httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Boyle Owen" <Owen.Bo...@swx.com>
Subject RE: [users@httpd] Apache cannot start anymore
Date Tue, 08 Apr 2003 12:52:41 GMT
It would really help a lot if you could post in plain text (can't inline
quote you otherwise)..

Apache is hitting a segmentation violation while reading /etc/protocols.
I've no idea why this would happen.

You mentioned in your very first mail that you'd "reinstalled apache".
How did you do this?

Also, all this trouble started after you'd been "attacked" - did, or do
you even suspect that, a hacker gained access to your machine? If so,
never mind re-installing apache, you'd better re-install the OS! You
might also need to re-install the user data from back-up (you do keep a
backup, don't you?) If your system is corrupted many more things besides
apache may be broken and you may have logic bombs or trojan horses or
back doors lurking on your system.

Generally, the procedure for recovering a hacked machine is:

- unplug every wire except the ones connected to the keyboard and mouse
- format the disks 
- re-install the OS from CD
- re-install user data from backup tapes recorded BEFORE the attack
- put all the wires back in

This is why most people go to a lot of effort not to get hacked...

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 


-----Original Message-----
From: ASC - Ronald Roeleveld [mailto:r.roeleveld@ascinternational.nl]
Sent: Dienstag, 8. April 2003 13:55
To: 'users@httpd.apache.org'
Subject: RE: [users@httpd] Apache cannot start anymore

        strace /usr/sbin/apache -X 
This is the output of strace /usr/sbin/apache -X: 
execve("/usr/sbin/apache", ["/usr/sbin/apache", "-X"], [/* 15 vars */])
= 0 
...
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS,
-1, 0) = 0x40219000 
read(5, "# Internet (IP) protocols\n#\n# Up"..., 4096) = 1977 
close(5)                                = 0 
munmap(0x40219000, 4096)                = 0 
--- SIGSEGV (Segmentation fault) @ 0 (0) --- 
+++ killed by SIGSEGV +++ 




Regards, Ronald. 
** Disclaimer please read ** 
The information contained in this E-mail and its attachments is
confidential and may be legally privileged. It is intended solely for
the use of the individual or entity to whom it is addressed and others
authorised to receive it. If you are not the intended recipient you are
hereby notified that any disclosure, copying, distribution or taking any
action in reliance of the contents of this E-mail and any attachments is
strictly prohibited and may be unlawful. ASC International is neither
liable for the proper nor complete transmission of the information
contained in this E-mail and any attachments nor for any delay in its
receipt. If received in error, please contact ASC International quoting
the name of the sender and the addressee and then delete it from your
system. Please note that ASC International does not accept any
responsibility for viruses and it is your responsibility to scan the
E-mail and attachments (if any). We reserve the right to monitor and
record e-mail messages sent to and from this address for the purposes of
investigating or detecting any unauthorized use of its system and
ensuring its effective operation.

This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please notify the sender urgently
and then immediately delete the message and any copies of it from your
system. Please also immediately destroy any hardcopies of the message.
You must not, directly or indirectly, use, disclose, distribute, print,
or copy any part of this message if you are not the intended recipient.
The sender's company reserves the right to monitor all e-mail
communications through their networks. Any views expressed in this
message are those of the individual sender, except where the message
states otherwise and the sender is authorised to state them to be the
views of the sender's company. 



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message