odd behavior in apache 2.0.58 today

[Doug Barton]

John Von Essen wrote:
> Had a little crash today, that appears to be apache related, but is
> confusing nonetheless.
> 
> My server hosts a fair amount of websites, but nothing crazy. Uptime is
> usually only 0.5. Anyway, it got real slow, when I finally logged in,
> uptime was 152, ps -aux showed alot of apache pids, over a 100 (its
> usually 10 or so), and a netstat -an showed alot of connections to port
> 80. The odd thing though was all the connections were CLOSED_WAIT
> 
> Machine is running 6-STABLE, and has 1Gb of memory, with a HT P4 3.2
> GHz. And the HT has been turned on, even though its disabled by default.
> 
> Any ideas as to what is going on? Is there maybe an issue with apache
> that triggered something, or maybe it was just a random DoS attack.

Back when I was doing hosting I saw that same behavior with Apache 1.x when
a very aggressive spider went after sites on our systems. Restarting Apache
was usually all it took to set things right again.

hth,

Doug

-- 

    This .signature sanitized for your protection