[users@httpd] SIGTERM in 2.0.46 on RH7.3

[dan frost <da...@danfrost.co.uk>]

Dear all,

I've just upgraded out server to Apache 2.0.46 in response to a DoS attack.

Over the weekend the server shutdown - here's the access_log:
[--SNIP--]
61.144.xxx.xxx - - [13/Jun/2003:16:46:43 +0100] "GET 
http://www.alltheweb.com/ HTTP/1.1 200 1607
207.78.xxx.xxx - - [14/Jun/2003:00:32:54 +0100] "SEARCH / HTTP/1.1" 501 218
156.17.xxx.xxx - - [14/Jun/2003:19:27:35 +0100] "SEARCH / HTTP/1.1" 501 218
62.229.xxx.xxx - - [15/Jun/2003:00:29:35 +0100] "HEAD / HTTP/1.1" 501 218
[--SNIP--]

Here's the error_log:
[--snip--]
[Sat Jun 14 00:32:54 2003] [error] [client 207.78.xxx.xxx] Invalid 
method in request SEARCH / HTTP/1.1
[Sat Jun 14 04:25:19 2003] [notice] caught SIGTERM, shutting down
[Sat Jun 14 04:25:35 2003] [notice] Apache/2.0.46 (Unic) 
mod_perl/1.99_08 Perlv5.6.1 PHP/4.3.2. configured -- resuming normal 
operations
[Sat Jun 14 19:27:35 2003] [error] [client 156.17.xxx.xxx] Invalid 
method in request SEARCH / HTTP/1.1
[Sun Jun 15 02:55:31 2003] [notice] caught SIGTERM, shutting down
[Sun Jun 15 02:56:07 2003] [notice] Apache/2.0.46 (Unix) 
mod_perl/1.99_08 Perlv5.6.1 PHP/4.3.2. configured -- resuming normal 
operations
[Sun Jun 15 05:05:34 2003] [notice] caught SIGTERM, shutting down
[--snip--]

...and didn't resume normal operations until I started it.

The O/S is RH7.2. PHP and Perl versions are in the logs.

The server is using heartbeat high-availability software, and is the 
primary server.

Any help is gratefully received.

Dan





---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org