LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
Reload this Page Debian - Directadmin - Weird crash
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 11-29-2010, 04:30 AM   #1
AsadMoeen
Member
 
Registered: Jun 2010
Posts: 160

Rep: Reputation: 3
Debian - Directadmin - Weird crash

Please read whole of the post and take your time. The written material is lesser. More are the logs. I've spent more of mine is writing it . I will be thankful to you if you read it and post a helpful reply if you can in any way possible.

I will be specific and will try to explain this in as much details as possible.



I run the latest Debian 5.0.6 Net-Install ( Lenny ) on my Machine with the following specs. The Directadmin and OS both were perfectly and cleanly installed without any errors.

HDD : 10GB
RAM : 3GB
CPU : 2Ghz


I won't call it as a crash . This is what happens:

I usually keep opening my website round the clock and analyze traffic about it . There were problems. The website went inaccessible sometimes . I tried from a lot of Computers but it was all the same.

-> SSH failed but after many tries sometimes worked and got stuck.
-> Control-Panel failed but sometimes logged in and stuck after.
-> On Pinging, sometimes pings were normal but sometimes 4 digits.

On the little access I had to the system, I tried a lot but couldn't configure. Today was Sunday so I stayed on and luckily the problem happened when I was logged in.


The Diagnose and Analysis:


None of the websites were working but as I logged in to SSH, I saw this:

Code:
panel:~# free -m
             total       used       free     shared    buffers     cached
Mem:          3035       2919        116          0        125        325
-/+ buffers/cache:       2469        566
Swap:            0          0

I ran a top:

Code:
panel:~# top
top - 06:13:03 up 2 days,  2:21,  2 users,  load average: 175.89, 153.74, 92.48
Tasks: 315 total, 172 running, 143 sleeping,   0 stopped,   0 zombie
Cpu(s): 18.6%us, 79.7%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.8%hi,  0.8%si,  0.0%st
Mem:   3108620k total,  2989556k used,   119064k free,    86568k buffers
Swap:        0k total,        0k used,        0k free,   250496k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
11439 apache    20   0 30160  15m 3232 R  6.9  0.5   0:03.68 httpd
11450 apache    20   0 30160  15m 3232 R  5.5  0.5   0:03.66 httpd
11430 apache    20   0 29716  14m 3304 R  3.7  0.5   0:03.30 httpd
11600 apache    20   0 26252  11m 3012 R  3.3  0.4   0:01.42 httpd
11455 apache    20   0 28840  14m 3312 R  3.1  0.5   0:03.00 httpd
11434 apache    20   0 29684  14m 3312 R  2.9  0.5   0:03.54 httpd
 1008 root      15  -5     0    0    0 R  2.1  0.0   6:03.12 kjournald
11418 apache    20   0 31508  16m 3232 R  2.0  0.6   0:03.90 httpd
11424 apache    20   0 29356  14m 3220 R  2.0  0.5   0:03.52 httpd
11448 apache    20   0 30704  15m 3240 R  2.0  0.5   0:03.34 httpd
11320 apache    20   0 44220  29m 3276 R  1.6  1.0   0:05.52 httpd
11421 apache    20   0 30516  15m 3232 R  1.6  0.5   0:03.78 httpd
11557 apache    20   0 27480  12m 3012 R  1.6  0.4   0:01.68 httpd
11515 apache    20   0 28600  13m 3240 R  1.4  0.5   0:01.84 httpd
11639 apache    20   0 25640  10m 2764 R  1.2  0.4   0:00.68 httpd
11264 apache    20   0 44180  29m 3284 R  1.0  1.0   0:06.38 httpd
11399 apache    20   0 31248  16m 3240 R  1.0  0.5   0:04.38 httpd
Now you can see apparently above, no active process is using a lot of RAM, it's just the Buffers/Cache .

During this time I was using SSH, I kept giving tries to Apache status as IP/server-status, Control Panel and websites. None were working.

I ran a top again in 2 mins:

Code:
panel:~# top
top - 06:18:15 up 2 days,  2:26,  2 users,  load average: 229.45, 200.65, 130.53
Tasks: 339 total, 201 running, 138 sleeping,   0 stopped,   0 zombie
Cpu(s):  7.1%us, 92.9%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  0.0%si,  0.0%st
Mem:   3108620k total,  2985592k used,   123028k free,    38720k buffers
Swap:        0k total,        0k used,        0k free,   122420k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
11698 apache    20   0 26124  11m 2888 R 10.5  0.4   0:00.86 httpd
11268 apache    20   0 44988  29m 3280 R  9.4  1.0   0:07.74 httpd
11418 apache    20   0 35116  20m 3232 R  8.3  0.7   0:05.28 httpd
11651 apache    20   0 27464  12m 2992 R  8.3  0.4   0:02.60 httpd
11644 apache    20   0 26508  11m 2992 R  7.7  0.4   0:02.10 httpd
11339 apache    20   0 44216  29m 3280 R  6.6  1.0   0:06.48 httpd
11362 apache    20   0 44732  29m 3276 R  6.6  1.0   0:06.22 httpd
11187 apache    20   0 45376  31m 3936 R  5.5  1.0   0:08.02 httpd
11201 apache    20   0 41480  26m 3340 R  4.4  0.9   0:07.14 httpd
11637 apache    20   0 26252  11m 3012 R  4.4  0.4   0:02.26 httpd
11376 apache    20   0 36540  21m 3232 R  3.9  0.7   0:05.26 httpd
11354 apache    20   0 39956  25m 3308 R  3.3  0.8   0:05.94 httpd
11419 apache    20   0 32032  17m 3232 R  3.3  0.6   0:04.86 httpd
11241 apache    20   0 45172  30m 3336 R  2.8  1.0   0:07.24 httpd
11286 apache    20   0 41480  26m 3344 R  2.2  0.9   0:05.98 httpd
11392 apache    20   0 33952  19m 3308 R  2.2  0.6   0:05.96 httpd
11399 apache    20   0 33104  18m 3240 R  1.7  0.6   0:06.72 httpd
11689 apache    20   0 25952  11m 2952 R  1.7  0.4   0:01.28 httpd
11441 apache    20   0 32304  17m 3240 R  1.1  0.6   0:04.54 httpd
11213 apache    20   0 41272  26m 3400 R  0.6  0.9   0:07.12 httpd
11244 apache    20   0 41280  26m 3340 R  0.6  0.9   0:07.88 httpd
11287 apache    20   0 41228  26m 3340 R  0.6  0.9   0:07.02 httpd
11352 apache    20   0 44552  29m 3696 R  0.6  1.0   0:07.24 httpd
11356 apache    20   0 41168  26m 3256 R  0.6  0.9   0:06.78 httpd
11365 apache    20   0 40092  25m 3256 R  0.6  0.8   0:06.66 httpd
11375 apache    20   0 38840  24m 3236 R  0.6  0.8   0:07.14 httpd
11377 apache    20   0 35212  20m 3240 R  0.6  0.7   0:05.20 httpd
11388 apache    20   0 36036  21m 3308 R  0.6  0.7   0:05.70 httpd
11390 apache    20   0 33616  18m 3220 R  0.6  0.6   0:05.62 httpd
11393 apache    20   0 34288  19m 3240 R  0.6  0.6   0:06.42 httpd
11411 apache    20   0 33896  19m 3292 R  0.6  0.6   0:06.56 httpd
11421 apache    20   0 34928  20m 3232 R  0.6  0.7   0:04.94 httpd
11554 apache    20   0 30308  15m 3320 R  0.6  0.5   0:03.80 httpd
11555 apache    20   0 29536  14m 3312 R  0.6  0.5   0:03.98 httpd
11576 apache    20   0 28748  14m 3316 R  0.6  0.5   0:03.22 httpd
11578 apache    20   0 29520  14m 3288 R  0.6  0.5   0:03.04 httpd
11600 apache    20   0 26948  12m 3012 R  0.6  0.4   0:03.02 httpd
You can see apache processes increased just in 2 mins.
 
Old 11-29-2010, 04:37 AM   #2
AsadMoeen
Member
 
Registered: Jun 2010
Posts: 160

Original Poster
Rep: Reputation: 3
Continued...


I also have a VNC viewer to see the actual console of the server so the same time, I opened it just to see if the system was giving any messages.

When I was using console, it gave me these messages below in Screenshot attachment. But we can ignore these console messages because this was an outcome of what happened, not the problem.


Attachment 1129
External Link : http://www.s4aclan.com/console.JPG


I kept doing everything I could to see whats the cause because I couldn't read everything from the top, ram usage or even what console was showing . Luckily, Apache Status and Control CMD_SHOW_SERVICES opened for me .

Remember : My site on average has 50 people online at every 2 minutes and the site was working fine at that time. Also on viewing the apache status, I could only see 10-20 requests although the traffic was more.

When this problem happened, only 10 people were online but I could see 237 requests in the apache status. I don't know why.

Here is the apache status wrapped:

Code:
Apache Server Status for 204.124.182.12

Server Version: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8g DAV/2 PHP/5.2.14
Server Built: Nov 1 2010 02:10:36
Current Time: Sunday, 28-Nov-2010 06:15:52 CST
Restart Time: Sunday, 28-Nov-2010 00:10:13 CST
Parent Server Generation: 2
Server uptime: 6 hours 5 minutes 39 seconds
Total accesses: 43374 - Total Traffic: 224.2 MB
CPU Usage: u26.22 s171.02 cu0 cs0 - .899% CPU load
1.98 requests/sec - 10.5 kB/second - 5.3 kB/request
236 requests currently being processed, 0 idle workers
WWWLWWWWWWWWLWWWWWWWWWLLWWWLWWWWWWWLWWLWLWWWWWWWWWWWWWWWWWWWWWWW
WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW
WWWWWWWWWWWWLWWWWWWWWWWWWWWLWWWWWWWWWLWWLWWLWLWWWWWWWLWWWWWWWWWL
WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWLWWWWWSWWWWLSLRWS.................
................................................................
................................................................
................................................................
..
Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"C" Closing connection, "L" Logging, "G" Gracefully finishing,
"I" Idle cleanup of worker, "." Open slot with no current process

Srv	PID	Acc	M	CPU	SS	Req	Conn	Child	Slot	Client	VHost	Request
0-2	11167	0/13/3216	W	5.19	258	0	0.0	0.01	17.18	205.213.195.70	www.mixupdate.com	GET /wp-trackback.php?p=436 HTTP/1.0
1-2	11177	0/13/3109	W	4.04	386	0	0.0	0.02	15.89	200.165.133.70	www.mixupdate.com	GET /?p=226 HTTP/1.0
2-2	11143	0/32/2884	W	5.15	334	0	0.0	0.36	14.19	221.130.18.155	www.mixupdate.com	GET /?p=464 HTTP/1.1
3-2	11168	0/11/3008	L	4.94	12	0	0.0	0.00	16.46	62.215.5.69	www.mixupdate.com	GET /?p=44 HTTP/1.1
4-2	11077	0/110/2893	W	7.52	31	0	0.0	0.71	14.72	61.244.235.34	www.mixupdate.com	GET / HTTP/1.1
5-2	11226	0/0/2859	W	2.81	1078	0	0.0	0.00	15.10	111.160.68.25	www.mixupdate.com	GET /?p=473 HTTP/1.1
6-2	11179	0/5/2608	W	3.27	373	0	0.0	0.03	12.90	87.118.126.186	www.mixupdate.com	GET /wp-trackback.php?p=448 HTTP/1.1
7-2	11165	0/15/2584	W	3.96	720	0	0.0	0.07	13.80	62.215.5.66	www.mixupdate.com	GET /?p=53 HTTP/1.1
8-2	11127	0/31/2332	W	4.79	354	0	0.0	0.13	12.50	189.90.16.13	www.mixupdate.com	GET /?p=187 HTTP/1.0
9-2	11180	0/3/2227	W	2.73	406	0	0.0	0.00	10.84	62.215.5.66	www.mixupdate.com	GET /wp-trackback.php?p=430 HTTP/1.1
10-2	11181	0/1/2180	W	1.83	896	0	0.0	0.00	10.97	111.160.70.194	www.mixupdate.com	GET /?p=475 HTTP/1.1
11-2	11227	0/1/1959	W	1.81	576	0	0.0	0.00	10.16	87.118.126.186	www.mixupdate.com	GET /wp-trackback.php?p=324 HTTP/1.1
12-2	11048	0/141/1897	L	6.12	19	0	0.0	0.56	9.83	116.58.40.92	www.mixupdate.com	GET / HTTP/1.1
13-2	11182	0/2/1769	W	1.77	885	0	0.0	0.00	8.94	123.125.156.132	www.mixupdate.com	GET /?p=206 HTTP/1.1
14-2	11183	0/3/1670	W	3.10	416	0	0.0	0.00	8.47	78.46.69.87	www.mixupdate.com	GET /wp-trackback.php?p=416 HTTP/1.1
15-2	11184	0/1/1162	W	0.08	1053	0	0.0	0.00	6.38	87.118.126.186	www.mixupdate.com	GET /?p=187 HTTP/1.1
16-2	11135	0/32/962	W	4.07	910	0	0.0	0.08	5.63	216.125.196.57	www.mixupdate.com	GET /wp-trackback.php?p=313 HTTP/1.0
17-2	11185	0/2/914	W	2.90	472	0	0.0	0.00	5.07	60.28.210.17	www.mixupdate.com	GET /?p=471 HTTP/1.1
18-2	11186	0/4/477	W	2.83	433	0	0.0	0.02	2.61	121.145.120.165	www.mixupdate.com	GET /wp-trackback.php?p=436 HTTP/1.0
19-2	11187	0/1/555	W	1.71	896	0	0.0	0.00	3.27	123.125.156.189	www.mixupdate.com	GET /?p=87 HTTP/1.1
20-2	11189	0/3/349	W	3.19	452	0	0.0	0.00	1.64	62.215.5.66	www.mixupdate.com	GET /wp-trackback.php?p=407 HTTP/1.1
21-2	11191	0/8/270	W	3.52	215	0	0.0	0.00	1.25	212.138.113.15	www.mixupdate.com	GET /wp-trackback.php?p=346 HTTP/1.1
22-2	11192	0/5/233	L	1.61	26	0	0.0	0.00	1.21	203.175.185.43	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
23-2	11193	0/24/229	L	4.10	28	0	0.0	0.11	0.92	202.108.50.71	www.mixupdate.com	GET / HTTP/1.1
24-2	11229	0/1/180	W	1.67	743	0	0.0	0.00	0.88	210.212.123.10	www.mixupdate.com	GET /wp-trackback.php?p=405 HTTP/1.0
25-2	11195	0/1/280	W	1.71	915	0	0.0	0.00	1.33	111.160.68.36	www.mixupdate.com	GET /?p=171 HTTP/1.1
26-2	11199	0/2/44	W	3.15	341	0	0.0	0.00	0.30	164.78.248.57	www.mixupdate.com	GET /?p=87 HTTP/1.1
27-2	11200	2/29/34	W	4.02	-25	0	1.3	0.09	0.09	82.3.218.26	www.mixupdate.com	GET /wp-content/plugins/wp-cumulus/tagcloud.swf?r=2665382 HTTP/
28-2	11201	0/1/24	W	2.03	437	0	0.0	0.00	0.13	200.223.199.250	www.mixupdate.com	GET /wp-trackback.php?p=452 HTTP/1.0
29-2	11202	0/6/26	W	0.10	1079	0	0.0	0.00	0.07	200.129.25.14	www.mixupdate.com	GET /?p=226 HTTP/1.0
30-2	11203	0/1/10	W	1.66	881	0	0.0	0.00	0.02	123.125.156.171	www.mixupdate.com	GET /wp-trackback.php?p=428 HTTP/1.1
31-2	11204	0/5/93	W	1.96	424	0	0.0	0.02	0.32	200.129.25.14	www.mixupdate.com	GET /wp-trackback.php?p=446 HTTP/1.0
32-2	11233	0/2/6	W	1.47	866	0	0.0	0.00	0.00	218.100.22.60	www.mixupdate.com	GET /?p=226 HTTP/1.1
33-2	11206	0/2/3	W	2.66	341	0	0.0	0.00	0.01	87.118.126.186	www.mixupdate.com	GET /wp-trackback.php?p=407 HTTP/1.1
34-2	11207	0/8/10	W	1.97	685	0	0.0	0.05	0.05	62.215.5.66	www.mixupdate.com	GET /?p=475 HTTP/1.1
35-2	11234	0/35/37	_	3.43	-19	4	0.0	0.13	0.14	82.3.218.26	www.mixupdate.com	GET /wp-content/themes/arras/user.css HTTP/1.1
36-2	11235	0/1/3	W	1.97	459	0	0.0	0.00	0.00	221.194.132.213	www.mixupdate.com	GET /wp-trackback.php?p=448 HTTP/1.1
37-2	11236	0/3/12	W	1.68	692	0	0.0	0.02	0.05	62.215.5.66	www.mixupdate.com	GET /?p=471 HTTP/1.1
38-2	11211	2/25/31	L	3.75	-38	0	0.2	0.09	0.11	116.71.175.223	www.mp3z.pk	GET /wp-content/themes/magazine_10/tools/timthumb.php?src=/wp-c
39-2	11212	0/5/7	W	1.48	895	0	0.0	0.01	0.01	221.194.132.223	www.mixupdate.com	GET /?p=180 HTTP/1.1
40-2	11213	0/7/16	_	3.02	-19	5	0.0	0.01	0.05	82.3.218.26	www.mixupdate.com	GET /wp-content/themes/arras/js/superfish/superfish.js HTTP/1.1
41-2	11214	0/2/2	W	2.25	418	0	0.0	0.00	0.00	221.194.132.229	www.mixupdate.com	GET /wp-trackback.php?p=346 HTTP/1.1
42-2	11238	0/1/1	W	1.46	834	0	0.0	0.00	0.00	111.160.70.196	www.mixupdate.com	GET /?p=24 HTTP/1.1
43-2	11239	0/3/3	W	1.97	330	0	0.0	0.00	0.00	123.125.156.170	www.mixupdate.com	GET /?p=480 HTTP/1.1
44-2	11240	0/1/1	W	2.06	393	0	0.0	0.00	0.00	188.165.205.62	www.mixupdate.com	GET /?p=136 HTTP/1.1
45-2	11241	0/1/1	W	1.86	402	0	0.0	0.00	0.00	111.160.70.130	www.mixupdate.com	GET /wp-trackback.php?p=397 HTTP/1.1
46-2	11243	0/2/2	W	1.36	886	0	0.0	0.00	0.00	205.213.195.70	www.mixupdate.com	GET /wp-trackback.php?p=430 HTTP/1.0
47-2	11244	0/1/1	W	2.09	413	0	0.0	0.00	0.00	221.194.132.215	www.mixupdate.com	GET /?p=201 HTTP/1.1
48-2	11245	0/1/1	W	1.87	422	0	0.0	0.00	0.00	221.194.132.230	www.mixupdate.com	GET /wp-trackback.php?p=432 HTTP/1.1
49-2	11247	0/1/1	W	1.75	445	0	0.0	0.00	0.00	200.129.25.14	www.mixupdate.com	GET /?p=456 HTTP/1.0
50-2	11248	0/0/0	W	0.00	1063	1839666600	0.0	0.00	0.00	62.215.5.69	www.mixupdate.com	GET /?p=24 HTTP/1.1
51-2	11249	0/0/0	W	0.00	1065	1839668196	0.0	0.00	0.00	62.215.5.69	www.mixupdate.com	GET /?p=214 HTTP/1.1
52-2	11250	0/1/1	W	1.80	383	0	0.0	0.00	0.00	221.194.132.215	www.mixupdate.com	GET /wp-trackback.php?p=430 HTTP/1.1
53-2	11251	0/2/2	W	1.62	764	0	0.0	0.02	0.02	111.160.68.36	www.mixupdate.com	GET /wp-trackback.php?p=416 HTTP/1.1
54-2	11252	0/1/1	W	1.29	881	0	0.0	0.00	0.00	216.125.196.57	www.mixupdate.com	GET /?p=214 HTTP/1.0
55-2	11253	0/2/2	W	1.94	332	0	0.0	0.00	0.00	200.129.25.14	www.mixupdate.com	GET /wp-trackback.php?p=446 HTTP/1.0
56-2	11254	0/0/0	W	0.00	1059	1839662640	0.0	0.00	0.00	111.160.70.199	www.mixupdate.com	GET /wp-trackback.php?p=397 HTTP/1.1
57-2	11255	0/1/1	W	2.10	445	0	0.0	0.00	0.00	221.194.132.212	www.mixupdate.com	GET /wp-trackback.php?p=277 HTTP/1.1
58-2	11256	0/1/1	W	1.92	362	0	0.0	0.00	0.00	123.125.156.206	www.mixupdate.com	GET /?p=53 HTTP/1.1
59-2	11258	0/0/0	W	0.00	1050	1839653631	0.0	0.00	0.00	111.160.68.27	www.mixupdate.com	GET /wp-trackback.php?p=324 HTTP/1.1
60-2	11259	0/1/1	W	1.77	657	0	0.0	0.00	0.00	113.160.23.58	www.mixupdate.com	GET /?p=464 HTTP/1.0
61-2	11261	0/1/1	W	2.11	415	0	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /wp-trackback.php?p=454 HTTP/1.1
62-2	11262	0/1/1	W	1.50	776	0	0.0	0.00	0.00	203.175.185.43	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
63-2	11264	0/0/0	W	0.00	1041	1839644229	0.0	0.00	0.00	111.160.70.198	www.mixupdate.com	GET /wp-trackback.php?p=432 HTTP/1.1
64-2	11265	0/25/25	W	3.19	39	0	0.0	0.04	0.04	123.125.156.171	www.mixupdate.com	GET /wp-trackback.php?p=273 HTTP/1.1
65-2	11268	0/0/0	W	0.00	1033	1839636371	0.0	0.00	0.00	79.172.201.152	www.mixupdate.com	GET /?p=467 HTTP/1.1
66-2	11270	0/1/1	W	0.02	1030	0	0.0	0.00	0.00	92.255.66.65	www.mixupdate.com	GET /?p=226 HTTP/1.0
67-2	11273	0/1/1	W	1.77	416	0	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /wp-trackback.php?p=430 HTTP/1.1
68-2	11276	0/2/2	W	1.78	422	0	0.0	0.02	0.02	212.138.113.15	www.mixupdate.com	GET /wp-trackback.php?p=405 HTTP/1.1
69-2	11278	0/0/0	W	0.00	1023	1839627150	0.0	0.00	0.00	111.160.70.226	www.mixupdate.com	GET /wp-trackback.php?p=446 HTTP/1.1
70-2	11284	0/0/0	W	0.00	1019	1839622847	0.0	0.00	0.00	123.125.156.132	www.mixupdate.com	GET /?p=214 HTTP/1.1
71-2	11286	0/2/2	W	2.08	330	0	0.0	0.00	0.00	212.138.113.15	www.mixupdate.com	GET /?p=44 HTTP/1.1
72-2	11287	0/1/1	W	2.06	364	0	0.0	0.00	0.00	111.160.68.29	www.mixupdate.com	GET /?p=214 HTTP/1.1
73-2	11291	0/0/0	W	0.00	1016	1839619530	0.0	0.00	0.00	221.194.132.212	www.mixupdate.com	GET /wp-trackback.php?p=434 HTTP/1.1
74-2	11295	0/0/0	W	0.00	1014	1839617383	0.0	0.00	0.00	216.125.196.57	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
75-2	11302	0/17/17	W	2.83	45	0	0.0	0.07	0.07	221.194.132.232	www.mixupdate.com	GET /?p=456 HTTP/1.1
76-2	11304	0/0/0	W	0.00	1008	1839611336	0.0	0.00	0.00	83.100.177.252	www.mixupdate.com	GET /?p=480 HTTP/1.1
77-2	11307	0/2/2	W	1.88	415	0	0.0	0.00	0.00	123.125.156.207	www.mixupdate.com	GET /?p=475 HTTP/1.1
78-2	11309	0/1/1	W	0.02	1001	0	0.0	0.00	0.00	203.175.185.43	www.mixupdate.com	GET /wp-trackback.php?p=448 HTTP/1.0
79-2	11313	0/0/0	W	0.00	995	1839599164	0.0	0.00	0.00	218.100.22.60	www.mixupdate.com	GET /?p=138 HTTP/1.1
80-2	11316	0/0/0	W	0.00	991	1839594793	0.0	0.00	0.00	111.160.68.30	www.mixupdate.com	GET /?p=143 HTTP/1.1
81-2	11320	0/0/0	W	0.00	989	1839592822	0.0	0.00	0.00	123.125.156.135	www.mixupdate.com	GET /?p=237 HTTP/1.1
82-2	11322	0/0/0	W	0.00	986	1839590156	0.0	0.00	0.00	200.129.25.14	www.mixupdate.com	GET /wp-trackback.php?p=346 HTTP/1.0
83-2	11325	0/1/1	W	0.01	984	0	0.0	0.00	0.00	200.129.25.14	www.mixupdate.com	GET /wp-trackback.php?p=419 HTTP/1.0
84-2	11327	0/0/0	W	0.00	978	1839581855	0.0	0.00	0.00	203.175.185.43	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
85-2	11329	0/0/0	W	0.00	979	1839582221	0.0	0.00	0.00	205.213.195.70	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
86-2	11334	0/0/0	W	0.00	971	1839574320	0.0	0.00	0.00	205.213.195.70	www.mixupdate.com	GET /technology/review-sony-nwz-w252-walkman-%25e2%2580%2593-a-
87-2	11338	0/0/0	W	0.00	967	1839570738	0.0	0.00	0.00	111.1.32.23	www.mixupdate.com	GET /?p=89 HTTP/1.1
88-2	11339	0/0/0	W	0.00	965	1839568275	0.0	0.00	0.00	221.194.132.211	www.mixupdate.com	GET /?p=208 HTTP/1.1
89-2	11341	0/0/0	W	0.00	961	1839564283	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
90-2	11344	0/2/2	W	0.02	955	0	0.0	0.00	0.00	111.160.68.18	www.mixupdate.com	GET /?p=89 HTTP/1.1
91-2	11347	0/1/1	W	0.01	950	0	0.0	0.02	0.02	61.4.82.76	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
92-2	11350	0/1/1	W	0.01	943	0	0.0	0.02	0.02	111.160.68.35	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
93-2	11352	0/0/0	W	0.00	948	1839551737	0.0	0.00	0.00	136.159.55.87	www.mixupdate.com	GET /?p=131 HTTP/1.1
94-2	11354	0/1/1	W	0.01	943	0	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /?p=53 HTTP/1.1
95-2	11356	0/0/0	W	0.00	936	1839540123	0.0	0.00	0.00	111.160.70.195	www.mixupdate.com	GET /?p=44 HTTP/1.1
96-2	11361	0/0/0	W	0.00	931	1839534318	0.0	0.00	0.00	93.166.121.106	www.mixupdate.com	GET /?p=71 HTTP/1.0
97-2	11362	0/0/0	W	0.00	930	1839533251	0.0	0.00	0.00	111.160.68.29	www.mixupdate.com	GET /?p=136 HTTP/1.1
98-2	11363	0/0/0	W	0.00	926	1839529634	0.0	0.00	0.00	111.160.70.226	www.mixupdate.com	GET /?p=462 HTTP/1.1
99-2	11364	0/0/0	W	0.00	922	1839525409	0.0	0.00	0.00	111.160.70.196	www.mixupdate.com	GET /?p=177 HTTP/1.1
100-2	11365	0/0/0	W	0.00	921	1839525049	0.0	0.00	0.00	221.194.132.215	www.mixupdate.com	GET /?p=75 HTTP/1.1
101-2	11368	0/0/0	W	0.00	918	1839522104	0.0	0.00	0.00	121.145.120.165	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
102-2	11373	0/0/0	W	0.00	916	1839519307	0.0	0.00	0.00	123.125.156.208	www.mixupdate.com	GET /?p=478 HTTP/1.1
103-2	11375	0/0/0	W	0.00	911	1839514254	0.0	0.00	0.00	111.160.68.11	www.mixupdate.com	GET /wp-trackback.php?p=273 HTTP/1.1
104-2	11376	0/0/0	W	0.00	908	1839511235	0.0	0.00	0.00	216.125.196.57	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
105-2	11377	0/0/0	W	0.00	907	1839510374	0.0	0.00	0.00	221.194.132.212	www.mixupdate.com	GET /?p=464 HTTP/1.1
106-2	11378	0/0/0	W	0.00	900	1839503751	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /wp-trackback.php?p=324 HTTP/1.1
107-2	11383	0/1/1	W	0.60	679	0	0.0	0.00	0.00	216.125.196.57	www.mixupdate.com	GET /?p=93 HTTP/1.0
108-2	11388	0/1/1	W	0.72	627	0	0.0	0.00	0.00	87.118.126.186	www.mixupdate.com	GET /?p=64 HTTP/1.1
109-2	11390	0/0/0	W	0.00	885	1839488728	0.0	0.00	0.00	78.46.69.87	www.mixupdate.com	GET /wp-trackback.php?p=432 HTTP/1.1
110-2	11392	0/1/1	W	0.86	494	0	0.0	0.00	0.00	221.194.132.210	www.mixupdate.com	GET /?p=171 HTTP/1.1
111-2	11393	0/0/0	W	0.00	862	1839465839	0.0	0.00	0.00	216.125.196.57	www.mixupdate.com	GET /?p=237 HTTP/1.0
112-2	11396	0/1/1	W	0.82	559	0	0.0	0.00	0.00	88.80.51.40	www.mixupdate.com	GET /?p=214 HTTP/1.0
113-2	11399	0/0/0	W	0.00	857	1839460947	0.0	0.00	0.00	123.125.156.151	www.mixupdate.com	GET /?p=187 HTTP/1.1
114-2	11402	0/1/1	W	0.84	519	0	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /?p=475 HTTP/1.1
115-2	11403	0/1/1	W	0.95	459	0	0.0	0.00	0.00	111.1.32.25	www.mixupdate.com	GET /?p=44 HTTP/1.1
116-2	11404	0/1/1	W	0.86	417	0	0.0	0.00	0.00	200.129.25.14	www.mixupdate.com	GET /?p=136 HTTP/1.0
117-2	11405	0/1/1	W	0.83	550	0	0.0	0.00	0.00	221.194.132.217	www.mixupdate.com	GET /?p=458 HTTP/1.1
118-2	11408	0/2/2	W	1.04	-5	0	0.0	0.00	0.00	116.58.40.92	www.mixupdate.com	GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 H
119-2	11409	0/0/0	W	0.00	791	1839394687	0.0	0.00	0.00	221.194.132.229	www.mixupdate.com	GET /wp-trackback.php?p=454 HTTP/1.1
120-2	11411	0/1/1	W	0.10	787	0	0.0	0.02	0.02	123.125.156.190	www.mixupdate.com	GET /?p=138 HTTP/1.1
121-2	11413	0/1/1	W	0.62	565	0	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /wp-trackback.php?p=273 HTTP/1.1
122-2	11415	0/2/2	W	0.80	466	0	0.0	0.00	0.00	210.212.123.10	www.mixupdate.com	GET /?p=131 HTTP/1.0
123-2	11416	0/1/1	W	0.09	698	0	0.0	0.00	0.00	111.160.68.35	www.mixupdate.com	GET /?p=53 HTTP/1.1
124-2	11418	0/0/0	W	0.00	765	1839368402	0.0	0.00	0.00	205.213.195.70	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
125-2	11419	0/0/0	W	0.00	764	1839367383	0.0	0.00	0.00	205.213.195.70	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
126-2	11421	0/0/0	W	0.00	764	1839368097	0.0	0.00	0.00	204.124.182.12	www.mixupdate.com	POST /wp-cron.php?doing_wp_cron HTTP/1.0
127-2	11422	0/1/1	W	0.07	739	0	0.0	0.02	0.02	221.194.132.219	www.mixupdate.com	GET /?p=208 HTTP/1.1
128-2	11424	0/0/0	W	0.00	767	1839371166	0.0	0.00	0.00	200.129.25.14	www.mixupdate.com	GET /wp-trackback.php?p=436 HTTP/1.0
129-2	11427	0/0/0	W	0.00	746	1839349966	0.0	0.00	0.00	200.165.133.70	www.mixupdate.com	GET /?p=131 HTTP/1.0
130-2	11428	0/0/0	W	0.00	749	1839352911	0.0	0.00	0.00	200.165.133.70	www.mixupdate.com	GET /?p=136 HTTP/1.0
131-2	11430	0/1/1	W	0.06	678	0	0.0	0.00	0.00	61.4.82.76	www.mixupdate.com	GET /?p=177 HTTP/1.1
132-2	11431	0/1/1	W	0.08	728	0	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
133-2	11434	0/3/3	W	0.76	428	0	0.0	0.03	0.03	111.160.68.18	www.mixupdate.com	GET /?p=187 HTTP/1.1
134-2	11436	0/0/0	W	0.00	730	1839333939	0.0	0.00	0.00	111.160.70.198	www.mixupdate.com	GET /technology/review-sony-nwz-w252-walkman-%2525e2%252580%252
135-2	11437	0/0/0	W	0.00	740	1839344150	0.0	0.00	0.00	111.161.3.211	www.mixupdate.com	GET /technology/*******-galaxy-s-vs-iphone-4-display-screens/ H
136-2	11438	0/1/1	W	0.09	694	0	0.0	0.02	0.02	218.201.21.180	www.mixupdate.com	GET /?p=473 HTTP/1.1
137-2	11439	0/0/0	W	0.00	727	1839330420	0.0	0.00	0.00	61.4.82.76	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
138-2	11440	0/0/0	W	0.00	707	1839310963	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /?p=480 HTTP/1.1
139-2	11441	0/0/0	W	0.00	706	1839309567	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /?p=59 HTTP/1.1
140-2	11444	4/10/10	W	1.17	-24	0	23.0	0.04	0.04	82.3.218.26	www.mixupdate.com	GET /wp-content/themes/arras/images/rss.png HTTP/1.1
141-2	11445	0/0/0	W	0.00	699	1839302235	0.0	0.00	0.00	62.215.5.69	www.mixupdate.com	GET /?p=64 HTTP/1.1
142-2	11447	0/0/0	W	0.00	701	1839304563	0.0	0.00	0.00	200.129.25.14	www.mixupdate.com	GET /?p=89 HTTP/1.0
143-2	11448	0/0/0	W	0.00	695	1839299034	0.0	0.00	0.00	111.160.70.145	www.mixupdate.com	GET /?p=480 HTTP/1.1
144-2	11450	0/0/0	W	0.00	685	1839289066	0.0	0.00	0.00	111.160.68.35	www.mixupdate.com	GET /regional/maharashtra-board-msbshse-exam-2011-timetable-ann
145-2	11451	0/0/0	W	0.00	677	1839280275	0.0	0.00	0.00	62.215.5.66	www.mixupdate.com	GET /wp-trackback.php?p=324 HTTP/1.1
146-2	11454	0/0/0	W	0.00	685	1839289133	0.0	0.00	0.00	111.160.68.26	www.mixupdate.com	GET /?p=44 HTTP/1.1
147-2	11455	0/1/1	W	0.61	416	0	0.0	0.00	0.00	62.215.5.69	www.mixupdate.com	GET /?p=44 HTTP/1.1
148-2	11456	0/0/0	W	0.00	686	1839289785	0.0	0.00	0.00	78.46.69.87	www.mixupdate.com	GET /?p=478 HTTP/1.1
149-2	11457	0/0/0	W	0.00	661	1839264604	0.0	0.00	0.00	221.194.132.215	www.mixupdate.com	GET /?p=180 HTTP/1.1
150-2	11458	0/0/0	W	0.00	654	1839257539	0.0	0.00	0.00	210.212.123.10	www.mixupdate.com	GET /?p=467 HTTP/1.0
151-2	11460	0/0/0	W	0.00	657	1839260209	0.0	0.00	0.00	221.194.132.211	www.mixupdate.com	GET /wp-trackback.php?p=233 HTTP/1.1
152-2	11461	0/0/0	W	0.00	635	1839239030	0.0	0.00	0.00	123.125.156.136	www.mixupdate.com	GET /?p=456 HTTP/1.1
153-2	11462	0/0/0	W	0.00	657	1839260176	0.0	0.00	0.00	221.194.132.217	www.mixupdate.com	GET /?p=462 HTTP/1.1
154-2	11463	0/0/0	W	0.00	643	1839246276	0.0	0.00	0.00	87.118.126.186	www.mixupdate.com	GET /?p=75 HTTP/1.1
155-2	11465	0/2/2	W	0.70	-4	0	0.0	0.00	0.00	189.90.16.13	www.mixupdate.com	GET /?p=467 HTTP/1.0
156-2	11466	0/7/7	W	1.02	59	0	0.0	0.00	0.00	83.100.177.252	www.mixupdate.com	GET /?p=458 HTTP/1.1
157-2	11471	0/0/0	W	0.00	626	1839230141	0.0	0.00	0.00	111.160.70.195	www.mixupdate.com	GET /wp-trackback.php?p=428 HTTP/1.1
158-2	11473	0/0/0	W	0.00	611	1839215097	0.0	0.00	0.00	111.161.3.230	www.mixupdate.com	GET /?p=91 HTTP/1.1
159-2	11474	0/0/0	W	0.00	621	1839224518	0.0	0.00	0.00	221.194.132.217	www.mixupdate.com	GET /wp-trackback.php?p=432 HTTP/1.1
160-2	11475	0/0/0	W	0.00	607	1839210878	0.0	0.00	0.00	78.46.69.87	www.mixupdate.com	GET /?p=184 HTTP/1.1
161-2	11480	0/3/3	_	0.74	-23	98375	0.0	0.00	0.00	61.4.82.76	www.mixupdate.com	GET /wp-trackback.php?p=277 HTTP/1.1
162-2	11484	0/0/0	W	0.00	592	1839195666	0.0	0.00	0.00	188.165.205.62	www.mixupdate.com	GET /wp-trackback.php?p=452 HTTP/1.1
163-2	11485	0/5/5	W	0.90	128	0	0.0	0.00	0.00	200.165.133.70	www.mixupdate.com	GET /?p=64 HTTP/1.0
164-2	11506	0/8/8	W	0.88	31	0	0.0	0.10	0.10	200.129.25.14	www.mixupdate.com	GET /?p=87 HTTP/1.0
165-2	11509	0/12/12	_	0.94	-19	91	0.0	0.01	0.01	82.3.218.26	www.mixupdate.com	GET /wp-content/themes/arras/js/jquery.validate.min.js HTTP/1.1
166-2	11511	0/1/1	W	0.41	258	0	0.0	0.00	0.00	212.138.113.15	www.mixupdate.com	GET /wp-trackback.php?p=235 HTTP/1.1
167-2	11512	0/20/20	L	1.37	-27	0	0.0	0.06	0.06	93.186.31.239	www.mixupdate.com	GET /general/blue-waffle-disease-photo-with-details-pictures-an
168-2	11513	17/35/35	W	1.32	-25	0	2.8	0.02	0.02	116.71.175.223	www.mp3z.pk	GET /wp-content/plugins/wp-cumulus/tagcloud.swf?r=2938645 HTTP/
169-2	11514	0/3/3	W	0.81	45	0	0.0	0.00	0.00	202.108.50.74	www.mixupdate.com	GET /wp-trackback.php?p=416 HTTP/1.1
170-2	11515	0/0/0	W	0.00	512	1839115609	0.0	0.00	0.00	69.228.63.241	www.mixupdate.com	GET /?p=464 HTTP/1.0
171-2	11520	0/8/8	_	0.73	-19	1010	0.0	0.04	0.04	82.3.218.26	www.mixupdate.com	GET /wp-includes/js/jquery/jquery.js?ver=1.4.2 HTTP/1.1
172-2	11522	0/4/4	W	0.75	-27	0	0.0	0.00	0.00	116.71.175.223	www.techrux.com	GET /wp-content/upload//2010/11/techrux31.png HTTP/1.1
173-2	11523	1/8/8	L	0.70	-27	0	0.7	0.02	0.02	82.3.218.26	www.mixupdate.com	GET /wp-includes/js/jquery/ui.core.js?ver=1.7.3 HTTP/1.1
174-2	11526	0/0/0	W	0.00	482	1839085770	0.0	0.00	0.00	221.194.132.215	www.mixupdate.com	GET /?p=201 HTTP/1.1
175-2	11531	0/0/0	W	0.00	479	1839082764	0.0	0.00	0.00	111.160.70.227	www.mixupdate.com	GET /?p=131 HTTP/1.1
176-2	11534	0/4/4	W	0.70	75	0	0.0	0.00	0.00	189.90.16.13	www.mixupdate.com	GET /technology/review-sony-nwz-w252-walkman-%2525e2%252580%252
177-2	11539	0/8/8	W	1.02	-27	0	0.0	0.02	0.02	116.71.175.223	www.mixupdate.com	GET /wp-content/upload//2010/11/mixupdate1.png HTTP/1.1
178-2	11544	0/3/3	_	0.72	-24	135612	0.0	0.00	0.00	221.130.18.150	www.mixupdate.com	GET /wp-trackback.php?p=346 HTTP/1.1
179-2	11549	0/16/16	W	0.93	35	0	0.0	0.13	0.13	66.249.71.12	www.mixupdate.com	GET /tag/sex-life/ HTTP/1.1
180-2	11554	0/5/5	W	0.72	100	0	0.0	0.00	0.00	189.90.16.13	www.mixupdate.com	GET /wp-trackback.php?p=430 HTTP/1.0
181-2	11555	0/2/2	W	0.64	-4	0	0.0	0.00	0.00	200.165.133.70	www.mixupdate.com	GET /wp-trackback.php?p=416 HTTP/1.0
182-2	11557	0/1/1	W	0.60	45	0	0.0	0.00	0.00	111.161.3.214	www.mixupdate.com	GET /?p=44 HTTP/1.1
183-2	11560	0/0/0	L	0.00	-32	1839047219	0.0	0.00	0.00	216.125.196.57	www.mixupdate.com	GET /?p=475 HTTP/1.0
184-2	11564	0/0/0	W	0.00	422	1839025440	0.0	0.00	0.00	221.130.18.155	www.mixupdate.com	GET /?p=184 HTTP/1.1
185-2	11565	0/0/0	W	0.00	429	1839032385	0.0	0.00	0.00	205.213.195.70	www.mixupdate.com	GET /technology/review-sony-nwz-w252-walkman-%2525e2%252580%252
186-2	11570	0/0/0	W	0.00	422	1839025599	0.0	0.00	0.00	62.215.5.69	www.mixupdate.com	GET /?p=75 HTTP/1.1
-
-
-
PID	OS process ID
Acc	Number of accesses this connection / this child / this slot
M	Mode of operation
CPU	CPU usage, number of seconds
SS	Seconds since beginning of most recent request
Req	Milliseconds required to process most recent request
Conn	Kilobytes transferred this connection
Child	Megabytes transferred this child
Slot	Total megabytes transferred this slot
SSL/TLS Session Cache Status:
cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0
subcaches: 32, indexes per subcache: 133
index usage: 0%, cache usage: 0%
total sessions stored since starting: 5
total sessions expired since starting: 5
total (pre-expiry) sessions scrolled out of the cache: 0
total retrieves since starting: 0 hit, 0 miss
total removes since starting: 0 hit, 0 miss
Apache/2 Server at 204.124.182.12 Port 80
 
Old 11-29-2010, 04:38 AM   #3
AsadMoeen
Member
 
Registered: Jun 2010
Posts: 160

Original Poster
Rep: Reputation: 3
Continued...




On running top again, I saw more apache processes and CPU usage increased to 50% too. Here is the control panel's Processes look:



Attachment 1130
External Link : http://www.s4aclan.com/cmd_show_services.JPG







Someone once told me a command to drop all caches, the command was this :

Code:
panel:~# echo 3 > /proc/sys/vm/drop_caches
Cache is actually the memory which drops itself when the system needs it . Anyhow, I dropped it myself. Free RAM increased from a 100 to 300MB. CPU usage at that time was 50% with apache processes still about 50 in number. But the websites started working although very slow.






Soon after about 20 mins, the RAM dropped to 2.5GB of free memory. CPU usage was back to 1%. It looked as everything restarted by itself or maybe Directadmin did it . The websites were working fine and so was everything else. SSH, Pings, Control-Panel, Websites. Everything was working . I really just don't know how it happened. Out of a jammed state, system was back by itself. Apache processes were reduced too.




On Logging in, I just went to check the logs,

The previous log of apache was renamed and the new log of this date was itself created . I will just mention part of errors I see in the log,

Code:
[Sun Nov 21 06:26:35 2010] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!?
[Sun Nov 21 06:26:35 2010] [warn] Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)
[Sun Nov 21 06:26:36 2010] [notice] Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8g DAV/2 PHP/5.2.14 configured -- resuming normal operations
sh: host: command not found
sh: host: command not found
sh: host: command not found
[Sun Nov 28 04:44:55 2010] [error] [client 127.0.0.1] File does not exist: /var/www/html/io
[Sun Nov 28 04:44:55 2010] [error] [client 127.0.0.1] File does not exist: /var/www/html/404.shtml
[Sun Nov 28 04:44:55 2010] [error] [client 127.0.0.1] File does not exist: /var/www/html/io
[Sun Nov 28 04:44:55 2010] [error] [client 127.0.0.1] File does not exist: /var/www/html/404.shtml
sh: host: command not found
[Sun Nov 28 04:47:11 2010] [error] [client ::1] File does not exist: /var/www/html/lsrpc
[Sun Nov 28 04:47:11 2010] [error] [client ::1] File does not exist: /var/www/html/404.shtml
[Sun Nov 28 04:47:11 2010] [error] [client ::1] File does not exist: /var/www/html/lsrpc
[Sun Nov 28 04:47:11 2010] [error] [client ::1] File does not exist: /var/www/html/404.shtml
[Sun Nov 28 06:36:03 2010] [notice] SIGHUP received.  Attempting to restart
If you see the last line, you may know why everything started working by itself . Apache actually restarted .

About the SH: Host command not found. I just ran this command on my server :

Code:
apt-get install bind9-host
It installed perfectly.


In directadmin logs this is what I found:

Code:
28/11/2010:06:39:54	212.227.84.19 LONG REQUEST	unknown
28/11/2010:06:42:10	212.227.84.19 LONG REQUEST	unknown
28/11/2010:06:44:26	212.227.84.19 LONG REQUEST	unknown
28/11/2010:06:46:42	212.227.84.19 LONG REQUEST	unknown
28/11/2010:06:48:57	212.227.84.19 LONG REQUEST	unknown
28/11/2010:06:51:13	212.227.84.19 LONG REQUEST	unknown
28/11/2010:06:53:28	212.227.84.19 LONG REQUEST	unknown
28/11/2010:06:55:44	212.227.84.19 LONG REQUEST	unknown
28/11/2010:06:58:00	212.227.84.19 LONG REQUEST	unknown
28/11/2010:07:00:15	212.227.84.19 LONG REQUEST	unknown
28/11/2010:07:02:32	212.227.84.19 LONG REQUEST	unknown
28/11/2010:07:04:47	212.227.84.19 LONG REQUEST	unknown
28/11/2010:07:07:03	212.227.84.19 LONG REQUEST	unknown
28/11/2010:07:09:19	212.227.84.19 LONG REQUEST	unknown
28/11/2010:07:11:35	212.227.84.19 LONG REQUEST	unknown
28/11/2010:07:13:51	212.227.84.19 LONG REQUEST	unknown
28/11/2010:07:16:06	212.227.84.19 LONG REQUEST	unknown
28/11/2010:07:18:22	212.227.84.19 LONG REQUEST	unknown
28/11/2010:07:20:37	212.227.84.19 LONG REQUEST	unknown

Time is round-about the same when the issue happened.


Directadmin error log:


Code:
2010:11:28-07:02:32: Error reading from 212.227.84.19: 
2010:11:28-07:04:47: Error reading from 212.227.84.19: 
2010:11:28-07:07:03: Error reading from 212.227.84.19: 
2010:11:28-07:09:19: Error reading from 212.227.84.19: 
2010:11:28-07:11:35: Error reading from 212.227.84.19: 
2010:11:28-07:13:51: Error reading from 212.227.84.19: 
2010:11:28-07:16:06: Error reading from 212.227.84.19: 
2010:11:28-07:18:22: Error reading from 212.227.84.19: 
2010:11:28-07:20:37: Error reading from 212.227.84.19: 
2010:11:28-07:22:53: Error reading from 212.227.84.19: 
2010:11:28-07:25:09: Error reading from 212.227.84.19: 
2010:11:28-07:27:25: Error reading from 212.227.84.19: 
2010:11:28-07:29:41: Error reading from 212.227.84.19:

I don't recognize this IP.

I just posted the logs which looked suspicious to me. Rest were all fine.






Changes made by me to Default DA Install :


The only change I had made to Directadmin was install add Lib-ssh2 module for Ion-cube loader and Zend extension to run it. These were basically just files needed to run from the Zend Extension. The file that was changed was only PHP.ini to enable Zend but I have restored the original one back so everything is default back again now because I want any possible cause to be minimized. But even on putting everything to default, the problem has not been fixed. This certainly means that the Default Directadmin install needs some changes.


Once again. Thanks for reading. If anyone thinks he knows whats the cause and whats the fix, please reply.






My Personal belief and experience :





I would talk about my experience and what I think could be the cause. I don't actually know how to fix but I can explain the cause based on my experience. I would base it up on the Apache Status:


Whenever this error occurs, I have observed in Apache status the number of requests are more than about 180 . When this request number of my website is crossed, the number of httpd processes start increasing by itself due to which RAM/CPU increase and the system becomes unstable and websites become inaccessible. Sometimes even if I have 100 visitors accessing, the request number stays under 30. But sometimes it randomly climbs up by itself.

Usually the requests number stays around 10-30 . There is a software of URL harvesting. If I run that software, the request number climbs to 200 and websites stop working. I believe this is a Bug in Directadmin. When a certain number of requests are made to the website, request number increases and due to each request number I believe the httpd process is assigned causing instability. Maybe on each 10 requests, a new httpd pid starts.


This is not certainly the software which does this Request number climb. Sometimes even without the software the request number climbs although the traffic is low at that time and hence causing this issue.


The URL-harvesting software is the only thing which can detect this error in my case because I don't know any other method to increase the number of requests.


Anyone who uses Directadmin ? Please give me their website address and also the server-status address so I can try harvesting their URL's and then we can see if this Error is my system specific or a Directadmin bug.

It could also be possible that the Software which I use is considered an attack . Maybe, default directadmin has no security for websites so we should secure it using some mods like to protect number of connections per IP . DA support asked me to install "limitipconn" module for blocking number of requests per IP, but in knowledge base I see something as "Loris-attack-module" to protect. But this would not fix the thing when the number of requests are increased by Multiple IP's ( i.e. not my software ) . I don't really know please suggest. So please advice if using one of these mods would be useful and which one.
 
Old 11-29-2010, 09:15 AM   #4
AsadMoeen
Member
 
Registered: Jun 2010
Posts: 160

Original Poster
Rep: Reputation: 3
Anyone who can help and share anything he has is welcome.
 
Old 11-29-2010, 02:40 PM   #5
lowbwtom
LQ Newbie
 
Registered: Nov 2010
Posts: 2

Rep: Reputation: 0
Same log entries here
I have the same DA log entries, but i did not detect any strange system behavior.
the accesses come in clusters, about every 140 minutes.
Because of the timing, i do not believe this is driven by DA, but from an external automated source.
it is unfortunate that the DA error log does not give a better explanation of why DA would want to read from this ip address.

2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
... lots more...
2010:11:28-17:13:22: Error reading from 212.227.84.19:
2010:11:28-17:13:22: Error reading from 212.227.84.19:
2010:11:28-17:13:22: Error reading from 212.227.84.19:
2010:11:28-17:16:49: Error reading from 212.227.84.19:
2010:11:28-17:16:49: Error reading from 212.227.84.19:
2010:11:28-17:16:49: Error reading from 212.227.84.19:
2010:11:28-18:53:08: Error reading from 212.227.84.19:
2010:11:28-18:53:08: Error reading from 212.227.84.19:
2010:11:28-18:53:08: Error reading from 212.227.84.19:
 
Old 11-29-2010, 02:46 PM   #6
lowbwtom
LQ Newbie
 
Registered: Nov 2010
Posts: 2

Rep: Reputation: 0
Actually, there was some strange behavior, but i had attributed it to something else entirely.

sh: /usr/sbin/sendmail: No such file or directory

and a lot of other system files are missing now.

i do not know if these things are related or not.
 
Old 11-30-2010, 10:37 AM   #7
AsadMoeen
Member
 
Registered: Jun 2010
Posts: 160

Original Poster
Rep: Reputation: 3
Quote:
Originally Posted by lowbwtom View Post
I have the same DA log entries, but i did not detect any strange system behavior.
the accesses come in clusters, about every 140 minutes.
Because of the timing, i do not believe this is driven by DA, but from an external automated source.
it is unfortunate that the DA error log does not give a better explanation of why DA would want to read from this ip address.

2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-01:58:51: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
2010:11:28-02:01:07: Error reading from 212.227.84.19:
... lots more...
2010:11:28-17:13:22: Error reading from 212.227.84.19:
2010:11:28-17:13:22: Error reading from 212.227.84.19:
2010:11:28-17:13:22: Error reading from 212.227.84.19:
2010:11:28-17:16:49: Error reading from 212.227.84.19:
2010:11:28-17:16:49: Error reading from 212.227.84.19:
2010:11:28-17:16:49: Error reading from 212.227.84.19:
2010:11:28-18:53:08: Error reading from 212.227.84.19:
2010:11:28-18:53:08: Error reading from 212.227.84.19:
2010:11:28-18:53:08: Error reading from 212.227.84.19:


I asked DA about this issue.

They said that this Log file can be ignored. It is just a bad request because Google Chrome is not fully compatible with apache . It does send bad request sometimes.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Debian 5.0 | Directadmin | Memory usage and System Crash AsadMoeen Linux - Server 8 11-23-2010 11:05 PM
Weird crash problem Yig Linux - Newbie 3 11-08-2007 02:18 PM
kde crash, then other crash, now weird problems true_atlantis Linux - Laptop and Netbook 1 04-28-2004 12:01 AM
Weird sound/crash A_Person Linux - Software 4 12-01-2003 04:30 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 02:07 PM.

Contact Us - Advertising Info - Rules - Privacy - LQ Merchandise - Donations - Contributing Member - LQ Sitemap -
Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration