English | Vietnamese
 

banner

[Rule] Rules  [Home] Main Forum  [Portal] Portal  
[Members] Member Listing  [Statistics] Statistics  [Search] Search  [Reading Room] Reading Room 
[Register] Register   [Login] Login [  http  | https  ]
 
Forum Index Thảo luận hệ điều hành *nix Server bị treo liên tục, nhờ tìm nguyên nhân ?  XML
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 03/10/2012 20:44:15 (+0700) | #1 | 269864
mr.tee
Member
[Minus]    0    [Plus]
Joined: 20/10/2009 01:18:07
Messages: 58
Offline
[Profile] [PM]
3-4 ngày nay, con Centos em đang dùng thường xuyên bị treo ở tình trạng không ssh được, các dịch vụ như ftp, httpd, mysql đều ko hoạt động.

Đây là error_log 3 ngày gần đây nhất

https://docs.google.com/open?id=0By7Th2rBSylvNUVrZ3pQWkJoRlE

Em kiểm tra error_log thì thấy có đoạn sau ở mỗi thời điểm server bị treo

Code:
[Mon Oct 01 16:05:11 2012] [error] server reached MaxClients setting, consider raising the MaxClients setting
[Mon Oct 01 16:21:19 2012] [notice] SELinux policy enabled; httpd running as context root:system_r:httpd_t
[Mon Oct 01 16:21:19 2012] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Mon Oct 01 16:21:19 2012] [notice] Digest: generating secret for digest authentication ...
[Mon Oct 01 16:21:19 2012] [notice] Digest: done
[Mon Oct 01 16:21:20 2012] [notice] Apache/2.2.22 (Unix) DAV/2 PHP/5.3.10 SVN/1.6.13 configured -- resuming normal operations
[Mon Oct 01 16:45:15 2012] [error] server reached MaxClients setting, consider raising the MaxClients setting
[Mon Oct 01 17:10:50 2012] [notice] SELinux policy enabled; httpd running as context root:system_r:httpd_t
[Mon Oct 01 17:10:50 2012] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Mon Oct 01 17:10:50 2012] [notice] Digest: generating secret for digest authentication ...
[Mon Oct 01 17:10:50 2012] [notice] Digest: done
[Mon Oct 01 17:10:51 2012] [notice] Apache/2.2.22 (Unix) DAV/2 PHP/5.3.10 SVN/1.6.13 configured -- resuming normal operations
[Mon Oct 01 17:44:32 2012] [notice] caught SIGTERM, shutting down
[Mon Oct 01 17:44:33 2012] [notice] SELinux policy enabled; httpd running as context root:system_r:httpd_t
[Mon Oct 01 17:44:33 2012] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Mon Oct 01 17:44:33 2012] [notice] Digest: generating secret for digest authentication ...
[Mon Oct 01 17:44:33 2012] [notice] Digest: done
[Mon Oct 01 17:44:33 2012] [notice] Apache/2.2.22 (Unix) DAV/2 PHP/5.3.10 SVN/1.6.13 configured -- resuming normal operations
[Mon Oct 01 17:55:43 2012] [warn] child process 5918 still did not exit, sending a SIGTERM
[Mon Oct 01 17:55:48 2012] [warn] child process 5039 still did not exit, sending a SIGTERM
[Mon Oct 01 17:55:48 2012] [warn] child process 5923 still did not exit, sending a SIGTERM
[Mon Oct 01 17:55:48 2012] [warn] child process 5974 still did not exit, sending a SIGTERM
[Mon Oct 01 17:55:48 2012] [warn] child process 5943 still did not exit, sending a SIGTERM
[Mon Oct 01 17:55:48 2012] [warn] child process 5049 still did not exit, sending a SIGTERM


Nhờ mọi người cho em hướng dẫn khắc phục. Em xin cảm ơn.
Après la pluie, le beau temps
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 03/10/2012 22:36:24 (+0700) | #2 | 269870
[Avatar]
 tranhuuphuoc
Moderator
Joined: 05/09/2004 06:08:09
Messages: 865
Location: Lầu Xanh
Offline
[Profile] [PM] [WWW]
Trong error_log thì chủ yếu liên quan dính đến Apache, tạm thời tắt bỏ selinux sau đó restart lại server để tiến hành tìm hiểu nguyên nhân và cách khắc phục.
Cho xem mấy cái log trong /var/log , bạn nên cung cấp rõ các thông tin của con server này
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 03/10/2012 22:53:27 (+0700) | #3 | 269871
mr.tee
Member
[Minus]    0    [Plus]
Joined: 20/10/2009 01:18:07
Messages: 58
Offline
[Profile] [PM]

tranhuuphuoc wrote:
Trong error_log thì chủ yếu liên quan dính đến Apache, tạm thời tắt bỏ selinux sau đó restart lại server để tiến hành tìm hiểu nguyên nhân và cách khắc phục.
Cho xem mấy cái log trong /var/log , bạn nên cung cấp rõ các thông tin của con server này  


Anh cần thêm log gì trong /var/log để em up lên ạ.
Đây là message log của server
https://docs.google.com/open?id=0By7Th2rBSylvU2s0YlRTazhqU1k
Đây là cấu hình server em đang sử dụng :

Code:
Last login: Wed Oct  3 22:14:14 2012 from 1.55.63.81
[root@localhost ~]# cat /proc/cpuinfo
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 6
model           : 15
model name      : Intel(R) Xeon(R) CPU           X3210  @ 2.13GHz
stepping        : 11
cpu MHz         : 1596.000
cache size      : 4096 KB
physical id     : 0
siblings        : 4
core id         : 0
cpu cores       : 4
apicid          : 0
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 10
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm constant_tsc pni
 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr lahf_lm
bogomips        : 4256.14

processor       : 1
vendor_id       : GenuineIntel
cpu family      : 6
model           : 15
model name      : Intel(R) Xeon(R) CPU           X3210  @ 2.13GHz
stepping        : 11
cpu MHz         : 1596.000
cache size      : 4096 KB
physical id     : 0
siblings        : 4
core id         : 1
cpu cores       : 4
apicid          : 1
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 10
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm constant_tsc pni
 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr lahf_lm
bogomips        : 4255.39

processor       : 2
vendor_id       : GenuineIntel
cpu family      : 6
model           : 15
model name      : Intel(R) Xeon(R) CPU           X3210  @ 2.13GHz
stepping        : 11
cpu MHz         : 1596.000
cache size      : 4096 KB
physical id     : 0
siblings        : 4
core id         : 2
cpu cores       : 4
apicid          : 2
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 10
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm constant_tsc pni
 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr lahf_lm
bogomips        : 4255.42

processor       : 3
vendor_id       : GenuineIntel
cpu family      : 6
model           : 15
model name      : Intel(R) Xeon(R) CPU           X3210  @ 2.13GHz
stepping        : 11
cpu MHz         : 1596.000
cache size      : 4096 KB
physical id     : 0
siblings        : 4
core id         : 3
cpu cores       : 4
apicid          : 3
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 10
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm constant_tsc pni
 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr lahf_lm
bogomips        : 4255.42

[root@localhost ~]# cat /proc/meminfo
MemTotal:      4149456 kB
MemFree:        143144 kB
Buffers:        136700 kB
Cached:        3149300 kB
SwapCached:       8440 kB
Active:        2377668 kB
Inactive:      1516976 kB
HighTotal:     3274156 kB
HighFree:        26820 kB
LowTotal:       875300 kB
LowFree:        116324 kB
SwapTotal:     8193140 kB
SwapFree:      8175700 kB
Dirty:             356 kB
Writeback:           0 kB
AnonPages:      606844 kB
Mapped:          18924 kB
Slab:            90360 kB
PageTables:       7448 kB
NFS_Unstable:        0 kB
Bounce:              0 kB
CommitLimit:  10267868 kB
Committed_AS:  1442320 kB
VmallocTotal:   116728 kB
VmallocUsed:      7656 kB
VmallocChunk:   108592 kB
HugePages_Total:     0
HugePages_Free:      0
HugePages_Rsvd:      0
Hugepagesize:     2048 kB
[root@localhost ~]#
Après la pluie, le beau temps
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 04/10/2012 07:04:26 (+0700) | #4 | 269875
[Avatar]
 tranhuuphuoc
Moderator
Joined: 05/09/2004 06:08:09
Messages: 865
Location: Lầu Xanh
Offline
[Profile] [PM] [WWW]
Nếu avc: denied xuất hiện trong /var/log/messages tràn lan thì khả năng cao nhất là do selinux (trong /etc/sysconfig/selinux). Tạm thời tắt bỏ selinux để tìm nguyên nhân . Ngoài ra xem thêm /var/log/audit/audit.log
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 04/10/2012 08:31:46 (+0700) | #5 | 269878
mr.tee
Member
[Minus]    0    [Plus]
Joined: 20/10/2009 01:18:07
Messages: 58
Offline
[Profile] [PM]
E đã disable selinux, sau khi reboot lại server, start apache với command "service httpd start" thì gặp lỗi

Code:
address already in use make_sock could not bind to address 80


Em kill các process đang sử dụng port 80

Code:
for i in `lsof -i :80 | grep http | awk {' print $2'}`; do kill -9 $i; done


Sau đấy start lại httpd thì đã ok.

Đây là file audit.log, thú thật là em đọc không hiểu các thông tin trong này.

https://docs.google.com/open?id=0By7Th2rBSylveFRsMi05eWRWU3c
Après la pluie, le beau temps
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 04/10/2012 08:56:45 (+0700) | #6 | 269879
[Avatar]
 tranhuuphuoc
Moderator
Joined: 05/09/2004 06:08:09
Messages: 865
Location: Lầu Xanh
Offline
[Profile] [PM] [WWW]

mr.tee wrote:
E đã disable selinux, sau khi reboot lại server, start apache với command "service httpd start" thì gặp lỗi

Code:
address already in use make_sock could not bind to address 80


Em kill các process đang sử dụng port 80

Code:
for i in `lsof -i :80 | grep http | awk {' print $2'}`; do kill -9 $i; done


Sau đấy start lại httpd thì đã ok.

Đây là file audit.log, thú thật là em đọc không hiểu các thông tin trong này.

https://docs.google.com/open?id=0By7Th2rBSylveFRsMi05eWRWU3c 


Thông tin log của em mà anh xem toàn là liên quan đến AVC mà AVC thì em xem thông tin ở đây
http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-selinux.html




Server của em theo anh thấy nguyên nhân là do Selinux gây ra do vậy có hiện tượng thông điệp AVC bị flood trong /var/log/audit/audit.log, bây giờ em nên thử từng dịch vụ với selinux để bật nó lên nếu em cần đến nó. Có thể dùng getsebool -a để liệt kê, còn muốn gán cho nó thì dùng setsebool
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 04/10/2012 11:20:04 (+0700) | #7 | 269888
myquartz
Member
[Minus]    0    [Plus]
Joined: 04/01/2005 04:58:30
Messages: 563
Offline
[Profile] [PM]
cái dòng log này:

Code:
[Mon Oct 01 16:45:15 2012] [error] server reached MaxClients setting, consider raising the MaxClients setting


Chính là dấu hiệu có thể làm cho server chết. vì có quá nhiều client kết nối => quá tải => hết tài nguyên (nhất là RAM) => treo (tức là chậm ko chạy được cái gì khác cả)?
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 04/10/2012 19:07:05 (+0700) | #8 | 269901
mr.tee
Member
[Minus]    0    [Plus]
Joined: 20/10/2009 01:18:07
Messages: 58
Offline
[Profile] [PM]
Em đã disable luôn cái selinux ( vì không dùng đến ) - Server vẫn treo.
đây là top của server tại thời điểm bị treo ( Em đang duyệt web thì thấy down, may mà vẫn đang bật ssh - bình thường nếu bị thì không vào ssh được luôn )

Ram free vẫn còn nhiều, nhưng CPU thì tăng cao khủng khiếp. Bình thường load average chỉ khoảng 6-7

Code:
Last login: Thu Oct  4 19:57:28 2012 from 1.55.63.81
[root@localhost ~]# top
top - 19:59:43 up 11:15,  1 user,  load average: 176.85, 130.67, 66.17
Tasks: 156 total,   1 running, 155 sleeping,   0 stopped,   0 zombie
Cpu(s):  1.2%us,  4.4%sy,  0.0%ni,  0.0%id, 91.5%wa,  0.9%hi,  2.0%si,  0.0%st
Mem:   4149456k total,   593756k used,  3555700k free,     4704k buffers
Swap:  8193140k total,    12180k used,  8180960k free,   142252k cached


  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
 7200 mysql     10  -5  761m 295m 5676 S 23.3  7.3  40:40.37 mysqld
 2263 root      10  -5     0    0    0 S  9.0  0.0  15:31.65 kondemand/2
    8 root      RT  -5     0    0    0 S  1.0  0.0   1:39.31 migration/2
   16 root      10  -5     0    0    0 S  0.7  0.0   2:51.38 events/2
   27 root      10  -5     0    0    0 S  0.3  0.0  16:54.62 kblockd/2
 2264 root      10  -5     0    0    0 S  0.3  0.0   0:06.75 kondemand/3
22497 root      15   0  2436 1140  800 R  0.3  0.0   0:00.13 top
    1 root      15   0  2072  624  536 S  0.0  0.0   0:02.13 init
    2 root      RT  -5     0    0    0 S  0.0  0.0   0:00.25 migration/0
    3 root      34  19     0    0    0 S  0.0  0.0   0:00.02 ksoftirqd/0
    4 root      RT  -5     0    0    0 S  0.0  0.0   0:00.00 watchdog/0
    5 root      RT  -5     0    0    0 S  0.0  0.0   0:00.23 migration/1
    6 root      35  19     0    0    0 S  0.0  0.0   0:00.03 ksoftirqd/1
    7 root      RT  -5     0    0    0 S  0.0  0.0   0:00.00 watchdog/1
    9 root      39  19     0    0    0 S  0.0  0.0   0:00.06 ksoftirqd/2
   10 root      RT  -5     0    0    0 S  0.0  0.0   0:00.00 watchdog/2
   11 root      RT  -5     0    0    0 S  0.0  0.0   0:02.51 migration/3
   12 root      34  19     0    0    0 S  0.0  0.0   0:00.00 ksoftirqd/3
[root@localhost ~]#


Để em check log xem có gì lạ thì sẽ quẳng lên.
Après la pluie, le beau temps
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 05/10/2012 09:30:29 (+0700) | #9 | 269914
hieuneo
Member
[Minus]    0    [Plus]
Joined: 06/02/2009 13:51:04
Messages: 21
Offline
[Profile] [PM]
mình chỉ thấy mỗi wait io cao 91.5%wa, chắc đây là nguyên nhân chính khiên server của bạn bị treo.
RAM không có tăng đặc biệt, vẫn dư.
Còn nguyên nhân nào dẫn tới wait io cao thì chưa rõ smilie
`while true; do date; ps auxf | awk '{if($8=="D") print $0;}'; sleep 1; done`
để tìm ra những Process nào khiến IO tăng,
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 05/10/2012 10:12:10 (+0700) | #10 | 269917
mr.tee
Member
[Minus]    0    [Plus]
Joined: 20/10/2009 01:18:07
Messages: 58
Offline
[Profile] [PM]
Code:
apache    6268  3.3  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6269  3.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6270  3.0  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6271  3.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6272  3.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6273  3.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6274  3.0  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6275  3.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6276  2.6  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6277  4.5  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6278  4.5  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6279  4.5  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6281  5.5  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6282  5.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6283  5.0  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6284  4.5  0.4  45380 18324 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6285  4.5  0.4  45380 18324 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6286  4.5  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6328 10.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6329  9.0  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6330  0.0  0.2  33980  9784 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6333 10.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6335  0.0  0.2  33628  8668 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6336  9.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6337  0.0  0.1  33068  6912 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6338  9.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6339  0.0  0.1  33068  6916 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6340  9.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6345  9.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6346 10.0  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6347 10.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6349  9.0  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6350 10.0  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6354  9.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6358 10.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6366  9.0  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6367  9.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6368  9.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6372 11.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6374  9.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6376 10.0  0.4  45380 18324 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6377  9.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6379 10.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6380  9.0  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6382  9.0  0.4  45380 18332 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6383  9.0  0.4  45380 18328 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
Fri Oct  5 11:11:24 ICT 2012
apache    4997  1.9  0.4  45384 18840 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5009  1.3  0.4  45380 18968 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5014  1.2  0.4  45344 18764 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5015  1.7  0.4  45376 18804 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5026  1.2  0.4  45364 18788 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5027  1.4  0.4  45364 18900 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5028  0.9  0.4  45080 18420 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5031  1.6  0.4  45348 18768 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5037  1.2  0.4  45384 18924 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5038  1.0  0.4  45344 18760 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5039  1.2  0.4  45348 18792 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5042  1.0  0.4  45364 18908 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5047  1.3  0.4  45364 18792 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5050  0.9  0.4  45344 18744 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5061  1.0  0.4  45344 18812 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5069  0.9  0.4  45344 18756 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5083  0.8  0.4  45344 18796 ?        D    11:10   0:00  \_ /usr/sbin/h
ttpd
apache    5953  0.9  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    5969  0.9  0.4  45324 18464 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    5975  0.8  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6043  0.9  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6058  1.2  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6062  1.0  0.4  45332 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6063  1.1  0.4  45324 18448 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6075  1.1  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6081  1.0  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6105  1.1  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6125  1.7  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6151  1.5  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6160  1.5  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6176  0.8  0.2  33976  9992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6203  2.0  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6209  2.0  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6212  2.2  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6222  1.8  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6255  3.0  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6261  2.2  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6268  2.5  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6274  2.2  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6279  3.0  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6283  3.3  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6336  5.0  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6337  2.5  0.3  37428 13300 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6345  4.5  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6346  5.0  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6350  5.0  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6366  5.0  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6367  4.5  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6374  4.5  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6376  5.0  0.4  45324 18448 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6377  4.5  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6382  4.5  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6383  4.5  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6399 12.0  0.4  45324 18448 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6402  9.0  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6404  4.0  0.3  37436 13324 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6408  9.0  0.4  45324 18448 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6409  0.0  0.2  33980  9780 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6413  9.0  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6416  1.0  0.2  33980  9788 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6417 10.0  0.4  45332 18520 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6418 10.0  0.4  45332 18516 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6419  5.0  0.3  37428 13248 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6420  9.0  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6425 10.0  0.4  45324 18456 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6426  0.0  0.3  37428 13264 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6427  0.0  0.2  36356 12124 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6428  0.0  0.4  45324 18452 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6430  0.0  0.3  37428 13248 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6434  0.0  0.3  37428 13248 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6436  0.0  0.3  37428 13252 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6437  0.0  0.3  37428 13248 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6438  0.0  0.3  37428 13248 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6439  0.0  0.3  37428 13248 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6449  0.0  0.3  37428 13248 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
Fri Oct  5 11:11:25 ICT 2012
apache    6416  0.5  0.2  33980  9788 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6469  0.0  0.0   6868  1772 ?        D    11:11   0:00  |       \_ /us
r/sbin/postdrop -r
apache    6477  0.0  0.1  33068  6860 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6480  0.0  0.1  33068  6860 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
Fri Oct  5 11:11:27 ICT 2012
apache    6469  0.0  0.0   6868  1772 ?        D    11:11   0:00  |       \_ /us
r/sbin/postdrop -r
apache    6539  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6540  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6541  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6542  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6550  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6553  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6554  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6555  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6556  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6558  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6559  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6560  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6562  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6563  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6564  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6565  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6566  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6567  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6568  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6569  0.0  0.1  33068  6984 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
apache    6570  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/h
ttpd
Fri Oct  5 11:11:28 ICT 2012
Fri Oct  5 11:11:29 ICT 2012


Đây là out put khi thực hiện "while true; do date; ps auxf | awk '{if($8=="D") print $0;}'; sleep 1; done"
Après la pluie, le beau temps
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 05/10/2012 10:36:53 (+0700) | #11 | 269919
hieuneo
Member
[Minus]    0    [Plus]
Joined: 06/02/2009 13:51:04
Messages: 21
Offline
[Profile] [PM]
thằng httpd là nguyên nhân khiến server bị treo, bạn xem xét lại thằng htpd đi.
Config thừa, thiếu, chưa chuẩn option nào không,
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 05/10/2012 10:37:12 (+0700) | #12 | 269920
mr.tee
Member
[Minus]    0    [Plus]
Joined: 20/10/2009 01:18:07
Messages: 58
Offline
[Profile] [PM]
Đây là một đoạn log bắt trong buổi chiều hôm nay

Code:
42.119.160.250 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/Themes/GuitarLearning/images/star.gif HTTP/1.1" 200 362 "http://domain.com/forum/index.php?topic=10142.0" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4"
42.119.160.250 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/Themes/GuitarLearning/images/www_sm.gif HTTP/1.1" 200 292 "http://domain.com/forum/index.php?topic=10142.0" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4"
175.103.58.55 - - [05/Oct/2012:16:27:40 +0700] "GET / HTTP/1.0" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
211.100.49.9 - - [05/Oct/2012:16:27:40 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
59.37.163.156 - - [05/Oct/2012:16:27:40 +0700] "GET / HTTP/1.0" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
184.169.168.27 - - [05/Oct/2012:16:27:40 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
42.119.160.250 - - [05/Oct/2012:16:27:40 +0700] "GET /templates/widget/forumtop.php HTTP/1.1" 200 10623 "http://domain.com/forum/index.php?topic=10142.0" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4"
42.119.160.250 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/index.php?action=dlattach;attach=2287;type=avatar HTTP/1.1" 200 25640 "http://domain.com/forum/index.php?topic=10142.0" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4"
210.213.245.230 - - [05/Oct/2012:16:27:40 +0700] "GET / HTTP/1.0" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
222.74.98.234 - - [05/Oct/2012:16:27:40 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
117.211.123.62 - - [05/Oct/2012:16:27:40 +0700] "GET / HTTP/1.0" 403 3700 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
115.73.155.118 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/Themes/default/css/webkit.css HTTP/1.1" 200 283 "http://domain.com/forum/index.php?topic=24011.1" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4"
117.41.182.188 - - [05/Oct/2012:16:27:40 +0700] "GET / HTTP/1.0" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
115.73.155.118 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/Themes/GuitarLearning/style.css?fin12 HTTP/1.1" 200 19018 "http://domain.com/forum/index.php?topic=24011.1" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4"
115.73.155.118 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/Themes/default/him.js HTTP/1.1" 200 27012 "http://domain.com/forum/index.php?topic=24011.1" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4"
115.73.155.118 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/Themes/GuitarLearning/scripts/theme.js?fin20 HTTP/1.1" 200 3688 "http://domain.com/forum/index.php?topic=24011.1" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4"
115.73.155.118 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/Themes/GuitarLearning/css/index.css?fin20 HTTP/1.1" 200 65273 "http://domain.com/forum/index.php?topic=24011.1" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4"
157.55.33.253 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/index.php?action=emailuser;sa=email;msg=105689 HTTP/1.1" 200 4561 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
115.73.155.118 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/Themes/GuitarLearning/scripts/script.js?fin11 HTTP/1.1" 200 47795 "http://domain.com/forum/index.php?topic=24011.1" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4"
157.55.33.253 - - [05/Oct/2012:16:27:40 +0700] "GET /forum/index.php?action=emailuser;sa=email;msg=105690 HTTP/1.1" 200 4943 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
190.85.133.162 - - [05/Oct/2012:16:27:40 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
92.39.54.161 - - [05/Oct/2012:16:27:41 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
200.7.193.243 - - [05/Oct/2012:16:27:41 +0700] "GET / HTTP/1.0" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
113.160.113.54 - - [05/Oct/2012:16:27:41 +0700] "GET /forum/index.php?action=dlattach;attach=5342;type=avatar HTTP/1.1" 200 19009 "http://subdomain.domain.com/video/5552/lien-khuc-nhac-quang-cao" "Mozilla/5.0 (Windows NT 5.1; rv:15.0) Gecko/20100101 Firefox/15.0.1"
113.160.113.54 - - [05/Oct/2012:16:27:41 +0700] "GET /forum/index.php?action=dlattach;attach=6826;type=avatar HTTP/1.1" 200 23514 "http://subdomain.domain.com/video/5552/lien-khuc-nhac-quang-cao" "Mozilla/5.0 (Windows NT 5.1; rv:15.0) Gecko/20100101 Firefox/15.0.1"
113.160.113.54 - - [05/Oct/2012:16:27:41 +0700] "GET /forum/index.php?action=dlattach;attach=1865;type=avatar HTTP/1.1" 200 26399 "http://subdomain.domain.com/video/5552/lien-khuc-nhac-quang-cao" "Mozilla/5.0 (Windows NT 5.1; rv:15.0) Gecko/20100101 Firefox/15.0.1"
187.16.62.130 - - [05/Oct/2012:16:27:41 +0700] "GET / HTTP/1.1" 403 3700 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
173.13.200.181 - - [05/Oct/2012:16:27:41 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
177.135.241.245 - - [05/Oct/2012:16:27:41 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
180.76.5.140 - - [05/Oct/2012:16:27:41 +0700] "GET /user/78880/ksvdai/connect/follow HTTP/1.1" 404 283 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
213.131.41.6 - - [05/Oct/2012:16:27:41 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
125.216.144.199 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.0" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
202.181.176.3 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
187.5.248.219 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.1" 403 3700 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
1.53.169.82 - - [05/Oct/2012:16:27:42 +0700] "GET /memgroup/w2g/519/dien-dan-hocdan-com/9610 HTTP/1.1" 404 283 "http://subdomain.domain.com/video/5656/adele-rolling-in-the-deep-olesya-feat-tuanvu090" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1"
201.148.26.81 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
202.181.176.3 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
222.74.98.234 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
124.205.18.183 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
219.234.82.53 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.1" 403 3700 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
219.234.82.86 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.1" 403 3700 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
41.222.209.77 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
178.33.34.48 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.0" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"



Cho em hỏi là đoạn request này có "vấn đề" không ạ ?

124.205.18.183 - - [05/Oct/2012:16:27:42 +0700] "GET / HTTP/1.1" 200 1001 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
Après la pluie, le beau temps
[Up] [Print Copy]
  [Question]   Server bị treo liên tục, nhờ tìm nguyên nhân ? 06/10/2012 16:43:13 (+0700) | #13 | 269936
[Avatar]
 quanta
Moderator
Joined: 28/07/2006 14:44:21
Messages: 7265
Location: $ locate `whoami`
Offline
[Profile] [PM]
Việc đầu tiên cần làm là thiết lập một cơ chế giám sát để khi server có dấu hiệu cảm cúm (load average vượt ngưỡng nào đó, ...) là phải alert (email, SMS, ...) ngay. Hoặc ít nhất cũng nên cài `atop` để khi cần có thể xem lại hiện trạng server lúc bị treo.

Code:
[error] server reached MaxClients setting, consider raising the MaxClients setting

MaxClients bạn đang để là bao nhiêu?
Code:
[warn] child process 5918 still did not exit, sending a SIGTERM

Chỉ là warnings thôi, đại ý: bạn stop Apache nhưng mấy thằng processes con nó không "chết", nên đành phải gửi một cái TERMinate SIGnal.

Code:
top - 19:59:43 up 11:15,  1 user,  load average: 176.85, 130.67, 66.17
Tasks: 156 total,   1 running, 155 sleeping,   0 stopped,   0 zombie
Cpu(s):  1.2%us,  4.4%sy,  0.0%ni,  0.0%id, 91.5%wa,  0.9%hi,  2.0%si,  0.0%st

Wait I/O quá cao làm load average tăng chóng mặt.

Code:
apache    6570  0.0  0.1  33068  6992 ?        D    11:11   0:00  \_ /usr/sbin/httpd

Bạn để ý cột STATE, D có nghĩa là Uninterruptible sleep (dịch nôm là "ngủ vĩnh viễn"). Với tình trạng này thì không còn cách nào khác ngoài... reboot.

Câu hỏi đặt ra là: tạo sao thằng Apache lại bị D state? Có cách nào để debug không?

@hieuneo: dùng `watch` sẽ hay hơn là `while true;`.
Let's build on a great foundation!
[Up] [Print Copy]
[digg] [delicious] [google] [yahoo] [technorati] [reddit] [stumbleupon]
Go to: 
 Users currently in here 
1 Anonymous

Powered by JForum - Extended by HVAOnline
 hvaonline.net  |  hvaforum.net  |  hvazone.net  |  hvanews.net  |  vnhacker.org
1999 - 2013 © v2012|0504|218|