From owner-freebsd-questions@FreeBSD.ORG Fri Jan 30 04:40:43 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7B1DE16A4CF for ; Fri, 30 Jan 2004 04:40:43 -0800 (PST) Received: from blake.aaton.com (blake.aaton.com [195.25.225.20]) by mx1.FreeBSD.org (Postfix) with ESMTP id E819043D2D for ; Fri, 30 Jan 2004 04:40:40 -0800 (PST) (envelope-from lists@aaton.com) Received: from 127.0.0.1 (localhost.aaton.com [127.0.0.1]) by virus.munching.machine (Postfix) with SMTP id 771386272B; Fri, 30 Jan 2004 13:40:39 +0100 (CET) Received: from colargol.aaton.com (colargol.aaton.com [192.168.1.217]) by blake.aaton.com (Postfix) with ESMTP id 5C2DF62728 for ; Fri, 30 Jan 2004 13:40:39 +0100 (CET) Received: by colargol.aaton.com (Postfix, from userid 1003) id 5DEBC306; Fri, 30 Jan 2004 13:40:34 +0100 (CET) Date: Fri, 30 Jan 2004 13:40:34 +0100 From: julien Beauviala To: freebsd-questions@freebsd.org Message-ID: <20040130124034.GA408@colargol.aaton.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.5.1i Subject: apache is seg faulting. why ? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Jan 2004 12:40:43 -0000 Hello, since about four days, the daily security logs are reporting the following : > pid 72041 (httpd), uid 80: exited on signal 11 > pid 72040 (httpd), uid 80: exited on signal 11 > pid 72099 (httpd), uid 80: exited on signal 11 > pid 72039 (httpd), uid 80: exited on signal 11 > pid 74202 (httpd), uid 80: exited on signal 11 [etc... lots of lines] When I look at /var/log/messages I find : Jan 30 10:53:49 webserver /kernel: pid 20682 (httpd), uid 80: exited on signal 11 Jan 30 11:43:29 webserver /kernel: pid 24874 (httpd), uid 80: exited on signal 11 Jan 30 13:12:37 webserver /kernel: pid 32084 (httpd), uid 80: exited on signal 11 Jan 30 13:20:49 webserver /kernel: pid 32628 (httpd), uid 80: exited on signal 11 Jan 30 13:20:54 webserver /kernel: pid 32605 (httpd), uid 80: exited on signal 11 Jan 30 13:21:01 webserver /kernel: pid 32629 (httpd), uid 80: exited on signal 11 No idea what is going on, it started four days ago for no reason I can guess. In the apache logs I find no actions that would be in sync with those timestamps. Google was not much help either. How should I go about investigating this ? How can I find out more infos about what is causing this ? I'm puzzled and a bit worried. Many thanks for any hints. j.