I keep getting the following message in my /var/log/message log file:
kernel: ** RABHIT ** IN=eth0 OUT= MAC=00:1b:78:6e:a7:cc:00:03:fe:a0:50:00:08:00 SRC=XX.XXX.XXX.XXX DST=XXX.XXX.XXX.XXX LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=53229 PROTO=TCP SPT=51203 DPT=80 WINDOW=0 RES=0x00 RST FIN URGP=0
where the XXX.XXX.XXX.XXX is an ip address. Can anyone explain what this is?
This is on a Red Hat box.
The server have to be rebooted after receiving a few of the following kernel message..
Nov 8 12:13:40 server1 kernel: sim invoked oom-killer: gfp_mask=0x201d2, order=0, oomkilladj=0
Nov 8 12:13:40 server1 kernel: [<c04588d9>] out_of_memory+0x72/0x1a5
Nov 8 12:13:40 server1 kernel: [<c0459dae>] __alloc_pages+0x216/0x297
Nov 8 12:13:40 server1 kernel: [<c045b01b>] __do_page_cache_readahead+0xc4/0x1c6
Nov 8 12:13:40 server1 kernel: [<c04555e8>] sync_page+0x0/0x3b
Nov 8 12:13:40 server1 kernel: [<c04506fd>] __delayacct_blkio_end+0x32/0x35
Nov 8 12:13:40 server1 kernel: [<c06089bf>] __wait_on_bit_lock+0x4b/0x52
Nov 8 12:13:40 server1 kernel: [<c0455563>] __lock_page+0x52/0x59
Nov 8 12:13:40 server1 kernel: [<c0457e8a>] filemap_nopage+0x151/0x313
Nov 8 12:13:40 server1 kernel: [<c0460b48>] __handle_mm_fault+0x178/0x8b3
Nov 8 12:13:40 server1 kernel: [<c042f77c>] do_sigaction+0xb5/0x155
Nov 8 12:13:40 server1 kernel: [<c060a9db>] do_page_fault+0x20a/0x4b8
Nov 8 12:13:40 server1 kernel: [<c060a7d1>] do_page_fault+0x0/0x4b8
Nov 8 12:13:40 server1 kernel: [<c0405a71>] error_code+0x39/0x40
Nov 8 12:13:40 server1 kernel: =======================
Nov 8 12:13:40 server1 kernel: Mem-info:
Nov 8 12:13:40 server1 kernel: DMA per-cpu:
Nov 8 12:13:40 server1 kernel: cpu 0 hot: high 0, batch 1 used:0
Nov 8 12:13:40 server1 kernel: cpu 0 cold: high 0, batch 1 used:0
Nov 8 12:13:40 server1 kernel: cpu 1 hot: high 0, batch 1 used:0
Nov 8 12:13:40 server1 kernel: cpu 1 cold: high 0, batch 1 used:0
Nov 8 12:13:40 server1 kernel: cpu 2 hot: high 0, batch 1 used:0
Nov 8 12:13:40 server1 kernel: cpu 2 cold: high 0, batch 1 used:0
Nov 8 12:13:40 server1 kernel: cpu 3 hot: high 0, batch 1 used:0
Nov 8 12:13:40 server1 kernel: cpu 3 cold: high 0, batch 1 used:0
Nov 8 12:13:40 server1 kernel: DMA32 per-cpu: empty
Nov 8 12:13:40 server1 kernel: Normal per-cpu:
Nov 8 12:13:40 server1 kernel: cpu 0 hot: high 186, batch 31 used:27
Nov 8 12:13:40 server1 kernel: cpu 0 cold: high 62, batch 15 used:32
Nov 8 12:13:40 server1 kernel: cpu 1 hot: high 186, batch 31 used:20
Nov 8 12:13:40 server1 kernel: cpu 1 cold: high 62, batch 15 used:43
Nov 8 12:13:40 server1 kernel: cpu 2 hot: high 186, batch 31 used:24
Nov 8 12:13:40 server1 kernel: cpu 2 cold: high 62, batch 15 used:36
Nov 8 12:13:40 server1 kernel: cpu 3 hot: high 186, batch 31 used:28
Nov 8 12:13:40 server1 kernel: cpu 3 cold: high 62, batch 15 used:14
Nov 8 12:13:40 server1 kernel: HighMem per-cpu:
Nov 8 12:13:40 server1 kernel: cpu 0 hot: high 186, batch 31 used:21
Nov 8 12:13:40 server1 kernel: cpu 0 cold: high 62, batch 15 used:4
Nov 8 12:13:40 server1 kernel: cpu 1 hot: high 186, batch 31 used:29
Nov 8 12:13:40 server1 kernel: cpu 1 cold: high 62, batch 15 used:58
Nov 8 12:13:40 server1 kernel: cpu 2 hot: high 186, batch 31 used:12
Nov 8 12:13:40 server1 kernel: cpu 2 cold: high 62, batch 15 used:46
Nov 8 12:13:40 server1 kernel: cpu 3 hot: high 186, batch 31 used:27
Nov 8 12:13:40 server1 kernel: cpu 3 cold: high 62, batch 15 used:17
Nov 8 12:13:40 server1 kernel: Free pages: 118308kB (508kB HighMem)
Nov 8 12:13:40 server1 kernel: Active:421521 inactive:430319 dirty:0 writeback:0 unstable:0 free:29577 slab:11654 mapped-file:883 mapped-anon:856741 pagetables:5457
Nov 8 12:13:40 server1 kernel: DMA free:11680kB min:68kB low:84kB high:100kB active:0kB inactive:0kB present:16384kB pages_scanned:0 all_unreclaimable? yes
Nov 8 12:13:40 server1 kernel: lowmem_reserve[]: 0 0 880 4080
Nov 8 12:13:40 server1 kernel: DMA32 free:0kB min:0kB low:0kB high:0kB active:0kB inactive:0kB present:0kB pages_scanned:0 all_unreclaimable? no
Nov 8 12:13:40 server1 kernel: lowmem_reserve[]: 0 0 880 4080
Nov 8 12:13:40 server1 kernel: Normal free:106120kB min:3756kB low:4692kB high:5632kB active:437212kB inactive:262196kB present:901120kB pages_scanned:1567124 all_unreclaimable? yes
Nov 8 12:13:40 server1 kernel: lowmem_reserve[]: 0 0 0 25600
Nov 8 12:13:40 server1 kernel: HighMem free:508kB min:512kB low:3928kB high:7344kB active:1408712kB inactive:1299160kB present:3276800kB pages_scanned:9082467 all_unreclaimable? yes
Nov 8 12:13:40 server1 kernel: lowmem_reserve[]: 0 0 0 0
Nov 8 12:13:40 server1 kernel: DMA: 130*4kB 125*8kB 89*16kB 63*32kB 35*64kB 7*128kB 2*256kB 0*512kB 1*1024kB 1*2048kB 0*4096kB = 11680kB
I'm getting a strange line in /var/log/message on averag about once a day:
Quote:
Sep 28 10:37:10 server1 kernel: ** RABHIT ** IN=eth0 OUT= MAC=00:16:76:be:73:67:00:05:85:0f:1f:40:08:00 SRC=1.2.3.4 DST=5.6.7.8 LEN=40 TOS=0x00 PREC=0x00 TTL=110 ID=7021 DF PROTO=TCP SPT=54968 D
PT=29722 WINDOW=0 RES=0x00 URGP=0
There are a handful of SRC addresses which I have traced and appear to be residential broadband in Los Angeles, Ireland and Sydney. The destination port is either 53,80 or as in this example 29722. 53 and 80 are open on my server and a legitimate destination. 29722 appears to be a sybase port, which I do not run and this is blocked on the firewall.
Does anyone know what this means? The server is running Centos 4, 64-bit.
we are getting the following error messages in the apache log file.
*** glibc detected *** free(): invalid next size (normal): 0xb8efe1d8 ***
[Tue Mar 20 12:36:20 2007] [notice] child pid 18070 exit signal Aborted (6
I am getting this error for one of my website. This site is working fine on the old server from which it has been migrated:
=============================================================
Server Error in '/' Application.
--------------------------------------------------------------------------------
Configuration Error
Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.
Parser Error Message: Could not load file or assembly 'System.Web.Extensions, Version=1.0.61025.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system cannot find the file specified. (c:Inetpubvhosts<domain.com>httpdocsweb.config line 59)
Source Error:
Line 57: <add verb="GET" path="CrystalImageHandler.aspx" type="CrystalDecisions.Web.CrystalImageHandler, CrystalDecisions.Web, Version=10.2.3600.0, Culture=neutral, PublicKeyToken=692fbea5521e1304"/></httpHandlers>
Line 58: <httpModules>
Line 59: <add name="ScriptModule" type="System.Web.Handlers.ScriptModule, System.Web.Extensions, Version=1.0.61025.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"/>
Line 60: </httpModules>
Line 61: </system.web>
Source File: c:Inetpubvhosts<domain.com>httpdocsweb.config Line: 59
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.3053; ASP.NET Version:2.0.50727.3053
=============================================================
I am attaching the web.config file as attachment. Can anyone tell me how do I fix this.
we have little problem on our server - from some time it starts reporting some errors:
kernel: spamd[6479]: segfault at 9a16000 ip 467840ac sp bffe9b5c error 6 in libc-2.5.so[46713000+13e000]
kernel: webalizer[12318]: segfault at 81a80cc ip 080d9279 sp bff2f230 error 4 in webalizer[8048000+b2000]
kernel: spamd[6515]: segfault at 9cbb000 ip 467840ac sp bffe9b5c error 6 in libc-2.5.so[46713000+13e000]
kernel: pure-quotacheck[16285]: segfault at bf3c9ff8 ip 46769d76 sp bf3c9fec error 6 in libc-2.5.so[46713000+13e000]
kernel: php[14910]: segfault at bf727da0 ip 080b0edc sp bf727d30 error 6 in php[8048000+64d000]
errors appear 2-3 times every 10min and always in this 4 programs: webalizer, php, spamd, pure-quotacheck
and second thing there is problem with some file caching or sth - for example when we restarts named it reports:
/etc/named.conf:23564: open: /var/named/slaves/slaves.named.conf: file not found
file of course exist but funniest thing is when we remove this line from named.conf and tries restart it, error appear again, even when this line is empty in named.conf and there is no other include of this file
even after server restart (without this include in named.conf) it still reports this error
server config: C2Q Q9550, 8GB ram, 2x500GB in hw Raid1, Centos 5.3 32bit, cPanel
maybe someone have any idea what it could be, and what else we can check ?
we have one box in hivelocity.net that has been down so many times this month that we were forced to remove links to siteuptime where we were once so proud of having a 99.7% uptime for 3 years in theplanet.
syslog shows that just before crashing, these entries were made:
kernel: kernel BUG at mm/rmap.c:479
kernel: invalid operand:0000 [#1]
dmesg also shows this:
...
Brought up 2 CPUs
zapping low mappings.
checking if image is initramfs... it is
Freeing initrd memory: 482k freed
NET: Registered protocol family 16
PCI: PCI BIOS revision 2.10 entry at 0xf9f20, last bus=1
PCI: Using configuration type 1
mtrr: v2.0 (20020519)
mtrr: your CPUs had inconsistent fixed MTRR settings
mtrr: probably your BIOS does not setup all CPUs.
mtrr: corrected configuration.
...
i've googled these messages and they point to ram problems.
hivelocity.net claims to have done diagnostics on the box and that there were no problems reported.
they said this is a result of a sys configuration problem made by us.
any ideas?
running centos/virtuozzo 2.6.18-028stab062.3
when i configure vmware it asks at one point for kernel header files. where would i find them to match the current kernel?
i asked at parallels forums but help there is very scarce. i checked openVZ repositories and they dont yet have headers for this version.
what are my options? i have one last windows machine left and want to run it in VMware.
Last year I ordered a new server with Centos 4.3 and it had the kernel kernel 2.6.9-34.0.2ELsmp installed. It runned fine and I didn't update any packages since then.
Today I started getting a problem where both mysqld and kswapd0 uses very high amounts of CPU, spiking up to 100% and my memory usage is at 99% all the time. The problem seems exactly the same as the one mentioned in this thread.
In that thread the exact same kernel is said to be insecure and to cause this problem. I also came across a centOS bug that reports this problem with high cpu, mem usage and mysql & kswapd0 consuming all resources.
In the linked thread the person solved the problem by upgrading to kernel 2.6.9-42 using rpms but others recommended a newer kernel or a custom compiled kernel for CentOS.
Apparently when they used yum it said 34.0.2 was the latest kernel.
What should I do to upgrade the kernel, which version should i upgrade to, and where do I get it from? I won't be able to compile a custom kernel and I've only installed basic rpm packages before.
Apache:2.2.26
OS:RHEL
How to translate non-chunked message to a chunked message using apache server side configuration?Idea is that apache must translate non-chunked request message coming from a client to a Transfer-Encoding: chunked message,before it reaches my apache C module.Here is the configuration i tried in httpd.conf,but of no success
ProxyRequests On
ProxyVia On
<Proxy *>
</Proxy>
<VirtualHost x.x.x.x:8080>
ServerName server
ServerAdmin root@server
LogLevel warn
SetEnv proxy-sendchunked 1
[code]...
I'm build Plesk Panel for Linux and Presence Builder, I don't want my user can upload their website to hosting via File Manager. How can I do it...
View 2 Replies View RelatedSay I have 2 websites and they all use file.php which is located on mainserver.com/file.php.
I want to use the file like this:
website1.com/file.php
website2.com/file.php
I am trying to install the kernel source.
I have downloaded kernel-2.6.20-1.2948.fc6.src.rpm
I am using fedora 6 64bit.
here are my current kernels:
kernel-headers-2.6.20-1.2948.fc6
kernel-devel-2.6.20-1.2944.fc6
yum-kernel-module-1.0.3-1.fc6
kernel-2.6.20-1.2944.fc6
kernel-devel-2.6.20-1.2948.fc6
kernel-2.6.20-1.2948.fc6
here is what I seen when I installed kernel-2.6.20-1.2948.fc6.src.rpm
rpm -ivh kernel-2.6.20-1.2948.fc6.src.rpm
1:kernel warning: user brewbuilder does not exist - using root
warning: group brewbuilder does not exist - using root
warning: user brewbuilder does not exist - using root
########################################### [100%]
warning: user brewbuilder does not exist - using root
warning: group brewbuilder does not exist - using root
then when I ran:
rpmbuild -bp --target=$(uname -m) /usr/src/redhat/SPECS/kernel-2.6.spec
I seen this error:
+ Arch=x86_64
+ make ARCH=x86_64 nonint_oldconfig
In file included from /usr/include/sys/socket.h:35,
from /usr/include/netinet/in.h:24,
from /usr/include/arpa/inet.h:23,
from scripts/basic/fixdep.c:117:
/usr/include/bits/socket.h:310:24: error: asm/socket.h: No such file or directory
make[1]: *** [scripts/basic/fixdep] Error 1
make: *** [scripts_basic] Error 2
error: Bad exit status from /var/tmp/rpm-tmp.93770 (%prep)
I need to have this installed to get a app installed etc...
suggestions or ideas?
thanks
Rapidly growing error logs showing the same message
$ug-non-zts-20020429/ffmpeg.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20020429//usr/local/lib/php/extensions/no-debug-non-zts-20020429/ffmpeg.so: cannot open shared object file: No such file or directory in Unknown on line 0
root@server [~]# ls /usr/local/lib/php/extensions/no-debug-non-zts-20020429
./ ../ eaccelerator.so*
root@server [~]# ls /usr/local/lib/php/extensions/no-debug-non-zts-20020429
./ ../ eaccelerator.so*
Using cpanel 11 / centos 4
i have a server with centos,
i need to edit the hidden file .htaccess from the file management tool of cpanel,
but the hidden files not shown,
ow can i modify the setting and let the files shown in the file management tool of cpanel?
How can we stop Plesk resetting the file permissions on a dll file that is found in
C:Program Files (x86)
??
Specifically,
we have a file, jmail.dll,
here
C:Program Files (x86)Dimacw3JMail
By default Plesk permissions are set to DENY for PSACLN.
But the JMail plugin cannot work with these permissions !
We change this to be ALLOW for READ & EXECUTE and DENY for WRITE.
And everything works fine.
But every time Plesk does an update it reverts it back !
This means that a number of our customers contact forms stop working !
am moving from reseller hosting as we speak.
In the WHM VPS optimized control panel - under Service Status, I see these
Disk /dev/hda3 (/backup) No DMA! (Click to Enable) Disk /dev/hda1 (/) No DMA! (Click to Enable)
Should I? or shouldn't I "click to enable" - or is this something controlled by my host? what does this mean?
regards,
Mike
Instinct-Software.com admin
I'm trying to do this
/usr/bin/gzip -p /home/mysite/public_html/shop/feeds/myfile.xml.zip > /home/mysite/public_html/shop/feeds/myfile.xml
But it just tells me
/usr/bin/gzip: invalid option -- p
X-Powered-By: PHP/5.2.5
Content-type: text/html
How do I find the correct option to unzip first file to second file?
i manage linux apache webserver with a few wordpress blogs and from time to time i see someone inject a malicious .php file into wp-content/uploads/2014/10/ directory.
i think its some bad plugin or theme, but these is more blogs, i ugrade, update, WP, but
how can i setup some monitor to tell me which php file (or even line in php file) injected that malicious .php ? I have linux root access so i can setup anything
What kind of web hosting plan would I need for a message board with 500+ online active members and 100,000+ overall members?
I'm just trying to figure it out in advance and I believe that some of you have the experience and knowledge about this specific issue.
I have placed .htaccess to block some ip, when the person ip matches, my server will gives this message "client denied by server configuration", got lots of them everday in my error log, how can I disable this message? I need other error log message but not this message, is there any way I can disable it?
using centos and plesk.
My server has been running fine for months and then I got this message:
IMPORTANT: Do not ignore this email.
The hostname (server.dealsreferals.com) resolves to . It should resolve to 69.46.27.111. Please be sure to correct /etc/hosts as well as the 'A' entry in zone file for the domain.
Some are all of these problems can be caused by
/etc/resolv.conf being setup incorrectly. Please check this file if you
believe everything else is correct.
You may be able to
automaticly correct this problem by using the ' Add an A entry for your
hostname ' under ' Dns Functions ' in your Web Host Manager
What is the problem? Maybe I should do what is suggested, however, why suddenly the problem?
My server is working fine. Should I just let this problem? What harm can happen?
I've only just finished setting up Apache, PHP and MySQL etc.
I went through the sitepoint pdf on how to set everything up - and i tested it by making a php page (showing the date) and saving it in the htdocs folder just like the instructions.
I go to view the page in firefox by going to [url] and i get this error message
Apache HTTP Server has encountered a problem and needs to close.
Error signature
szAppName: httpd.exe
szAppVer: 2.2.4.0
szModName: php5ts.dll
szModVer: 5.2.3.3
offset: 00099ec5
cpsrvd failed @ Mon Mar 19 01:00:15 2007. A restart was attempted automagicly.
View 4 Replies View RelatedI have a dedicated server and I am using the SMTP of one of my domain names to send mail. The IP of this domain name ends in .25 and the server hostname IP ends in .24.
The emails that are received list the server hostname and IP in the message headers instead of the IP of the domain name that is sending the email. Is there something that can be done about this? I read that a message could be mistaken as spam if it doesn't originate from the exact IP of the domain in the 'from' field.
Today I found some cstomer on the servers make a link for named it file.txt and link it to other customer php file.
so that customer have the ability to show the other custoer file content when visiting the url because it is a text wile originally it is a php file.
the php file was a config file, so now he know the database password , and because he is in the same server he can use that databse.
the question , how to avoide this prolem in the future?
notes , the SuExec is rnning and the open_basedir protection is enabled, but the problem still exists.
When i use the ip of my homepage and not the domain i see this:
Quote:
Apache is functioning normally
How can i change it?
And for lxadmin the same :
Quote:
This is the LxAdmin Default Page
How can i change it?
I keep getting this error whenever I try to update my packages which prevents me from doing any updates. Anyone have any idea how to solve this?
Transaction Check Error:
file /etc/aliases from install of setup-2.5.58-7.el5.noarch conflicts with file from package da_exim-4.67-1.i386
Trying to figure out the hardware configuration I'll need to host a message board and was wondering if those of you with experience could throw out some numbers in terms of # users, bandwidth used, and what hardware configuration you're on (single server, dual server, dual proc, RAM, disk, etc). Been tricky trying to guestimate so some numbers to compare would be a huge help.
View 7 Replies View Related