httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joshua Slive" <jos...@slive.ca>
Subject Re: [users@httpd] server-status - DOS Attack?
Date Tue, 05 Jun 2007 18:02:55 GMT
On 6/4/07, Marc Perkel <marc@perkel.com> wrote:
>
>  Hi, I'm getting a lot of these when running server-status. Is this some kind of DOS
attack?
>
>
>
>        25-0       5250       0/2/22       R              0.00       2       65      
0.0       0.00       0.40              ?       ?       ..reading..
>        26-0       5251       0/0/20       R              0.08       3       46      
0.0       0.00       7.44              ?       ?       ..reading..
>        27-0       5086       0/5/14       R              0.00       6       66      
0.0       0.10       0.36              ?       ?       ..reading..
>        28-0       5087       0/5/15       R              0.00       11       1579   
   0.0       0.43       0.58              ?       ?       ..reading..
>

Could be a DoS. I have also heard that connections that are
reverse-proxied will appear like that while the reverse-proxy is
waiting for content from the back-end.

You should take a look at the netstat output on this box and see what
the other side of these connections look like.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message