when i do in ssh netstat -plan|grep :80|awk {'print $5'}|cut -d: -f 1|sort|uniq -c|sort -nk 1 i see own server ip connetions 50, it varies from 1 to 16 then 50 etc ... how to see whats going behind it ? also it shutdown server when it hit 90 ...
It is best to post the output of `netstat -tunlpa`. You can try to use `lsof` to list the open files your webserver is using or what a specific port is doing (by using -p and -i switches respectively) and `tailf`-ing the log files will certainly show you what exactly is happening. Also, it would be nice to provide more information about your setup so we will not blindly 'shoot in the dark' cheers