> Hi, > > I use since long time the apache in version 2.0 on windows 2000 (SP4). > Since 4 weeks I can see (some times per day) many R in server-status. > Sometimes so much that the server run full and stop working because all > threads are used. I search in web and generally the response is that it have > to do with dos but I'm not sure (or can't believe that) > > When I watch over some time the serverstatus I can see sometimes requests > staying in R status until the configparameter timeout=300 (default) kick the > request out. Sometimes this R staying requests use more then 50% from my > reads and then after timeout all works like expexcted. Sometimes the > complete webserver is blocked. > > Current I have 450 threads on apache and in background 2 clustered tomcats > with a 200 threads. > > Can anybody explain me how it is possible that some (?) can send a rq to a > webserver and don't finish the rq that the server wait for it? How can I > solve such situations? > > Further: how can I identify and/or analyze a problem like this. I have now a > situation where I have log the network trafik with wireshark. > > This problem start (about) at a time when we switch to a new provider. > > I have now version 2.0.57 but I have the problem also in the latest version > from the 2.0 tree. > > If someone has some hint and or experience how to identify the problem --> > thanks for any comment / hint > > regards Dietmar
Hi, I found the problem :-) http://ha.ckers.org/slowloris /* for the archive */ to isolate the problem I write a small script which store every sec netstat -na and the after analyze it and search some hours in web I found the problem. Might after migration to an other os follow mod is a solution: http://mod-qos.sourceforge.net/ hope this help other people! If someone have any input about this pls let me know regards Dietmar
