Feb 13 17:48:39 server kernel: httpd[2815]: segfault at 0000007fbf5ffff8 rip 0000002a95cf33b6 rsp 0000007fbf5fff70 error 6 Feb 13 17:48:41 server kernel: httpd[3596]: segfault at 0000007fbf5ffff8 rip 0000002a95cf33b6 rsp 0000007fbf5fff70 error 6 Feb 13 17:48:43 server kernel: httpd[3600]: segfault at 0000007fbf5ffff8 rip 0000002a95cf33b6 rsp 0000007fbf5fff70 error 6 Feb 13 17:48:49 server kernel: httpd[3627]: segfault at 0000007fbf5ffff8 rip 0000002a95cf33b6 rsp 0000007fbf5fff70 error 6 Feb 13 17:48:56 server kernel: httpd[1749]: segfault at 0000007fbf5ffff8 rip 0000002a95cf33b6 rsp 0000007fbf5fff70 error 6 Feb 13 17:49:01 server kernel: httpd[3650]: segfault at 0000007fbf5ffff8 rip 0000002a95cf33b6 rsp 0000007fbf5fff70 error 6 Feb 13 17:49:07 server kernel: httpd[3651]: segfault at 0000007fbf5ffff8 rip 0000002a95cf33b6 rsp 0000007fbf5fff70 error 6 Feb 13 17:49:14 server kernel: httpd[3647]: segfault at 0000007fbf5ffff8 rip 0000002a95cf33b6 rsp 0000007fbf5fff70 error 6 Feb 13 17:56:55 server pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1 Feb 13 17:56:55 server pure-ftpd: (?@127.0.0.1) [INFO] Logout. Feb 13 18:00:14 server sshd(pam_unix)[4123]: session opened for user root by (uid=0) Code (markup): i get lots of this recently. PS. what do i do with this ? CSF is blocking my server ? w/c is always gets my server offline. Feb 11 15:14:18 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1d:92:45:c6:52:08:00 SRC=66.197.14x.xxx DST=255.255.255.255 $ Code (markup):
a bunch of httpd[30660]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5f ff50 error 6 httpd[31152]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5f ff50 error 6 httpd[31012]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5f ff50 error 6 httpd[1397]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1392]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1394]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[668]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5fff 50 error 6 httpd[1433]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1446]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1448]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1447]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1477]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1531]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1559]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1602]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1601]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1654]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1628]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[1655]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[2074]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[2271]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5ff f50 error 6 httpd[2420]: segfault at 0000007fbf5fffc8 rip 0000002a95df93a7 rsp 0000007fbf5ff f30 error 6 httpd[13366]: segfault at 0000007fbf5fffc8 rip 0000002a95df93a7 rsp 0000007fbf5f ff30 error 6 httpd[8201]: segfault at 0000007fbf5fffc8 rip 0000002a95df93a7 rsp 0000007fbf5ff f30 error 6 httpd[14267]: segfault at 0000007fbf5fffc8 rip 0000002a95df93a7 rsp 0000007fbf5f ff30 error 6 httpd[14204]: segfault at 0000007fbf5fffc8 rip 0000002a95df93a7 rsp 0000007fbf5f ff30 error 6 httpd[23045]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5f ff50 error 6 httpd[21564]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5f ff50 error 6 httpd[23243]: segfault at 0000007fbf5fffe8 rip 0000002a95df93a7 rsp 0000007fbf5f ff50 error 6 Code (markup): i have no idea what is that...
I dont think CSF is related. How about the Apache logs file size? If they are bigger than 2GB, you might face to this error
how do you see the apache log file size ? The everyday server crash/goes-offline is really pissing me off. last page of dmesg 42 ID=58220 DF PROTO=TCP SPT=43664 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=221.189.181.173 DST=66.197.149.147 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=13015 DF PROTO=TCP SPT=43665 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=221.189.181.173 DST=66.197.149.147 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=39303 DF PROTO=TCP SPT=43668 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=210.16.40.5 DST=66.197.149.147 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=9030 DF PROTO=TCP SPT=32791 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=221.189.181.173 DST=66.197.149.147 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=28424 DF PROTO=TCP SPT=44290 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=221.189.181.173 DST=66.197.149.147 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=26446 DF PROTO=TCP SPT=44292 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=221.189.181.173 DST=66.197.149.147 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=21404 DF PROTO=TCP SPT=44301 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=221.189.181.173 DST=66.197.149.147 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=7888 DF PROTO=TCP SPT=44303 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=221.189.181.173 DST=66.197.149.147 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=38710 DF PROTO=TCP SPT=44306 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=221.189.181.173 DST=66.197.149.147 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=21405 DF PROTO=TCP SPT=44301 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=201.212.90.156 DST=66.197.149.147 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=57718 DF PROTO=TCP SPT=1484 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=221.189.181.173 DST=66.197.149.147 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=65320 DF PROTO=TCP SPT=44895 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=221.189.181.173 DST=66.197.149.147 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=35515 DF PROTO=TCP SPT=44896 DPT=80 WINDOW=5656 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=201.212.90.156 DST=66.197.149.147 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=58966 DF PROTO=TCP SPT=1761 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=222.84.225.189 DST=66.197.149.147 LEN=40 TOS=0x00 PREC=0x00 TTL=117 ID=256 DF PROTO=TCP SPT=12200 DPT=1080 WINDOW=8192 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=201.212.90.156 DST=66.197.149.147 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=61272 DF PROTO=TCP SPT=2271 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=75.166.170.17 DST=66.197.149.147 LEN=52 TOS=0x00 PREC=0x00 TTL=119 ID=32667 DF PROTO=TCP SPT=50493 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:50:8b:02:46:76:00:30:19:a5:d7:80:08:00 SRC=75.166.170.17 DST=66.197.149.147 LEN=52 TOS=0x00 PREC=0x00 TTL=119 ID=32668 DF PROTO=TCP SPT=50494 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 Firewall: *TCP_OUT Blocked* IN= OUT=eth0 SRC=66.197.149.147 DST=67.72.118.139 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=15668 DF PROTO=TCP SPT=44967 DPT=2006 WINDOW=5840 RES=0x00 SYN URGP=0 Firewall: *TCP_OUT Blocked* IN= OUT=eth0 SRC=66.197.149.147 DST=67.72.118.139 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=15670 DF PROTO=TCP SPT=44967 DPT=2006 WINDOW=5840 RES=0x00 SYN URGP=0 Firewall: *TCP_OUT Blocked* IN= OUT=eth0 SRC=66.197.149.147 DST=67.72.118.139 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=15672 DF PROTO=TCP SPT=44967 DPT=2006 WINDOW=5840 RES=0x00 SYN URGP=0 Firewall: *TCP_OUT Blocked* IN= OUT=eth0 SRC=66.197.149.147 DST=67.72.118.139 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=15674 DF PROTO=TCP SPT=44967 DPT=2006 WINDOW=5840 RES=0x00 SYN URGP=0 httpd[23136]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[30463]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[23600]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[30461]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[15921]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[30638]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[30706]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[23275]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[30462]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[30715]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[30717]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[30716]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[23380]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[23132]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[30742]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 httpd[30788]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Code (markup): last page of pico /var/log/messages Feb 20 21:53:18 server pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1 Feb 20 21:53:18 server pure-ftpd: (?@127.0.0.1) [INFO] Logout. Feb 20 22:02:18 server pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1 Feb 20 22:02:18 server pure-ftpd: (?@127.0.0.1) [INFO] Logout. Feb 20 22:11:18 server pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1 Feb 20 22:11:18 server pure-ftpd: (?@127.0.0.1) [INFO] Logout. Feb 20 22:19:41 server pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1 Feb 20 22:19:41 server pure-ftpd: (?@127.0.0.1) [INFO] Logout. Feb 20 22:25:20 server kernel: httpd[23136]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:25:21 server kernel: httpd[30463]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:25:22 server kernel: httpd[23600]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:25:48 server kernel: httpd[30461]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:25:48 server kernel: httpd[15921]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:25:49 server kernel: httpd[30638]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:25:58 server kernel: httpd[30706]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:26:04 server kernel: httpd[23275]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:26:05 server kernel: httpd[30462]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:26:06 server kernel: httpd[30715]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:26:12 server sshd(pam_unix)[30743]: session opened for user root by (uid=0) Feb 20 22:26:17 server kernel: httpd[30717]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:26:18 server kernel: httpd[30716]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:26:19 server kernel: httpd[23380]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:26:32 server kernel: httpd[23132]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:26:32 server kernel: httpd[30742]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:26:34 server kernel: httpd[30788]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:27:27 server kernel: httpd[30790]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:27:46 server kernel: httpd[30825]: segfault at 0000007fbf3fffc8 rip 0000002a95df93a7 rsp 0000007fbf3fff30 error 6 Feb 20 22:28:03 server pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1 Feb 20 22:28:03 server pure-ftpd: (?@127.0.0.1) [INFO] Logout. Feb 20 22:29:07 server filelimits: Increasing file system limits succeeded Code (markup): my server info Processor Information Processor #1 Vendor: GenuineIntel Processor #1 Name: Intel(R) Celeron(R) CPU 420 @ 1.60GHz Processor #1 speed: 1608.796 MHz Processor #1 cache size: 512 KB Memory Information Memory: 4031432k/4980736k available (2450k kernel code, 152556k reserved, 1339k data, 180k init) System Information Linux server.xxxxxxxx.com 2.6.9-67.0.4.EL #1 Sun Feb 3 06:50:13 EST 2008 x86_64 x86_64 x86_64 GNU/Linux Physical Disks SCSI device sda: 234441648 512-byte hdwr sectors (120034 MB) SCSI device sda: drive cache: write back SCSI device sda: 234441648 512-byte hdwr sectors (120034 MB) SCSI device sda: drive cache: write back Current Memory Usage total used free shared buffers cached Mem: 4032004 3004324 1027680 0 78932 1573500 -/+ buffers/cache: 1351892 2680112 Swap: 2096472 0 2096472 Total: 6128476 3004324 3124152 Code (markup): i'm really desperate to know how to fix this... crashing every day...
It seems you are on cPanel server. I am not sure where the apache log, cause I don't use cPanel for a while, but you can check in /var/log/httpd Also, it seems your server is under synflood. Your CPU is not very strong, so, if the firewall on server could not help, you can ask your vendor if they have hardware firewall, or upgrade to better server.