Results 1 to 9 of 9
  1. #1
    Join Date
    Oct 2000
    Location
    Canada
    Posts
    115

    High loads - Apache (help!)

    I have a server at ev1 which has run perfectly for over a year with no problems. Out of the blue, Apache crashed.

    After struggling to get httpd to launch again, I managed to get it going. After about a minute or so httpd processes start sucking up all of the CPU on the server, until it bombs again.

    Can someone please help? I'm totally at a loss about what has changed to have created this problem.

    Here's a short list from top of what I'm seeing load-wise:

    2094 apache 20 0 7320 7320 7064 R 0 34.2 1.4 2:07 httpd
    2054 apache 19 0 7316 7316 7072 R 0 33.3 1.4 5:38 httpd
    2286 apache 15 0 7328 7328 7032 R 0 28.5 1.4 1:19 httpd

    Sometimes a single httpd process will jump to 95% of CPU usage or higher. The server has Ensim installed.

    Anyone?

    Neil

  2. #2
    Join Date
    Feb 2004
    Location
    Sofia
    Posts
    1,354
    What does max requests per child say?

  3. #3
    Join Date
    Apr 2004
    Posts
    42
    Can you give us some specifics about the machine. What is the maximum number of concurrent connections have you Apache set to accept?

    If you resell services, a client may have a rogue CGI or PHP script that is -- probably inadvertantly -- sucking up resources. Not very likely, but certainly possible. (Or, maybe it's one of yours that has gone awry by accident.)

  4. #4
    Join Date
    Oct 2000
    Location
    Canada
    Posts
    115
    Actually, it turns out my server was hacked. Someone hacked in and installed "RH-Sharpe's rootkit", according to the EV1 support people.

    It's not the end of the world as I already moved my big client off of the server, but it sucks for the small number of people who were still on there - EV1 isn't allows me access without doing a system restore on a separate drive and mounting my old drive. SIGH.

  5. #5
    Join Date
    Apr 2004
    Posts
    42
    Why won't they let you access it? Also, what exactly is "RH-Sharpe's rootkit"? From what it sounds like, it's a tool to get root access on your machine -- but what else did it do?

    I can't imagine that they wouldn't let you have access to your data. Keep asking until someone tells you yes. It's always been my experience that EV1 is much more professional than that.
    Last edited by Asynja; 04-20-2004 at 10:30 PM.

  6. #6
    Join Date
    Oct 2000
    Location
    Canada
    Posts
    115
    They've said that it's impossible. Here's the text from the support ticket:
    That would be impossible. We can however offer that the drive be kept in as a 2nd drive for 48 hours for you to mount and copy data from. You would have to make this request in the restore ticket.
    The "2nd drive" bit means I would have to order a restore before they would give me access to the data. I guess they don't want to put this server up on the network or something like that...

    double sign. I hate the Web.

  7. #7
    Join Date
    Apr 2004
    Posts
    42
    I don't blame them in a way. But, if they mount it, you can still pull the data off of it, right? Just copy the /www* folder and other necessary documents?

    It might be a big pain in the behind, but at least it's not lost.

  8. #8
    Join Date
    Oct 2000
    Location
    Canada
    Posts
    115
    Ah, but they won't mount it to anything until I order a restore. That's the rub.

  9. #9
    Join Date
    Jun 2003
    Location
    Brooklyn Dodgers
    Posts
    97
    Good luck Been there done that

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •