Results 1 to 8 of 8

Thread: Apache Process

  1. #1
    Join Date
    Aug 2002
    Posts
    1,632

    Apache Process

    Hello,

    sometime when i check the active process i can see a lot of Apache request, it can be a DDOS attack or what ??

    nobody 29627 0.0 0.2 15188 3048 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29632 0.0 0.2 15204 3020 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29638 0.0 0.2 15052 2328 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29639 0.0 0.2 15052 2496 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29644 0.0 0.2 15208 2872 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29645 0.0 0.2 15052 2148 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29646 0.0 0.2 15052 2148 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29647 0.0 0.2 15052 2148 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29648 0.0 0.3 15540 3452 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29649 0.0 0.2 15052 2148 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29650 0.0 0.2 15052 2148 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29651 0.0 0.2 15052 2148 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29652 0.0 0.2 15200 3040 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29663 0.1 0.4 16548 4660 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29693 0.0 0.2 15052 2176 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29694 0.0 0.2 15052 2172 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29695 0.0 0.3 15496 3548 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29696 0.0 0.2 15212 2904 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29697 0.0 0.2 15052 2180 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29698 0.0 0.2 15052 2180 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29699 0.0 0.2 15052 2180 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29701 0.0 0.3 15540 3516 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29702 0.0 0.2 15052 2180 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29703 0.0 0.2 15052 2180 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29704 0.0 0.2 15052 2180 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29705 0.0 0.2 15052 2180 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29706 0.0 0.3 15200 3104 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29707 0.0 0.2 15052 2180 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29710 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29711 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29712 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29713 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29714 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29715 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29716 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29717 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29718 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29719 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29720 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29721 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29722 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29723 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29724 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29727 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29728 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29729 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29730 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29731 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29732 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29733 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29734 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29735 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29736 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29737 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29738 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29739 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29740 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29741 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29742 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29743 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29744 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29745 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29746 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29747 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29748 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29749 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29750 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29751 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29752 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29753 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29754 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29755 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29756 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29757 0.0 0.2 15052 2160 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29759 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29760 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29761 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29762 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29763 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29764 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29765 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29766 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29767 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29768 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29769 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29770 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29771 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29772 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29774 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29775 0.0 0.2 15052 2356 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29776 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29777 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29778 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29779 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29780 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29781 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29782 0.0 0.2 15052 2168 ? S 11:40 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 29783 0.0 0.2 15052 2168 ? S 11:40

  2. #2
    kill all process started by nobody
    install webmin http://webmin.com and you can do it better with webmin

  3. #3
    Join Date
    Aug 2002
    Posts
    1,632
    yes ok i use Cpanel but i would undestand what are all this process thx

  4. #4
    Join Date
    Aug 2002
    Posts
    1,632
    i still have this problem, any idea?

    nobody 23356 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23357 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23358 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23359 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23360 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23361 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23362 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23363 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23364 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23365 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23366 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23367 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23368 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23369 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23370 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23371 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23372 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23373 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23374 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23375 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23376 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23377 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23378 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23379 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23380 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23381 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23382 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23383 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23384 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23385 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23386 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23387 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23394 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23395 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23396 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23397 0.0 0.9 17096 10076 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23398 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23399 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23400 0.6 1.3 20336 13460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23401 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23402 0.0 0.9 16920 9468 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23403 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23404 0.5 1.3 20336 13460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23405 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23406 0.1 0.9 17028 9924 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23407 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23409 0.1 0.9 17112 10092 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23410 0.0 0.9 16920 9468 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23411 0.6 1.1 18588 11628 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23413 0.0 0.9 16920 9464 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23415 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23416 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23417 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL
    nobody 23418 0.0 0.9 16920 9460 ? S 19:43 0:00 /usr/local/apache/bin/httpd -DSSL

  5. #5
    Greetings:

    If you are running RedHat Linux, get to know "netstat"

    If you are running FreeBSD, get to know "sockstat"

    Both of them can let you know which remote IP's are connecting to which local IP's on your server, and to what servers (aka ports).

    Thank you.
    ---
    Peter M. Abraham
    LinkedIn Profile

  6. #6
    Join Date
    Jan 2004
    Location
    Greece
    Posts
    2,123
    When someone connects to a website that you host a new apache (child) process is created. I don't see anything wrong with the number of the apache processes.

  7. #7
    Join Date
    Jun 2002
    Posts
    362
    if you are worried about the amount of processes, you can restrict the amount that open through /etc/httpd/conf/httpd.conf (apache config)

  8. #8
    Join Date
    Aug 2002
    Posts
    1,632
    umm i dont think that i need to restrict the number of apache process because on the server there are only 100 small account and apache status tell that i have only 20-30 connection, i see that the Usr partition get full soon if i restart apache i get more space available

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •