[Wylug-discuss] Linux server assistance

[Lee Evans]

Hi all

 

We're still having some trouble with this server although we have made
progress.

 

Does anyone know what this means?! (see attached)

 

Thanks

Lee

 



 

From: Lee Evans [mailto:lee at leeevans.org] 
Sent: 05 November 2012 20:14
To: 'wylug-discuss at wylug.org.uk'
Subject: Linux server assistance

 

Hi all,

 

We have a client with a linux web server (apache, mysql, php) running some
wordpress sites.

 

They are a relatively high volume site.

 

We have been having some trouble with outages, which I suspect  to be due to
load (and possibly malicious at that) issues.

 

The server locks up or grinds to a halt, there are far more httpd processes
running than normal yet the usage stats suggest that there aren't many live
users.

 

My personal suspicion given the symptoms is a targeted DDoS attack using
some sort of SYN flood to open too many connections which have a dead end.

 

Is there anyone out there that would be interested in helping us get to the
bottom of this?

 

It's beyond our skill set with general server / apache installation and
maintenance.

 

Thanks

Lee

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.lug.org.uk/pipermail/wylug-discuss/attachments/20130212/2ab37e73/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 19098 bytes
Desc: not available
URL: <http://mailman.lug.org.uk/pipermail/wylug-discuss/attachments/20130212/2ab37e73/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: server-crash.PNG
Type: image/png
Size: 23287 bytes
Desc: not available
URL: <http://mailman.lug.org.uk/pipermail/wylug-discuss/attachments/20130212/2ab37e73/attachment-0003.png>