为什么Apache seg错误？

Question

我们有一台生产服务器，似乎每天都会发生几次故障。 Apache收到故障并登录错误日志 - 但似乎在这段时间内没有流量。如果这是一个生成错误的请求，那么它看起来像在任何其他日志记录发生之前发生的，所以我看不到它是如何发生的，所以它很难调试。

我们的设置是Linux 64位Centos 5.3 Apache加载了以下模块 apachectl -t -D DUMP_MODULES |更

Loaded Modules: 
core_module (static) 
mpm_prefork_module (static) 
http_module (static) 
so_module (static) 
auth_basic_module (shared) 
auth_digest_module (shared) 
authn_file_module (shared) 
authn_alias_module (shared) 
authn_anon_module (shared) 
authn_dbm_module (shared) 
authn_default_module (shared) 
authz_host_module (shared) 
authz_user_module (shared) 
authz_owner_module (shared) 
authz_groupfile_module (shared) 
authz_dbm_module (shared) 
authz_default_module (shared) 
ldap_module (shared) 
authnz_ldap_module (shared) 
include_module (shared) 
log_config_module (shared) 
logio_module (shared) 
env_module (shared) 
ext_filter_module (shared) 
mime_magic_module (shared) 
expires_module (shared) 
deflate_module (shared) 
headers_module (shared) 
usertrack_module (shared) 
setenvif_module (shared) 
mime_module (shared) 
dav_module (shared) 
status_module (shared) 
autoindex_module (shared) 
info_module (shared) 
dav_fs_module (shared) 
vhost_alias_module (shared) 
negotiation_module (shared) 
dir_module (shared) 
actions_module (shared) 
speling_module (shared) 
userdir_module (shared) 
alias_module (shared) 
rewrite_module (shared) 
proxy_module (shared) 
proxy_balancer_module (shared) 
proxy_ftp_module (shared) 
proxy_http_module (shared) 
proxy_connect_module (shared) 
cache_module (shared) 
suexec_module (shared) 
disk_cache_module (shared) 
file_cache_module (shared) 
mem_cache_module (shared) 
cgi_module (shared) 
version_module (shared) 
security2_module (shared) 
unique_id_module (shared) 
fcgid_module (shared) 
php5_module (shared) 
proxy_ajp_module (shared) 
ssl_module (shared) 

下面是来自Apache错误日志的使出：（9点09分51秒）

[Mon Mar 15 06:39:25 2010] [error] [client 213.246.222.74] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) 
[Mon Mar 15 07:41:31 2010] [error] [client 213.246.222.74] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) 
[Mon Mar 15 08:24:16 2010] [error] [client 67.19.250.146] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) 
[Mon Mar 15 08:43:46 2010] [error] [client 213.246.222.74] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) 
[Mon Mar 15 08:54:02 2010] [error] [client 74.208.123.71] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) 
[Mon Mar 15 09:09:51 2010] [notice] child pid 2138 exit signal Segmentation fault (11), possible coredump in /tmp 
[Mon Mar 15 09:45:27 2010] [error] [client 213.246.222.74] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) 
[Mon Mar 15 09:49:05 2010] [error] [client 190.12.113.196] File does not exist: /var/www/vhosts/default/htdocs/phpMyAdmin 
[Mon Mar 15 09:49:06 2010] [error] [client 190.12.113.196] File does not exist: /var/www/vhosts/default/htdocs/PMA 

和访问日志大约在同一时间：

213.246.222.74 - - [15/Mar/2010:08:43:46 +0000] "GET /" 400 561 "-" "-" 
208.80.193.28 - - [15/Mar/2010:08:52:20 +0000] "GET/HTTP/1.0" 301 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; SU 2.009)" 
74.208.123.71 - - [15/Mar/2010:08:54:02 +0000] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 298 "-" "-" 
81.149.146.231 - - [15/Mar/2010:09:15:18 +0000] "GET /zabbix/ HTTP/1.1" 200 3565 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-us) AppleWebKit/531.21.8 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10" 
81.158.71.196 - - [15/Mar/2010:09:16:06 +0000] "GET/HTTP/1.1" 301 313 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.4; en-US; rv:1.9.0.18) Gecko/2010020219 Firefox/3.0.18" 
213.246.222.74 - - [15/Mar/2010:09:45:27 +0000] "GET /" 400 561 "-" "-" 
213.246.222.74 - - [15/Mar/2010:09:45:27 +0000] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 298 "-" "-" 
190.12.113.196 - - [15/Mar/2010:09:49:05 +0000] "GET /phpMyAdmin/main.php HTTP/1.0" 404 295 "-" "-" 

所以你可以看到，在发生故障时没有访问权限！如何讨厌：■

我启用核心转储，这里是回溯：

#0 0x00007f9c8c8a858b in memcpy() from /lib64/libc.so.6 
No symbol table info available. 
#1 0x00007f9c8cfb066d in apr_pstrcat (a=<value optimized out>) at strings/apr_strings.c:165 
     cp = 0x1fa6b "\205▒H\211▒t`▒\003" 
     argp = 0x7f9c9ad790e8 "Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Referer, Re"... 
     res = 0x0 
     saved_lengths = {129643, 2, 43, 140310399395576, 0, 140310394592712} 
     nargs = <value optimized out> 
     len = <value optimized out> 
     adummy = {{gp_offset = 16, fp_offset = 32668, overflow_arg_area = 0x7fff968a0ec0, reg_save_area = 0x7fff968a0de0}} 
#2 0x00007f9c8cfb1bf9 in apr_table_merge (t=0x7f9c8f83b148, key=0x7f9c85a465fe "Vary", val=0x7f9c9ad99070 "Referer, Referer, Referer, Referer, Referer") at tables/apr_tables.c:688 
     next_elt = (apr_table_entry_t *) 0x7f9c8f83b270 
     end_elt = (apr_table_entry_t *) 0x7f9c8f83b270 
     checksum = <value optimized out> 
     hash = 22 
#3 0x00007f9c85a42cfa in ??() from /etc/httpd/modules/mod_rewrite.so 
No symbol table info available. 
#4 0x00007f9c85a44022 in ??() from /etc/httpd/modules/mod_rewrite.so 
No symbol table info available. 
#5 0x00007f9c8e87bd1a in ap_run_fixups() from /usr/sbin/httpd 
No symbol table info available. 
#6 0x00007f9c8e88e8f8 in ap_process_request() from /usr/sbin/httpd 
No symbol table info available. 
#7 0x00007f9c8e88bb40 in ??() from /usr/sbin/httpd 
No symbol table info available. 
#8 0x00007f9c8e887ca2 in ap_run_process_connection() from /usr/sbin/httpd 
No symbol table info available. 
#9 0x00007f9c8e892849 in ??() from /usr/sbin/httpd 
No symbol table info available. 
#10 0x00007f9c8e892ada in ??() from /usr/sbin/httpd 
No symbol table info available. 
#11 0x00007f9c8e892b90 in ??() from /usr/sbin/httpd 
No symbol table info available. 
#12 0x00007f9c8e89387b in ap_mpm_run() from /usr/sbin/httpd 
No symbol table info available. 
#13 0x00007f9c8e86de48 in main() from /usr/sbin/httpd 
No symbol table info available. 

任何人都可以阐明如何与这个向前移动的任何轻？我可以确认服务器是可以运行的，并且看起来并不是行为不端 - 这种故障很少发生，我自己也没有看到它在做出请求时做了一件事。

真的很感谢任何帮助！干杯!

Answer 1

我曾经处理过的所有apache segfaults都是PHP问题 - 无限循环或正则表达式错误。

似乎也有人正在探查phpMyAdmin的

[Mon Mar 15 09:49:05 2010] [error] [client 190.12.113.196] File does not exist: /var/www/vhosts/default/htdocs/phpMyAdmin 
[Mon Mar 15 09:49:06 2010] [error] [client 190.12.113.196] File does not exist: /var/www/vhosts/default/htdocs/PMA