mein Apache auf unserem Windows 2003 Server (P4 3,2 GHz HT; 4GB ECC-RAM) crashed sporadisch (auch unter Volllast). Habe Euch mal Logs nur von Heute angehängt
Windows Ereignisanzeige von Anwendung und System:
Ereignistyp: Fehler
Ereignisquelle: Application Error
Ereigniskategorie: Keine
Ereigniskennung: 1001
Datum: 16.11.2007
Zeit: 16:33:12
Benutzer: Nicht zutreffend
Computer: XXX
Beschreibung:
Fehlerhafter Speicherbereich 533702808.
Weitere Informationen über die Hilfe- und Supportdienste erhalten Sie unter http://go.microsoft.com/fwlink/events.asp.
Daten:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 35 33 33 37 30 32 38 30 53370280
0010: 38 0d 0a 8..
Ereignistyp: Informationen
Ereignisquelle: Application Error
Ereigniskategorie: (100)
Ereigniskennung: 1004
Datum: 16.11.2007
Zeit: 16:30:20
Benutzer: Nicht zutreffend
Computer: XXX
Beschreibung:
Fehler in Warteschlange: Fehlgeschlagene Anwendung apache.exe, Version 2.2.2.0, fehlgeschlagenes Modul ntdll.dll, Version 5.2.3790.3959, Fehleradresse 0x0002a412.
Weitere Informationen über die Hilfe- und Supportdienste erhalten Sie unter http://go.microsoft.com/fwlink/events.asp.
Daten:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 61 70 61 ure apa
0018: 63 68 65 2e 65 78 65 20 che.exe
0020: 32 2e 32 2e 32 2e 30 20 2.2.2.0
0028: 69 6e 20 6e 74 64 6c 6c in ntdll
0030: 2e 64 6c 6c 20 35 2e 32 .dll 5.2
0038: 2e 33 37 39 30 2e 33 39 .3790.39
0040: 35 39 20 61 74 20 6f 66 59 at of
0048: 66 73 65 74 20 30 30 30 fset 000
0050: 32 61 34 31 32 2a412
Ereignistyp: Fehler
Ereignisquelle: Application Error
Ereigniskategorie: Keine
Ereigniskennung: 1001
Datum: 16.11.2007
Zeit: 16:30:19
Benutzer: Nicht zutreffend
Computer: XXX
Beschreibung:
Fehlerhafter Speicherbereich 426549620.
Weitere Informationen über die Hilfe- und Supportdienste erhalten Sie unter http://go.microsoft.com/fwlink/events.asp.
Daten:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 34 32 36 35 34 39 36 32 42654962
0010: 30 0d 0a 0..
Ereignistyp: Fehler
Ereignisquelle: Application Error
Ereigniskategorie: (100)
Ereigniskennung: 1000
Datum: 16.11.2007
Zeit: 15:17:35
Benutzer: Nicht zutreffend
Computer: XXX
Beschreibung:
Fehlgeschlagene Anwendung apache.exe, Version 2.2.2.0, fehlgeschlagenes Modul ntdll.dll, Version 5.2.3790.3959, Fehleradresse 0x0002a412.
Weitere Informationen über die Hilfe- und Supportdienste erhalten Sie unter http://go.microsoft.com/fwlink/events.asp.
Daten:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 61 70 61 ure apa
0018: 63 68 65 2e 65 78 65 20 che.exe
0020: 32 2e 32 2e 32 2e 30 20 2.2.2.0
0028: 69 6e 20 6e 74 64 6c 6c in ntdll
0030: 2e 64 6c 6c 20 35 2e 32 .dll 5.2
0038: 2e 33 37 39 30 2e 33 39 .3790.39
0040: 35 39 20 61 74 20 6f 66 59 at of
0048: 66 73 65 74 20 30 30 30 fset 000
0050: 32 61 34 31 32 2a412
Ereignistyp: Fehler
Ereignisquelle: Service Control Manager
Ereigniskategorie: Keine
Ereigniskennung: 7034
Datum: 16.11.2007
Zeit: 15:17:35
Benutzer: Nicht zutreffend
Computer: XXX
Beschreibung:
Dienst "Apache2" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.
Weitere Informationen über die Hilfe- und Supportdienste erhalten Sie unter http://go.microsoft.com/fwlink/events.asp.
Ereignistyp: Fehler
Ereignisquelle: Application Error
Ereigniskategorie: (100)
Ereigniskennung: 1000
Datum: 16.11.2007
Zeit: 14:03:13
Benutzer: Nicht zutreffend
Computer: XXX
Beschreibung:
Fehlgeschlagene Anwendung apache.exe, Version 2.2.2.0, fehlgeschlagenes Modul ntdll.dll, Version 5.2.3790.3959, Fehleradresse 0x000417af.
Weitere Informationen über die Hilfe- und Supportdienste erhalten Sie unter http://go.microsoft.com/fwlink/events.asp.
Daten:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 61 70 61 ure apa
0018: 63 68 65 2e 65 78 65 20 che.exe
0020: 32 2e 32 2e 32 2e 30 20 2.2.2.0
0028: 69 6e 20 6e 74 64 6c 6c in ntdll
0030: 2e 64 6c 6c 20 35 2e 32 .dll 5.2
0038: 2e 33 37 39 30 2e 33 39 .3790.39
0040: 35 39 20 61 74 20 6f 66 59 at of
0048: 66 73 65 74 20 30 30 30 fset 000
0050: 34 31 37 61 66 417af
Apache-Error.log:
- Code: Select all
[Fri Nov 16 14:14:25 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 14:14:26 2007] [warn] pid file D:/xampp/apache/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
[Fri Nov 16 14:14:26 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 14:14:26 2007] [notice] Apache/2.2.2 (Win32) DAV/2 mod_ssl/2.2.2 OpenSSL/0.9.8b mod_autoindex_color PHP/5.1.4 configured -- resuming normal operations
[Fri Nov 16 14:14:26 2007] [notice] Server built: May 9 2006 14:08:48
[Fri Nov 16 14:14:26 2007] [notice] Parent: Created child process 3892
[Fri Nov 16 14:14:27 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 14:14:28 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 14:14:28 2007] [notice] Child 3892: Child process is running
[Fri Nov 16 14:14:28 2007] [notice] Child 3892: Acquired the start mutex.
[Fri Nov 16 14:14:28 2007] [notice] Child 3892: Starting 50 worker threads.
[Fri Nov 16 14:14:28 2007] [notice] Child 3892: Starting thread to listen on port 443.
[Fri Nov 16 14:14:28 2007] [notice] Child 3892: Starting thread to listen on port 80.
[Fri Nov 16 15:17:31 2007] [notice] Child 3892: Process exiting because it reached MaxRequestsPerChild. Signaling the parent to restart a new child process.
[Fri Nov 16 15:17:31 2007] [notice] Parent: Received restart signal -- Restarting the server.
[Fri Nov 16 15:17:32 2007] [notice] Child 3892: Released the start mutex
[Fri Nov 16 15:17:33 2007] [notice] Child 3892: Waiting for 50 worker threads to exit.
[Fri Nov 16 15:17:36 2007] [notice] Child 3892: All worker threads have exited.
[Fri Nov 16 15:17:36 2007] [notice] Child 3892: Child process is exiting
Server Steht wieder
- Code: Select all
[Fri Nov 16 16:03:56 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 16:03:56 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 16:04:07 2007] [notice] Apache/2.2.2 (Win32) DAV/2 mod_ssl/2.2.2 OpenSSL/0.9.8b mod_autoindex_color PHP/5.1.4 configured -- resuming normal operations
[Fri Nov 16 16:04:07 2007] [notice] Server built: May 9 2006 14:08:48
[Fri Nov 16 16:04:07 2007] [notice] Parent: Created child process 2540
[Fri Nov 16 16:04:10 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 16:04:11 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 16:04:12 2007] [notice] Child 2540: Child process is running
[Fri Nov 16 16:04:12 2007] [notice] Child 2540: Acquired the start mutex.
[Fri Nov 16 16:04:12 2007] [notice] Child 2540: Starting 50 worker threads.
[Fri Nov 16 16:04:12 2007] [notice] Child 2540: Starting thread to listen on port 443.
[Fri Nov 16 16:04:12 2007] [notice] Child 2540: Starting thread to listen on port 80.
[Fri Nov 16 16:11:59 2007] [error] [client 81.170.190.33] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
[Fri Nov 16 16:13:02 2007] [error] [client 82.193.235.217] [client 82.193.235.217] http://XXX Failed Login: maweise Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9, referer: http://XXX
[Fri Nov 16 16:13:12 2007] [error] [client 82.193.235.217] [client 82.193.235.217] http://XXX Failed Login: maweise Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9, referer: https://XXX/login/index.php
[Fri Nov 16 16:18:05 2007] [error] [client 82.193.235.217] [client 82.193.235.217] http://XXX Failed Login: maweise Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9, referer: http://mXXX
[Fri Nov 16 16:21:32 2007] [error] [client 82.193.235.217] [client 82.193.235.217] http://XXX Failed Login: maweise Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9, referer: https://XXX/login/index.php
[Fri Nov 16 16:55:56 2007] [error] [client 77.128.44.89] [client 77.128.44.89] http://XXX Failed Login: trieglaf Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), referer: http://XXX/moodle/
[Fri Nov 16 16:57:04 2007] [error] [client 77.128.44.89] [client 77.128.44.89] http://XXX Failed Login: trieglaf Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), referer: https://XXX/login/index.php
[Fri Nov 16 16:57:37 2007] [error] [client 77.128.44.89] [client 77.128.44.89] http://XXX Failed Login: trieglaf Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), referer: https://XXX/login/index.php
[Fri Nov 16 16:58:54 2007] [error] [client 77.128.44.89] [client 77.128.44.89] http://XXX Failed Login: trieglaf Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), referer: https://XXX/moodle/login/index.php
[Fri Nov 16 17:37:34 2007] [error] [client [Fri Nov 16 16:03:56 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 16:03:56 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 16:04:07 2007] [notice] Apache/2.2.2 (Win32) DAV/2 mod_ssl/2.2.2 OpenSSL/0.9.8b mod_autoindex_color PHP/5.1.4 configured -- resuming normal operations
[Fri Nov 16 16:04:07 2007] [notice] Server built: May 9 2006 14:08:48
[Fri Nov 16 16:04:07 2007] [notice] Parent: Created child process 2540
[Fri Nov 16 16:04:10 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 16:04:11 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 16:04:12 2007] [notice] Child 2540: Child process is running
[Fri Nov 16 16:04:12 2007] [notice] Child 2540: Acquired the start mutex.
[Fri Nov 16 16:04:12 2007] [notice] Child 2540: Starting 50 worker threads.
[Fri Nov 16 16:04:12 2007] [notice] Child 2540: Starting thread to listen on port 443.
[Fri Nov 16 16:04:12 2007] [notice] Child 2540: Starting thread to listen on port 80.
[Fri Nov 16 16:11:59 2007] [error] [client 81.170.190.33] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
[Fri Nov 16 16:13:02 2007] [error] [client 82.193.235.217] [client 82.193.235.217] http://XXX Failed Login: maweise Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9, referer: http://XXX
[Fri Nov 16 16:13:12 2007] [error] [client 82.193.235.217] [client 82.193.235.217] http://XXX Failed Login: maweise Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9, referer: https://XXX/login/index.php
[Fri Nov 16 16:18:05 2007] [error] [client 82.193.235.217] [client 82.193.235.217] http://XXX Failed Login: maweise Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9, referer: http://mXXX
[Fri Nov 16 16:21:32 2007] [error] [client 82.193.235.217] [client 82.193.235.217] http://XXX Failed Login: maweise Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9, referer: https://XXX/login/index.php
[Fri Nov 16 16:55:56 2007] [error] [client 77.128.44.89] [client 77.128.44.89] http://XXX Failed Login: trieglaf Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), referer: http://XXX/moodle/
[Fri Nov 16 16:57:04 2007] [error] [client 77.128.44.89] [client 77.128.44.89] http://XXX Failed Login: trieglaf Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), referer: https://XXX/login/index.php
[Fri Nov 16 16:57:37 2007] [error] [client 77.128.44.89] [client 77.128.44.89] http://XXX Failed Login: trieglaf Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), referer: https://XXX/login/index.php
[Fri Nov 16 16:58:54 2007] [error] [client 77.128.44.89] [client 77.128.44.89] http://XXX Failed Login: trieglaf Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), referer: https://XXX/moodle/login/index.php
[Fri Nov 16 17:37:34 2007] [error] [client XXX] [client XXX] http://XXX Failed Login: emilianml Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9, referer: https://XXX.de/moodle/login/index.php
[Fri Nov 16 17:37:59 2007] [notice] Child 2540: Process exiting because it reached MaxRequestsPerChild. Signaling the parent to restart a new child process.
[Fri Nov 16 17:37:59 2007] [notice] Parent: Received restart signal -- Restarting the server.
[Fri Nov 16 17:37:59 2007] [warn] (OS 10038)Ein Vorgang bezog sich auf ein Objekt, das kein Socket ist. : setsockopt(SO_UPDATE_ACCEPT_CONTEXT) failed.
[Fri Nov 16 17:38:00 2007] [notice] Child 2540: Released the start mutex
[Fri Nov 16 17:38:01 2007] [notice] Child 2540: Waiting for 50 worker threads to exit.
[Fri Nov 16 17:38:01 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 17:38:02 2007] [notice] Apache/2.2.2 (Win32) DAV/2 mod_ssl/2.2.2 OpenSSL/0.9.8b mod_autoindex_color PHP/5.1.4 configured -- resuming normal operations
[Fri Nov 16 17:38:02 2007] [notice] Server built: May 9 2006 14:08:48
[Fri Nov 16 17:38:02 2007] [notice] Parent: Created child process 3528
[Fri Nov 16 17:38:04 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 17:38:05 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 17:38:06 2007] [notice] Child 3528: Child process is running
[Fri Nov 16 17:38:06 2007] [notice] Child 3528: Acquired the start mutex.
[Fri Nov 16 17:38:06 2007] [notice] Child 3528: Starting 50 worker threads.
[Fri Nov 16 17:38:06 2007] [notice] Child 3528: Starting thread to listen on port 80.
[Fri Nov 16 17:38:06 2007] [notice] Child 3528: Starting thread to listen on port 443.] [client XXX] http://XXX Failed Login: emilianml Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9, referer: https://XXX.de/moodle/login/index.php
[Fri Nov 16 17:37:59 2007] [notice] Child 2540: Process exiting because it reached MaxRequestsPerChild. Signaling the parent to restart a new child process.
[Fri Nov 16 17:37:59 2007] [notice] Parent: Received restart signal -- Restarting the server.
[Fri Nov 16 17:37:59 2007] [warn] (OS 10038)Ein Vorgang bezog sich auf ein Objekt, das kein Socket ist. : setsockopt(SO_UPDATE_ACCEPT_CONTEXT) failed.
[Fri Nov 16 17:38:00 2007] [notice] Child 2540: Released the start mutex
[Fri Nov 16 17:38:01 2007] [notice] Child 2540: Waiting for 50 worker threads to exit.
[Fri Nov 16 17:38:01 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 17:38:02 2007] [notice] Apache/2.2.2 (Win32) DAV/2 mod_ssl/2.2.2 OpenSSL/0.9.8b mod_autoindex_color PHP/5.1.4 configured -- resuming normal operations
[Fri Nov 16 17:38:02 2007] [notice] Server built: May 9 2006 14:08:48
[Fri Nov 16 17:38:02 2007] [notice] Parent: Created child process 3528
[Fri Nov 16 17:38:04 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 17:38:05 2007] [warn] RSA server certificate CommonName (CN) `XXX' does NOT match server name!?
[Fri Nov 16 17:38:06 2007] [notice] Child 3528: Child process is running
[Fri Nov 16 17:38:06 2007] [notice] Child 3528: Acquired the start mutex.
[Fri Nov 16 17:38:06 2007] [notice] Child 3528: Starting 50 worker threads.
[Fri Nov 16 17:38:06 2007] [notice] Child 3528: Starting thread to listen on port 80.
[Fri Nov 16 17:38:06 2007] [notice] Child 3528: Starting thread to listen on port 443.
Jetzt läuft er mal wieder ein pa Stunden durch (weil auch keine Last ist).
httpd.conf wurde wie folgt geändert:
ThreadsPerChild 50 (von 250)
MaxRequestsPerChild 500 (von 0)
Zu meinen Fragen:
1. Habt Ihr Lösungsanätze für mich?
2. Gibt es eine Art Watchdog der Aufpasst wann mein Apache-Prozess crashed und ihn ggf. neustartet oder noch besser wie bei Linux nur die Config neu lädt (so das keine Anfragen wie beim neustart verloren gehen)?
3. Habt ihr eine Idee wie ich meinen Server unter Last testen, also z. B. viele gleichzeitige Aufrufe künstlich generieren kann damit ich meine ThreadsPerChild und MaxRequestsPerChild richtig konfiguriere?
Habt Ihr sonst noch Empfehlungen, ich lese mich grad durch die verschiedene Foren, andere scheinen die selben Probleme zu haben:
http://community.apachefriends.org/f/viewtopi ... fcb6ecfd75
http://community.apachefriends.org/f/viewtopi ... es&start=0
http://www.heise.de/foren/go.shtml?chan ... m_id=44342
Einen schönen Abend noch