|
Anzeige:
|
|
30.03.2008, 22:50
|
|
Registered User
|
|
Registriert seit: 05.2007
Beiträge: 18
|
|
Kann mir mahl jemand weiter helfen
|
|
habe gerade einen Server zusammenbruch gehabt und dies hier in dem error log gefunden
Code:
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:35:34 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec2)
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
[Sun Mar 30 22:35:35 2008] [notice] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Sun Mar 30 22:35:35 2008] [notice] mod_python: using mutex_directory /tmp
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:35:36 2008] [notice] mod_bw : Memory Allocated 112 bytes (each conf takes 28 bytes)
[Sun Mar 30 22:35:36 2008] [notice] mod_bw : Version 0.8 - Initialized [4 Confs]
[Sun Mar 30 22:35:36 2008] [notice] Apache/2.2.3 (Linux/SUSE) configured -- resuming normal operations
kannmir einer mal sagen was da los war
|
30.03.2008, 23:17
|
 |
SSF Stammtisch
|
|
Registriert seit: 02.2006
Ort: Nordholz
Beiträge: 1.870
|
|
Moin,
das angegebene Logfile gibt keine Auskunft ueber ein Problem.
Was heisst bei dir "Server zusammenbruch"?
|
30.03.2008, 23:26
|
|
Registered User
|
|
Registriert seit: 05.2007
Beiträge: 18
|
|
Gans einfach der Server war nicht mehr erreichbar über root und auch nicht über http
bis ich einen reboot gemacht habe bein´m hoch fahren habe ich aber nicht außergewöhnliches festgestellt
welches log benötigt ihr denn
auserdem verabschidet sich jetzt am laufenden band der spamm asistent und Tomcat , Dr.Web antivirus , Plesk Web Server
die fallen einfach aus wenn ich sie neu starte
Geändert von ktr453 (30.03.2008 um 23:28 Uhr)
|
30.03.2008, 23:49
|
 |
chris on Rails
|
|
Registriert seit: 12.2005
Ort: Stuttgart
Alter: 24
Beiträge: 689
|
|
Poste mal /var/log/messages des besagten Zeitraums.
Überprüfe /var/log/apache2/error.log sind dort aussergewöhnlich viele Zeilen.
Passt dein Trafficverbrauch beim Provider ?
/tmp/ sind dort wirklich nur tmp files oder auch Warez, Filme ?
Arbeite bitte an deiner Rechtschreibung, mir tut das beim Lesen weh 
|
31.03.2008, 00:01
|
|
Registered User
|
|
Registriert seit: 05.2007
Beiträge: 18
|
|
hier bitte der 1 log ja und /tmp/ befinden sich keine arez, Filme
Code:
Mar 30 22:35:10 h1319289 ntpdate[3370]: step time server 81.169.163.105 offset 2504231.307888 sec
Mar 30 22:35:10 h1319289 syslog-ng[3317]: STATS: dropped 0
Mar 30 22:35:11 h1319289 ntpd[3445]: ntpd 4.2.2p4@1.1585-o Sat Nov 25 18:44:34 UTC 2006 (1)
Mar 30 22:35:11 h1319289 ntpd[3446]: precision = 2.000 usec
Mar 30 22:35:11 h1319289 ntpd[3446]: ntp_io: estimated max descriptors: 1024, initial socket boundary: 16
Mar 30 22:35:11 h1319289 ntpd[3446]: Listening on interface wildcard, 0.0.0.0#123 Disabled
Mar 30 22:35:11 h1319289 ntpd[3446]: Listening on interface lo, 127.0.0.1#123 Enabled
Mar 30 22:35:11 h1319289 ntpd[3446]: Listening on interface eth0, 85.214.94.196#123 Enabled
Mar 30 22:35:11 h1319289 ntpd[3446]: Listening on interface eth0:1, 85.214.25.197#123 Enabled
Mar 30 22:35:11 h1319289 ntpd[3446]: kernel time sync status 0040
Mar 30 22:35:11 h1319289 ntpd[3446]: frequency initialized 7.575 PPM from /var/lib/ntp/drift/ntp.drift
Mar 30 22:35:12 h1319289 qmail: 1206909312.309397 status: local 0/10 remote 0/20
Mar 30 22:35:12 h1319289 qmail: 1206909312.316484 starting delivery 1: msg 2771409 to remote tanja_schmitt@kabelmail.de
Mar 30 22:35:12 h1319289 qmail: 1206909312.316558 status: local 0/10 remote 1/20
Mar 30 22:35:12 h1319289 qmail: 1206909312.333436 starting delivery 2: msg 2771466 to remote knudd@knudd4you.de
Mar 30 22:35:12 h1319289 qmail: 1206909312.333490 status: local 0/10 remote 2/20
Mar 30 22:35:12 h1319289 qmail: 1206909312.344281 starting delivery 3: msg 2771467 to remote tanja_schmitt@kabelmail.de
Mar 30 22:35:12 h1319289 qmail: 1206909312.344333 status: local 0/10 remote 3/20
Mar 30 22:35:12 h1319289 /usr/sbin/cron[3524]: (CRON) STARTUP (V5.0)
Mar 30 22:35:12 h1319289 qmail-remote-handlers[3507]: Handlers Filter before-remote for qmail started ...
Mar 30 22:35:12 h1319289 qmail-remote-handlers[3525]: Handlers Filter before-remote for qmail started ...
Mar 30 22:35:12 h1319289 qmail-remote-handlers[3527]: Handlers Filter before-remote for qmail started ...
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3525]: from=root@arcade-fun-board.de
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3525]: to=knudd@knudd4you.de
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3507]: from=root@arcade-fun-board.de
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3507]: to=tanja_schmitt@kabelmail.de
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3527]: from=root@arcade-fun-board.de
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3527]: to=tanja_schmitt@kabelmail.de
Mar 30 22:35:13 h1319289 kernel: klogd 1.4.1, log source = /proc/kmsg started.
Mar 30 22:35:13 h1319289 kernel: ACPI: Power Button (FF) [PWRF]
Mar 30 22:35:13 h1319289 kernel: ACPI: Power Button (CM) [PWRB]
Mar 30 22:35:13 h1319289 syslog-ng[3317]: Changing permissions on special file /dev/xconsole
Mar 30 22:35:13 h1319289 syslog-ng[3317]: Changing permissions on special file /dev/tty10
Mar 30 22:35:13 h1319289 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team
Mar 30 22:35:13 h1319289 kernel: powernow-k8: Found 2 Dual-Core AMD Opteron(tm) Processor 1212 HE processors (version 2.00.00)
Mar 30 22:35:13 h1319289 kernel: powernow-k8: 0 : fid 0xc (2000 MHz), vid 0xc
Mar 30 22:35:13 h1319289 kernel: powernow-k8: 1 : fid 0xa (1800 MHz), vid 0xe
Mar 30 22:35:13 h1319289 kernel: powernow-k8: 2 : fid 0x2 (1000 MHz), vid 0x12
Mar 30 22:35:13 h1319289 kernel: Netfilter messages via NETLINK v0.30.
Mar 30 22:35:13 h1319289 kernel: ip_conntrack version 2.4 (8192 buckets, 65536 max) - 228 bytes per conntrack
Mar 30 22:35:13 h1319289 kernel: e1000: eth0: e1000_watchdog: NIC Link is Up 100 Mbps Full Duplex
Mar 30 22:35:13 h1319289 kernel: NET: Registered protocol family 17
Mar 30 22:35:15 h1319289 named[3563]: starting BIND 9.3.2 -t /var/lib/named -u named
Mar 30 22:35:15 h1319289 named[3563]: found 1 CPU, using 1 worker thread
Mar 30 22:35:15 h1319289 named[3563]: loading configuration from '/etc/named.conf'
Mar 30 22:35:15 h1319289 named[3563]: no IPv6 interfaces found
Mar 30 22:35:15 h1319289 named[3563]: listening on IPv4 interface lo, 127.0.0.1#53
Mar 30 22:35:15 h1319289 named[3563]: listening on IPv4 interface eth0, 85.214.94.196#53
Mar 30 22:35:15 h1319289 named[3563]: listening on IPv4 interface eth0:1, 85.214.25.197#53
Mar 30 22:35:15 h1319289 named[3563]: command channel listening on 127.0.0.1#953
Mar 30 22:35:15 h1319289 named[3563]: zone 0.0.127.in-addr.arpa/IN: loaded serial 42
Mar 30 22:35:15 h1319289 named[3563]: zone 25.214.85.in-addr.arpa/IN: loaded serial 1206697836
Mar 30 22:35:15 h1319289 named[3563]: zone 94.214.85.in-addr.arpa/IN: loaded serial 1206109966
Mar 30 22:35:15 h1319289 named[3563]: zone arcade-fun-board.com/IN: loaded serial 1203804226
Mar 30 22:35:15 h1319289 named[3563]: zone arcade-fun-board.de/IN: loaded serial 1203808642
Mar 30 22:35:15 h1319289 named[3563]: zone eol-schlesien-acktuel.de/IN: loaded serial 1206697836
Mar 30 22:35:15 h1319289 named[3563]: zone fucks-hosting.de/IN: loaded serial 1205572828
Mar 30 22:35:15 h1319289 named[3563]: zone ibparcade.de/IN: loaded serial 1203804244
Mar 30 22:35:15 h1319289 named[3563]: zone zeiberteck.de/IN: loaded serial 1206110944
Mar 30 22:35:15 h1319289 named[3563]: zone localhost/IN: loaded serial 42
Mar 30 22:35:15 h1319289 named[3563]: running
Mar 30 22:35:17 h1319289 su: (to postgres) root on none
Mar 30 22:35:22 h1319289 qmail: 1206909322.566916 delivery 2: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
Mar 30 22:35:22 h1319289 qmail: 1206909322.566967 status: local 0/10 remote 2/20
Mar 30 22:35:26 h1319289 spamd[3703]: logger: removing stderr method
Mar 30 22:35:27 h1319289 spamd[3704]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK'
Mar 30 22:35:27 h1319289 spamd[3704]: spamd: server started on UNIX domain socket /tmp/spamd_full.sock (running version 3.1.8)
Mar 30 22:35:27 h1319289 spamd[3704]: spamd: server pid: 3704
Mar 30 22:35:27 h1319289 spamd[3704]: spamd: server successfully spawned child process, pid 3705
Mar 30 22:35:27 h1319289 spamd[3704]: spamd: server successfully spawned child process, pid 3706
Mar 30 22:35:27 h1319289 spamd[3704]: prefork: child states: II
Mar 30 22:35:28 h1319289 sshd[3676]: Accepted keyboard-interactive/pam for root from 217.235.81.66 port 55592 ssh2
Mar 30 22:35:41 h1319289 qmail: 1206909341.617191 delivery 1: deferral: 194.25.41.11_does_not_like_recipient./Remote_host_said:_450_4.7.1_<tanja_schmitt@kabelmail.de>..._Access_denied._IP_name_possibly_forged_[85.214.94.196]/Giving_up_on_194.25.41.11./
Mar 30 22:35:41 h1319289 qmail: 1206909341.617671 status: local 0/10 remote 1/20
Mar 30 22:35:41 h1319289 qmail: 1206909341.617852 delivery 3: deferral: 194.25.41.11_does_not_like_recipient./Remote_host_said:_450_4.7.1_<tanja_schmitt@kabelmail.de>..._Access_denied._IP_name_possibly_forged_[85.214.94.196]/Giving_up_on_194.25.41.11./
Mar 30 22:35:41 h1319289 qmail: 1206909341.618016 status: local 0/10 remote 0/20
Mar 30 22:35:42 h1319289 pop3d-ssl: Connection, ip=[127.0.0.1]
Mar 30 22:35:42 h1319289 pop3d-ssl: LOGOUT, ip=[127.0.0.1]
Mar 30 22:35:42 h1319289 pop3d: Connection, ip=[127.0.0.1]
Mar 30 22:35:42 h1319289 pop3d: LOGOUT, ip=[127.0.0.1]
Mar 30 22:35:43 h1319289 imapd-ssl: Connection, ip=[127.0.0.1]
Mar 30 22:35:43 h1319289 imapd-ssl: 1206909343.148115 LOGOUT, ip=[127.0.0.1], rcvd=12, sent=310, maildir=/
Mar 30 22:35:43 h1319289 imapd: Connection, ip=[127.0.0.1]
Mar 30 22:35:43 h1319289 imapd: 1206909343.150853 LOGOUT, ip=[127.0.0.1], rcvd=12, sent=308, maildir=/
Mar 30 22:35:43 h1319289 wdcollect[3840]: Language en-US is used for sending e-mail messages.
Mar 30 22:35:43 h1319289 wdcollect[3840]: Database server connection has been established.
Mar 30 22:35:43 h1319289 wdcollect[3840]: Server started.
Mar 30 22:35:45 h1319289 spamd[3705]: spamd: got connection over /tmp/spamd_full.sock
Mar 30 22:35:45 h1319289 spamd[3704]: prefork: child states: II
Mar 30 22:35:46 h1319289 wdcollect[3840]: Connection to server has been established.
Mar 30 22:35:46 h1319289 su: (to tomcat) root on none
Mar 30 22:35:46 h1319289 relaylock: /var/qmail/bin/relaylock: mail from 127.0.0.1:42075 (localhost)
Mar 30 22:35:47 h1319289 qmail-queue[3972]: mail: all addreses are uncheckable - need to skip scanning (by deny mode)
Mar 30 22:35:47 h1319289 qmail-queue[3972]: scan: the message(drweb.tmp.mRLRjk) sent by watchdog@h1319289.stratoserver.net to ronny.martens@web.de should be passed without checks, because contains uncheckable addresses
Mar 30 22:35:47 h1319289 qmail-queue-handlers[3978]: Handlers Filter before-queue for qmail started ...
Mar 30 22:35:48 h1319289 qmail-queue-handlers[3978]: from=watchdog@h1319289.stratoserver.net
Mar 30 22:35:48 h1319289 qmail-queue-handlers[3978]: to=ronny.martens@web.de
Mar 30 22:35:48 h1319289 qmail-queue-handlers[3978]: hook_dir = '/var/qmail//handlers/before-queue'
Mar 30 22:35:48 h1319289 qmail-queue-handlers[3978]: recipient[3] = 'ronny.martens@web.de'
Mar 30 22:35:48 h1319289 qmail-queue-handlers[3978]: handlers dir = '/var/qmail//handlers/before-queue/recipient/ronny.martens@web.de'
Mar 30 22:35:49 h1319289 qmail-queue-handlers[3978]: starter: submitter[4011] exited normally
Mar 30 22:35:49 h1319289 qmail: 1206909349.319705 new msg 2770354
Mar 30 22:35:49 h1319289 qmail: 1206909349.320089 info msg 2770354: bytes 579 from <watchdog@h1319289.stratoserver.net> qp 4011 uid 2020
Mar 30 22:35:49 h1319289 qmail-queue[4023]: mail: all addreses are uncheckable - need to skip scanning (by deny mode)
Mar 30 22:35:49 h1319289 qmail-queue[4023]: scan: the message(drweb.tmp.lYbYvf) sent by watchdog@h1319289.stratoserver.net to ronny.martens@web.de should be passed without checks, because contains uncheckable addresses
Mar 30 22:35:49 h1319289 qmail-queue-handlers[4024]: Handlers Filter before-queue for qmail started ...
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: from=watchdog@h1319289.stratoserver.net
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: to=ronny.martens@web.de
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: hook_dir = '/var/qmail//handlers/before-queue'
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: recipient[3] = 'ronny.martens@web.de'
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: handlers dir = '/var/qmail//handlers/before-queue/recipient/ronny.martens@web.de'
Mar 30 22:35:50 h1319289 qmail-remote-handlers[4035]: Handlers Filter before-remote for qmail started ...
Mar 30 22:35:50 h1319289 qmail: 1206909350.336280 starting delivery 4: msg 2770354 to remote ronny.martens@web.de
Mar 30 22:35:50 h1319289 qmail: 1206909350.339192 status: local 0/10 remote 1/20
Mar 30 22:35:50 h1319289 qmail-remote-handlers[4035]: from=watchdog@h1319289.stratoserver.net
Mar 30 22:35:50 h1319289 qmail-remote-handlers[4035]: to=ronny.martens@web.de
Mar 30 22:35:50 h1319289 qmail: 1206909350.838918 new msg 2770731
Mar 30 22:35:50 h1319289 qmail: 1206909350.839223 info msg 2770731: bytes 601 from <watchdog@h1319289.stratoserver.net> qp 4032 uid 2020
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: starter: submitter[4032] exited normally
Mar 30 22:35:51 h1319289 qmail: 1206909351.283834 delivery 4: success: 217.72.192.149_accepted_message./Remote_host_said:_250_OK_id=1Jg4Fq-0008J3-00/
Mar 30 22:35:51 h1319289 qmail: 1206909351.284173 status: local 0/10 remote 0/20
Mar 30 22:35:51 h1319289 qmail: 1206909351.284341 starting delivery 5: msg 2770731 to remote ronny.martens@web.de
Mar 30 22:35:51 h1319289 qmail: 1206909351.284499 status: local 0/10 remote 1/20
Mar 30 22:35:51 h1319289 qmail: 1206909351.319980 end msg 2770354
Mar 30 22:35:51 h1319289 qmail-remote-handlers[4041]: Handlers Filter before-remote for qmail started ...
Mar 30 22:35:51 h1319289 qmail-remote-handlers[4041]: from=watchdog@h1319289.stratoserver.net
Mar 30 22:35:51 h1319289 qmail-remote-handlers[4041]: to=ronny.martens@web.de
Mar 30 22:35:51 h1319289 qmail: 1206909351.804181 delivery 5: success: 217.72.192.149_accepted_message./Remote_host_said:_250_OK_id=1Jg4Fr-0000lM-00/
Mar 30 22:35:51 h1319289 qmail: 1206909351.804386 status: local 0/10 remote 0/20
Mar 30 22:35:51 h1319289 qmail: 1206909351.804552 end msg 2770731
Mar 30 22:36:52 h1319289 wdcollect[3840]: Connection to SMTP server has been closed.
Mar 30 22:40:01 h1319289 /usr/sbin/cron[4279]: (mailman) CMD (/usr/bin/python -S /usr/lib/mailman/cron/gate_news)
Mar 30 22:40:45 h1319289 pop3d-ssl: Connection, ip=[127.0.0.1]
Mar 30 22:40:45 h1319289 pop3d-ssl: LOGOUT, ip=[127.0.0.1]
Mar 30 22:40:45 h1319289 pop3d: Connection, ip=[127.0.0.1]
Mar 30 22:40:45 h1319289 pop3d: LOGOUT, ip=[127.0.0.1]
|
31.03.2008, 00:02
|
|
Registered User
|
|
Registriert seit: 05.2007
Beiträge: 18
|
|
und der apache2/error.log
Code:
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:35:34 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec2)
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
[Sun Mar 30 22:35:35 2008] [notice] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Sun Mar 30 22:35:35 2008] [notice] mod_python: using mutex_directory /tmp
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:35:36 2008] [notice] mod_bw : Memory Allocated 112 bytes (each conf takes 28 bytes)
[Sun Mar 30 22:35:36 2008] [notice] mod_bw : Version 0.8 - Initialized [4 Confs]
[Sun Mar 30 22:35:36 2008] [notice] Apache/2.2.3 (Linux/SUSE) configured -- resuming normal operations
[Sun Mar 30 22:55:59 2008] [notice] caught SIGTERM, shutting down
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:57:44 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec2)
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
[Sun Mar 30 22:57:45 2008] [notice] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Sun Mar 30 22:57:45 2008] [notice] mod_python: using mutex_directory /tmp
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:57:45 2008] [notice] mod_bw : Memory Allocated 112 bytes (each conf takes 28 bytes)
[Sun Mar 30 22:57:45 2008] [notice] mod_bw : Version 0.8 - Initialized [4 Confs]
[Sun Mar 30 22:57:45 2008] [notice] Apache/2.2.3 (Linux/SUSE) configured -- resuming normal operations
[Sun Mar 30 23:43:11 2008] [error] [client 87.118.64.133] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
[Sun Mar 30 23:43:46 2008] [error] [client 87.118.64.133] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
wegen meiner Rechtschreibung werde ich auf passen mann hat mich aber aus dem bett geholt und ich sitze hier mit Riesen Zahnschmerzen .
bitte daher um Entschuldigung
|
31.03.2008, 00:09
|
|
chris on Rails
|
|
Registriert seit: 12.2005
Ort: Stuttgart
Alter: 24
Beiträge: 689
|
|
Hmm kann nichts erkennen, von wann sind die Logs jetzt ?
und was ist in der Zeit passiert ?
|
31.03.2008, 00:15
|
|
Registered User
|
|
Registriert seit: 05.2007
Beiträge: 18
|
|
ja sind von jetzt
hat sich aber nichts Geändert
verstehe das nur nicht das die deinste dauernd abstürzen.
das habe ich das erste mal und habe den Server schon seit zwei Jahren der andere Server ist ok.
SMTP(Qmail ) ist immer noch nicht aktiv zu bekommen die anderen habe ich hin bekommen die laufen jetzt
|
31.03.2008, 00:19
|
|
Registered User
|
|
Registriert seit: 05.2007
Beiträge: 18
|
|
Schon wieder alles down
der top
log
Code:
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
9567 wwwrun 16 0 70800 15m 4524 S 6 0.8 0:00.91 httpd2-prefork
3561 mysql 18 0 123m 33m 5008 S 3 1.7 3:31.64 mysqld
9400 wwwrun 18 0 107m 53m 4396 D 3 2.7 0:10.85 httpd2-prefork
9439 wwwrun 18 0 107m 53m 4384 D 3 2.7 0:05.64 httpd2-prefork
9520 wwwrun 18 0 106m 53m 4348 D 3 2.7 0:08.46 httpd2-prefork
9440 wwwrun 18 0 107m 53m 4396 D 2 2.7 0:07.00 httpd2-prefork
9455 wwwrun 18 0 106m 53m 4336 D 2 2.7 0:05.66 httpd2-prefork
9458 wwwrun 18 0 106m 53m 4344 D 2 2.7 0:08.79 httpd2-prefork
9441 wwwrun 18 0 107m 53m 4388 D 2 2.7 0:06.95 httpd2-prefork
9517 wwwrun 18 0 106m 53m 4168 D 2 2.6 0:04.76 httpd2-prefork
9558 wwwrun 18 0 106m 53m 4128 D 2 2.6 0:05.25 httpd2-prefork
9014 wwwrun 18 0 107m 54m 4432 D 1 2.7 0:16.50 httpd2-prefork
9413 wwwrun 18 0 107m 53m 4380 D 1 2.7 0:06.88 httpd2-prefork
9500 wwwrun 18 0 106m 53m 4328 D 1 2.7 0:05.26 httpd2-prefork
9525 wwwrun 18 0 106m 53m 4344 D 1 2.7 0:06.02 httpd2-prefork
9559 wwwrun 18 0 106m 53m 4128 D 1 2.6 0:04.97 httpd2-prefork
967 root 10 -5 0 0 0 D 1 0.0 0:15.81 kjournald
5085 wwwrun 18 0 107m 54m 4468 D 1 2.7 1:33.98 httpd2-prefork
25242 wwwrun 18 0 107m 54m 4452 D 1 2.7 0:32.33 httpd2-prefork
8721 wwwrun 18 0 106m 53m 4344 D 1 2.7 1:00.23 httpd2-prefork
9560 wwwrun 18 0 106m 53m 4128 D 1 2.6 0:04.78 httpd2-prefork
5037 wwwrun 18 0 109m 55m 5556 D 1 2.8 1:24.83 httpd2-prefork
6307 wwwrun 18 0 106m 53m 4316 D 1 2.7 1:53.42 httpd2-prefork
173 root 15 0 0 0 0 S 0 0.0 0:08.68 pdflush
175 root 10 -5 0 0 0 S 0 0.0 0:07.97 kswapd0
954 root 11 -5 0 0 0 S 0 0.0 0:10.94 md1_raid1
4979 root 26 10 13836 9996 1112 S 0 0.5 1:47.32 PleskX.pl
9201 wwwrun 15 0 69404 14m 4396 D 0 0.7 0:07.06 httpd2-prefork
9488 wwwrun 15 0 71920 16m 4400 S 0 0.8 0:04.87 httpd2-prefork
9495 wwwrun 16 0 71628 16m 4364 S 0 0.8 0:02.75 httpd2-prefork
9502 wwwrun 15 0 69580 14m 4368 D 0 0.7 0:00.74 httpd2-prefork
9570 wwwrun 15 0 67152 12m 4288 D 0 0.6 0:00.23 httpd2-prefork
1 root 15 0 744 292 244 S 0 0.0 0:01.51 init
2 root RT 0 0 0 0 S 0 0.0 0:00.02 migration/0
3 root 34 19 0 0 0 S 0 0.0 0:00.00 ksoftirqd/0
4 root RT 0 0 0 0 S 0 0.0 0:00.08 migration/1
5 root 34 19 0 0 0 S 0 0.0 0:00.00 ksoftirqd/1
6 root 10 -5 0 0 0 S 0 0.0 0:00.00 events/0
7 root 10 -5 0 0 0 S 0 0.0 0:00.00 events/1
8 root 10 -5 0 0 0 S 0 0.0 0:00.00 khelper
9 root 10 -5 0 0 0 S 0 0.0 0:00.00 kthread
13 root 13 -5 0 0 0 S 0 0.0 0:00.01 kblockd/0
14 root 10 -5 0 0 0 S 0 0.0 0:00.08 kblockd/1
15 root 15 -5 0 0 0 S 0 0.0 0:00.00 kacpid
16 root 15 -5 0 0 0 S 0 0.0 0:00.00 kacpi_notify
125 root 12 -5 0 0 0 S 0 0.0 0:00.00 cqueue/0
126 root 13 -5 0 0 0 S 0 0.0 0:00.00 cqueue/1
127 root 11 -5 0 0 0 S 0 0.0 0:00.00 kseriod
174 root 15 0 0 0 0 S 0 0.0 0:06.56 pdflush
176 root 11 -5 0 0 0 S 0 0.0 0:00.00 aio/0
177 root 11 -5 0 0 0 S 0 0.0 0:00.00 aio/1
422 root 20 -5 0 0 0 S 0 0.0 0:00.00 kpsmoused
790 root 10 -5 0 0 0 S 0 0.0 0:00.00 ata/0
791 root 20 -5 0 0 0 S 0 0.0 0:00.00 ata/1
792 root 20 -5 0 0 0 S 0 0.0 0:00.00 ata_aux
und die Print ausgabe
Code:
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
9558 wwwrun 18 0 106m 53m 4128 D 5 2.6 0:06.10 httpd2-prefork
9400 wwwrun 18 0 107m 53m 4396 D 4 2.7 0:11.58 httpd2-prefork
9440 wwwrun 18 0 107m 53m 4396 D 4 2.7 0:07.74 httpd2-prefork
9441 wwwrun 18 0 107m 53m 4388 D 4 2.7 0:07.89 httpd2-prefork
9455 wwwrun 18 0 106m 53m 4336 D 4 2.7 0:06.56 httpd2-prefork
9458 wwwrun 18 0 106m 53m 4344 D 4 2.7 0:09.67 httpd2-prefork
9525 wwwrun 18 0 106m 53m 4344 D 4 2.7 0:06.86 httpd2-prefork
9560 wwwrun 18 0 106m 53m 4128 D 4 2.6 0:05.49 httpd2-prefork
4979 root 26 10 13836 9996 1112 S 2 0.5 1:47.51 PleskX.pl
5037 wwwrun 18 0 109m 55m 5556 R 2 2.8 1:25.57 httpd2-prefork
5085 wwwrun 18 0 107m 54m 4468 D 2 2.7 1:34.66 httpd2-prefork
8721 wwwrun 18 0 106m 53m 4344 D 2 2.7 1:00.94 httpd2-prefork
9014 wwwrun 18 0 107m 54m 4432 D 2 2.7 0:17.38 httpd2-prefork
9413 wwwrun 18 0 107m 53m 4380 D 2 2.7 0:07.66 httpd2-prefork
9500 wwwrun 18 0 106m 53m 4328 D 2 2.7 0:06.09 httpd2-prefork
9517 wwwrun 18 0 106m 53m 4168 D 2 2.6 0:05.60 httpd2-prefork
9520 wwwrun 18 0 106m 53m 4348 D 2 2.7 0:09.29 httpd2-prefork
9605 wwwrun 16 0 71772 16m 4360 S 2 0.8 0:02.05 httpd2-prefork
9680 root 15 0 2384 1044 696 R 2 0.1 0:00.04 top
9676 mysql 16 0 124m 35m 5008 D 1 1.8 0:00.55 mysqld
25242 wwwrun 18 0 107m 54m 4452 R 1 2.7 0:33.07 httpd2-prefork
9439 wwwrun 18 0 107m 53m 4384 D 1 2.7 0:06.40 httpd2-prefork
9559 wwwrun 18 0 106m 53m 4128 D 1 2.6 0:05.80 httpd2-prefork
1 root 15 0 744 292 244 S 0 0.0 0:01.51 init
2 root RT 0 0 0 0 S 0 0.0 0:00.02 migration/0
3 root 34 19 0 0 0 S 0 0.0 0:00.00 ksoftirqd/0
4 root RT 0 0 0 0 S 0 0.0 0:00.08 migration/1
5 root 34 19 0 0 0 S 0 0.0 0:00.00 ksoftirqd/1
6 root 10 -5 0 0 0 S 0 0.0 0:00.00 events/0
7 root 10 -5 0 0 0 S 0 0.0 0:00.00 events/1
8 root 18 -5 0 0 0 S 0 0.0 0:00.00 khelper
9 root 10 -5 0 0 0 S 0 0.0 0:00.00 kthread
13 root 10 -5 0 0 0 S 0 0.0 0:00.01 kblockd/0
14 root 10 -5 0 0 0 S 0 0.0 0:00.08 kblockd/1
15 root 15 -5 0 0 0 S 0 0.0 0:00.00 kacpid
16 root 15 -5 0 0 0 S 0 0.0 0:00.00 kacpi_notify
125 root 12 -5 0 0 0 S 0 0.0 0:00.00 cqueue/0
126 root 13 -5 0 0 0 S 0 0.0 0:00.00 cqueue/1
127 root 11 -5 0 0 0 S 0 0.0 0:00.00 kseriod
173 root 15 0 0 0 0 S 0 0.0 0:08.87 pdflush
174 root 15 0 0 0 0 D 0 0.0 0:06.56 pdflush
175 root 10 -5 0 0 0 S 0 0.0 0:08.13 kswapd0
176 root 11 -5 0 0 0 S 0 0.0 0:00.00 aio/0
177 root 11 -5 0 0 0 S 0 0.0 0:00.00 aio/1
422 root 20 -5 0 0 0 S 0 0.0 0:00.00 kpsmoused
790 root 10 -5 0 0 0 S 0 0.0 0:00.00 ata/0
791 root 20 -5 0 0 0 S 0 0.0 0:00.00 ata/1
792 root 20 -5 0 0 0 S 0 0.0 0:00.00 ata_aux
799 root 16 -5 0 0 0 S 0 0.0 0:00.01 scsi_eh_0
800 root 11 -5 0 0 0 S 0 0.0 0:00.01 scsi_eh_1
823 root 10 -5 0 0 0 S 0 0.0 0:00.00 scsi_eh_2
831 root 10 -5 0 0 0 S 0 0.0 0:00.00 scsi_eh_3
954 root 10 -5 0 0 0 S 0 0.0 0:11.34 md1_raid1
955 root 10 -5 0 0 0 D 0 0.0 0:04.43 md1_resync
967 root 10 -5 0 0 0 S 0 0.0 0:16.14 kjournald
1011 root 21 -4 1836 584 336 S 0 0.0 0:00.11 udevd
1759 root 16 -5 0 0 0 S 0 0.0 0:00.00 khubd
2001 root 10 -5 0 0 0 S 0 0.0 0:00.00 md0_raid1
2363 root 17 0 1828 648 532 S 0 0.0 0:00.00 resmgrd
2410 messageb 15 0 3548 920 708 S 0 0.0 0:00.01 dbus-daemon
2417 root 18 0 1584 528 436 S 0 0.0 0:00.00 acpid
2463 root 19 0 3252 1720 1480 S 0 0.1 0:00.01 polkitd
2464 haldaemo 18 0 5340 3824 1864 S 0 0.2 0:00.14 hald
2474 root 25 0 2948 1088 920 S 0 0.1 0:00.00 hald-runner
2853 root 15 0 3024 1216 1036 S 0 0.1 0:00.00 hald-addon-cpuf
2888 haldaemo 21 0 2024 856 728 S 0 0.0 0:00.00 hald-addon-acpi
3089 root 22 0 1612 224 156 S 0 0.0 0:00.00 dhcpcd
3255 root 15 0 2104 656 444 S 0 0.0 0:00.10 syslog-ng
3265 root 18 0 1724 536 336 S 0 0.0 0:00.00 klogd
3325 root 19 0 4416 1696 1360 S 0 0.1 0:00.01 powersaved
3328 root 18 0 3244 788 588 S 0 0.0 0:00.00 couriertcpd
3330 root 18 0 3144 904 712 S 0 0.0 0:00.00 courierlogger
3338 root 10 -5 0 0 0 S 0 0.0 0:00.00 kondemand/0
3339 root 11 -5 0 0 0 S 0 0.0 0:00.00 kondemand/1
3345 root 18 0 3244 788 588 S 0 0.0 0:00.00 couriertcpd
3347 root 18 0 3148 904 712 S 0 0.0 0:00.00 courierlogger
3358 root 18 0 3240 788 588 S 0 0.0 0:00.00 couriertcpd
3362 root 18 0 3148 908 712 S 0 0.0 0:00.00 courierlogger
3373 root 15 0 3240 788 588 S 0 0.0 0:00.00 couriertcpd
3375 root 18 0 3144 908 712 S 0 0.0 0:00.00 courierlogger
3383 ntp 15 0 4388 1464 1132 S 0 0.1 0:00.00 ntpd
3410 root 15 0 104m 1084 804 S 0 0.1 0:00.23 nscd
3411 root 15 0 104m 1084 804 S 0 0.1 0:00.05 nscd
3412 root 15 0 104m 1084 804 S 0 0.1 0:00.05 nscd
3413 root 15 0 104m 1084 804 S 0 0.1 0:00.02 nscd
3414 root 15 0 104m 1084 804 S 0 0.1 0:00.03 nscd
3415 root 15 0 104m 1084 804 S 0 0.1 0:00.04 nscd
3416 root 15 0 104m 1084 804 S 0 0.1 0:00.01 nscd
3467 root 17 0 1976 596 472 S 0 0.0 0:00.00 cron
3494 named 21 0 31268 3064 1904 S 0 0.1 0:00.00 named
3495 named 17 0 31268 3064 1904 S 0 0.1 0:00.00 named
3496 named 18 0 31268 3064 1904 S 0 0.1 0:00.00 named
3497 named 15 0 31268 3064 1904 S 0 0.1 0:00.00 named
3512 root 25 0 2636 1272 1044 S 0 0.1 0:00.02 mysqld_safe
3561 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.23 mysqld
3566 mysql 20 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
3567 mysql 15 0 124m 35m 5008 D 0 1.8 0:00.04 mysqld
3568 mysql 17 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
3569 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.15 mysqld
3573 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
3574 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
3575 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.32 mysqld
3577 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.05 mysqld
3839 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.42 mysqld
4953 mysql 24 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
4954 mysql 25 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
4957 mysql 25 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
4960 mysql 19 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
4970 mysql 16 0 124m 35m 5008 S 0 1.8 0:00.04 mysqld
5207 mysql 18 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
9060 mysql 19 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
12823 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.11 mysqld
7346 mysql 16 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
8594 mysql 16 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
8774 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.11 mysqld
8796 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.11 mysqld
8808 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.11 mysqld
9018 mysql 18 0 124m 35m 5008 S 0 1.8 0:00.01 mysqld
9233 mysql 17 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
9446 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.17 mysqld
9447 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.17 mysqld
9471 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.21 mysqld
9476 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.21 mysqld
9481 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.14 mysqld
9513 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.13 mysqld
9532 mysql 18 0 124m 35m 5008 S 0 1.8 0:00.18 mysqld
9543 mysql 21 0 124m 35m 5008 S 0 1.8 0:00.22 mysqld
9544 mysql 20 0 124m 35m 5008 S 0 1.8 0:00.17 mysqld
9545 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.11 mysqld
9548 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.13 mysqld
9549 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.10 mysqld
9550 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.09 mysqld
9551 mysql 18 0 124m 35m 5008 S 0 1.8 0:00.00 mysqld
9564 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.18 mysqld
9565 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.14 mysqld
9566 mysql 15 0 124m 35m 5008 S 0 1.8 0:00.19 mysqld
3589 root 11 -5 0 0 0 S 0 0.0 0:00.00 kauditd
3613 postgres 18 0 20504 3224 2640 S 0 0.2 0:00.30 postmaster
3620 postgres 15 0 10284 1112 524 S 0 0.1 0:00.00 postmaster
3626 postgres 15 0 20504 1244 656 S 0 0.1 0:00.00 postmaster
3627 postgres 15 0 11284 1024 436 S 0 0.0 0:00.00 postmaster
3628 postgres 15 0 10432 1276 568 S 0 0.1 0:00.00 postmaster
3637 root 15 0 27836 24m 2300 S 0 1.2 0:00.50 spamd
3638 popuser 19 0 27836 23m 1244 S 0 1.2 0:00.42 spamd
3639 popuser 15 0 27836 23m 960 S 0 1.2 0:00.00 spamd
3675 root 15 0 10916 2984 2216 S 0 0.1 0:00.41 sshd
3680 root 15 0 66076 14m 8072 S 0 0.7 0:00.44 httpd2-prefork
3688 wwwrun 15 0 66036 7880 764 S 0 0.4 0:00.00 httpd2-prefork
3740 root 15 0 4280 1928 1460 S 0 0.1 0:00.05 bash
3744 root 18 0 2056 640 560 S 0 0.0 0:00.00 mingetty
3746 root 18 0 2056 636 560 S 0 0.0 0:00.00 mingetty
3748 root 18 0 2056 640 560 S 0 0.0 0:00.00 mingetty
3749 root 18 0 2056 636 560 S 0 0.0 0:00.00 mingetty
3750 root 18 0 2060 640 560 S 0 0.0 0:00.00 mingetty
3753 root 18 0 2060 636 560 S 0 0.0 0:00.00 mingetty
3755 root 17 0 1584 496 432 S 0 0.0 0:00.00 agetty
3760 root 24 0 20924 7900 5092 S 0 0.4 0:00.19 wdcollect
3761 root 15 0 29140 2388 1892 S 0 0.1 0:01.66 monit
3834 root 15 0 29140 2388 1892 S 0 0.1 0:00.00 monit
3885 drweb 15 0 22436 17m 496 S 0 0.9 0:00.01 drwebd
3886 drweb 15 0 22436 17m 772 S 0 0.9 0:00.04 drwebd
3887 drweb 15 0 22436 17m 568 S 0 0.9 0:00.00 drwebd
3888 drweb 15 0 22436 17m 568 S 0 0.9 0:00.00 drwebd
3889 drweb 15 0 22436 17m 568 S 0 0.9 0:00.01 drwebd
3954 tomcat 25 0 750m 71m 12m S 0 3.6 0:04.37 java
3958 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.06 java
3959 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.08 java
3961 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.02 java
3962 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.00 java
3963 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.00 java
3970 tomcat 19 0 750m 71m 12m S 0 3.6 0:00.00 java
3971 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.00 java
3972 tomcat 15 0 750m 71m 12m S 0 3.6 0:03.98 java
3973 tomcat 15 0 750m 71m 12m S 0 3.6 0:03.41 java
3974 tomcat 19 0 750m 71m 12m S 0 3.6 0:00.00 java
3975 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.02 java
3994 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.23 java
3995 tomcat 19 0 750m 71m 12m S 0 3.6 0:00.00 java
3996 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
3997 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
3998 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
3999 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4000 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4001 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4002 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4003 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4004 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4005 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4006 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4007 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4008 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4009 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4010 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4011 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4012 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4013 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4014 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4015 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4016 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4017 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4018 tomcat 20 0 750m 71m 12m S 0 3.6 0:00.00 java
4019 tomcat 21 0 750m 71m 12m S 0 3.6 0:00.04 java
4020 tomcat 18 0 750m 71m 12m S 0 3.6 0:00.00 java
4021 tomcat 21 0 750m 71m 12m S 0 3.6 0:00.00 java
4022 tomcat 22 0 750m 71m 12m S 0 3.6 0:00.00 java
4023 tomcat 22 0 750m 71m 12m S 0 3.6 0:00.00 java
4024 tomcat 22 0 750m 71m 12m S 0 3.6 0:00.00 java
4025 tomcat 18 0 750m 71m 12m S 0 3.6 0:00.00 java
4026 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.00 java
4027 tomcat 24 0 750m 71m 12m S 0 3.6 0:00.00 java
4028 tomcat 24 0 750m 71m 12m S 0 3.6 0:00.00 java
4029 tomcat 24 0 750m 71m 12m S 0 3.6 0:00.00 java
4030 tomcat 24 0 750m 71m 12m S 0 3.6 0:00.00 java
4031 tomcat 19 0 750m 71m 12m S 0 3.6 0:00.00 java
4032 tomcat 25 0 750m 71m 12m S 0 3.6 0:00.00 java
4033 tomcat 25 0 750m 71m 12m S 0 3.6 0:00.00 java
4034 tomcat 25 0 750m 71m 12m S 0 3.6 0:00.00 java
4035 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.00 java
4036 tomcat 15 0 750m 71m 12m S 0 3.6 0:00.00 java
4950 root 18 0 5632 1532 1052 S 0 0.1 0:00.00 cron
4951 root 21 0 2632 1136 952 S 0 0.1 0:00.00 sh
4952 psaadm 15 0 5428 1624 1080 S 0 0.1 0:00.01 backupmng
4955 psaadm 20 0 5308 680 236 S 0 0.0 0:00.00 backupmng
4956 psaadm 25 10 30416 18m 5148 S 0 0.9 0:00.78 scheduled_backu
4964 root 25 10 28324 7552 1760 S 0 0.4 0:00.67 agent_runner
4966 root 30 10 28324 7552 1760 S 0 0.4 0:00.00 agent_runner
4967 root 29 10 13572 10m 2220 S 0 0.5 0:00.44 PleskX.pl
4980 root 26 10 5176 1212 864 S 0 0.1 0:00.35 backup_sign
4982 root 26 10 13876 9684 744 S 0 0.5 0:00.28 PleskX.pl
5021 root 26 10 2344 796 584 R 0 0.0 0:33.82 tar
5358 root 18 0 5808 1368 928 S 0 0.1 0:00.17 sshd
6307 wwwrun 18 0 106m 53m 4316 R 0 2.7 1:54.09 httpd2-prefork
8642 root 17 0 44048 40m 296 S 0 2.0 0:00.00 aveserver
9201 wwwrun 15 0 69660 14m 4396 S 0 0.7 0:07.51 httpd2-prefork
9235 root 15 0 2448 860 708 S 0 0.0 0:00.00 xinetd
9248 qmails 16 0 1632 420 332 S 0 0.0 0:00.01 qmail-send
9250 qmaill 18 0 1584 484 408 S 0 0.0 0:00.00 splogger
9251 root 18 0 1612 368 272 S 0 0.0 0:00.00 qmail-lspawn
9252 qmailr 15 0 1608 388 292 S 0 0.0 0:00.00 qmail-rspawn
9253 qmailq 18 0 1580 360 292 S 0 0.0 0:00.00 qmail-clean
9422 wwwrun 15 0 69776 14m 4364 S 0 0.7 0:04.69 httpd2-prefork
9466 wwwrun 15 0 69884 15m 4368 S 0 0.8 0:02.27 httpd2-prefork
9467 wwwrun 15 0 69780 14m 4368 S 0 0.7 0:01.86 httpd2-prefork
9488 wwwrun 15 0 69112 14m 4416 S 0 0.7 0:05.99 httpd2-prefork
9495 wwwrun 15 0 69024 13m 4416 S 0 0.7 0:03.47 httpd2-prefork
9502 wwwrun 15 0 69580 14m 4360 S 0 0.7 0:01.30 httpd2-prefork
9505 wwwrun 15 0 69996 15m 4372 S 0 0.8 0:02.20 httpd2-prefork
9556 wwwrun 15 0 69620 14m 4356 S 0 0.7 0:00.93 httpd2-prefork
9562 wwwrun 15 0 68752 13m 4352 S 0 0.7 0:01.00 httpd2-prefork
9567 wwwrun 15 0 69348 14m 4368 S 0 0.7 0:01.33 httpd2-prefork
9572 root 18 0 5632 1532 1052 S 0 0.1 0:00.01 cron
9586 mailman 18 0 8304 5816 2288 D 0 0.3 0:00.23 python
9638 wwwrun 15 0 66340 10m 3676 S 0 0.5 0:00.03 httpd2-prefork
9640 wwwrun 15 0 66208 9276 1932 S 0 0.5 0:00.09 httpd2-prefork
9641 wwwrun 15 0 66208 9204 1924 S 0 0.4 0:00.00 httpd2-prefork
9648 root 15 0 40708 6604 4044 S 0 0.3 0:00.04 httpsd
9652 psaadm 19 0 40708 3280 772 S 0 0.2 0:00.00 httpsd
9658 wwwrun 15 0 68484 13m 4336 S 0 0.7 0:00.63 httpd2-prefork
|
31.03.2008, 00:37
|
|
chris on Rails
|
|
Registriert seit: 12.2005
Ort: Stuttgart
Alter: 24
Beiträge: 689
|
|
Das sind relativ viele apache childs.
Hast du immer so viele klicks auf deine Seiten ?
Überprüfe in deiner access_log vom apachen auf welche Seiten meistens zugegriffen wird oder von welcher IP sie kommen, ist es immer die gleiche ?
|
31.03.2008, 00:49
|
|
Registered User
|
|
Registriert seit: 05.2007
Beiträge: 18
|
|
Kann da nichts finden
Code:
208.36.144.7 - - [30/Mar/2008:20:25:02 +0200] "GET /robots.txt HTTP/1.0" 301 346 "-" "Mozilla/5.0 (Twiceler-0.9 http://www.cuill.com/twiceler/robot.html)"
91.66.39.170 - - [30/Mar/2008:21:45:29 +0200] "GET /logo.gif HTTP/1.1" 301 344 "http://www.topklix.de/top/tl/380/index.html" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; InfoPath.2)"
62.141.58.88 - - [30/Mar/2008:21:50:51 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 302 "-" "-"
88.74.165.158 - - [30/Mar/2008:21:54:09 +0200] "GET /wbb2/images/afc_doublesonic/logo.gif HTTP/1.1" 301 372 "http://www.gt-corner.de/wbb2/thread.php?threadid=16277" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)"
91.66.39.170 - - [30/Mar/2008:21:55:06 +0200] "GET /logo.gif HTTP/1.1" 301 344 "http://www.topklix.de/top/tl/380/index.html" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; InfoPath.2)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
87.118.64.133 - - [30/Mar/2008:23:44:02 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 302 "-" "-"
91.50.111.223 - - [31/Mar/2008:00:22:23 +0200] "GET /logo.gif HTTP/1.1" 301 344 "http://www.topklix.de/top/tl/380/index.html" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)"
74.53.83.10 - - [31/Mar/2008:00:44:18 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 302 "-" "-"
das ist der ganze log bisschen wenig für die fielen Zugriffe
|
31.03.2008, 01:14
|
|
Registered User
|
|
Registriert seit: 05.2007
Beiträge: 18
|
|
so nun ist es amtlich bin gehackt worden komme nirgends mehr wo rein alle Passwörter weg
keins stimmt mehr !
|
31.03.2008, 21:23
|
|
chris on Rails
|
|
Registriert seit: 12.2005
Ort: Stuttgart
Alter: 24
Beiträge: 689
|
|
na also, jetzt hast du einen Grund alles frisch, neu und perfekt zu installieren.
Du hast vorhin was von 2 Jahren geschrieben...... zum Vergleich, bei mir ist ungefähr alle 6 Monate eine große Aktion.. Spamer, Fehlerhaftes Plesk Update, Apache durch Sicherheitslücke zerschossen...whatever. Durch Fehler fixen lernst du schließlich auch was.
Wunder dich also nicht, that's the Internet.
|
31.03.2008, 22:25
|
 |
BAFH
|
|
Registriert seit: 08.2006
Ort: Berlin
Alter: 31
Beiträge: 1.955
|
|
Zitat:
Zitat von blaich
bei mir ist ungefähr alle 6 Monate eine große Aktion..
|
So oft? Krass...
|
31.03.2008, 22:28
|
|
chris on Rails
|
|
Registriert seit: 12.2005
Ort: Stuttgart
Alter: 24
Beiträge: 689
|
|
natürlich keine Neuinstallation ist ja wohl klar.
Aber n kleiner Ddos.. doch.. doch das kommt hin.
|
| Themen-Optionen |
|
|
| Thema bewerten |
|
|
Forumregeln
|
Es ist dir nicht erlaubt, neue Themen zu verfassen.
Es ist dir nicht erlaubt, auf Beiträge zu antworten.
Es ist dir nicht erlaubt, Anhänge hochzuladen.
Es ist dir nicht erlaubt, deine Beiträge zu bearbeiten.
HTML-Code ist aus.
|
|
|
|
|
|
 |
|
Alle Zeitangaben in WEZ +2. Es ist jetzt 00:21 Uhr.
|
