Apache webserver outage - need help with forensics

[Bob Brennan]

On 4/13/05, Kristina Clair <kclair at gmail.com> wrote:
> Did you do a traceroute or any other network diagnostic to make sure
> that you were actually able to reach the server?  It sounds like a
> networking problem...
> 
> Kristina

Hi Kristina - FTP and mailserver (the only other 2 open services) were
responding quickly and correctly throughout the outage - all running
on the same machine.

bob
 
> On 4/13/05, Bob Brennan <rbrennan96 at gmail.com> wrote:
> > I have a server which went completely unresponsive today on port 80
> > for 20 minutes and would appreciate any pointers as to what might have
> > happened.
> >
> > A bit of background:
> > * FC3, Up2Date
> > * The Apache webserver serves a dozen virtual websites
> > * Sendmail + Dovecot + Squirrelmail for all sites
> > * Spamassasin recently activated (yesterday)
> >
> > The problem + observations:
> > * All websites were inaccessible from 14:00 gmt to 14:20 today
> > * The mailserver was running and responsive during that time
> > * FTP was running and responsive during that time
> > * telnet theServer.com 80 timed out with no connection during that time
> >
> > What I checked:
> > * all access_log and error_log for all sites - showed 5 users using
> > the sites at the time but nothing unusual
> > * no evidence of a DOS attack (that I could see)
> > * no records of anything unusual in system logs
> > * no accesses or errors in any of the http logs during that time
> >
> > Thankfully the webserver came back as if by magic after 20 minutes and
> > was immediately responsive.
> >
> > Any insights into anything else I can check? Needless to say an
> > embarassing incident for a webmaster who whould like to prevent it
> > happening again.
> >
> > Thanks in advance,
> > bob
> >
> > --
> > fedora-list mailing list
> > fedora-list at redhat.com
> > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
> >
> 
> --
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
>