Re: possible dos attack

What version of Apache and PHP are you running? Are you connecting to a Microsoft SQL server or a Sybase Server (I ask because of the reference to php_sybase_db, and since both would most likely make reference to that.) Is there a pattern to the crashing? (Heavy database activity?) If you are using FreeTDS to connect to a Microsoft SQL Server what version are you running? Adam Voigt adam.voigt@cryptocomm.com On Mon, 2002-07-15 at 13:17, Dan Stromberg wrote: > We have a bunch of apache servers here with php compiled in. > > They keep dying. I think they're all tending to die at the same time. > The servers on ports 8080 and 443 are fine; it's only the port 80 apaches > that are dying. > > I did a backtrace with gdb, and I get thousands of these: > > #60961 0xef7d46e8 in ?? () > #60962 0xef7dfcc8 in ?? () > #60963 0xef7d2d8c in ?? () > #60964 0xef24c980 in _PROCEDURE_LINKAGE_TABLE_ () from /usr/lib/libthread.so.1 > #60965 0xef239308 in kill () from /usr/lib/libthread.so.1 > #60966 0x1516dc in sig_coredump () > #60967 0xef23b928 in __sighndlr () from /usr/lib/libthread.so.1 > #60968 <signal handler called> > #60969 dbexit () at dblib.c:561 > #60970 0xbb7a8 in zm_shutdown_sybase (type=-282964972, > module_number=-277216068) at php_sybase_db.c:254 > > It seems to me that either there's a weird recursive bug apache with php, > or someone has found a DOS attack against apache with php by pelting it > with a bad signal. > > Any suggestions? Restarting our apaches is quickly getting old. It's > been so easy to take apaches reliability for granted. > > TIA. > > BTW, thanks for the work you guys do on apache/php. > > -- > PHP Development Mailing List <http://www.php.net/> > To unsubscribe, visit: http://www.php.net/unsub.php >