Aapche error log client stopped connection before rvputs completed

I've noticed this in the error log when Apache crashed and took down the server with it. Load sky rocketed even though the attack seemed to be very light.

I'm wondering if anybody had experience with this type of error:

[Thu Aug 11 20:35:08 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:09 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:09 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:09 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:09 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:10 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:10 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:10 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:11 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:11 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:11 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:12 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:12 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:13 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:13 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:13 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:14 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:14 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:14 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:15 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:15 2005] [info] [client 195.225.176.115] send timed out
[Thu Aug 11 20:35:15 2005] [info] [client 195.225.176.115] client stopped connection before rvputs completed
[Thu Aug 11 20:35:16 2005] [info] [client 195.225.176.115] send timed out

Then on the site that was attacked, you'd see this in their log:

195.225.176.115 - - [11/Aug/2005:21:10:42 -0400] "GET /index.php HTTP/1.0" 200 - "http://fisting-sex.olo.cc/" "-"
195.225.176.115 - - [11/Aug/2005:21:10:42 -0400] "GET /index.php HTTP/1.0" 200 - "http://fisting-sex.olo.cc/" "-"
195.225.176.115 - - [11/Aug/2005:21:10:43 -0400] "GET /index.php HTTP/1.0" 200 - "http://fisting-sex.olo.cc/" "-"
195.225.176.115 - - [11/Aug/2005:21:10:44 -0400] "GET /index.php HTTP/1.0" 200 - "http://fisting-sex.olo.cc/" "-"
195.225.176.115 - - [11/Aug/2005:21:10:45 -0400] "GET /index.php HTTP/1.0" 200 344 "http://fisting-sex.olo.cc/" "-"
195.225.176.115 - - [11/Aug/2005:21:10:45 -0400] "GET /index.php HTTP/1.0" 200 344 "http://fisting-sex.olo.cc/" "-"

This caused Apache 1.3 to crash. I had the setting for KeepAlive to 50 seconds which I think was too long. But other than that I don't see any other potential problem with the Apache config.

 

 

 

 

Top