Results 1 to 9 of 9
Thread: is this normal?
-
10-06-2006, 08:12 PM #1Web Hosting Master
- Join Date
- Jun 2004
- Location
- Bay Area -USA
- Posts
- 1,740
is this normal?
I have a website that is really popular pretty recently. The server keeps crashing and then not coming back up. I have SIM that reboots the machine when it hits a load of 45.
My server will go down and be down for the whole day... No matter how many time I get my datacenter to reboot, it'll be down all day.
The server is a dual core opteron 170 with 2 gigs of ram. Maybe the server cant handle the load but is it normal that the server would just stop working all day?<<< Please see Forum Guidelines for signature setup. >>>
-
10-06-2006, 08:34 PM #2Web Hosting Master
- Join Date
- Jun 2004
- Location
- Bay Area -USA
- Posts
- 1,740
I think it may be a DDOS attack. How many connections per IP is normal?
<<< Please see Forum Guidelines for signature setup. >>>
-
10-06-2006, 08:36 PM #3
Is this normal? Definitely not.
Have you made any changes to the site, recently? What type of site are you running? MySQL?
It certainly shouldn't take all day to reboot your server.
Have you addressed this with your DC techs? Have you had your admin look at this?Tom Whiting, WHMCS Guru extraordinaire
Linux problems? WHMCS Problems? Give me a shout
Check out my WHMCS Addons
-
10-06-2006, 08:38 PM #4Web Hosting Master
- Join Date
- Jun 2004
- Location
- Bay Area -USA
- Posts
- 1,740
That admins took a look at it and said to watch: netstat -plan | grep :80 | awk '{print $5}' | cut -d: -f 1| sort | uniq -c | sort -n
As they think it may be a DDOS attack. I notice nothing too bad. (5) connections from one ip - 10 connections.
They also said it might be bad RAM, and they're checking into it.<<< Please see Forum Guidelines for signature setup. >>>
-
10-06-2006, 08:40 PM #5Web Hosting Master
- Join Date
- Feb 2005
- Posts
- 1,358
Have you checked the logs? Start with /var/log/messages
Eleven2 Web Hosting - World-Wide Hosting, Done Right!
-
10-06-2006, 09:38 PM #6Web Hosting Master
- Join Date
- Apr 2003
- Location
- NC
- Posts
- 3,093
What is the load like when it crashes? Also what does just
netstat -anpl |grep :80 |wc -l
show? That will show the total number of web connections, it still may be a DDOS if it is lots of ips with a few connections.
The other possibility is the hardware, hopefully they will run memtester/badblocks/etc to see if the hardware is bad. As SJR said check /var/log/messages and see if you get any errors.
Finally look in top and see if the load is perhaps IOwait or if not what is causing it.John W, CISSP, C|EH
MS Information Security and Assurance
ITEagleEye.com - Server Administration and Security
Yawig.com - Managed VPS and Dedicated Servers with VIP Service
-
10-06-2006, 09:45 PM #7Web Hosting Master
- Join Date
- May 2001
- Posts
- 2,167
It could be hardware failure.
I would advise to check the log.Affordable Managed Hosting Solutions for Professional & Business since 2001
Mxhub.com - Global : USA - UK - Canada - Europe - Asia Pacific
-
10-07-2006, 07:16 PM #8Aspiring Evangelist
- Join Date
- Mar 2006
- Location
- New York USA
- Posts
- 404
I know it may sound silly, but every time the server crashes, is it the same legnth of time that it has been on? I would then suspect a bad or intermitten shortting power supply. (yes i've seen it happen before)
-
10-08-2006, 10:54 AM #9Disabled
- Join Date
- Sep 2006
- Posts
- 81
what about your dns... make sure it is ok..