Strange File Download

Jan 25, 2007

Users of my web site, running MD-Pro, a PostNuke (php-based) clone, suddenly started to report difficulties downloading files from the download module. We assumed it was the download module and spent ages diagnosing it, uploading fresh versions etc. After some time someone had the bright idea to see if the files could be downloaded direct (using the URLs) to eliminate the web application.

We found: Some users can download all files from the server with no problems.
Some users can download some files but not others.

So far as we can tell only MS Word files are affected, but not all.

The files on the server are not corrupted and there are no permissions issues

Disabling antivirus and firewalls locally makes no difference.

REloading fresh originals to the servedr does not help.

The host reports that no changes to the server have been made recently.

We have discovered that files in the web root are OK. The furhte down the directory structure they are, the less likely they are to download. Performance varies according to the browser in use. According to the host technical support, 'Firefox appears to be returning the data from its own cache. IE is only doing so for root. For the other places IE tries to download the file but stops receiving at exactly the same number of bytes from different locations.'

Using another server on a different host, the problem disappears so it must be due to the host setup in some way. Diagnosis is difficult because the host technical support can't reproduce it.

Platforms include Mac, Windows and Linux and browsers include IE7, Firefox and Safari.

One user with Mac isn't having problems, another with Mac is. All others reporting problems are on Windows. Users are at different locations, using different ISPs so it is unlikely there are common local problems.

The only common element I can see is that the ony files causing trouble are MS Word, though some of these do download OK

We have run out of ideas why this should be happening. How can some users have problems with the same files on the same server and others not?

What could have happened to cause this problem on a site that has been functioning correctly for several months on this server?

View 14 Replies


ADVERTISEMENT

Strange PHP File On My VPS. (oxb.php)

Jul 16, 2009

I found a strange PHP file in a strange folder on a VPS I am using to host a few sites. I've looked through the logs but can't figure out how it got there and I've look at the code and can't make any sense of it. Can somebody take a look at the code and tell me what they think of it: .....

View 12 Replies View Related

Dealing With Strange File Names

Apr 30, 2007

I have a spider that is saving a few images files everyday on my servers. Due to the fact that the images are dynamically created the spider is not only saving them without an extention, but also using charachters from the link to create those file names.

I end up with:

0&Y=0
1&Y=0
2&Y=0
3&Y=0
.... and so on.

(there is no problems browsing those image files

What I need is to copy those files or move them to file names with an extention (png) for protection reasons.

I failed using cp, mv in doing so. it seams that the OS doesn't see those files as files.

That is how those files appear in ssh:

0&Y=0
1&Y=0
2&Y=0 ...

View 3 Replies View Related

Kernel Segmentation Fault And Strange File Caching

May 31, 2009

we have little problem on our server - from some time it starts reporting some errors:

kernel: spamd[6479]: segfault at 9a16000 ip 467840ac sp bffe9b5c error 6 in libc-2.5.so[46713000+13e000]
kernel: webalizer[12318]: segfault at 81a80cc ip 080d9279 sp bff2f230 error 4 in webalizer[8048000+b2000]
kernel: spamd[6515]: segfault at 9cbb000 ip 467840ac sp bffe9b5c error 6 in libc-2.5.so[46713000+13e000]
kernel: pure-quotacheck[16285]: segfault at bf3c9ff8 ip 46769d76 sp bf3c9fec error 6 in libc-2.5.so[46713000+13e000]
kernel: php[14910]: segfault at bf727da0 ip 080b0edc sp bf727d30 error 6 in php[8048000+64d000]

errors appear 2-3 times every 10min and always in this 4 programs: webalizer, php, spamd, pure-quotacheck

and second thing there is problem with some file caching or sth - for example when we restarts named it reports:

/etc/named.conf:23564: open: /var/named/slaves/slaves.named.conf: file not found

file of course exist but funniest thing is when we remove this line from named.conf and tries restart it, error appear again, even when this line is empty in named.conf and there is no other include of this file
even after server restart (without this include in named.conf) it still reports this error

server config: C2Q Q9550, 8GB ram, 2x500GB in hw Raid1, Centos 5.3 32bit, cPanel
maybe someone have any idea what it could be, and what else we can check ?

View 0 Replies View Related

Download A .gz File From Ssh

Aug 19, 2008

Logwatch reset my server logs this morning and there's an event I need to check for in /var/log/kern.log

How can I download the gzip of:
kern.log.1.gz

..to my pc desktop, using putty / ssh.

View 5 Replies View Related

Cant Download File

Sep 14, 2007

I have just performed a ftp backup of my entire server. I then zipped it up in Cpanel.

The file size its self it 3322megs big (about 3.3gb). If i press it to download it says:

Forbidden

You don't have permission to access /backup/sepmid07/sepmid07.zip on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

Apache/1.3.37 Server at backup.xxx*********** Port 80

I have made sure that i have the right permissions, I have also made sure that it belongs to the correct user. Also next to it where it would say how big it is, it says "-"

View 10 Replies View Related

Ip Is Trying To Download The Same File Many Times

Oct 30, 2009

We have a video streaming server, sometimes the server gets really slow and when we digg into it, we see that the same ip is trying to download the same file many many times. for example i either run this command

netstat -n | grep :80 | awk '{ print $5 }' | awk -F: '{ print $1 }' | sort | uniq -c | sort -n | tail

or go to WHM and see the 'apache stats' and i see 100 http connections from the same ip, trying to download the same video 100 times,,,

what is this? is this some sort of attack? could that be 100 different people that use a proxy? or what is going on?

View 7 Replies View Related

Cannot Download File: Forbidden

Jul 24, 2008

I am having a large problem moving my sites over to another server. WHM is timing out transferring some large sites that are 4-16 gigs in size, so I tried to manually pkgacct and was able to get one of the accounts setup as root, moved it over to public_html so I could wget from the 2nd server. No luck, permission denied. I tried to change permissions in FTP and found out I couldn't change them so I chmodded the file as root, no luck.

From there I set chown and changed it to the user of the FTP account and was able to modify the file from FTP. I'm still getting a forbidden message when I try wget or download from browser.

Forbidden
You don't have permission to access /backup/cpmove-azcorp.tar.gz on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

At this point I'm clueless, I chmodded the file to 777 so what else could be causing this?

View 7 Replies View Related

Php File Popping For Download

Mar 15, 2007

how all the php files popping up for download. Am I missing anything here?

View 2 Replies View Related

Lighttpd Force File Download IE

Feb 2, 2008

we are running a file sharing service and use lighttpd as a web server

the problem is that in Internet Explorer are some files i.e. .mpg, .pdf
and others opened directly in the browser

so is there a way to prevent this behavior(to force the browser to
download the file) by setting headers (or something else) in
lighttpd.conf?

View 2 Replies View Related

Apache :: Allowing EXE File Download

Oct 3, 2013

We're running a departmental intranet site on Apache 2.2 (on Windows Server 2003, if that matters). I'm trying to figure out how to post exe files on the web site so I can create a link and users can download the programs.trying various changes to my httpd.conf file, but no matter what I tried I get a 403 Forbidden error and the error.log file shows an error "Options ExecCGI is off in this directory:...".

1) I've tried putting the EXE in various folders.
2) I don't have a .htaccess file and I don't see anything in the httpd.conf file that seems to specifically relate to access for this file type.
3) If I put a zip file in the same folders, I am able to download or open it.
4) The httpd.conf file should be whatever was created when we installed Apache.

View 2 Replies View Related

How To Use Wget Command To Download .htaccess File

Jul 1, 2008

I just want to use wget command to transfer data from a shared host to dedicated server.Anybody knows how to set wget to download the .htaccess file and keep the file/directory's permission the same as they used to be on the old server?
I only knows these:wget -b -c -r -l0 -np -nH -t0

View 5 Replies View Related

Apache :: HTTP File - Low Download Speed

Mar 29, 2013

The problem is that HTTP file download speed is nearly 10 times lower than FTP download speed. What could be limiting it? It's about 7Mb for FTP and 70-100Kb for HTTP. Strangely, download speed is OK when browsing from the server itself (e.g. via RDP)

View 2 Replies View Related

Moving Large File Storage, Upload/download To Amazon S3

Jul 24, 2007

I'm currently running on a VPS. My site allows for large file uploads and downloads, with files over 600mb in size.

The server has issues when the site gets three or more requests for large file downloads. I'm trying to grow this site to thousands of users and it is hard to do when the site can't handle even three.

I've been told by my host that I need to upgrade to dedicated. My VPS only has 512mb RAM and one large file download is eating up that RAM. This is causing the issue.

I'm a newbie and while I knew I was risking a bit by going with VPS I do find it a bit annoying that these guys advertise 1TB of bandwidth per month but I can't even support downloading 1GB at the same time....maybe it's just me...

Anyway, I am now looking into moving the large files and the upload/download over to Amazon S3. If I do this I am expecting my RAM usage on the VPS to greatly decrease. Is this correct? If my PHP code is running on the VPS, but the actual file download via HTTP is coming from S3, that should not be a heavy load on my box, correct?

any opinions on S3?

View 2 Replies View Related

Apache :: Video File Download - Getting Different Figures When Interpret Data

Nov 12, 2013

Apache 2.2.22

I may be making something here too complicated but a friend downloaded a largish video file via my very basic web server.

Trying to interpret the data I am getting different figures, which one is correct or am I reading it wrongly.

carole [10/Nov/2013:17:55:21 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 200 2879608
carole [10/Nov/2013:17:56:07 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 200 1902255
carole [10/Nov/2013:18:11:41 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 206 357
carole [10/Nov/2013:18:11:49 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 206 5317289
carole [10/Nov/2013:18:16:38 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 200 1834235652

200 totals = 1839017515

File properties on Ubuntu 2.0 GB (1,971,322,880 bytes)

server-status
1-0319210/3/3_ 82.6457740190482630.01880.001880.00 ip72-197-68-158.sd.sd.cox.net3lanesNULL

The other_vhost_access file says 1839017515
Ubuntu file properties says 2.0 GB (1,971,322,880 bytes)
Apache server-status says 1880.00

View 1 Replies View Related

"Download Test File" From Theplanet

May 20, 2008

someone can give me a link "Download Test File" from theplanet..

View 3 Replies View Related

Plesk 12.x / Linux :: Deny User Upload File Via File Manager Or Hidden File Tab?

Feb 10, 2015

I'm build Plesk Panel for Linux and Presence Builder, I don't want my user can upload their website to hosting via File Manager. How can I do it...

View 2 Replies View Related

Strange Bot

Jul 4, 2007

I don't quite know what to make of this, but I am getting hits to my search pages with the following:

/advanced_search_result.php?keywords=Hello%21%20Perfect%20and%20
/advanced_search_result.php?keywords=Hi%21%20Good%20site%20respe

There are multiple occurrences of this at any one time, and the interesting thing is that it appears to be spoofing the source IP addresses - most are all different with few exceptions.

Has anyone else seen this and know of a solution? Normally I would simply use IP deny but given the addresses appear to be spoofed and too numerous it would be futile.. I thought if I programmed OSC to quit if it matched the keywords might be a decent solution, but so far I haven't had any luck

I searched google and this forum to see if I could find out anything with no luck at all, so I'm guessing this
is fairly new.

View 2 Replies View Related

Strange RAM Status

Aug 22, 2008

This month I just pruchase dedicated server, spec are AMD X2 with 1GB RAM.

On ssh, the memory result is:
root@server1 [~]# free -m
total used free shared buffers cached
Mem: 883 836 47 0 163 397
-/+ buffers/cache: 275 608
Swap: 2047 0 2047

My question:

1. Why the total ram just 883MB? I think it should 1024Mb?

2. The server still empty, but why I see the total used memory is 836Mb?

I only have experience with cpanel vps and when my server empty it only use around 200MB RAM and around 400MB ram usage when my vps load with 30+ account.

View 10 Replies View Related

Strange Network

Jun 23, 2007

A couple of days ago I came across www.just-ping.com site (it's a simple ping test site).

I tested my site avensen.com (IP: 72.232.147.154) with it, and got bad results like this one:

[url]

Santa Clara, U.S.A. Packets lost (20%) 50.6 51.9 52.8
Florida, U.S.A. Packets lost (80%) 45.6 45.6 45.7
Vancouver, Canada Packets lost (80%) 56.5 56.6 56.7
New York, U.S.A. Packets lost (20%) 50.7 57.2 61.5
Austin, U.S.A. Packets lost (60%) 9.5 9.6 9.9
Austin, U.S.A. Packets lost (90%) 9.4 9.4 9.4
Amsterdam, Netherlands Packets lost (60%) 121.6 122.4 123.3
Amsterdam1, Netherlands Packets lost (60%) 121.5 123.6 125.6
London, United Kingdom Packets lost (90%) 111.4 111.4 111.4
Sydney, Australia Packets lost (90%) 200.2 200.2 200.2
Stockholm, Sweden Packets lost (20%) 144.7 147.7 148.3
Cologne, Germany Packets lost (80%) 133.3 135.6 137.8
Madrid, Spain Packets lost (70%) 150.7 150.8 151.0
Paris, France Packets lost (60%) 128.4 132.5 135.5
Hong Kong, China Packets lost (30%) 196.1 196.4 196.8
Munchen, Germany Packets lost (60%) 131.7 131.8 132.0
Kraków, Poland Packets lost (70%) 196.3 198.5 200.2
Cagliari, Italy Packets lost (40%) 154.9 155.3 156.3
Melbourne, Australia Packets lost (50%) 199.6 205.5 208.2
Singapore, Singapore Packets lost (70%) 257.4 260.3 262.5

I'm trying to figure out if this is a network problem or a problem with my server. I don't get it, because there are no lost ICMP packets when I ping another hosts from my server, or when I ping my server from home PC.

And here is what server4sale support wrote:

Quote:

This is what we received from data center and will update you, when they get back to us.

"We apologize for the delay in responding to you. We are aware of an issue that involves our upstream provider, and we have opened a ticket with them to get the issue resolved ASAP. We have asked them to investigate this issue and attempt to isolate the cause. Once we have more information from them, we will update you here in this ticket.

In the meantime, if you note any changes (good or bad), please provide traceroutes BOTH "TO" your server, and "FROM" your server, as well as a 300 count ping summary. This request has been made by our upstream provider, as we will forward any additional pings and traceroutes we receive directly to them. Without the traceroutes both to and from the servers, the information will not be useful for their investigation.

We will provide you with updates thru this ticket as we receive information from our provider. If you have any additional questions, or need further assistance, feel free to contact us. We appreciate your patience, while we work with to resolve this issue."

Second message from support:

Quote:

The data center has informed that they have not yet received an update from their upstream provider as they used to inform them after performing changes.

However, for better investigation and providing the results more precisely to their upstream provider they have asked you to provide the latest:

Quote:

1) 300 ping results from your PC to server

2) Traceroute from your PC to Server and

3) Traceroute from Server to your PC

I'd really appreciate if you help me to get these results and isolate the problem.

IP of my server: 72.232.147.154

What's even stranger is that when I run a just-ping.com test over 72.232.147.174 IP (a machine in the same SAVVIS data center, I guess), I get "All OK results":

[url]

Santa Clara, U.S.A. Okay 50.9 52.3 55.3
Florida, U.S.A. Okay 46.1 51.5 54.6
Vancouver, Canada Okay 56.1 56.7 57.1
Austin, U.S.A. Okay 9.7 9.9 10.2
New York, U.S.A. Okay 49.8 51.9 54.7
Austin, U.S.A. Okay 9.7 10.0 10.3
Amsterdam1, Netherlands Okay 122.0 123.6 127.8
Amsterdam, Netherlands Okay 121.2 123.4 127.5
Sydney, Australia Okay 204.1 205.2 208.6
Hong Kong, China Okay 203.6 204.5 206.1
Stockholm, Sweden Okay 144.8 147.7 149.7
Cologne, Germany Okay 133.0 135.0 137.5
London, United Kingdom Okay 118.5 121.7 124.7
Munchen, Germany Okay 136.7 139.0 140.5
Kraków, Poland Okay 192.3 195.9 205.8
Cagliari, Italy Okay 156.3 156.8 157.4
Paris, France Okay 123.0 124.5 127.7
Madrid, Spain Okay 158.8 161.5 164.5
Amsterdam3, Netherlands Okay 125.7 130.9 134.8
Singapore, Singapore Okay 255.3 256.7 259.2
Melbourne, Australia Okay 229.8 230.3 231.0

View 2 Replies View Related

Strange Port Connection

Dec 28, 2007

I’m running RHEL 3, Apache and Cpanel. When I ran: "netstat –an" I found this in the results:

tcp 0 0 11.11.111.229:49158 11.11.111.229:80 ESTABLISHED
tcp 0 0 11.11.111.229:49578 11.11.111.229:80 ESTABLISHED

If I’m reading this right these two unprivileged ports are open and talking to my privileged http port 80. Does this seem right? Why would these two ports on my machine have a connection. All this attention was sparked by abnormal spikes in load. Now I’m getting paranoid that something may be off even though I’m clean when scanning for rootkits etc…

View 3 Replies View Related

Strange Bandwidth Behaviour

May 26, 2009

I'm very new to dedicated hosting, but not to server admin in general, and have come across what seems to be to be a problem.

I'm based in the UK, and the dedi I went with is in the US, i have several VPS in the US, and I can download to them pretty consistently from a UK based server at around 5MB/s... this is on a VPS.

The dedi I signed up to lease has a 100Mb card, and a fairly well known provider, and yet the connection I get to the UK is terrible. It fluctuates wildly between 200KB/s and 5MB/s, seemingly at random, for example, downloading a 100MB file, i'll start at 500KB/s initally, and within a few seconds it might be 3.5MB/s, this could then go either way, but i'll usually end up with an average of about 800KB/s - which really seems awfully slow.

The traceroutes appear fine, there's around 110ms on ping and that is consistant, and similar to the figure the VPS get.

I've been in touch with their support, and after trying the usual suspects - including swapping the NIC - they lost interest. I was actually very impressed with them up until this point so feel pretty let down.

Is this normal? I've honestly never seen a download vary so wildly in speed. Unfortunately i'm tied in on a 3 month contract otherwise i'd drop them in a heartbeat right now.

View 12 Replies View Related

Error_log - Strange Entries

Nov 4, 2009

All accounst in my dedicated server start to show a very strange error_log with the following entries:

====
[04-Nov-2009 21:28:51] PHP Warning: PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/php_interbase.dll' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/php_interbase.dll: cannot open shared object file: No such file or directory in Unknown on line 0 .....
====

Always when a php script is accessed, new entrie with this error above is created.

I dont understand because php script have not any relation with intebase or pgsql and my server have not this e db installed.

View 5 Replies View Related

Strange Browser Agent

May 10, 2009

i recently got multiple logs regarding this weird browser user agent,

Browser Agent:
XXX<? echo "w0000t"; ?>XXX

anyone have information regarding this?

View 3 Replies View Related

Strange Apache Prefork

Jun 2, 2008

I've got a few machines where Apache acts really strange and curious if anyone has any suggestions. I'd love to figure this out so it can actually be deployed to a larger amount of machines and not just test instances.

- Basic Information
Apache 2.2.8 (Tried a few 2.2 versions)
PHP 5.2.6
suPHP based

Prefork Based
- Once a day at a random time Apache fails a request from remote monitoring. It comes back within a minute however is is inaccessible for that time. It sometimes gets picked up by 5 minute monitoring on the machine itself and it restarts the service obviously.

- PHP scripts fail to be killed at times resulting in memory being used. They need to be killed in order to go away.

Worker Based
- Apache can stay up forever it does not fail any requests

- PHP scripts do not get killed at a more frequent basis than in prefork. You need to `kill -9 pid` in order to get rid of the php processes.

I read about very few issues with 2.2 so I'm quite confused by this.

View 5 Replies View Related

Strange HTTPD Permissions

Mar 12, 2008

I have an issue I've never seen before, and hope someone here can shed some light on this odd problem.

Just brought a new server online running Apache 2.2.3. The DocumentRoot was originally set to /var/www/html but I changed it to /home/[sitename]/public_html. I've done hundreds of Apache configs before and this one is no different.

Anyhow, here's the issue:

In SSH (logged in as root), if I create a file (let's just say I do a vi index2.php, enter "test" and save), when I try to go to pull the file in my browser, I get a 403 permission denied error. However, if I create the file in /var/www/html then move it to /home/[sitename]/public_html, the file comes up fine in a browser. Same goes for JPEG images. If I wget a JPG from another site directly into /home/[sitename]/public_html, get a 403 permission denied. If I wget it into /var/www/html then move it, it loads just fine.

It's important to note that the file permissions, owner, and the actual file itself are all identical. Both directories are chowned and chmodded identically.

View 1 Replies View Related

Strange Ioncube Loaders

Feb 12, 2008

I run WHMCS as my billing system for my company and everything is working fine, except piping emails to WHMCS.

The people I am hosting WHMCS with are running PHP 4.4.8 and so I have the loaders for 4.4 uploaded to my account. When I try to send an email to an address that is set to pipe to WHMCS I recieve the following:

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

pipe to | /usr/local/bin/php -q /home/user/domains/dephnet.com/public_html/my/pipe/pipe.php
generated by info@domain.com
local delivery failed

The following text was generated during the delivery attempts:

------ pipe to | /usr/local/bin/php -q /home/user/domains/dephnet.com/public_html/my/pipe/pipe.php
generated by info@domain.com ------

Site error: the file <b>/home/user/domains/dephnet.com/public_html/my/pipe/pipe.php</b> requires the ionCube PHP Loader ioncube_loader_fre_5.2.so to be installed by the site administrator.

Now why would the script want ioncube_loader_fre_5.2.so when the site works fine?

The site can be found on [url]

View 5 Replies View Related

Strange Urls In 404 Logs

Aug 15, 2008

I just found hundreds of rubbish urls in awstats for a particular domain. Is this referrer spam or something more serious and can I do something about this?

I have attached a screenshot.

View 4 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved