Re: [users@httpd] Core dump in Oracle HTTP Server build on Apache 1.3

2013-04-12 Thread Jeff Trawick
On Fri, Apr 12, 2013 at 2:51 AM, Techienote com wrote:

> Hi Folks,
>
>
>
> Recently we are facing core dump in Oracle HTTP Server which is build on
> Apache 1.3
>
>
>
> Following is the output of httpd -V command
>
>
> ---
>
> Server version: Oracle-Application-Server-10g/10.1.3.1.0 Oracle-HTTP-Server
> Server built:   Sep 22 2006 04:35:27
> Server's Module Magic Number: 19990320:18
> Server compiled with
>  -D EAPI
>  -D EAPI_MM
>  -D EAPI_MM_CORE_PATH="logs/mm"
>  -D HAVE_MMAP
>  -D USE_MMAP_SCOREBOARD
>  -D USE_MMAP_FILES
>  -D HAVE_FCNTL_SERIALIZED_ACCEPT
>  -D HAVE_SYSVSEM_SERIALIZED_ACCEPT
>  -D HAVE_PTHREAD_SERIALIZED_ACCEPT
>  -D DYNAMIC_MODULE_LIMIT=64
>  -D HARD_SERVER_LIMIT=8192
>  -D HTTPD_ROOT="/tmp/apache"
>  -D SUEXEC_BIN="/tmp/apache/bin/suexec"
>  -D DEFAULT_PIDLOG="logs/httpd.pid"
>  -D DEFAULT_SCOREBOARD="logs/httpd.scoreboard"
>  -D DEFAULT_LOCKFILE="logs/httpd.lock"
>  -D DEFAULT_ERRORLOG="logs/error_log"
>  -D TYPES_CONFIG_FILE="conf/mime.types"
>  -D SERVER_CONFIG_FILE="conf/httpd.conf"
>  -D ACCESS_CONFIG_FILE="conf/access.conf"
>  -D RESOURCE_CONFIG_FILE="conf/srm.conf"
>
>
> --
>
>
>
> I have tried to run the same using pstack command. Following is the output
> of the pstack command
>
>
>
>
> ---
>
> core 'core' of 13893:   /ora10gas/OracleAS/Apache/Apache/bin/httpd -d
> /ora10gas/OracleAS/Apach
> -  lwp# 1 / thread# 1  
>  ff091a28 memcpy   (ffbfc998, fddb2838, ffbff1e4, ffbff1f4, fe0d3d64,
> fe0d3d84) + 104c
>  fe063bbc shmcb_retrieve_session (259f40, fddb2838, ffbff270, 6b63feff,
> 80808080, 1010101) + 118
>  fe063044 ssl_scache_shmcb_retrieve (259f40, ffbff2e0, 20683c, ffbff60c,
> 468740, 468e74) + 7c
>  fe061430 ssl_scache_retrieve (259f40, ffbff360, 0, 0, 46895c, ffbff3a0) +
> f4
>  fe05e8f4 ssl_callback_GetSessionCacheEntry (2000, 33f498, ,
> , ffbff6f8, 4683c4) + 88
>

SSLSessionCache none (or something) will avoid this code/crash, but you'll
likely encounter noticeable performance degradation (client response time
and/or server CPU).  Unless the crash is happening very frequently (i.e.,
severely affecting service) you probably don't want to do that.

You need to get assistance from Oracle.  This is a proprietary SSL toolkit
and proprietary patches to old levels of open source.



>   fe1730bc nzospGetSession (ffbff448, ffbff450, 4683cc, 468740, 468740,
> 45b2cb) + 24
>  f87fdde0 ssl_Hshk_GetSessionID (20, 468909, ffbff534, 4, 468710, 468740)
> + a8
>  f8884274 ssl_Hshk_Priv_GetSessionDBRecord (468710, ffbff53f, ffbff534,
> 468964, 0, 1) + 74
>  f8883f04 ssl_Hshk_Priv_ProcessClientHello (300, 300, 469190, 468710, 0,
> ffbff5b0) + 174
>  f8879d24 STM_ExecuteLine (455238, f906374c, 1001, 469190, 0, 45525c) + 40
>  f8879a94 STM_DoOneCycle (455238, ffbff6dc, 20683c, ffbff60c, 468740,
> 468e74) + 148
>  f88798fc STM_Operate (455238, ffbff6dc, f8882b74, 468710, 46895c, 20683c)
> + 14
>  f87f3f90 ssl_Hshk_HandshakeProceed (468710, 0, 0, 4000, ffbff6f8, 4683c4)
> + b0
>  f87f2a1c ssl_Handshake (468710, 810a0038, 810d0013, 810d, ffbff780,
> 4683c4) + 30
>  fe16d80c nzos_Handshake (4683b8, 33f4cc, 434478, fff8, 0, 4364b0) + b0
>  fe05ca90 SSL_new_server_side (fe100818, 33f4cc, fe0ec98c, 2400, 2664,
> 4314b0) + 13c
>  fe05c8a0 ssl_hook_NewConnection (431440, 91314, 9b3f0, ffbff8d8, 8c4c0,
> 902ec) + 14c
>  00030538 new_connection (a59e0, 933a0, a5a18, ffbff994, ffbff984, 2) + 12c
>  00031ee4 child_main (90ad4, d8c, e20, a7c, 1800, c00) + 95c
>  00032278 make_child (933a0, 2, 516551db, 10, 1cf4, ff1e8140) + 16c
>  00032358 startup_children (5, 14, 869d8, 1b840, 0, 21cc8) + 8c
>  00032be8 standalone_main (800, 878, c00, d64, 1800, 1a44c) + 28c
>  00033820 main (c00, dec, 1800, 1a20, 1800, 19ec) + 568
>  000193c0 _start   (0, 0, 0, 0, 0, 0) + 108
> -  lwp# 2 / thread# 2  
>  ff16e298 __pollsys (fdc1be68, 0, fdc1bed0, 0, 0, 0) + 8
>  ff109abc pselect  (fdc1be68, ff1e6790, ff1e6790, 0, fdc1bed0, 0) + 1c8
>  ff109e34 select   (0, 0, 0, 0, fdc1bf38, fe002394) + a0
>  fe0035d8 swwwcsl_Sleep (ea60, 7, fe012d30, 3645, fdb00200, 1) + 40
>  fe00470c wwccuctp_CleanupThreadProc (42bca0, fdc1c000, 0, 0, fe00465c, 1)
> + b0
>  ff16a9c8 _lwp_start (0, 0, 0, 0, 0, 0)
> -  lwp# 3 / thread# 3  
>  ff16aa6c __lwp_park (1, 42be50, fdafbe08, 0, 7dc18, 0) + 14
>  ff164ab0 cond_wait_queue (42bdc8, 42be50, fdafbe08, 0, 0, 0) + 4c
>  ff164ef4 cond_wait_common (42bdc8, 42be50, fdafbe08, 0, 0, 0) + 294
>  ff165088 _cond_timedwait (42bdc8, 42be50, fdafbed0, 0, 0, 0) + 34
>  ff16517c cond_timedwait (42bdc8, 42be50, fdafbed0, 0, 0, fdafbed8) + 14
>  f8df683c sltspctimewait (21e658, 

[users@httpd] RewriteRule help

2013-04-12 Thread Dean Del Ponte
Would someone be so kind as to provide an example solution for the
following problem.

I would like all requests to the base url "/products/flash/**" redirected
to /flash/**

For example

/products/flash/awesomenessredirects to/flash/awesomeness
/products/flash/really/cool/stuffredirects to   /flash/really/cool/stuff

and so on.


Thanks!

Dean Del Ponte


Re: [users@httpd] RewriteRule help

2013-04-12 Thread Pete Houston
No need to use RewriteRule for that, simply use Redirect.

Redirect /products/flash /flash

http://httpd.apache.org/docs/2.4/mod/mod_alias.html#redirect

Pete
-- 
Openstrike - improving business through open source
http://www.openstrike.co.uk/ or call 01722 770036 / 07092 020107


pgp4dt348_YPR.pgp
Description: PGP signature


Re: [users@httpd] Core dump in Oracle HTTP Server build on Apache 1.3

2013-04-12 Thread Techienote com
On Fri, Apr 12, 2013 at 4:59 PM, Jeff Trawick  wrote:

>  On Fri, Apr 12, 2013 at 2:51 AM, Techienote com  > wrote:
>
>>  Hi Folks,
>>
>>
>>
>> Recently we are facing core dump in Oracle HTTP Server which is build on
>> Apache 1.3
>>
>>
>>
>> Following is the output of httpd -V command
>>
>>
>> ---
>>
>> Server version: Oracle-Application-Server-10g/10.1.3.1.0
>> Oracle-HTTP-Server
>> Server built:   Sep 22 2006 04:35:27
>> Server's Module Magic Number: 19990320:18
>> Server compiled with
>>  -D EAPI
>>  -D EAPI_MM
>>  -D EAPI_MM_CORE_PATH="logs/mm"
>>  -D HAVE_MMAP
>>  -D USE_MMAP_SCOREBOARD
>>  -D USE_MMAP_FILES
>>  -D HAVE_FCNTL_SERIALIZED_ACCEPT
>>  -D HAVE_SYSVSEM_SERIALIZED_ACCEPT
>>  -D HAVE_PTHREAD_SERIALIZED_ACCEPT
>>  -D DYNAMIC_MODULE_LIMIT=64
>>  -D HARD_SERVER_LIMIT=8192
>>  -D HTTPD_ROOT="/tmp/apache"
>>  -D SUEXEC_BIN="/tmp/apache/bin/suexec"
>>  -D DEFAULT_PIDLOG="logs/httpd.pid"
>>  -D DEFAULT_SCOREBOARD="logs/httpd.scoreboard"
>>  -D DEFAULT_LOCKFILE="logs/httpd.lock"
>>  -D DEFAULT_ERRORLOG="logs/error_log"
>>  -D TYPES_CONFIG_FILE="conf/mime.types"
>>  -D SERVER_CONFIG_FILE="conf/httpd.conf"
>>  -D ACCESS_CONFIG_FILE="conf/access.conf"
>>  -D RESOURCE_CONFIG_FILE="conf/srm.conf"
>>
>>
>> --
>>
>>
>>
>> I have tried to run the same using pstack command. Following is the
>> output of the pstack command
>>
>>
>>
>>
>> ---
>>
>> core 'core' of 13893:   /ora10gas/OracleAS/Apache/Apache/bin/httpd -d
>> /ora10gas/OracleAS/Apach
>> -  lwp# 1 / thread# 1  
>>  ff091a28 memcpy   (ffbfc998, fddb2838, ffbff1e4, ffbff1f4, fe0d3d64,
>> fe0d3d84) + 104c
>>  fe063bbc shmcb_retrieve_session (259f40, fddb2838, ffbff270, 6b63feff,
>> 80808080, 1010101) + 118
>>  fe063044 ssl_scache_shmcb_retrieve (259f40, ffbff2e0, 20683c, ffbff60c,
>> 468740, 468e74) + 7c
>>  fe061430 ssl_scache_retrieve (259f40, ffbff360, 0, 0, 46895c, ffbff3a0)
>> + f4
>>  fe05e8f4 ssl_callback_GetSessionCacheEntry (2000, 33f498, ,
>> , ffbff6f8, 4683c4) + 88
>>
>
> SSLSessionCache none (or something) will avoid this code/crash, but you'll
> likely encounter noticeable performance degradation (client response time
> and/or server CPU).  Unless the crash is happening very frequently (i.e.,
> severely affecting service) you probably don't want to do that.
>
> You need to get assistance from Oracle.  This is a proprietary SSL toolkit
> and proprietary patches to old levels of open source.
>
> Can you please let me know why you are suspecting SSLSessionCache?

>
>
>>   fe1730bc nzospGetSession (ffbff448, ffbff450, 4683cc, 468740, 468740,
>> 45b2cb) + 24
>>  f87fdde0 ssl_Hshk_GetSessionID (20, 468909, ffbff534, 4, 468710, 468740)
>> + a8
>>  f8884274 ssl_Hshk_Priv_GetSessionDBRecord (468710, ffbff53f, ffbff534,
>> 468964, 0, 1) + 74
>>  f8883f04 ssl_Hshk_Priv_ProcessClientHello (300, 300, 469190, 468710, 0,
>> ffbff5b0) + 174
>>  f8879d24 STM_ExecuteLine (455238, f906374c, 1001, 469190, 0, 45525c) + 40
>>  f8879a94 STM_DoOneCycle (455238, ffbff6dc, 20683c, ffbff60c, 468740,
>> 468e74) + 148
>>  f88798fc STM_Operate (455238, ffbff6dc, f8882b74, 468710, 46895c,
>> 20683c) + 14
>>  f87f3f90 ssl_Hshk_HandshakeProceed (468710, 0, 0, 4000, ffbff6f8,
>> 4683c4) + b0
>>  f87f2a1c ssl_Handshake (468710, 810a0038, 810d0013, 810d, ffbff780,
>> 4683c4) + 30
>>  fe16d80c nzos_Handshake (4683b8, 33f4cc, 434478, fff8, 0, 4364b0) +
>> b0
>>  fe05ca90 SSL_new_server_side (fe100818, 33f4cc, fe0ec98c, 2400, 2664,
>> 4314b0) + 13c
>>  fe05c8a0 ssl_hook_NewConnection (431440, 91314, 9b3f0, ffbff8d8, 8c4c0,
>> 902ec) + 14c
>>  00030538 new_connection (a59e0, 933a0, a5a18, ffbff994, ffbff984, 2) +
>> 12c
>>  00031ee4 child_main (90ad4, d8c, e20, a7c, 1800, c00) + 95c
>>  00032278 make_child (933a0, 2, 516551db, 10, 1cf4, ff1e8140) + 16c
>>  00032358 startup_children (5, 14, 869d8, 1b840, 0, 21cc8) + 8c
>>  00032be8 standalone_main (800, 878, c00, d64, 1800, 1a44c) + 28c
>>  00033820 main (c00, dec, 1800, 1a20, 1800, 19ec) + 568
>>  000193c0 _start   (0, 0, 0, 0, 0, 0) + 108
>> -  lwp# 2 / thread# 2  
>>  ff16e298 __pollsys (fdc1be68, 0, fdc1bed0, 0, 0, 0) + 8
>>  ff109abc pselect  (fdc1be68, ff1e6790, ff1e6790, 0, fdc1bed0, 0) + 1c8
>>  ff109e34 select   (0, 0, 0, 0, fdc1bf38, fe002394) + a0
>>  fe0035d8 swwwcsl_Sleep (ea60, 7, fe012d30, 3645, fdb00200, 1) + 40
>>  fe00470c wwccuctp_CleanupThreadProc (42bca0, fdc1c000, 0, 0, fe00465c,
>> 1) + b0
>>  ff16a9c8 _lwp_start (0, 0, 0, 0, 0, 0)
>> -  lwp# 3 / thread# 3  
>>  ff16aa6c __lwp_park (1, 42be50, fdafbe08, 0, 7dc18, 0) + 14
>>  ff164ab0 cond_wait_queue (42bdc8, 42be50, fdafbe08,

Re: [users@httpd] RewriteRule help

2013-04-12 Thread Dean Del Ponte
Thanks Pete!

I guess I have something wonky with my Apache config.

Rewrites work but Redirects don't.  Redirects have no affect.

I'll look into it a bit more.

Thanks again!

Dean


On Fri, Apr 12, 2013 at 9:44 AM, Pete Houston  wrote:

> No need to use RewriteRule for that, simply use Redirect.
>
> Redirect /products/flash /flash
>
> http://httpd.apache.org/docs/2.4/mod/mod_alias.html#redirect
>
> Pete
> --
> Openstrike - improving business through open source
> http://www.openstrike.co.uk/ or call 01722 770036 / 07092 020107
>


[users@httpd] root process running Apache

2013-04-12 Thread wejii
I am running apache2  with Ubuntu so that I can practice writing CGI/SQL 
scripts with perl.

In ports.conf I have:

NameVirtualHost *:80
Listen 127.0.0.1:80

the intention being to limit access only to my laptop (keep the outside 
world out).


I read several times "don't run apache as root".
ps -ef gives me the following:

root14481  0 Apr11 ?00:00:04 
/usr/sbin/apache2 -k start

www-data  1712  1448  0 Apr11 ?00:00:00 /usr/sbin/apache2 -k start
www-data  1713  1448  0 Apr11 ?00:00:00 /usr/sbin/apache2 -k start
www-data  1714  1448  0 Apr11 ?00:00:00 /usr/sbin/apache2 -k start
www-data  1715  1448  0 Apr11 ?00:00:00 /usr/sbin/apache2 -k start
www-data  1716  1448  0 Apr11 ?00:00:00 /usr/sbin/apache2 -k start
www-data  7304  1448  0 11:14 ?00:00:00 /usr/sbin/apache2 -k start
www-data  7305  1448  0 11:14 ?00:00:00 /usr/sbin/apache2 -k start
www-data  7306  1448  0 11:14 ?00:00:00 /usr/sbin/apache2 -k start


My question is - what is that root process?  Should I ignore it?

Thanks,
Walt


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Core dump in Oracle HTTP Server build on Apache 1.3

2013-04-12 Thread Jeff Trawick
On Fri, Apr 12, 2013 at 12:10 PM, Techienote com
wrote:

>
>
> On Fri, Apr 12, 2013 at 4:59 PM, Jeff Trawick  wrote:
>
>>  On Fri, Apr 12, 2013 at 2:51 AM, Techienote com <
>> techienote@gmail.com> wrote:
>>
>>>  Hi Folks,
>>>
>>>
>>>
>>> Recently we are facing core dump in Oracle HTTP Server which is build on
>>> Apache 1.3
>>>
>>>
>>>
>>> Following is the output of httpd -V command
>>>
>>>
>>> ---
>>>
>>> Server version: Oracle-Application-Server-10g/10.1.3.1.0
>>> Oracle-HTTP-Server
>>> Server built:   Sep 22 2006 04:35:27
>>> Server's Module Magic Number: 19990320:18
>>> Server compiled with
>>>  -D EAPI
>>>  -D EAPI_MM
>>>  -D EAPI_MM_CORE_PATH="logs/mm"
>>>  -D HAVE_MMAP
>>>  -D USE_MMAP_SCOREBOARD
>>>  -D USE_MMAP_FILES
>>>  -D HAVE_FCNTL_SERIALIZED_ACCEPT
>>>  -D HAVE_SYSVSEM_SERIALIZED_ACCEPT
>>>  -D HAVE_PTHREAD_SERIALIZED_ACCEPT
>>>  -D DYNAMIC_MODULE_LIMIT=64
>>>  -D HARD_SERVER_LIMIT=8192
>>>  -D HTTPD_ROOT="/tmp/apache"
>>>  -D SUEXEC_BIN="/tmp/apache/bin/suexec"
>>>  -D DEFAULT_PIDLOG="logs/httpd.pid"
>>>  -D DEFAULT_SCOREBOARD="logs/httpd.scoreboard"
>>>  -D DEFAULT_LOCKFILE="logs/httpd.lock"
>>>  -D DEFAULT_ERRORLOG="logs/error_log"
>>>  -D TYPES_CONFIG_FILE="conf/mime.types"
>>>  -D SERVER_CONFIG_FILE="conf/httpd.conf"
>>>  -D ACCESS_CONFIG_FILE="conf/access.conf"
>>>  -D RESOURCE_CONFIG_FILE="conf/srm.conf"
>>>
>>>
>>> --
>>>
>>>
>>>
>>> I have tried to run the same using pstack command. Following is the
>>> output of the pstack command
>>>
>>>
>>>
>>>
>>> ---
>>>
>>> core 'core' of 13893:   /ora10gas/OracleAS/Apache/Apache/bin/httpd -d
>>> /ora10gas/OracleAS/Apach
>>> -  lwp# 1 / thread# 1  
>>>  ff091a28 memcpy   (ffbfc998, fddb2838, ffbff1e4, ffbff1f4, fe0d3d64,
>>> fe0d3d84) + 104c
>>>  fe063bbc shmcb_retrieve_session (259f40, fddb2838, ffbff270, 6b63feff,
>>> 80808080, 1010101) + 118
>>>  fe063044 ssl_scache_shmcb_retrieve (259f40, ffbff2e0, 20683c, ffbff60c,
>>> 468740, 468e74) + 7c
>>>  fe061430 ssl_scache_retrieve (259f40, ffbff360, 0, 0, 46895c, ffbff3a0)
>>> + f4
>>>  fe05e8f4 ssl_callback_GetSessionCacheEntry (2000, 33f498, ,
>>> , ffbff6f8, 4683c4) + 88
>>>
>>
>> SSLSessionCache none (or something) will avoid this code/crash, but
>> you'll likely encounter noticeable performance degradation (client response
>> time and/or server CPU).  Unless the crash is happening very frequently
>> (i.e., severely affecting service) you probably don't want to do that.
>>
>> You need to get assistance from Oracle.  This is a proprietary SSL
>> toolkit and proprietary patches to old levels of open source.
>>
>> Can you please let me know why you are suspecting SSLSessionCache?
>

Because the stack traces I responded to above are for looking up session
cache entries...


>
>>
>>>   fe1730bc nzospGetSession (ffbff448, ffbff450, 4683cc, 468740, 468740,
>>> 45b2cb) + 24
>>>  f87fdde0 ssl_Hshk_GetSessionID (20, 468909, ffbff534, 4, 468710,
>>> 468740) + a8
>>>  f8884274 ssl_Hshk_Priv_GetSessionDBRecord (468710, ffbff53f, ffbff534,
>>> 468964, 0, 1) + 74
>>>  f8883f04 ssl_Hshk_Priv_ProcessClientHello (300, 300, 469190, 468710, 0,
>>> ffbff5b0) + 174
>>>  f8879d24 STM_ExecuteLine (455238, f906374c, 1001, 469190, 0, 45525c) +
>>> 40
>>>  f8879a94 STM_DoOneCycle (455238, ffbff6dc, 20683c, ffbff60c, 468740,
>>> 468e74) + 148
>>>  f88798fc STM_Operate (455238, ffbff6dc, f8882b74, 468710, 46895c,
>>> 20683c) + 14
>>>  f87f3f90 ssl_Hshk_HandshakeProceed (468710, 0, 0, 4000, ffbff6f8,
>>> 4683c4) + b0
>>>  f87f2a1c ssl_Handshake (468710, 810a0038, 810d0013, 810d, ffbff780,
>>> 4683c4) + 30
>>>  fe16d80c nzos_Handshake (4683b8, 33f4cc, 434478, fff8, 0, 4364b0) +
>>> b0
>>>  fe05ca90 SSL_new_server_side (fe100818, 33f4cc, fe0ec98c, 2400, 2664,
>>> 4314b0) + 13c
>>>  fe05c8a0 ssl_hook_NewConnection (431440, 91314, 9b3f0, ffbff8d8, 8c4c0,
>>> 902ec) + 14c
>>>  00030538 new_connection (a59e0, 933a0, a5a18, ffbff994, ffbff984, 2) +
>>> 12c
>>>  00031ee4 child_main (90ad4, d8c, e20, a7c, 1800, c00) + 95c
>>>  00032278 make_child (933a0, 2, 516551db, 10, 1cf4, ff1e8140) + 16c
>>>  00032358 startup_children (5, 14, 869d8, 1b840, 0, 21cc8) + 8c
>>>  00032be8 standalone_main (800, 878, c00, d64, 1800, 1a44c) + 28c
>>>  00033820 main (c00, dec, 1800, 1a20, 1800, 19ec) + 568
>>>  000193c0 _start   (0, 0, 0, 0, 0, 0) + 108
>>> -  lwp# 2 / thread# 2  
>>>  ff16e298 __pollsys (fdc1be68, 0, fdc1bed0, 0, 0, 0) + 8
>>>  ff109abc pselect  (fdc1be68, ff1e6790, ff1e6790, 0, fdc1bed0, 0) + 1c8
>>>  ff109e34 select   (0, 0, 0, 0, fdc1bf38, fe002394) + a0
>>>  fe0035d8 swwwcsl_Sleep (ea60, 7, fe012d30, 3645, fdb00200, 1) + 40
>>> 

[users@httpd] Missing QUERY_STRING

2013-04-12 Thread Ian C

Hi everyone,

I'm new to web configurations etc. I hope someone can help me with this, I've 
been googling and reading docs for many hours.

I have Apache 2.2.19 which has been running fine, until I needed a new CGI 
which needed the QUERY_STRING from the Get (eg. ?SBC=A1... ) My CGI can 
obtain all other pertinent env vars, in fact here they are:

DOCUMENT_ROOT'='/usr/pkg/share/httpd/htdocs'\n
GATEWAY_INTERFACE'='CGI/1.1'\n
HTTP_ACCEPT'='text/event-stream'\n
HTTP_ACCEPT_ENCODING'='gzip, deflate'\n
HTTP_ACCEPT_LANGUAGE'='en-US,en;q=0.5'\n
HTTP_CONNECTION'='keep-alive'\n
HTTP_HOST'='10.128.29.39'\n
HTTP_USER_AGENT'='Mozilla/5.0 (Windows NT 6.1; WOW64; rv:19.0) Gecko/20100101 
Firefox/19.0 FirePHP/0.7.1'\n
PATH'='/usr/pkg/...[SNIP]'\n
QUERY_STRING'=''\n
REMOTE_ADDR'='10.128.29.148'\n
REMOTE_PORT'='11324'\n
REQUEST_METHOD'='GET'\n
REQUEST_URI'='/cgi-bin/SBC.cgi'\n
SCRIPT_FILENAME'='/usr/pkg/share/httpd/htdocs/JC84/cgi-bin/SBC.cgi'\n
SCRIPT_NAME'='/cgi-bin/SBC.cgi'\n
SERVER_ADDR'='10.128.29.39'\n
SERVER_ADMIN'='mc_...@yahoo.com'\n
SERVER_NAME'='10.128.29.39'\n
SERVER_PORT'='80'\n
SERVER_PROTOCOL'='HTTP/1.1'\n
SERVER_SIGNATURE'=''\n
SERVER_SOFTWARE'='Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8m DAV/2'\n"

See? No Query_String!

Apache does receive the request ok according to this log:

# grep "SBC=A1" /var/log/httpd/access_log
29.148 - - [11/Apr/2013:23:13:10 -0400] "GET /JC84/SBCs.html?SBC=A1 HTTP/1.1" 
304 -


Could this be because my CGI is being invoked as a Server-Side-Event source 
(HTTP_ACCEPT'='text/event-stream') ??  Can I fix this issue by changing 
Apache's configuration?   

Any help greatly appreciated.

Thanks,
Ian 


[users@httpd] client disconnect (httpd 2.4.2)

2013-04-12 Thread Jonghyun Kahng

We tried httpd 2.4.2 and mod_jk 1.2.37 with tomcat 7.0. One of our service is 
to download files. After httpd was upgrade from 2.2.19 to 2.4.2, we are not 
able to download large files (~2 GB). A download prematurely terminates. Below 
is the error message in tomcat log when it happens. We had to go back to httpd 
2.2.19/mod_jk 1.2.27.

ClientAbortException:  java.net.SocketException: Broken pipe
 at 
org.apache.catalina.connector.OutputBuffer.realWriteBytes(OutputBuffer.java:366)
 at org.apache.tomcat.util.buf.ByteChunk.flushBuffer(ByteChunk.java:432)
 at org.apache.tomcat.util.buf.ByteChunk.append(ByteChunk.java:347)
 at 
org.apache.catalina.connector.OutputBuffer.writeBytes(OutputBuffer.java:392)
 at org.apache.catalina.connector.OutputBuffer.write(OutputBuffer.java:381)
 at 
org.apache.catalina.connector.CoyoteOutputStream.write(CoyoteOutputStream.java:89)
 at 
com.broadon.filter.AccessFilterOutputStream.write(AccessFilterOutputStream.java:26)
 at 
com.broadon.ccs.util.ContentFactory.writeContent(ContentFactory.java:501)

We want to upgrade httpd if we can resolve this issue. I'd appreciate any 
suggestion.

Jong


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] client disconnect (httpd 2.4.2)

2013-04-12 Thread Eric Covener
What about the HTTP server logs?

On Fri, Apr 12, 2013 at 12:58 PM, Jonghyun Kahng  wrote:
> We tried httpd 2.4.2 and mod_jk 1.2.37 with tomcat 7.0. One of our service
> is to download files. After httpd was upgrade from 2.2.19 to 2.4.2, we are
> not able to download large files (~2 GB). A download prematurely terminates.
> Below is the error message in tomcat log when it happens. We had to go back
> to httpd 2.2.19/mod_jk 1.2.27.
>
> ClientAbortException:  java.net.SocketException: Broken pipe
>  at
> org.apache.catalina.connector.OutputBuffer.realWriteBytes(OutputBuffer.java:366)
>  at org.apache.tomcat.util.buf.ByteChunk.flushBuffer(ByteChunk.java:432)
>  at org.apache.tomcat.util.buf.ByteChunk.append(ByteChunk.java:347)
>  at
> org.apache.catalina.connector.OutputBuffer.writeBytes(OutputBuffer.java:392)
>  at
> org.apache.catalina.connector.OutputBuffer.write(OutputBuffer.java:381)
>  at
> org.apache.catalina.connector.CoyoteOutputStream.write(CoyoteOutputStream.java:89)
>  at
> com.broadon.filter.AccessFilterOutputStream.write(AccessFilterOutputStream.java:26)
>  at
> com.broadon.ccs.util.ContentFactory.writeContent(ContentFactory.java:501)
>
> We want to upgrade httpd if we can resolve this issue. I'd appreciate any
> suggestion.
>
> Jong
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>



-- 
Eric Covener
cove...@gmail.com

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] root process running Apache

2013-04-12 Thread Torsten Förtsch
On 12/04/13 18:38, wejii wrote:
> I read several times "don't run apache as root".
> ps -ef gives me the following:
> 
> root  1448 1  0 Apr11 ?00:00:04 /usr/sbin/apache2 -k start
> www-data  1712  1448  0 Apr11 ?00:00:00 /usr/sbin/apache2 -k start
> www-data  1713  1448  0 Apr11 ?00:00:00 /usr/sbin/apache2 -k start
> www-data  1714  1448  0 Apr11 ?00:00:00 /usr/sbin/apache2 -k start
> www-data  1715  1448  0 Apr11 ?00:00:00 /usr/sbin/apache2 -k start
> www-data  1716  1448  0 Apr11 ?00:00:00 /usr/sbin/apache2 -k start
> www-data  7304  1448  0 11:14 ?00:00:00 /usr/sbin/apache2 -k start
> www-data  7305  1448  0 11:14 ?00:00:00 /usr/sbin/apache2 -k start
> www-data  7306  1448  0 11:14 ?00:00:00 /usr/sbin/apache2 -k start
> 
> 
> My question is - what is that root process?  Should I ignore it?

The root process is required to bind to port 80. It does not serve
requests but only monitors its children. The output above shows this in
the 3rd column. The root process it the parent of all the other processes.

When a child is born one of the first things it does is to change its UID.

So, the phrase you cited rather relates to the configuration directive

  User root

But in this case a HTTPD >=2.0 refuses to start if it hasn't been
compiled with a special compile time option.

So, your processes are completely normal. Nothing to worry about.

Torsten

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[users@httpd] Biggest Fake Conference in Computer Science

2013-04-12 Thread nelsonsteves
We are researchers from different parts of the world and conducted a study on  
the world’s biggest bogus computer science conference WORLDCOMP 
( http://sites.google.com/site/worlddump1 ) organized by Prof. Hamid Arabnia 
from University of Georgia, USA.


We submitted a fake paper to WORLDCOMP 2011 and again (the 
same paper with a modified title) to WORLDCOMP 2012. This paper 
had numerous fundamental mistakes. Sample statements from 
that paper include: 

(1). Binary logic is fuzzy logic and vice versa
(2). Pascal developed fuzzy logic
(3). Object oriented languages do not exhibit any polymorphism or inheritance
(4). TCP and IP are synonyms and are part of OSI model 
(5). Distributed systems deal with only one computer
(6). Laptop is an example for a super computer
(7). Operating system is an example for computer hardware


Also, our paper did not express any conceptual meaning.  However, it 
was accepted both the times without any modifications (and without 
any reviews) and we were invited to submit the final paper and a 
payment of $500+ fee to present the paper. We decided to use the 
fee for better purposes than making Prof. Hamid Arabnia (Chairman 
of WORLDCOMP) rich. After that, we received few reminders from 
WORLDCOMP to pay the fee but we never responded. 


We MUST say that you should look at the above website if you have any thoughts 
to submit a paper to WORLDCOMP.  DBLP and other indexing agencies 
have stopped indexing WORLDCOMP’s proceedings since 2011 due to its fakeness. 
See http://www.informatik.uni-trier.de/~ley/db/conf/icai/index.html for of one 
of the 
conferences of WORLDCOMP and notice that there is no listing after 2010. See 
http://sites.google.com/site/dumpconf for comments from well-known researchers 
about WORLDCOMP. If WORLDCOMP is not fake then why did DBLP suddenly stopped 
listing the proceedings after? 


The status of your WORLDCOMP papers can be changed from “scientific” 
to “other” (i.e., junk or non-technical) at any time. See the comments 
http://www.mail-archive.com/tccc@lists.cs.columbia.edu/msg05168.html   
of a respected researcher on this. Better not to have a paper than 
having it in WORLDCOMP and spoil the resume and peace of mind forever!


Our study revealed that WORLDCOMP is a money making business, 
using University of Georgia mask, for Prof. Hamid Arabnia. He is throwing 
out a small chunk of that money (around 20 dollars per paper published 
in WORLDCOMP’s proceedings) to his puppet (Mr. Ashu Solo or A.M.G. Solo) 
who publicizes WORLDCOMP and also defends it at various forums, using 
fake/anonymous names. The puppet uses fake names and defames other conferences
to divert traffic to WORLDCOMP. He also makes anonymous phone calls and 
threatens the critiques of WORLDCOMP (see Item 7 in Section 5 of 
http://sites.google.com/site/dumpconf ).That is, the puppet does all 
his best to get a maximum number of papers published at WORLDCOMP to 
get more money into his (and Prof. Hamid Arabnia’s) pockets. 


Monte Carlo Resort (the venue of WORLDCOMP until 2012) has refused to 
provide the venue for WORLDCOMP’13 because of the fears of their image 
being tarnished due to WORLDCOMP’s fraudulent activities. WORLDCOMP’13 
will be held at a different resort.


WORLDCOMP will not be held after 2013. 


The paper submission deadline for WORLDCOMP’13 was March 18 and it was 
extended to April 6 and now it is extended to April 20 (it may be extended 
again) but still there are no committee members, no reviewers, and there is no 
conference Chairman. The only contact details available on WORLDCOMP’s 
website is just an email address! Prof. Hamid Arabnia expends the deadline 
to get more papers (means, more registration fee into his pocket!).


Let us make a direct request to Prof. Hamid arabnia: publish all reviews for 
all the papers (after blocking identifiable details) since 2000 conference. 
Reveal the names and affiliations of all the reviewers (for each year) 
and how many papers each reviewer had reviewed on average. We also request 
him to look at the Open Challenge at https://sites.google.com/site/moneycomp1 


Sorry for posting to multiple lists. Spreading the word is the only way to stop 
this bogus conference. Please forward this message to other mailing lists and 
people. 


We are shocked with Prof. Hamid Arabnia and his puppet’s activities 
http://worldcomp-fake-bogus.blogspot.com   Search Google using the 
keyword worldcomp fake for additional links.


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Core dump in Oracle HTTP Server build on Apache 1.3

2013-04-12 Thread Techienote com
On Fri, Apr 12, 2013 at 10:12 PM, Jeff Trawick  wrote:

>  On Fri, Apr 12, 2013 at 12:10 PM, Techienote com <
> techienote@gmail.com> wrote:
>
>>
>>
>>  On Fri, Apr 12, 2013 at 4:59 PM, Jeff Trawick  wrote:
>>
>>>  On Fri, Apr 12, 2013 at 2:51 AM, Techienote com <
>>> techienote@gmail.com> wrote:
>>>
  Hi Folks,



 Recently we are facing core dump in Oracle HTTP Server which is build
 on Apache 1.3



 Following is the output of httpd -V command


 ---

 Server version: Oracle-Application-Server-10g/10.1.3.1.0
 Oracle-HTTP-Server
 Server built:   Sep 22 2006 04:35:27
 Server's Module Magic Number: 19990320:18
 Server compiled with
  -D EAPI
  -D EAPI_MM
  -D EAPI_MM_CORE_PATH="logs/mm"
  -D HAVE_MMAP
  -D USE_MMAP_SCOREBOARD
  -D USE_MMAP_FILES
  -D HAVE_FCNTL_SERIALIZED_ACCEPT
  -D HAVE_SYSVSEM_SERIALIZED_ACCEPT
  -D HAVE_PTHREAD_SERIALIZED_ACCEPT
  -D DYNAMIC_MODULE_LIMIT=64
  -D HARD_SERVER_LIMIT=8192
  -D HTTPD_ROOT="/tmp/apache"
  -D SUEXEC_BIN="/tmp/apache/bin/suexec"
  -D DEFAULT_PIDLOG="logs/httpd.pid"
  -D DEFAULT_SCOREBOARD="logs/httpd.scoreboard"
  -D DEFAULT_LOCKFILE="logs/httpd.lock"
  -D DEFAULT_ERRORLOG="logs/error_log"
  -D TYPES_CONFIG_FILE="conf/mime.types"
  -D SERVER_CONFIG_FILE="conf/httpd.conf"
  -D ACCESS_CONFIG_FILE="conf/access.conf"
  -D RESOURCE_CONFIG_FILE="conf/srm.conf"


 --



 I have tried to run the same using pstack command. Following is the
 output of the pstack command




 ---

 core 'core' of 13893:   /ora10gas/OracleAS/Apache/Apache/bin/httpd -d
 /ora10gas/OracleAS/Apach
 -  lwp# 1 / thread# 1  
  ff091a28 memcpy   (ffbfc998, fddb2838, ffbff1e4, ffbff1f4, fe0d3d64,
 fe0d3d84) + 104c
  fe063bbc shmcb_retrieve_session (259f40, fddb2838, ffbff270, 6b63feff,
 80808080, 1010101) + 118
  fe063044 ssl_scache_shmcb_retrieve (259f40, ffbff2e0, 20683c,
 ffbff60c, 468740, 468e74) + 7c
  fe061430 ssl_scache_retrieve (259f40, ffbff360, 0, 0, 46895c,
 ffbff3a0) + f4
  fe05e8f4 ssl_callback_GetSessionCacheEntry (2000, 33f498, ,
 , ffbff6f8, 4683c4) + 88

>>>
>>> SSLSessionCache none (or something) will avoid this code/crash, but
>>> you'll likely encounter noticeable performance degradation (client response
>>> time and/or server CPU).  Unless the crash is happening very frequently
>>> (i.e., severely affecting service) you probably don't want to do that.
>>>
>>> You need to get assistance from Oracle.  This is a proprietary SSL
>>> toolkit and proprietary patches to old levels of open source.
>>>
>>> Can you please let me know why you are suspecting SSLSessionCache?
>>
>
> Because the stack traces I responded to above are for looking up session
> cache entries...
>
I have gone through the link
http://publib.boulder.ibm.com/httpserv/ihsdiag/get_backtrace.html
As per this following is my pflag output of core dump
-
core 'core' of 13893: /ora10gas/OracleAS/Apache/Apache/bin/httpd -d
/ora10gas/OracleAS/Apach
data model = _ILP32 flags = MSACCT|MSFORK
/1: flags = STOPPED
why = PR_SUSPENDED
lwppend = 0x0400,0x
/2: flags = DETACH
sigmask = 0xfefd,0x cursig = SIGSEGV
/3: flags = DETACH|STOPPED lwp_park(0x4,0xfdafbe08,0x0)
why = PR_SUSPENDED
sigmask = 0xe001,0x
-

Note that thread 2 has cursig = SIGSEGV next to it. That is the flag that
Solaris thinks did the dirty deed. Thread 2 output is as follows

- lwp# 2 / thread# 2 
ff16e298 __pollsys (fdc1be68, 0, fdc1bed0, 0, 0, 0) + 8
ff109abc pselect (fdc1be68, ff1e6790, ff1e6790, 0, fdc1bed0, 0) + 1c8
ff109e34 select (0, 0, 0, 0, fdc1bf38, fe002394) + a0
fe0035d8 swwwcsl_Sleep (ea60, 7, fe012d30, 3645, fdb00200, 1) + 40
fe00470c wwccuctp_CleanupThreadProc (42bca0, fdc1c000, 0, 0, fe00465c, 1) +
b0
ff16a9c8 _lwp_start (0, 0, 0, 0, 0, 0)

So i want to understand why you are suspecting thread 1


>
>
>>
>>>
   fe1730bc nzospGetSession (ffbff448, ffbff450, 4683cc, 468740,
 468740, 45b2cb) + 24
  f87fdde0 ssl_Hshk_GetSessionID (20, 468909, ffbff534, 4, 468710,
 468740) + a8
  f8884274 ssl_Hshk_Priv_GetSessionDBRecord (468710, ffbff53f, f

[users@httpd] htaccess priority

2013-04-12 Thread Ezequiel M. Cardinali
Hi

Is there any way to priorize one .htaccess file to the others? 
I need to restrict users from a shared hosting server to change some 
configurations in the server.
I cannot use AllowOverride, because I need to permit to use the Rewrites 
directives but not 
SetHandler and this directives are in FileInfo directive-type.

Thank you!

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] client disconnect (httpd 2.4.2)

2013-04-12 Thread Jonghyun Kahng
Nothing particular in error log. In access log, there is a corresponding 
record like


[10/Apr/2013:00:30:00 -0700] 213.198.82.5 "213.198.82.5" "-" - "-" 
abc.com "GET /download/5713001080022099 HTTP/1.1" "-" "-" "-" "-" 
65235073usec. 200 245752 X


Note "X" at the end.

Jong

On 4/12/2013 10:03 AM, Eric Covener wrote:

What about the HTTP server logs?

On Fri, Apr 12, 2013 at 12:58 PM, Jonghyun Kahng  wrote:

We tried httpd 2.4.2 and mod_jk 1.2.37 with tomcat 7.0. One of our service
is to download files. After httpd was upgrade from 2.2.19 to 2.4.2, we are
not able to download large files (~2 GB). A download prematurely terminates.
Below is the error message in tomcat log when it happens. We had to go back
to httpd 2.2.19/mod_jk 1.2.27.

ClientAbortException:  java.net.SocketException: Broken pipe
  at
org.apache.catalina.connector.OutputBuffer.realWriteBytes(OutputBuffer.java:366)
  at org.apache.tomcat.util.buf.ByteChunk.flushBuffer(ByteChunk.java:432)
  at org.apache.tomcat.util.buf.ByteChunk.append(ByteChunk.java:347)
  at
org.apache.catalina.connector.OutputBuffer.writeBytes(OutputBuffer.java:392)
  at
org.apache.catalina.connector.OutputBuffer.write(OutputBuffer.java:381)
  at
org.apache.catalina.connector.CoyoteOutputStream.write(CoyoteOutputStream.java:89)
  at
com.broadon.filter.AccessFilterOutputStream.write(AccessFilterOutputStream.java:26)
  at
com.broadon.ccs.util.ContentFactory.writeContent(ContentFactory.java:501)

We want to upgrade httpd if we can resolve this issue. I'd appreciate any
suggestion.

Jong


-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org







-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Core dump in Oracle HTTP Server build on Apache 1.3

2013-04-12 Thread Jeff Trawick
On Fri, Apr 12, 2013 at 1:22 PM, Techienote com wrote:

>
>
> On Fri, Apr 12, 2013 at 10:12 PM, Jeff Trawick  wrote:
>
>>  On Fri, Apr 12, 2013 at 12:10 PM, Techienote com <
>> techienote@gmail.com> wrote:
>>
>>>
>>>
>>>  On Fri, Apr 12, 2013 at 4:59 PM, Jeff Trawick wrote:
>>>
  On Fri, Apr 12, 2013 at 2:51 AM, Techienote com <
 techienote@gmail.com> wrote:

>  Hi Folks,
>
>
>
> Recently we are facing core dump in Oracle HTTP Server which is build
> on Apache 1.3
>
>
>
> Following is the output of httpd -V command
>
>
> ---
>
> Server version: Oracle-Application-Server-10g/10.1.3.1.0
> Oracle-HTTP-Server
> Server built:   Sep 22 2006 04:35:27
> Server's Module Magic Number: 19990320:18
> Server compiled with
>  -D EAPI
>  -D EAPI_MM
>  -D EAPI_MM_CORE_PATH="logs/mm"
>  -D HAVE_MMAP
>  -D USE_MMAP_SCOREBOARD
>  -D USE_MMAP_FILES
>  -D HAVE_FCNTL_SERIALIZED_ACCEPT
>  -D HAVE_SYSVSEM_SERIALIZED_ACCEPT
>  -D HAVE_PTHREAD_SERIALIZED_ACCEPT
>  -D DYNAMIC_MODULE_LIMIT=64
>  -D HARD_SERVER_LIMIT=8192
>  -D HTTPD_ROOT="/tmp/apache"
>  -D SUEXEC_BIN="/tmp/apache/bin/suexec"
>  -D DEFAULT_PIDLOG="logs/httpd.pid"
>  -D DEFAULT_SCOREBOARD="logs/httpd.scoreboard"
>  -D DEFAULT_LOCKFILE="logs/httpd.lock"
>  -D DEFAULT_ERRORLOG="logs/error_log"
>  -D TYPES_CONFIG_FILE="conf/mime.types"
>  -D SERVER_CONFIG_FILE="conf/httpd.conf"
>  -D ACCESS_CONFIG_FILE="conf/access.conf"
>  -D RESOURCE_CONFIG_FILE="conf/srm.conf"
>
>
> --
>
>
>
> I have tried to run the same using pstack command. Following is the
> output of the pstack command
>
>
>
>
> ---
>
> core 'core' of 13893:   /ora10gas/OracleAS/Apache/Apache/bin/httpd -d
> /ora10gas/OracleAS/Apach
> -  lwp# 1 / thread# 1  
>  ff091a28 memcpy   (ffbfc998, fddb2838, ffbff1e4, ffbff1f4, fe0d3d64,
> fe0d3d84) + 104c
>  fe063bbc shmcb_retrieve_session (259f40, fddb2838, ffbff270,
> 6b63feff, 80808080, 1010101) + 118
>  fe063044 ssl_scache_shmcb_retrieve (259f40, ffbff2e0, 20683c,
> ffbff60c, 468740, 468e74) + 7c
>  fe061430 ssl_scache_retrieve (259f40, ffbff360, 0, 0, 46895c,
> ffbff3a0) + f4
>  fe05e8f4 ssl_callback_GetSessionCacheEntry (2000, 33f498, ,
> , ffbff6f8, 4683c4) + 88
>

 SSLSessionCache none (or something) will avoid this code/crash, but
 you'll likely encounter noticeable performance degradation (client response
 time and/or server CPU).  Unless the crash is happening very frequently
 (i.e., severely affecting service) you probably don't want to do that.

 You need to get assistance from Oracle.  This is a proprietary SSL
 toolkit and proprietary patches to old levels of open source.

 Can you please let me know why you are suspecting SSLSessionCache?
>>>
>>
>> Because the stack traces I responded to above are for looking up session
>> cache entries...
>>
> I have gone through the link
> http://publib.boulder.ibm.com/httpserv/ihsdiag/get_backtrace.html
> As per this following is my pflag output of core dump
>
> -
> core 'core' of 13893: /ora10gas/OracleAS/Apache/Apache/bin/httpd -d
> /ora10gas/OracleAS/Apach
> data model = _ILP32 flags = MSACCT|MSFORK
> /1: flags = STOPPED
> why = PR_SUSPENDED
> lwppend = 0x0400,0x
> /2: flags = DETACH
> sigmask = 0xfefd,0x cursig = SIGSEGV
> /3: flags = DETACH|STOPPED lwp_park(0x4,0xfdafbe08,0x0)
> why = PR_SUSPENDED
> sigmask = 0xe001,0x
>
> -
>
> Note that thread 2 has cursig = SIGSEGV next to it. That is the flag that
> Solaris thinks did the dirty deed. Thread 2 output is as follows
>
>
> - lwp# 2 / thread# 2 
> ff16e298 __pollsys (fdc1be68, 0, fdc1bed0, 0, 0, 0) + 8
> ff109abc pselect (fdc1be68, ff1e6790, ff1e6790, 0, fdc1bed0, 0) + 1c8
> ff109e34 select (0, 0, 0, 0, fdc1bf38, fe002394) + a0
> fe0035d8 swwwcsl_Sleep (ea60, 7, fe012d30, 3645, fdb00200, 1) + 40
> fe00470c wwccuctp_CleanupThreadProc (42bca0, fdc1c000, 0, 0, fe00465c, 1)
> + b0
> ff16a9c8 _lwp_start (0, 0, 0, 0, 0, 0)
>
> So i want to understand why you are suspecting thread 1
>
>
>>
>>
>>>

>   fe1730bc nzospGetSes

Re: [users@httpd] Core dump in Oracle HTTP Server build on Apache 1.3

2013-04-12 Thread Jeff Trawick
On Fri, Apr 12, 2013 at 2:51 AM, Techienote com wrote:

> Hi Folks,
>
>
>
> Recently we are facing core dump in Oracle HTTP Server which is build on
> Apache 1.3
>
>
>
> Following is the output of httpd -V command
>
>
> ---
>
> Server version: Oracle-Application-Server-10g/10.1.3.1.0 Oracle-HTTP-Server
>

Isn't the current maintenance level for this something like 10.1.3.5.x


> Server built:   Sep 22 2006 04:35:27
>

+ CPUs?



> Server's Module Magic Number: 19990320:18
> Server compiled with
>  -D EAPI
>  -D EAPI_MM
>  -D EAPI_MM_CORE_PATH="logs/mm"
>  -D HAVE_MMAP
>  -D USE_MMAP_SCOREBOARD
>  -D USE_MMAP_FILES
>  -D HAVE_FCNTL_SERIALIZED_ACCEPT
>  -D HAVE_SYSVSEM_SERIALIZED_ACCEPT
>  -D HAVE_PTHREAD_SERIALIZED_ACCEPT
>  -D DYNAMIC_MODULE_LIMIT=64
>  -D HARD_SERVER_LIMIT=8192
>  -D HTTPD_ROOT="/tmp/apache"
>  -D SUEXEC_BIN="/tmp/apache/bin/suexec"
>  -D DEFAULT_PIDLOG="logs/httpd.pid"
>  -D DEFAULT_SCOREBOARD="logs/httpd.scoreboard"
>  -D DEFAULT_LOCKFILE="logs/httpd.lock"
>  -D DEFAULT_ERRORLOG="logs/error_log"
>  -D TYPES_CONFIG_FILE="conf/mime.types"
>  -D SERVER_CONFIG_FILE="conf/httpd.conf"
>  -D ACCESS_CONFIG_FILE="conf/access.conf"
>  -D RESOURCE_CONFIG_FILE="conf/srm.conf"
>
>
> --
>
>
>
> I have tried to run the same using pstack command. Following is the output
> of the pstack command
>
>
>
>
> ---
>
> core 'core' of 13893:   /ora10gas/OracleAS/Apache/Apache/bin/httpd -d
> /ora10gas/OracleAS/Apach
> -  lwp# 1 / thread# 1  
>  ff091a28 memcpy   (ffbfc998, fddb2838, ffbff1e4, ffbff1f4, fe0d3d64,
> fe0d3d84) + 104c
>  fe063bbc shmcb_retrieve_session (259f40, fddb2838, ffbff270, 6b63feff,
> 80808080, 1010101) + 118
>  fe063044 ssl_scache_shmcb_retrieve (259f40, ffbff2e0, 20683c, ffbff60c,
> 468740, 468e74) + 7c
>  fe061430 ssl_scache_retrieve (259f40, ffbff360, 0, 0, 46895c, ffbff3a0) +
> f4
>  fe05e8f4 ssl_callback_GetSessionCacheEntry (2000, 33f498, ,
> , ffbff6f8, 4683c4) + 88
>  fe1730bc nzospGetSession (ffbff448, ffbff450, 4683cc, 468740, 468740,
> 45b2cb) + 24
>  f87fdde0 ssl_Hshk_GetSessionID (20, 468909, ffbff534, 4, 468710, 468740)
> + a8
>  f8884274 ssl_Hshk_Priv_GetSessionDBRecord (468710, ffbff53f, ffbff534,
> 468964, 0, 1) + 74
>  f8883f04 ssl_Hshk_Priv_ProcessClientHello (300, 300, 469190, 468710, 0,
> ffbff5b0) + 174
>  f8879d24 STM_ExecuteLine (455238, f906374c, 1001, 469190, 0, 45525c) + 40
>  f8879a94 STM_DoOneCycle (455238, ffbff6dc, 20683c, ffbff60c, 468740,
> 468e74) + 148
>  f88798fc STM_Operate (455238, ffbff6dc, f8882b74, 468710, 46895c, 20683c)
> + 14
>  f87f3f90 ssl_Hshk_HandshakeProceed (468710, 0, 0, 4000, ffbff6f8, 4683c4)
> + b0
>  f87f2a1c ssl_Handshake (468710, 810a0038, 810d0013, 810d, ffbff780,
> 4683c4) + 30
>  fe16d80c nzos_Handshake (4683b8, 33f4cc, 434478, fff8, 0, 4364b0) + b0
>  fe05ca90 SSL_new_server_side (fe100818, 33f4cc, fe0ec98c, 2400, 2664,
> 4314b0) + 13c
>  fe05c8a0 ssl_hook_NewConnection (431440, 91314, 9b3f0, ffbff8d8, 8c4c0,
> 902ec) + 14c
>  00030538 new_connection (a59e0, 933a0, a5a18, ffbff994, ffbff984, 2) + 12c
>  00031ee4 child_main (90ad4, d8c, e20, a7c, 1800, c00) + 95c
>  00032278 make_child (933a0, 2, 516551db, 10, 1cf4, ff1e8140) + 16c
>  00032358 startup_children (5, 14, 869d8, 1b840, 0, 21cc8) + 8c
>  00032be8 standalone_main (800, 878, c00, d64, 1800, 1a44c) + 28c
>  00033820 main (c00, dec, 1800, 1a20, 1800, 19ec) + 568
>  000193c0 _start   (0, 0, 0, 0, 0, 0) + 108
> -  lwp# 2 / thread# 2  
>  ff16e298 __pollsys (fdc1be68, 0, fdc1bed0, 0, 0, 0) + 8
>  ff109abc pselect  (fdc1be68, ff1e6790, ff1e6790, 0, fdc1bed0, 0) + 1c8
>  ff109e34 select   (0, 0, 0, 0, fdc1bf38, fe002394) + a0
>  fe0035d8 swwwcsl_Sleep (ea60, 7, fe012d30, 3645, fdb00200, 1) + 40
>  fe00470c wwccuctp_CleanupThreadProc (42bca0, fdc1c000, 0, 0, fe00465c, 1)
> + b0
>  ff16a9c8 _lwp_start (0, 0, 0, 0, 0, 0)
> -  lwp# 3 / thread# 3  
>  ff16aa6c __lwp_park (1, 42be50, fdafbe08, 0, 7dc18, 0) + 14
>  ff164ab0 cond_wait_queue (42bdc8, 42be50, fdafbe08, 0, 0, 0) + 4c
>  ff164ef4 cond_wait_common (42bdc8, 42be50, fdafbe08, 0, 0, 0) + 294
>  ff165088 _cond_timedwait (42bdc8, 42be50, fdafbed0, 0, 0, 0) + 34
>  ff16517c cond_timedwait (42bdc8, 42be50, fdafbed0, 0, 0, fdafbed8) + 14
>  f8df683c sltspctimewait (21e658, 3f99e0, 3f99e4, 493e0, 42be50, ff163f48)
> + d4
>  fe0034ac swwwctwe_TimedWaitForEvent (3f99e0, 493e0, fe0121ec, 8, f4240,
> 0) + 40
>  fe000afc wwchmctp_CHMThreadProc (18f4, 1800, 1800, 1800, 1800, 1a3c) + 118
>  ff16a9c8 _lwp_start (0, 0, 0, 0, 0, 0)
>
>
> ---

Re: [users@httpd] Core dump in Oracle HTTP Server build on Apache 1.3

2013-04-12 Thread Techienote com
On Fri, Apr 12, 2013 at 11:39 PM, Jeff Trawick  wrote:

>
>  On Fri, Apr 12, 2013 at 2:51 AM, Techienote com  > wrote:
>
>>  Hi Folks,
>>
>>
>>
>> Recently we are facing core dump in Oracle HTTP Server which is build on
>> Apache 1.3
>>
>>
>>
>> Following is the output of httpd -V command
>>
>>
>> ---
>>
>> Server version: Oracle-Application-Server-10g/10.1.3.1.0
>> Oracle-HTTP-Server
>>
>
> Isn't the current maintenance level for this something like 10.1.3.5.x
>
Yes i know it. Oracle has suggested to upgrade the same.

>
>
>>  Server built:   Sep 22 2006 04:35:27
>>
>
> + CPUs?
>
1

>
>
>
>>  Server's Module Magic Number: 19990320:18
>> Server compiled with
>>  -D EAPI
>>  -D EAPI_MM
>>  -D EAPI_MM_CORE_PATH="logs/mm"
>>  -D HAVE_MMAP
>>  -D USE_MMAP_SCOREBOARD
>>  -D USE_MMAP_FILES
>>  -D HAVE_FCNTL_SERIALIZED_ACCEPT
>>  -D HAVE_SYSVSEM_SERIALIZED_ACCEPT
>>  -D HAVE_PTHREAD_SERIALIZED_ACCEPT
>>  -D DYNAMIC_MODULE_LIMIT=64
>>  -D HARD_SERVER_LIMIT=8192
>>  -D HTTPD_ROOT="/tmp/apache"
>>  -D SUEXEC_BIN="/tmp/apache/bin/suexec"
>>  -D DEFAULT_PIDLOG="logs/httpd.pid"
>>  -D DEFAULT_SCOREBOARD="logs/httpd.scoreboard"
>>  -D DEFAULT_LOCKFILE="logs/httpd.lock"
>>  -D DEFAULT_ERRORLOG="logs/error_log"
>>  -D TYPES_CONFIG_FILE="conf/mime.types"
>>  -D SERVER_CONFIG_FILE="conf/httpd.conf"
>>  -D ACCESS_CONFIG_FILE="conf/access.conf"
>>  -D RESOURCE_CONFIG_FILE="conf/srm.conf"
>>
>>
>> --
>>
>>
>>
>> I have tried to run the same using pstack command. Following is the
>> output of the pstack command
>>
>>
>>
>>
>> ---
>>
>> core 'core' of 13893:   /ora10gas/OracleAS/Apache/Apache/bin/httpd -d
>> /ora10gas/OracleAS/Apach
>> -  lwp# 1 / thread# 1  
>>  ff091a28 memcpy   (ffbfc998, fddb2838, ffbff1e4, ffbff1f4, fe0d3d64,
>> fe0d3d84) + 104c
>>  fe063bbc shmcb_retrieve_session (259f40, fddb2838, ffbff270, 6b63feff,
>> 80808080, 1010101) + 118
>>  fe063044 ssl_scache_shmcb_retrieve (259f40, ffbff2e0, 20683c, ffbff60c,
>> 468740, 468e74) + 7c
>>  fe061430 ssl_scache_retrieve (259f40, ffbff360, 0, 0, 46895c, ffbff3a0)
>> + f4
>>  fe05e8f4 ssl_callback_GetSessionCacheEntry (2000, 33f498, ,
>> , ffbff6f8, 4683c4) + 88
>>  fe1730bc nzospGetSession (ffbff448, ffbff450, 4683cc, 468740, 468740,
>> 45b2cb) + 24
>>  f87fdde0 ssl_Hshk_GetSessionID (20, 468909, ffbff534, 4, 468710, 468740)
>> + a8
>>  f8884274 ssl_Hshk_Priv_GetSessionDBRecord (468710, ffbff53f, ffbff534,
>> 468964, 0, 1) + 74
>>  f8883f04 ssl_Hshk_Priv_ProcessClientHello (300, 300, 469190, 468710, 0,
>> ffbff5b0) + 174
>>  f8879d24 STM_ExecuteLine (455238, f906374c, 1001, 469190, 0, 45525c) + 40
>>  f8879a94 STM_DoOneCycle (455238, ffbff6dc, 20683c, ffbff60c, 468740,
>> 468e74) + 148
>>  f88798fc STM_Operate (455238, ffbff6dc, f8882b74, 468710, 46895c,
>> 20683c) + 14
>>  f87f3f90 ssl_Hshk_HandshakeProceed (468710, 0, 0, 4000, ffbff6f8,
>> 4683c4) + b0
>>  f87f2a1c ssl_Handshake (468710, 810a0038, 810d0013, 810d, ffbff780,
>> 4683c4) + 30
>>  fe16d80c nzos_Handshake (4683b8, 33f4cc, 434478, fff8, 0, 4364b0) +
>> b0
>>  fe05ca90 SSL_new_server_side (fe100818, 33f4cc, fe0ec98c, 2400, 2664,
>> 4314b0) + 13c
>>  fe05c8a0 ssl_hook_NewConnection (431440, 91314, 9b3f0, ffbff8d8, 8c4c0,
>> 902ec) + 14c
>>  00030538 new_connection (a59e0, 933a0, a5a18, ffbff994, ffbff984, 2) +
>> 12c
>>  00031ee4 child_main (90ad4, d8c, e20, a7c, 1800, c00) + 95c
>>  00032278 make_child (933a0, 2, 516551db, 10, 1cf4, ff1e8140) + 16c
>>  00032358 startup_children (5, 14, 869d8, 1b840, 0, 21cc8) + 8c
>>  00032be8 standalone_main (800, 878, c00, d64, 1800, 1a44c) + 28c
>>  00033820 main (c00, dec, 1800, 1a20, 1800, 19ec) + 568
>>  000193c0 _start   (0, 0, 0, 0, 0, 0) + 108
>> -  lwp# 2 / thread# 2  
>>  ff16e298 __pollsys (fdc1be68, 0, fdc1bed0, 0, 0, 0) + 8
>>  ff109abc pselect  (fdc1be68, ff1e6790, ff1e6790, 0, fdc1bed0, 0) + 1c8
>>  ff109e34 select   (0, 0, 0, 0, fdc1bf38, fe002394) + a0
>>  fe0035d8 swwwcsl_Sleep (ea60, 7, fe012d30, 3645, fdb00200, 1) + 40
>>  fe00470c wwccuctp_CleanupThreadProc (42bca0, fdc1c000, 0, 0, fe00465c,
>> 1) + b0
>>  ff16a9c8 _lwp_start (0, 0, 0, 0, 0, 0)
>> -  lwp# 3 / thread# 3  
>>  ff16aa6c __lwp_park (1, 42be50, fdafbe08, 0, 7dc18, 0) + 14
>>  ff164ab0 cond_wait_queue (42bdc8, 42be50, fdafbe08, 0, 0, 0) + 4c
>>  ff164ef4 cond_wait_common (42bdc8, 42be50, fdafbe08, 0, 0, 0) + 294
>>  ff165088 _cond_timedwait (42bdc8, 42be50, fdafbed0, 0, 0, 0) + 34
>>  ff16517c cond_timedwait (42bdc8, 42be50, fdafbed0, 0, 0, fdafbed8) + 14
>>  f8df683c sltspctimewait (21e658, 3f99e0, 3f99e4, 493e0, 42be50,
>> ff163f48) + d4
>>  fe0034ac swwwctw

[users@httpd] Re:Re: [users@httpd] client disconnect (httpd 2.4.2)

2013-04-12 Thread Esmq
i also observed the problem, 


the connection closed by server before the transfer complete~


and v2.4.4 also affected




At 2013-04-13 01:38:43,"Jonghyun Kahng"  wrote:

>Nothing particular in error log. In access log, there is a corresponding 
>record like
>
>[10/Apr/2013:00:30:00 -0700] 213.198.82.5 "213.198.82.5" "-" - "-" 
>abc.com "GET /download/5713001080022099 HTTP/1.1" "-" "-" "-" "-" 
>65235073usec. 200 245752 X
>
>Note "X" at the end.
>
>Jong
>
>On 4/12/2013 10:03 AM, Eric Covener wrote:
>> What about the HTTP server logs?
>>
>> On Fri, Apr 12, 2013 at 12:58 PM, Jonghyun Kahng  
>> wrote:
>>> We tried httpd 2.4.2 and mod_jk 1.2.37 with tomcat 7.0. One of our service
>>> is to download files. After httpd was upgrade from 2.2.19 to 2.4.2, we are
>>> not able to download large files (~2 GB). A download prematurely terminates.
>>> Below is the error message in tomcat log when it happens. We had to go back
>>> to httpd 2.2.19/mod_jk 1.2.27.
>>>
>>> ClientAbortException:  java.net.SocketException: Broken pipe
>>>   at
>>> org.apache.catalina.connector.OutputBuffer.realWriteBytes(OutputBuffer.java:366)
>>>   at 
>>> org.apache.tomcat.util.buf.ByteChunk.flushBuffer(ByteChunk.java:432)
>>>   at org.apache.tomcat.util.buf.ByteChunk.append(ByteChunk.java:347)
>>>   at
>>> org.apache.catalina.connector.OutputBuffer.writeBytes(OutputBuffer.java:392)
>>>   at
>>> org.apache.catalina.connector.OutputBuffer.write(OutputBuffer.java:381)
>>>   at
>>> org.apache.catalina.connector.CoyoteOutputStream.write(CoyoteOutputStream.java:89)
>>>   at
>>> com.broadon.filter.AccessFilterOutputStream.write(AccessFilterOutputStream.java:26)
>>>   at
>>> com.broadon.ccs.util.ContentFactory.writeContent(ContentFactory.java:501)
>>>
>>> We want to upgrade httpd if we can resolve this issue. I'd appreciate any
>>> suggestion.
>>>
>>> Jong
>>>
>>>
>>> -
>>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>>> For additional commands, e-mail: users-h...@httpd.apache.org
>>>
>>
>>
>
>
>-
>To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>For additional commands, e-mail: users-h...@httpd.apache.org
>


[users@httpd] Strange Apache logs - very slow loading time

2013-04-12 Thread Karol Pomaski
Hi All,

I need a help. I believe something is wrong. I have recently found a
strange information on my apache error.log:

[Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
attempt to connect to 107.6.106.10:80 (*) failed
root@ip-10-145-204-53:~# tail /var/www/shops/88/logs/error.log
[Sat Apr 13 00:08:28 2013] [error] [client 69.171.247.29] SSL Proxy
requested for ecom01088.stores-on.com:80 but not enabled [Hint:
SSLProxyEngine]
[Sat Apr 13 00:08:28 2013] [error] proxy: HTTPS: failed to enable ssl
support for 69.171.247.29:443 (www.facebook.com)
[Sat Apr 13 00:08:28 2013] [error] (110)Connection timed out: proxy: HTTP:
attempt to connect to 107.6.106.10:80 (*) failed
[Sat Apr 13 00:08:29 2013] [error] (110)Connection timed out: proxy: HTTP:
attempt to connect to 107.6.106.10:80 (*) failed
[Sat Apr 13 00:08:30 2013] [error] [client 69.171.247.29] SSL Proxy
requested for ecom01088.stores-on.com:80 but not enabled [Hint:
SSLProxyEngine]
[Sat Apr 13 00:08:30 2013] [error] proxy: HTTPS: failed to enable ssl
support for 69.171.247.29:443 (www.facebook.com)
[Sat Apr 13 00:08:31 2013] [error] [client 69.171.247.29] SSL Proxy
requested for ecom01088.stores-on.com:80 but not enabled [Hint:
SSLProxyEngine]
[Sat Apr 13 00:08:31 2013] [error] proxy: HTTPS: failed to enable ssl
support for 69.171.247.29:443 (www.facebook.com)
[Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
attempt to connect to 107.6.106.10:80 (*) failed
[Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
attempt to connect to 107.6.106.10:80 (*) failed

And every second the errors are appearing. Is this some kind of DDos
attack? Or the apache is misconfigured?
How can I get rid of this problem?

Thank you very much for any help on this. This is a high priority issue.

Regards,
Karol


Re: [users@httpd] Strange Apache logs - very slow loading time

2013-04-12 Thread Tom Evans
On Sat, Apr 13, 2013 at 1:12 AM, Karol Pomaski  wrote:
> Hi All,
>
> I need a help. I believe something is wrong. I have recently found a strange
> information on my apache error.log:
>
> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
> attempt to connect to 107.6.106.10:80 (*) failed
> root@ip-10-145-204-53:~# tail /var/www/shops/88/logs/error.log
> [Sat Apr 13 00:08:28 2013] [error] [client 69.171.247.29] SSL Proxy
> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
> SSLProxyEngine]
> [Sat Apr 13 00:08:28 2013] [error] proxy: HTTPS: failed to enable ssl
> support for 69.171.247.29:443 (www.facebook.com)
> [Sat Apr 13 00:08:28 2013] [error] (110)Connection timed out: proxy: HTTP:
> attempt to connect to 107.6.106.10:80 (*) failed
> [Sat Apr 13 00:08:29 2013] [error] (110)Connection timed out: proxy: HTTP:
> attempt to connect to 107.6.106.10:80 (*) failed
> [Sat Apr 13 00:08:30 2013] [error] [client 69.171.247.29] SSL Proxy
> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
> SSLProxyEngine]
> [Sat Apr 13 00:08:30 2013] [error] proxy: HTTPS: failed to enable ssl
> support for 69.171.247.29:443 (www.facebook.com)
> [Sat Apr 13 00:08:31 2013] [error] [client 69.171.247.29] SSL Proxy
> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
> SSLProxyEngine]
> [Sat Apr 13 00:08:31 2013] [error] proxy: HTTPS: failed to enable ssl
> support for 69.171.247.29:443 (www.facebook.com)
> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
> attempt to connect to 107.6.106.10:80 (*) failed
> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
> attempt to connect to 107.6.106.10:80 (*) failed
>
> And every second the errors are appearing. Is this some kind of DDos attack?
> Or the apache is misconfigured?
> How can I get rid of this problem?
>
> Thank you very much for any help on this. This is a high priority issue.
>
> Regards,
> Karol
>

Er, check your access log very quickly. It looks like you are running
a forward proxy that people are using to access the web.

Make sure you keep the logs, if they were up to anything malicious,
you will need them to show the police that it wasn't you.

If you weren't intending on running a forward proxy, add
"ProxyRequests off" *immediately* and restart.

Cheers

Tom

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Strange Apache logs - very slow loading time

2013-04-12 Thread Karol Pomaski

On Apr 12, 2013, at 7:19 PM, Tom Evans  wrote:

> On Sat, Apr 13, 2013 at 1:12 AM, Karol Pomaski  
> wrote:
>> Hi All,
>> 
>> I need a help. I believe something is wrong. I have recently found a strange
>> information on my apache error.log:
>> 
>> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
>> attempt to connect to 107.6.106.10:80 (*) failed
>> root@ip-10-145-204-53:~# tail /var/www/shops/88/logs/error.log
>> [Sat Apr 13 00:08:28 2013] [error] [client 69.171.247.29] SSL Proxy
>> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
>> SSLProxyEngine]
>> [Sat Apr 13 00:08:28 2013] [error] proxy: HTTPS: failed to enable ssl
>> support for 69.171.247.29:443 (www.facebook.com)
>> [Sat Apr 13 00:08:28 2013] [error] (110)Connection timed out: proxy: HTTP:
>> attempt to connect to 107.6.106.10:80 (*) failed
>> [Sat Apr 13 00:08:29 2013] [error] (110)Connection timed out: proxy: HTTP:
>> attempt to connect to 107.6.106.10:80 (*) failed
>> [Sat Apr 13 00:08:30 2013] [error] [client 69.171.247.29] SSL Proxy
>> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
>> SSLProxyEngine]
>> [Sat Apr 13 00:08:30 2013] [error] proxy: HTTPS: failed to enable ssl
>> support for 69.171.247.29:443 (www.facebook.com)
>> [Sat Apr 13 00:08:31 2013] [error] [client 69.171.247.29] SSL Proxy
>> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
>> SSLProxyEngine]
>> [Sat Apr 13 00:08:31 2013] [error] proxy: HTTPS: failed to enable ssl
>> support for 69.171.247.29:443 (www.facebook.com)
>> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
>> attempt to connect to 107.6.106.10:80 (*) failed
>> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
>> attempt to connect to 107.6.106.10:80 (*) failed
>> 
>> And every second the errors are appearing. Is this some kind of DDos attack?
>> Or the apache is misconfigured?
>> How can I get rid of this problem?
>> 
>> Thank you very much for any help on this. This is a high priority issue.
>> 
>> Regards,
>> Karol
>> 
> 
> Er, check your access log very quickly. It looks like you are running
> a forward proxy that people are using to access the web.
> 
> Make sure you keep the logs, if they were up to anything malicious,
> you will need them to show the police that it wasn't you.
> 
> If you weren't intending on running a forward proxy, add
> "ProxyRequests off" *immediately* and restart.
> 
> Cheers
> 
> Tom
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
> 

Well I have already blocked the proxy and disabled to mod_proxy module but 
still the log appears


[Sat Apr 13 00:43:57 2013] [error] [client 198.136.28.2] File does not exist: 
/var/www/shops/88/store/creative, referer: http://www.hurricaneo.com/?paged=2
[Sat Apr 13 00:43:57 2013] [error] [client 142.4.118.22] File does not exist: 
/var/www/shops/88/store/ttj, referer: 
http://www.assumegame.com/play-39-Ace-Driver-game.html
[Sat Apr 13 00:43:57 2013] [error] [client 64.31.50.24] File does not exist: 
/var/www/shops/88/store/creative, referer: 
http://www.businessadonline.com/index.php?option=com_content&view=article&id=775:Nationwide-increases-ISA-rates-&catid=165
[Sat Apr 13 00:43:57 2013] [error] [client 198.200.33.200] File does not exist: 
/var/www/shops/88/store/ttj, referer: 
http://www.amountgame.com/game/play/264/30_Seconds.html
[Sat Apr 13 00:43:57 2013] [error] [client 199.19.111.25] File does not exist: 
/var/www/shops/88/store/creative, referer: 
http://www.ddmouse.com/cellphones/rim-opens-blackberry-10-app-submissions-engadget.html
[Sat Apr 13 00:43:57 2013] [error] [client 69.162.126.21] File does not exist: 
/var/www/shops/88/store/st, referer: 
http://www.barbiehumana.com/index.php?option=com_content&view=article&id=10771:TD-Bank-profit-rises-29-percent&catid=18&Itemid=9
[Sat Apr 13 00:43:57 2013] [error] [client 208.115.200.210] File does not 
exist: /var/www/shops/88/store/tt, referer: 
http://insurish.com/secrets-your-auto-insurance-company-doesnt-want-you-to-know.html
[Sat Apr 13 00:43:57 2013] [error] [client 198.136.30.195] File does not exist: 
/var/www/shops/88/store/453, referer: http://www.cbdsys.com/?p=175
[Sat Apr 13 00:43:57 2013] [error] [client 69.162.83.86] File does not exist: 
/var/www/shops/88/store/st, referer: 
http://domarketings.com/index.php?option=com_content&view=article&id=792:Online-Classified-Ads---A-Valuable-Tool-for-Both-Buyers-and-Sellers&catid=2:business
[Sat Apr 13 00:43:57 2013] [error] [client 198.100.110.36] File does not exist: 
/var/www/shops/88/store/servlet, referer: http://www.edu-information.com/?p=518
root@ip-10-145-204-53:/var/www/shops/88/logs# tail error.log 
[Sat Apr 13 00:43:57 2013] [error] [client 69.162.126.21] File does not exist: 
/var/www/shops/88/store/st, referer: 
http://www.barbiehumana.com/index.php?optio

Re: [users@httpd] Strange Apache logs - very slow loading time

2013-04-12 Thread Tom Evans
On Sat, Apr 13, 2013 at 1:45 AM, Karol Pomaski  wrote:
> Well I have already blocked the proxy and disabled to mod_proxy module but 
> still the log appears
>
>
> [Sat Apr 13 00:43:57 2013] [error] [client 198.136.28.2] File does not exist: 
> /var/www/shops/88/store/creative, referer: http://www.hurricaneo.com/?paged=2
> [Sat Apr 13 00:43:57 2013] [error] [client 142.4.118.22] File does not exist: 
> /var/www/shops/88/store/ttj, referer: 
> http://www.assumegame.com/play-39-Ace-Driver-game.html

So what is happening now is that people are still connecting and
trying to use it as a proxy - port 80 is still open after all. But now
apache is refusing to proxy them, and instead is looking them up in
your document root, and so all these ne'er-do-wells are getting 404s
instead of the content they are requesting.

Give it a few hours(, days, weeks) - it should die down. The problem
is that often lists are made of open proxies, so even if you are no
longer acting as an open proxy, you may still be listed.

Cheers

Tom

(Remember to keep and archive these logs, just in case!)

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Strange Apache logs - very slow loading time

2013-04-12 Thread Karol Pomaski


On 12/04/2013, at 19:52, Tom Evans  wrote:

> On Sat, Apr 13, 2013 at 1:45 AM, Karol Pomaski  
> wrote:
>> Well I have already blocked the proxy and disabled to mod_proxy module but 
>> still the log appears
>> 
>> 
>> [Sat Apr 13 00:43:57 2013] [error] [client 198.136.28.2] File does not 
>> exist: /var/www/shops/88/store/creative, referer: 
>> http://www.hurricaneo.com/?paged=2
>> [Sat Apr 13 00:43:57 2013] [error] [client 142.4.118.22] File does not 
>> exist: /var/www/shops/88/store/ttj, referer: 
>> http://www.assumegame.com/play-39-Ace-Driver-game.html
> 
> So what is happening now is that people are still connecting and
> trying to use it as a proxy - port 80 is still open after all. But now
> apache is refusing to proxy them, and instead is looking them up in
> your document root, and so all these ne'er-do-wells are getting 404s
> instead of the content they are requesting.
> 
> Give it a few hours(, days, weeks) - it should die down. The problem
> is that often lists are made of open proxies, so even if you are no
> longer acting as an open proxy, you may still be listed.
> 
> Cheers
> 
> Tom
> 
> (Remember to keep and archive these logs, just in case!)
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
> 

Ok. Thanks very much. I hope they didn't make any malicious stuff using this 
proxy. Do you know how to limit the proxy just to accept 127.0.0.1?

Regards,
Karol
-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Missing QUERY_STRING

2013-04-12 Thread Ian C
Sorry for reposting but I'm still stumped.  If anyone has any advice at all...

thanks


Hi everyone,

I'm new to web configurations etc. I hope someone can help me with this, I've 
been googling and reading docs for many hours.

I have Apache 2.2.19 which has been running fine, until I needed a new CGI 
which needed the QUERY_STRING from the Get (eg. ?SBC=A1... ) My CGI can 
obtain all other pertinent env vars, in fact here they are:

DOCUMENT_ROOT'='/usr/pkg/share/httpd/htdocs'\n
GATEWAY_INTERFACE'='CGI/1.1'\n
HTTP_ACCEPT'='text/event-stream'\n
HTTP_ACCEPT_ENCODING'='gzip, deflate'\n
HTTP_ACCEPT_LANGUAGE'='en-US,en;q=0.5'\n
HTTP_CONNECTION'='keep-alive'\n
HTTP_HOST'='10.128.29.39'\n
HTTP_USER_AGENT'='Mozilla/5.0 (Windows NT 6.1; WOW64; rv:19.0) Gecko/20100101 
Firefox/19.0
 FirePHP/0.7.1'\n
PATH'='/usr/pkg/...[SNIP]'\n
QUERY_STRING'=''\n
REMOTE_ADDR'='10.128.29.148'\n
REMOTE_PORT'='11324'\n
REQUEST_METHOD'='GET'\n
REQUEST_URI'='/cgi-bin/SBC.cgi'\n
SCRIPT_FILENAME'='/usr/pkg/share/httpd/htdocs/JC84/cgi-bin/SBC.cgi'\n
SCRIPT_NAME'='/cgi-bin/SBC.cgi'\n
SERVER_ADDR'='10.128.29.39'\n
SERVER_ADMIN'='mc_...@yahoo.com'\n
SERVER_NAME'='10.128.29.39'\n
SERVER_PORT'='80'\n
SERVER_PROTOCOL'='HTTP/1.1'\n
SERVER_SIGNATURE'=''\n
SERVER_SOFTWARE'='Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8m DAV/2'\n"

See? No Query_String!

Apache does receive the request ok according to this log:

# grep "SBC=A1" /var/log/httpd/access_log
29.148 - - [11/Apr/2013:23:13:10 -0400] "GET /JC84/SBCs.html?SBC=A1 HTTP/1.1" 
304 -


Could this be because my CGI is being invoked as a Server-Side-Event source 
(HTTP_ACCEPT'='text/event-stream') ??  Can I fix this
 issue by changing Apache's configuration?   

Any help greatly appreciated.

Thanks,
Ian 


Re: [users@httpd] Missing QUERY_STRING

2013-04-12 Thread Eric Covener
> >REQUEST_URI'='/cgi-bin/SBC.cgi'\n
> 29.148 - - [11/Apr/2013:23:13:10 -0400] "GET /JC84/SBCs.html?SBC=A1 HTTP/1.1" 
> 304 -

Those really the same URL? Seems like you're missng an important detail.

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Missing QUERY_STRING

2013-04-12 Thread Ian C
the request string makes it to the log, but i can't access it from my cgi via 
environment vars

--- On Fri, 4/12/13, Eric Covener  wrote:

From: Eric Covener 
Subject: Re: [users@httpd] Missing QUERY_STRING
To: users@httpd.apache.org
Received: Friday, April 12, 2013, 9:43 PM

> >REQUEST_URI'='/cgi-bin/SBC.cgi'\n
> 29.148 - - [11/Apr/2013:23:13:10 -0400] "GET /JC84/SBCs.html?SBC=A1 HTTP/1.1" 
> 304 -

Those really the same URL? Seems like you're missng an important detail.

-
To unsubscribe,
 e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org