Re: Security Run Output Questions

2007-05-23 Thread Garrett Cooper

Roland Smith wrote:

On Wed, May 23, 2007 at 12:40:19PM -0700, PeterPluta wrote:

I see this quite regularly. What exactly is the http process doing? I'm
guessing this is the master process stopping and restarting when I rotate
logs or something. Can anyone confirm? There is usally more processes, 10-15
or more. 


kernel log messages:
+++ /tmp/security.ioLB2PiJ  Wed May 23 03:01:42 2007
+pid 30865 (httpd), uid 80: exited on signal 4


According to signal(3), signal 4 is SIGILL; illegal instruction.

Not sure what triggers that. Maybe a stack overflow bug that writes a
bogus value to a return address?

Roland


Are you running CURRENT and did you update to GCC 4.2 and install httpd 
lately? If so, you need to read a few threads on the current@ list 
pertaining to GCC 4.2 written in the past 1-2 weeks.


-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Security Run Output Questions

2007-05-23 Thread Peter Pluta



Dan Nelson wrote:
> 
> In the last episode (May 23), PeterPluta said:
>> I see this quite regularly. What exactly is the http process doing?
>> I'm guessing this is the master process stopping and restarting when
>> I rotate logs or something. Can anyone confirm? There is usally more
>> processes, 10-15 or more.
>> 
>> kernel log messages:
>> +++ /tmp/security.ioLB2PiJ   Wed May 23 03:01:42 2007
>> +pid 30865 (httpd), uid 80: exited on signal 4
> 
> It's crashing :)
> 
>  4 SIGILL   create core imageillegal instruction
> 
> -- 
>   Dan Nelson
>   [EMAIL PROTECTED]
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
> 

Ahh I see, so this isn't a good thing. I'm running Apahe with mod_php. I
don't see why it would be crashing, unless one of the web apps is buggy. 

-- 
View this message in context: 
http://www.nabble.com/Security-Run-Output-Questions-tf3806074.html#a10772295
Sent from the freebsd-questions mailing list archive at Nabble.com.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Security Run Output Questions

2007-05-23 Thread Roland Smith
On Wed, May 23, 2007 at 12:40:19PM -0700, PeterPluta wrote:
> 
> I see this quite regularly. What exactly is the http process doing? I'm
> guessing this is the master process stopping and restarting when I rotate
> logs or something. Can anyone confirm? There is usally more processes, 10-15
> or more. 
> 
> kernel log messages:
> +++ /tmp/security.ioLB2PiJWed May 23 03:01:42 2007
> +pid 30865 (httpd), uid 80: exited on signal 4

According to signal(3), signal 4 is SIGILL; illegal instruction.

Not sure what triggers that. Maybe a stack overflow bug that writes a
bogus value to a return address?

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpkhw8noG6Vu.pgp
Description: PGP signature


Re: Security Run Output Questions

2007-05-23 Thread Dan Nelson
In the last episode (May 23), PeterPluta said:
> I see this quite regularly. What exactly is the http process doing?
> I'm guessing this is the master process stopping and restarting when
> I rotate logs or something. Can anyone confirm? There is usally more
> processes, 10-15 or more.
> 
> kernel log messages:
> +++ /tmp/security.ioLB2PiJWed May 23 03:01:42 2007
> +pid 30865 (httpd), uid 80: exited on signal 4

It's crashing :)

 4 SIGILL   create core imageillegal instruction

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Security Run Output Questions

2007-05-23 Thread PeterPluta

I see this quite regularly. What exactly is the http process doing? I'm
guessing this is the master process stopping and restarting when I rotate
logs or something. Can anyone confirm? There is usally more processes, 10-15
or more. 

kernel log messages:
+++ /tmp/security.ioLB2PiJ  Wed May 23 03:01:42 2007
+pid 30865 (httpd), uid 80: exited on signal 4

-- 
View this message in context: 
http://www.nabble.com/Security-Run-Output-Questions-tf3806074.html#a10771250
Sent from the freebsd-questions mailing list archive at Nabble.com.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"