LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   a lot of http process initiated by the server itself??.. (https://www.linuxquestions.org/questions/linux-server-73/a-lot-of-http-process-initiated-by-the-server-itself-564333/)

jaggy00 06-25-2007 07:38 AM

a lot of http process initiated by the server itself??..
 
here is a piece of netstat -an:

Quote:

...
tcp 60 0 212.58.98.220:80 212.58.98.220:53987 ESTABLISHED
tcp 60 0 212.58.98.220:80 212.58.98.220:53988 ESTABLISHED
tcp 60 0 212.58.98.220:80 212.58.98.220:53992 ESTABLISHED
tcp 60 0 212.58.98.220:80 212.58.98.220:53994 ESTABLISHED
tcp 60 0 212.58.98.220:80 212.58.98.220:53999 ESTABLISHED
tcp 60 0 212.58.98.220:80 212.58.98.220:54000 ESTABLISHED
tcp 60 0 212.58.98.220:80 212.58.98.220:54001 ESTABLISHED
tcp 60 0 212.58.98.220:80 212.58.98.220:54005 ESTABLISHED
tcp 60 0 212.58.98.220:80 212.58.98.220:54009 ESTABLISHED
tcp 60 0 212.58.98.220:80 212.58.98.220:54014 ESTABLISHED
tcp 60 0 212.58.98.220:80 212.58.98.220:54018 ESTABLISHED
...
there are nearly 150 of them. what could they be? is it result of bad php programming?

any help appreciated.

unSpawn 06-25-2007 03:54 PM

Do the processes belong to the same session ID?
(ps -eo pid,sid,uid,command -f -U apache) where apache is the username
Do the processes have PIDs attached? (netstat -ntp|grep httpd)
Can you see for those PIDs which files they have open?
Any of those open files in temp dirs or other odd locations?
(lsof -w -n -p $PID) where $PID is a PID out of your netstat list?
Does Apache's access and error log (and PHP's error_log) (or syslog) show any weirdness?

jaggy00 06-29-2007 04:57 AM

Quote:

Do the processes belong to the same session ID?
yes, they do. as far as I see however.

Quote:

(ps -eo pid,sid,uid,command -f -U apache) where apache is the username
Do the processes have PIDs attached? (netstat -ntp|grep httpd)
Can you see for those PIDs which files they have open?
Any of those open files in temp dirs or other odd locations?
(lsof -w -n -p $PID) where $PID is a PID out of your netstat list?
they do not have any PID. and as long as I could monitor them, they were in TIME_WAIT condition. what could that mean?

Quote:

Does Apache's access and error log (and PHP's error_log) (or syslog) show any weirdness?
lot of programming issues. lot of 404 errors. logs grow up very quickly. however programmers do not correct those errors. this is very wierd I'd say. but nothing else as far as I see.

why web-server could need this kind of connection to itself?


All times are GMT -5. The time now is 09:28 AM.