View Single Post
  #10  
Old 18th November 2009, 17:52
wxman wxman is offline
Senior Member
 
Join Date: May 2007
Posts: 189
Thanks: 11
Thanked 2 Times in 2 Posts
Default

Quote:
Originally Posted by till View Post
Please check the apache access log, do you see if a specific URL causes these high amount of simultanious connections in your server?
No there isn't. My first thought was a DOS attack, so I checked the log. I don't see any one IP or URL the jumps out. Also the traffic seems steady right up to when it locks up. You can see it on ganglia. The graph goes from the bottom to over the top in 5 minutes. The only thing I saw the shocked me, was watching top. You can see the number of apache processes almost double in an instant.
There was an increase in the total traffic for the day. On the 16th the total hits was 70890 and on the 17th it went to 113208.

Last edited by wxman; 18th November 2009 at 18:25.
Reply With Quote