 [swi5: +] root 18 0.0 0.0 0 8 ?? WL Sat05PM 0:00.00 [swi2: cambio] root 19 0.0 0.0 0 8 ?? WL Sat05PM 0:00.44 [swi6: task queue] root 20 0.0 0.0 0 8 ?? WL Sat05PM 0:00.00 [irq9: acpi0] root 21 0.0 0.0 0 8 ?? WL Sat05PM 14:30.38 [irq19: ohci0 ohci*] root 22 0.0 0.0 0 8 ?? DL Sat05PM 0:00.02 [usb0] root 23 0.0 0.0 0 8 ?? DL Sat05PM 0:00.00 [usbtask] root 24 0.0 0.0 0 8 ?? DL Sat05PM 0:00.02 [usb1] root 25 0.0 0.0 0 8 ?? WL Sat05PM 11:40.54 [irq18: em0 uhci1] root 26 0.0 0.0 0 8 ?? WL Sat05PM 0:00.00 [irq17: fwohci0+] root 27 0.0 0.0 0 8 ?? DL Sat05PM 0:00.02 [usb2] root 28 0.0 0.0 0 8 ?? DL Sat05PM 0:00.02 [usb3] root 29 0.0 0.0 0 8 ?? DL Sat05PM 0:00.02 [usb4] root 30 0.0 0.0 0 8 ?? WL Sat05PM 0:00.00 [irq14: ata0] root 31 0.0 0.0 0 8 ?? WL Sat05PM 0:00.00 [irq15: ata1] root 32 0.0 0.0 0 8 ?? WL Sat05PM 0:00.02 [irq1: atkbd0] root 33 0.0 0.0 0 8 ?? WL Sat05PM 0:00.00 [swi0: sio] root 34 0.0 0.0 0 8 ?? DL Sat05PM 0:01.33 [fdc0] root 35 0.0 0.0 0 8 ?? WL Sat05PM 0:00.00 [irq7: ppc0] root 36 0.0 0.0 0 8 ?? DL Sat05PM 0:06.14 [pagedaemon] root 37 0.0 0.0 0 8 ?? DL Sat05PM 0:00.00 [vmdaemon] root 38 0.0 0.0 0 8 ?? DL Sat05PM 8:44.87 [pagezero] root 39 0.0 0.0 0 8 ?? DL Sat05PM 0:24.66 [bufdaemon] root 40 0.0 0.0 0 8 ?? DL Sat05PM 8:40.45 [syncer] root 41 0.0 0.0 0 8 ?? DL Sat05PM 0:33.43 [vnlru] root 42 0.0 0.0 0 8 ?? DL Sat05PM 0:08.23 [softdepflush] root 43 0.0 0.0 0 8 ?? DL Sat05PM 0:21.53 [schedcpu] root168 0.0 0.0 1252 620 ?? Is Sat05PM 0:00.00 adjkerntz -i root567 0.0 0.0 528 284 ?? Is Sat05PM 0:00.00 /sbin/devd root611 0.0 0.0 1376 832 ?? Is Sat05PM 0:01.24 /usr/sbin/syslogd -s root740 0.0 0.1 3524 1796 ?? Is Sat05PM 0:02.76 /usr/sbin/sshd root746 0.0 0.1 3484 2180 ?? Ss Sat05PM 0:06.31 sendmail: accepting connections (sendmail) smmsp 750 0.0 0.1 3384 1924 ?? Is Sat05PM 0:00.12 sendmail: Queue [EMAIL PROTECTED]:30:00 for /var/spool/clientmqueue (s root756 0.0 0.0 1388 836 ?? Is Sat05PM 0:00.84 /usr/sbin/cron -s root 25914 0.0 0.6 21452 11520 ?? Ss Sun06PM 3:43.98 /usr/local/sbin/httpd -k start root 89210 0.0 0.1 6276 2576 ?? Is3:03PM 0:00.03 sshd: editor [priv] (sshd) editor 89213 0.0 0.1 6252 2596 ?? I 3:04PM 0:00.22 sshd: [EMAIL PROTECTED] (sshd) root 91833 0.0 0.1 6276 2588 ?? Is4:21PM 0:00.03 sshd: editor [priv] (sshd) editor 91836 0.0 0.1 6252 2604 ?? S 4:21PM
Re: Strange apache logs
Am Donnerstag, 7. Februar 2008 13:39:04 schrieb Dragan Jovelic: Couple of days ago I moved one web (PHP) application to new server running FreeBSD 6.2, with apache 2.2.8 installed. Everything is fine, except I have in httpd access_log lot of requests like this: ::1 - - [06/Feb/2008:13:43:58 -0500] OPTIONS * HTTP/1.0 200 - ::1 - - [06/Feb/2008:13:43:59 -0500] OPTIONS * HTTP/1.0 200 - ::1 - - [06/Feb/2008:13:44:00 -0500] OPTIONS * HTTP/1.0 200 - They are appearing all the time (looks like one request every second). snip That's a request from localhost to localhost (except that Apache is being connected to on the IPv6 localhost address and not on the IPv4 localhost of 127.0.0.1). Check whether you have some monitoring tool (which is the only thing I can think of that would query the server once a second) running on the server, which check whether Apache is up. -- Heiko Wundram Product Application Development ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Strange apache logs
Couple of days ago I moved one web (PHP) application to new server running FreeBSD 6.2, with apache 2.2.8 installed. Everything is fine, except I have in httpd access_log lot of requests like this: ::1 - - [06/Feb/2008:13:43:58 -0500] OPTIONS * HTTP/1.0 200 - ::1 - - [06/Feb/2008:13:43:59 -0500] OPTIONS * HTTP/1.0 200 - ::1 - - [06/Feb/2008:13:44:00 -0500] OPTIONS * HTTP/1.0 200 - They are appearing all the time (looks like one request every second). Output of netstat for connections from ::1 looks like this: # netstat -na | grep ::1 tcp6 0 0 ::1.57505 ::1.80 TIME_WAIT tcp6 0 0 ::1.51750 ::1.80 TIME_WAIT tcp6 0 0 ::1.53971 ::1.80 TIME_WAIT tcp6 0 0 ::1.58272 ::1.80 TIME_WAIT tcp6 0 0 ::1.58271 ::1.80 TIME_WAIT tcp6 0 0 ::1.58270 ::1.80 TIME_WAIT tcp6 0 0 ::1.58269 ::1.80 TIME_WAIT tcp6 0 0 ::1.58268 ::1.80 TIME_WAIT I would like to know why is this happening, what is and why sending this request. Thanks in advance. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Strange apache logs
Am Donnerstag, 7. Februar 2008 15:45:39 schrieb Dragan Jovelic: Thanks for quick answer. I understand it is from localhost, but can't figure out what it is. Only things running there are apache and mysql server. In processes I see nothing strange, sockstat gives that all opened sockets belong to www/httpd. I suspect this is something with apache, but can't find what. Any ideas? Not me, at least if you don't post ps aux and relevant parts of what you changed in the apache configuration (which someone else is probably also going to want to see to help you diagnose this). ;-) -- Heiko Wundram Product Application Development ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Strange apache logs
Thanks for quick answer. I understand it is from localhost, but can't figure out what it is. Only things running there are apache and mysql server. In processes I see nothing strange, sockstat gives that all opened sockets belong to www/httpd. I suspect this is something with apache, but can't find what. Any ideas? Heiko Wundram (Beenic) wrote: That's a request from localhost to localhost (except that Apache is being connected to on the IPv6 localhost address and not on the IPv4 localhost of 127.0.0.1). Check whether you have some monitoring tool (which is the only thing I can think of that would query the server once a second) running on the server, which check whether Apache is up. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
