Apache hanging with some strange flags

netdynamix

Verified User
Joined
May 20, 2008
Messages
31
Location
Johannesburg, South Africa
Hi Forum,

I have battled with my Apache installation hanging every few days. The strange thing is that when it is running fine and accepting connections, the following command is keeping it up:

root 1727 12.6 1.3 26804 13852 ? Ss 09:43 0:00 /usr/sbin/httpd -k start -DSSL
apache 1729 0.0 1.2 26940 12596 ? S 09:43 0:00 /usr/sbin/httpd -k start -DSSL
apache 1730 16.5 1.7 33256 17424 ? S 09:43 0:00 /usr/sbin/httpd -k start -DSSL
apache 1731 0.0 1.1 26804 12132 ? S 09:43 0:00 /usr/sbin/httpd -k start -DSSL
apache 1732 0.0 1.1 26804 12128 ? S 09:43 0:00 /usr/sbin/httpd -k start -DSSL
apache 1733 0.0 1.1 26804 12128 ? S 09:43 0:00 /usr/sbin/httpd -k start -DSSL
apache 1736 0.0 1.1 26804 12128 ? S 09:43 0:00 /usr/sbin/httpd -k start -DSSL

However, when Apache freezes after the /usr/sbin/httpd I have 8 to 10 processes ending the the flag:

-m jkt
-m j1
-m j2
-m j3
-m j4
-m l1
etc etc???

These processes then need to be manually killed one by one with a -9 flag.

It is just very strange and I didn't know whereelse to turn. I thought this forum might be best since I don't want to disrupt my DA installation.

Kind Regards and thank you in advance for your help guys.

Chris
 
An exact output

apache 30689 0.0 0.1 3748 1992 ? S 14:04 0:00 /usr/local/apache/bin/httpd -DSSL -m l1

apache 30692 0.0 0.1 3748 1992 ? S 14:04 0:00 /usr/local/apache/bin/httpd -DSSL -m l2

apache 30695 0.0 0.1 3748 2020 ? S 14:04 0:00 /usr/local/apache/bin/httpd -DSSL -m l3

apache 30698 0.0 0.2 3880 2052 ? S 14:04 0:00 /usr/local/apache/bin/httpd -DSSL -m l4

apache 30752 0.0 0.2 3744 2068 ? S 14:04 0:00 /usr/local/apache/bin/httpd -DSSL -m j1

apache 30755 0.6 0.2 3744 2064 ? S 14:04 0:35 /usr/local/apache/bin/httpd -DSSL -m j2

apache 30758 1.3 0.2 3744 2072 ? S 14:04 1:14 /usr/local/apache/bin/httpd -DSSL -m j3

apache 30761 0.6 0.2 3744 2040 ? S 14:04 0:36 /usr/local/apache/bin/httpd -DSSL -m j4

apache 30856 0.3 0.2 4348 2660 ? S 14:05 0:18 /usr/local/apache/bin/httpd -DSSL -m f
 
Here is another strange thing:

/usr/local/apache/bin doesnt exist on my server, so how can httpd be running from there???

I think perhaps my server has been compromised. Does anyone know where I should start looking, any help would be MUCH appreciated
 
Problem founds

Sorry to be posting over and over again... I have just found this in my /tmp folder:

[root@core1 tmp]# cat cmdtemp
==> Fakename: /usr/local/apache/bin/httpd -DSSL PidNum: 30855
[14:05] --- Loading eggdrop v1.6.6 (Wed May 21 2008)
[14:05] Module loaded: transfer
[14:05] Listening at telnet port 9999 (users)
[14:05] Module loaded: channels
[14:05] Module loaded: server
[14:05] Module loaded: ctcp
[14:05] Module loaded: irc
[14:05] Module loaded: share
[14:05] Module loaded: filesys (with lang support)
[14:05] Module loaded: console (with lang support)
[14:05] Module loaded: blowfish
[14:05] Module loaded: assoc (with lang support)
[14:05] Module loaded: wire (with lang support)
[14:05] aHaserver =======================================
[14:05] aHaserver NeW HC TcL By jerry
[14:05] aHaserver =======================================
[14:05] aHaserver Prepare To Load...
[14:05] aHaserver jerry » version 2006 Loaded
[14:05] aHaserver jerry.tCl Loaded
[14:05] ProxyCheck.tcl version 1.1 by Ofloo is loaded.
[14:05] Userfile loaded, unpacking...
[14:05] === fubgkyy: 2 channels, 5 users.

Eggdrop v1.6.6 (C)1997 Robey Pointer (C)2001 Eggheads
USERFILE ALREADY EXISTS (drop the '-m')

Eggdrop v1.6.6 (C)1997 Robey Pointer (C)2001 Eggheads
USERFILE ALREADY EXISTS (drop the '-m')
Launched into the background (pid: 30856)


Any ideas on what I should do?
 
Back
Top