store | blogs | forums | twitter | facebook | wiki | downloads | support portal
Atomic Secure Linux
It is currently Sat Aug 30, 2014 2:21 pm

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 13 posts ] 
Author Message
 Post subject: Apache segmentation fault log information
Unread postPosted: Wed Apr 15, 2009 6:12 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jan 15, 2008 3:57 am
Posts: 478
Location: Netherlands
On one of my server I had segmentation faults like this:

Quote:
OSSEC HIDS Notification.
2009 Apr 15 10:06:32

Received From: plesk2->/var/log/httpd/error_log
Rule: 30104 fired (level 12) -> "Apache segmentation fault."
Portion of the log(s):

[Wed Apr 15 10:06:30 2009] [notice] child pid 22968 exit signal Segmentation fault (11)


Is it possible to give more information in this message like the domain from who is causing the problem?

I found the problem eventually (it was a badly written WordPress Plug-in) but this was a lot of searching. It would be nice if we have more to go on in the error messageā€¦

_________________
best regards,

http://hosting.ber-art.nl
Professional Secure Linux Plesk Hosting


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Wed Apr 15, 2009 6:31 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7890
Location: earth
Not really anything we can do there, thats sort of an error of last resort.


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Wed Apr 15, 2009 6:55 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jan 15, 2008 3:57 am
Posts: 478
Location: Netherlands
:( Ok clear thanks for your quick response!

_________________
best regards,

http://hosting.ber-art.nl
Professional Secure Linux Plesk Hosting


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Wed Apr 15, 2009 9:06 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3626
Location: Chantilly, VA
Here are some tips/tools that can help with tracking down buggy web apps:

You can add some additional info to your apache debug logging if you like,for example this will add the PID to the apache debug file:

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" PID: %P" debuglog

From there, you can set apache to generate coredump files: (be carefuly, these can be huge and eat up your drive space quickly)

CoreDumpDirectory /tmp/cores

And there is also the "whatkilledus" experimental apache module to track down badly written web applications:

http://people.apache.org/~trawick/mod_whatkilledus.c

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Wed Apr 15, 2009 9:15 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jan 15, 2008 3:57 am
Posts: 478
Location: Netherlands
Thx Mike! :)

_________________
best regards,

http://hosting.ber-art.nl
Professional Secure Linux Plesk Hosting


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Wed Apr 15, 2009 9:22 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jan 15, 2008 3:57 am
Posts: 478
Location: Netherlands
Quote:
And there is also the "whatkilledus" experimental apache module to track down badly written web applications:

http://people.apache.org/~trawick/mod_whatkilledus.c
Is this something that is being integrated in ASL in the future?

_________________
best regards,

http://hosting.ber-art.nl
Professional Secure Linux Plesk Hosting


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Wed Apr 15, 2009 1:04 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3626
Location: Chantilly, VA
We've talked about it but aren't sure if its stable enough to include in ASL, if we can get it to work on enough platforms we may add it to the atomic archive. Its one of those things that makes me wonder why its not already mainlined in apache so it gives me pause. :-)

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Wed Apr 15, 2009 1:06 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jan 15, 2008 3:57 am
Posts: 478
Location: Netherlands
Hopefully it will get stable soon then ;)

_________________
best regards,

http://hosting.ber-art.nl
Professional Secure Linux Plesk Hosting


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Fri Apr 16, 2010 2:15 pm 
Offline
Forum User
Forum User

Joined: Thu Feb 26, 2009 6:50 pm
Posts: 40
I'm also seeing lots of "Apache segmentation faults" on two separate boxes at the moment. I'm a bit OCD about this kind of thing (aren't we all? :) ) and would love to see the back of them.

In lieu of installing whatkilledus where is the best place to add the new log directive Mike? In one of the global apache config files (if so which) or in each vhost?


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Fri Apr 16, 2010 6:01 pm 
Offline
Forum Regular
Forum Regular

Joined: Sat Mar 28, 2009 6:58 pm
Posts: 851
Location: Germany
I wouldn't bet but I think it could be the latest eaccelerator and a fcgi bug.
Do you run fcgi on these boxes?


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Sat Apr 17, 2010 5:03 pm 
Offline
Forum User
Forum User

Joined: Thu Feb 26, 2009 6:50 pm
Posts: 40
Ah no although I run eaccelerator I'm not using fcgi, all PHP is processed through mod_php... Do you have any more details on the bug you are talking about though? It might lead in the right direction...


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Sat Apr 17, 2010 6:25 pm 
Offline
Forum Regular
Forum Regular

Joined: Sat Mar 28, 2009 6:58 pm
Posts: 851
Location: Germany
take a look at my post in this thread at the bottom:
https://atomicorp.com/forums/viewtopic.php?f=12&t=3926
correspoding patch that fixes the problem: http://www.eaccelerator.net/ticket/404
if you do a graceful apache restart, does it work?


Top
 Profile  
 
 Post subject: Re: Apache segmentation fault log information
Unread postPosted: Fri Apr 22, 2011 11:54 am 
Offline
Forum Regular
Forum Regular

Joined: Mon Oct 29, 2007 6:51 pm
Posts: 644
mikeshinn wrote:
We've talked about it but aren't sure if its stable enough to include in ASL, if we can get it to work on enough platforms we may add it to the atomic archive. Its one of those things that makes me wonder why its not already mainlined in apache so it gives me pause. :-)


Any word on this?


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 13 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group