Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 54147 invoked from network); 4 Feb 2010 19:25:47 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 4 Feb 2010 19:25:47 -0000 Received: (qmail 85542 invoked by uid 500); 4 Feb 2010 19:25:44 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 85490 invoked by uid 500); 4 Feb 2010 19:25:44 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 85479 invoked by uid 99); 4 Feb 2010 19:25:44 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 04 Feb 2010 19:25:44 +0000 X-ASF-Spam-Status: No, hits=-4.0 required=10.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of gmane-2006-04-16@jt-socal.com designates 72.34.227.114 as permitted sender) Received: from [72.34.227.114] (HELO srv.john-thomas.com) (72.34.227.114) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 04 Feb 2010 19:25:34 +0000 Received: from localhost (srv.john-thomas.com [127.0.0.1]) by srv.john-thomas.com (Postfix) with ESMTP id 830A14F00A4 for ; Thu, 4 Feb 2010 11:25:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=jt-socal.com; h= content-transfer-encoding:content-type:content-type:subject :subject:mime-version:user-agent:from:from:date:date:message-id :received:received; s=jt; t=1265311510; x=1267125910; bh=tY8m33D GOkWx4i4q+mM3PH8JMLlgOf9h6i7yU5bIGLg=; b=NbDqarydIcgJdV51K9X8i0z 0Fsb3v86ccJofUiICuAALl+TVi4OzblIaLiyFDC3yc5/UIx0skZpTyjGuJeJAm+L abYqk0CN/bqBAGrJQFARz/3iE9bCcdHsrKwJqMi2W5SUMU+LTTFaTMgRSDX+P1RA BqJyD8TDjGpKQfnu2TBw= X-Virus-Spam-Scanned: JT Scanned Received: from srv.john-thomas.com ([127.0.0.1]) by localhost (srv.john-thomas.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nuNySEgJJody for ; Thu, 4 Feb 2010 11:25:10 -0800 (PST) Received: from ctlaptop.home.john-thomas.com (unknown [10.8.0.10]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by srv.john-thomas.com (Postfix) with ESMTP id A5A1D4F0094 for ; Thu, 4 Feb 2010 11:25:10 -0800 (PST) Message-ID: <4B6B1F0A.8090904@jt-socal.com> Date: Thu, 04 Feb 2010 11:24:58 -0800 From: John Thomas User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.7) Gecko/20100111 Thunderbird/3.0.1 MIME-Version: 1.0 To: users@httpd.apache.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [users@httpd] Runaway Apache Processes - Second Victim I have been using Apache for several years without trouble on CentOS 4 originally, CentOS 5 now. Most of my applications are php/mysql and mostly Drupal. FYI, I have run into a problem that sounds identical to Dan Bunyards thread here: http://markmail.org/thread/pnmwmalsfe6c7j6c Everything runs fine, then all of a sudden I have 12 or so Apache processes all trying to use 100% of the CPU and the system slows to a crawl. I can replicate the issue by running: ab -n 100 -c 25 http://example.com/ The problem seems to be getting worse (today, a hacker sent a bunch of urls to my server looking for phpmyadmin and that took me down). I have a very low traffic server with personal websites only. I have a busy day when Google crawls my system. I have about 1.5GB of ram. List of some rpms I use: httpd-2.2.3-31.el5.centos.2 php-5.3.1-1.el5.remi php-mysql-5.3.1-1.el5.remi php-mysql-5.3.1-1.el5.remi I watch htop when it happens and the server seems to process everything fine for a while with httpd and mysqld using a good amount of cpu, then mysqld use slows and many more httpd processes start using some cpu. Then about 12 or so (never counted) httpd procesess use the cpu about equally and the server is nearly unresponsive. The memory was not exhausted. I have tried many, many things in my configuration hoping I could figure it out. I do not know how to run straces or other developer type things, but I can probably figure it out if you give me some hints. -- Sincerely, John Thomas --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org " from the digest: users-digest-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org