httpd started evry socend

R

rockinwwf

Verified User
Joined
Aug 31, 2009
Messages
17
hi its big problem
when i runed ' ps -auxf | sort -nr -k 4 | head -10 '
output is :
Code: 
apache    2227  0.4  0.3  41692 27088 ?        S    08:17   0:07  \_ /usr/sbin/h                  ttpd -k start -DSSL
apache   10464  0.9  0.3  41692 27008 ?        S    08:41   0:01  \_ /usr/sbin/h                  ttpd -k start -DSSL
apache   10422  1.2  0.3  41656 26976 ?        S    08:39   0:02  \_ /usr/sbin/h                  ttpd -k start -DSSL
apache   10421  2.3  0.3  41692 27004 ?        S    08:39   0:04  \_ /usr/sbin/h                  ttpd -k start -DSSL
apache   10392  0.9  0.3  41692 27032 ?        S    08:37   0:03  \_ /usr/sbin/h                  ttpd -k start -DSSL
apache   10386  1.1  0.3  41940 27320 ?        S    08:36   0:03  \_ /usr/sbin/h                  ttpd -k start -DSSL
apache   10374  0.7  0.3  41692 27276 ?        S    08:36   0:02  \_ /usr/sbin/h                  ttpd -k start -DSSL
apache   10334  1.3  0.3  41692 27044 ?        S    08:35   0:05  \_ /usr/sbin/h                  ttpd -k start -DSSL
apache   10328  0.2  0.3  43904 29464 ?        S    08:35   0:01  \_ /usr/sbin/h                  ttpd -k start -DSSL
apache   10281  0.9  0.3  41648 27000 ?        S    08:33   0:05  \_ /usr/sbin/h                  ttpd -k start -DSSL

In Fact my httpd run every second
its a virus ?
i scanned my server with rkhunter but dont get any virus
any idea?
 
thx peter laws
but whene i runed top its output:

Cpu(s): 2.3%us, 3.2%sy, 0.2%ni, 91.9%id, 2.4%wa, 0.0%hi, 0.1%si, 0.0%st
Mem: 8309528k total, 7717824k used, 591704k free, 122448k buffers
Swap: 5144568k total, 0k used, 5144568k free, 7214268k cached

its not good free memory and my server downed sometime and some time httpd detected in top a zombie
i think its for httpd, when i check the logs i cant get any fatal error
any idea?
 
Check httpd-status (server-status) page and post here your full top output, gathered when apache troubles your server.
 
Hi zEitEr

sorry i am newbie my server-status have problem http://myserverip/server-status

output:

Forbidden

You don't have permission to access /server-status on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
 
By default as far as I remember you need to update the section:

Code: 
<Location /server-status>
    SetHandler server-status
    Order deny,allow
    Deny from all
    Allow from .example.com
</Location>

in /etc/httpd/conf/extra/httpd-info.conf

Replace .example.com with your real IP (IP address of your connection to Internet)

Code: 
Allow from .example.com
 
thx
its my output:

Code: 
Apache Server Status

Server Version: Apache/2.2.16 (Unix) mod_ssl/2.2.16 OpenSSL/0.9.8e-fips-rhel5 DAV/2
Server Built: Mar 7 2011 09:24:53

Current Time: Monday, 07-Mar-2011 10:42:02 EST
Restart Time: Monday, 07-Mar-2011 09:30:05 EST
Parent Server Generation: 0
Server uptime: 1 hour 11 minutes 56 seconds
14 requests currently being processed, 0 idle workers

KWWWWW.K.W..KK.K.....K...KW.....................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
..

Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"C" Closing connection, "L" Logging, "G" Gracefully finishing,
"I" Idle cleanup of worker, "." Open slot with no current process

PID Key:

   1070 in state: K ,   1101 in state: W ,   1112 in state: W 
   1052 in state: W ,   1053 in state: W ,   1113 in state: W 
   761 in state: K ,   1056 in state: W ,   779 in state: K 
   539 in state: K ,   819 in state: K ,   860 in state: K 
   898 in state: K ,   899 in state: W ,

To obtain a full report with current status information you need to use the ExtendedStatus On directive.
SSL/TLS Session Cache Status:
cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0
subcaches: 32, indexes per subcache: 133
index usage: 0%, cache usage: 0%
total sessions stored since starting: 0
total sessions expired since starting: 0
total (pre-expiry) sessions scrolled out of the cache: 0
total retrieves since starting: 0 hit, 0 miss
total removes since starting: 0 hit, 0 miss
 
Last edited:
You must log in or register to reply here.
Back
Top