Linux Server crashing 2 till 3 times a day

Alexandertheog · 03-29-2017, 04:25 AM

Hey Guys

So our Linux server keep crashing a couple times a day. We are currently renting the server through an external company. I've contacted our provider and they cannot seem to find the problem. Although I did manage to get a crash log.

Do any of you guys have experience with this issue ?
66.102.9.19 - - [17/Feb/2017:09:58:20 +0100] "GET / HTTP/1.0" 500 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"
66.102.9.8 - - [17/Feb/2017:09:58:16 +0100] "GET / HTTP/1.0" 500 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"
66.102.9.29 - - [17/Feb/2017:09:58:16 +0100] "GET / HTTP/1.0" 500 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"
66.102.9.5 - - [17/Feb/2017:09:58:28 +0100] "GET / HTTP/1.0" 500 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"
66.102.9.27 - - [17/Feb/2017:09:58:28 +0100] "GET / HTTP/1.0" 500 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"
66.102.9.5 - - [17/Feb/2017:09:58:50 +0100] "GET / HTTP/1.0" 500 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"
66.102.9.27 - - [17/Feb/2017:09:58:57 +0100] "GET / HTTP/1.0" 500 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"
66.102.9.8 - - [17/Feb/2017:09:58:07 +0100] "GET / HTTP/1.0" 503 1374 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"
66.102.9.27 - - [17/Feb/2017:09:58:07 +0100] "GET / HTTP/1.0" 503 1374 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"

Hope you can help me out

Cheers from Denmark!

r3sistance · 03-29-2017, 04:51 AM

This is an access log, sure it is returning things in the 500s (internal server error/service unavailable), but that'll give you no answer to what you are looking for.

I think you needa give more information, what distribution are you using, what web daemon and please describe what you mean by the "server keeps crashing"? As I doubt you mean the server is rebooting/restarting.

Alexandertheog · 03-29-2017, 05:40 AM

Hi r3sistance

Thanks for the fast respond. I wasn't aware of that, but the problem is that we are hosting alot of websites and the server keep going down 2 - 3 a day. In the beginning we though it was a RAM problem but after upgrading that the problem does still occur. After the RAM upgrade we experienced a change in the crashing. Beforehand we had to restart the server when it went down by calling our external server company, but after the upgrade it seems like it crashing and restarting by its self a process that take around 2-5 mins.
But ill immediately contact our server provider and see if the can give me more information, as I understand that the access log cant be used to much.
Ill keep you guys updated !

Best Regards
Alexander

r3sistance · 03-29-2017, 06:06 AM

Hi Alexander,

No problem, you haven't said what distribution you are using, but one thing to check will be the uptime. The uptime command is the simple method to do this but will only show you how long the server has currently been up. To get a better idea of if the server is actually crashing/rebooting, then I would recommend getting the output of the last command with the -x flag

Code:

$ last -x | grep -v pts
runlevel (to lvl 3)   3.10.0-327.el7.x Fri Mar 17 00:38 - 12:05 (12+10:26)
reboot   system boot  3.10.0-327.el7.x Fri Mar 17 00:37 - 12:05 (12+10:27)
runlevel (to lvl 3)   3.10.0-327.el7.x Tue Jan  1 00:01 - 00:38 (5554+00:37)
reboot   system boot  3.10.0-327.el7.x Tue Jan  1 00:01 - 12:05 (5566+11:04)
shutdown system down  3.10.0-327.el7.x Mon Jan 16 22:12 - 00:01 (-5494+-22:-
runlevel (to lvl 3)   3.10.0-327.el7.x Mon Jan 16 20:47 - 22:12  (01:24)
reboot   system boot  3.10.0-327.el7.x Mon Jan 16 20:46 - 22:12  (01:25)
runlevel (to lvl 3)   3.10.0-327.el7.x Sun Jan 15 10:36 - 20:47 (1+10:10)
reboot   system boot  3.10.0-327.el7.x Sun Jan 15 10:36 - 22:12 (1+11:36)
runlevel (to lvl 3)   3.10.0-327.el7.x Mon Jan  9 18:26 - 10:36 (5+16:09)
reboot   system boot  3.10.0-327.el7.x Mon Jan  9 18:26 - 22:12 (7+03:45)
runlevel (to lvl 3)   3.10.0-327.el7.x Thu Dec  1 06:38 - 18:26 (39+11:48)

jefro · 03-29-2017, 02:53 PM

Try to access /var for any other logs maybe??