Have you checked the log to see if these are all coming from one IP? If that's the case, they're pretty easy to block, but without more data from the log, it's pretty hard to tell what we're looking at. Based on what you described, I might be inclined to venture a guess that you're suffering from a half-hearted or half-witted DOS attack, but I usually don't like to venture guesses without checking the logs first :)
Best, Tony Tony Tambasco tonytambasco.com email: [EMAIL PROTECTED] cell: 716-450-8148 --- On Thu, 5/8/08, Phil Marshall <[EMAIL PROTECTED]> wrote: > From: Phil Marshall <[EMAIL PROTECTED]> > Subject: Apache Problem > To: [email protected] > Date: Thursday, May 8, 2008, 1:22 PM > Here is a sample from the apache status output. We are > getting > flooded with these. Apache will get filled up to 255 > connections with > these things. This has happened before, but usually it > goes away > quickly. Today it went on for about 45 minutes. Its fine > now. Does > anyone have any idea what this is or how to block it? > > 51-9 28349 0/1/1 R 0.00 28 3 0.0 0.02 > 0.02 ? ? > ..reading.. > 52-9 28350 0/1/1 R 0.00 28 0 0.0 0.000 > 0.000 ? ? > ..reading.. > 53-9 28351 0/2/2 R 0.00 28 0 0.0 0.000 > 0.000 ? ? > ..reading.. > 54-9 28352 0/1/1 R 0.00 28 0 0.0 0.000 > 0.000 ? ? > ..reading.. > 55-9 28354 0/1/1 R 0.00 28 78 0.0 0.00 > 0.00 ? ? > ..reading.. > 56-9 28355 0/1/1 R 0.00 28 0 0.0 0.000 > 0.000 ? ? > ..reading.. > > --------------------- > Phil Marshall > Signal Advertising > 535 Stone Cutters Way > Montpelier, VT 05602 > 802-229-4149 > [EMAIL PROTECTED] ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
