Fedora Core 5 - Server not responding

Discussion in 'Installation/Configuration' started by kyriakos, Aug 30, 2006.

  1. kyriakos

    kyriakos New Member

    My server is stopping to respond for 5 to 20 minutes and then is coming back.
    This issue is very often, especially when I uploading via ftp or posting data via forms.
    I’m getting time out errors on every port except ping.
    A strange think is that if I am already connected to the server via SSH, the connection remains open. I have tried to restart many services (network, proftpd, httpd, named). I have also tried with ispconfig firewall off, but no luck.
    The only solution is a server restart.
    My netstat -tap during a not responding situation:

     
    Last edited: Aug 13, 2008
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Please check your syslog for errors.
     
  3. kyriakos

    kyriakos New Member

    Thanks for your reply,

    There is no errors during the time my server stops responding at var/log/messages. There is an error when restarting proftpd about IPV6. I don’t know how to fix it.

    My /var/log/messages when restarting proftpd:
    There is also a possible hacking attempt starting 20 hours ago but my problem is there since I setup this server.

    Part of my /var/log/messages for the last 20 hours:
    Part of my /var/log/secure for the last 20 hours:

    I don’t know if there are other useful log files to look.
     
    Last edited: Aug 13, 2008
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Please post your proftpd.conf file.

    Does this line only appaers in the timespan while you are unable to connect?

     
  5. kyriakos

    kyriakos New Member

    Thanks for your reply,

    This line has nothing to do with my problem after all. When I turned off proftpd for 5 minutes it disappeared. But the problem remain

    This is my /etc/proftpd.conf
    Thank you
     
  6. falko

    falko Super Moderator Howtoforge Staff

    Looks ok. What's in /etc/hosts? Is SELinux disabled?
     
  7. kyriakos

    kyriakos New Member

    this is my /etc/hosts
    Code:
    # Do not remove the following line, or various programs
    # that require network functionality will fail.
    127.0.0.1	host1.***host.gr	host1	localhost.localdomain	localhost
    
    SELinux is disabled.
    This is my services list

    chkconfig --list
    Code:
    acpid           0:off   1:off   2:off   3:on    4:on    5:on    6:off
    anacron         0:off   1:off   2:on    3:on    4:on    5:on    6:off
    atd             0:off   1:off   2:off   3:on    4:on    5:on    6:off
    autofs          0:off   1:off   2:off   3:on    4:on    5:on    6:off
    avahi-daemon    0:off   1:off   2:off   3:on    4:on    5:off   6:off
    avahi-dnsconfd  0:off   1:off   2:off   3:off   4:off   5:off   6:off
    bluetooth       0:off   1:off   2:on    3:on    4:on    5:off   6:off
    cpuspeed        0:off   1:on    2:on    3:on    4:on    5:on    6:off
    crond           0:off   1:off   2:on    3:on    4:on    5:on    6:off
    cups            0:off   1:off   2:on    3:on    4:on    5:off   6:off
    cups-config-daemon      0:off   1:off   2:off   3:on    4:on    5:off   6:off
    dc_client       0:off   1:off   2:off   3:off   4:off   5:off   6:off
    dc_server       0:off   1:off   2:off   3:off   4:off   5:off   6:off
    dhcdbd          0:off   1:off   2:off   3:off   4:off   5:off   6:off
    diskdump        0:off   1:off   2:off   3:off   4:off   5:off   6:off
    dovecot         0:off   1:off   2:on    3:on    4:off   5:on    6:off
    firstboot       0:off   1:off   2:off   3:on    4:off   5:on    6:off
    gpm             0:off   1:off   2:on    3:on    4:on    5:on    6:off
    haldaemon       0:off   1:off   2:off   3:on    4:on    5:off   6:off
    hidd            0:off   1:off   2:on    3:on    4:on    5:off   6:off
    httpd           0:off   1:off   2:on    3:on    4:off   5:on    6:off
    irda            0:off   1:off   2:off   3:off   4:off   5:off   6:off
    irqbalance      0:off   1:off   2:on    3:on    4:on    5:on    6:off
    kudzu           0:off   1:off   2:off   3:on    4:on    5:on    6:off
    lisa            0:off   1:off   2:off   3:off   4:off   5:off   6:off
    lm_sensors      0:off   1:off   2:on    3:on    4:on    5:on    6:off
    mailman         0:off   1:off   2:off   3:off   4:off   5:on    6:off
    mdmonitor       0:off   1:off   2:on    3:on    4:on    5:on    6:off
    mdmpd           0:off   1:off   2:off   3:off   4:off   5:off   6:off
    messagebus      0:off   1:off   2:off   3:on    4:on    5:on    6:off
    mysqld          0:off   1:off   2:on    3:on    4:off   5:on    6:off
    named           0:off   1:off   2:on    3:on    4:off   5:on    6:off
    netdump         0:off   1:off   2:off   3:off   4:off   5:off   6:off
    netfs           0:off   1:off   2:off   3:on    4:on    5:off   6:off
    netplugd        0:off   1:off   2:off   3:off   4:off   5:off   6:off
    network         0:off   1:off   2:on    3:on    4:on    5:on    6:off
    nfs             0:off   1:off   2:off   3:off   4:off   5:off   6:off
    nfslock         0:off   1:off   2:off   3:on    4:on    5:off   6:off
    nscd            0:off   1:off   2:off   3:off   4:off   5:off   6:off
    ntpd            0:off   1:off   2:on    3:on    4:off   5:on    6:off
    portmap         0:off   1:off   2:off   3:on    4:on    5:on    6:off
    proftpd         0:off   1:off   2:on    3:on    4:off   5:on    6:off
    psacct          0:off   1:off   2:off   3:off   4:off   5:off   6:off
    rdisc           0:off   1:off   2:off   3:off   4:off   5:off   6:off
    readahead       0:off   1:off   2:off   3:off   4:off   5:on    6:off
    readahead_early 0:off   1:off   2:on    3:on    4:on    5:on    6:off
    rpcgssd         0:off   1:off   2:off   3:on    4:on    5:on    6:off
    rpcidmapd       0:off   1:off   2:off   3:on    4:on    5:on    6:off
    rpcsvcgssd      0:off   1:off   2:off   3:off   4:off   5:off   6:off
    saslauthd       0:off   1:off   2:on    3:on    4:off   5:on    6:off
    sendmail        0:off   1:off   2:off   3:off   4:on    5:off   6:off
    smartd          0:off   1:off   2:on    3:on    4:on    5:on    6:off
    smb             0:off   1:off   2:off   3:off   4:off   5:off   6:off
    spamassassin    0:off   1:off   2:off   3:off   4:off   5:on    6:off
    squid           0:off   1:off   2:off   3:off   4:off   5:off   6:off
    sshd            0:off   1:off   2:on    3:on    4:on    5:on    6:off
    syslog          0:off   1:off   2:on    3:on    4:on    5:on    6:off
    tomcat5         0:off   1:off   2:off   3:off   4:off   5:off   6:off
    tux             0:off   1:off   2:off   3:off   4:off   5:off   6:off
    vncserver       0:off   1:off   2:off   3:off   4:off   5:off   6:off
    webmin          0:off   1:off   2:on    3:on    4:off   5:on    6:off
    winbind         0:off   1:off   2:off   3:off   4:off   5:off   6:off
    wpa_supplicant  0:off   1:off   2:off   3:off   4:off   5:off   6:off
    xend            0:off   1:off   2:on    3:on    4:on    5:on    6:off
    xendomains      0:off   1:off   2:off   3:on    4:on    5:on    6:off
    xfs             0:off   1:off   2:on    3:on    4:on    5:on    6:off
    ypbind          0:off   1:off   2:off   3:off   4:off   5:off   6:off
    yum             0:off   1:off   2:off   3:off   4:off   5:off   6:off
    
    During a not responding situation I have try to restart httpd, proftpd, network & ispconfig_server
     
    Last edited: Aug 13, 2008
  8. falko

    falko Super Moderator Howtoforge Staff

    You can try to chane it to

    Code:
    # Do not remove the following line, or various programs
    # that require network functionality will fail.
    127.0.0.1	localhost.localdomain	localhost
    <your IP>      host1.vfxhost.gr	       host1	
    but I'm not sure if it helps. I could imagine it's a problem with your network card (maybe the kernel doesn't have the correct driver for it)...
     
  9. kyriakos

    kyriakos New Member

    Thanks falko,

    I change it to
    Code:
    
    # Do not remove the following line, or various programs
    # that require network functionality will fail.
    127.0.0.1	localhost.localdomain	localhost
    85.30.21.10	host1.***host.gr		host1	
    85.30.21.11	host1.***host.gr		host1	
    85.30.21.12	host1.***host.gr		host1	
    85.30.21.13	host1.***host.gr    	        host1 
    85.30.21.14	host1.***host.gr		host1
    
    
    The network is working. If I am already connected to the server via SSH, the connection remains open.
    There are two network cards. Do you thing that is wrong?

    this is my ifconfig output
    Code:
    
    eth1      Link encap:Ethernet  HWaddr 00:0A:5E:64:7B:A3
              inet addr:85.30.21.10  Bcast:85.30.21.15  Mask:255.255.255.248
              inet6 addr: fe80::20a:5eff:fe64:7ba3/64 Scope:Link
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              RX packets:5573680 errors:0 dropped:0 overruns:1 frame:0
              TX packets:4655673 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:1000
              RX bytes:1451763657 (1.3 GiB)  TX bytes:1577678634 (1.4 GiB)
              Interrupt:17 Base address:0xa800
    
    eth2      Link encap:Ethernet  HWaddr 00:0A:5E:64:7F:A7
              inet addr:85.30.21.11  Bcast:85.30.21.15  Mask:255.255.255.248
              inet6 addr: fe80::20a:5eff:fe64:7fa7/64 Scope:Link
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              RX packets:1265295 errors:0 dropped:0 overruns:1 frame:0
              TX packets:50 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:1000
              RX bytes:81679819 (77.8 MiB)  TX bytes:3540 (3.4 KiB)
              Interrupt:21 Base address:0xcc00
    
    eth2:1    Link encap:Ethernet  HWaddr 00:0A:5E:64:7F:A7
              inet addr:85.30.21.12  Bcast:85.30.21.15  Mask:255.255.255.248
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              Interrupt:21 Base address:0xcc00
    
    eth2:2    Link encap:Ethernet  HWaddr 00:0A:5E:64:7F:A7
              inet addr:85.30.21.13  Bcast:85.30.21.15  Mask:255.255.255.248
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              Interrupt:21 Base address:0xcc00
    
    eth2:3    Link encap:Ethernet  HWaddr 00:0A:5E:64:7F:A7
              inet addr:85.30.21.14  Bcast:85.30.21.15  Mask:255.255.255.248
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              Interrupt:21 Base address:0xcc00
    
    lo        Link encap:Local Loopback
              inet addr:127.0.0.1  Mask:255.0.0.0
              inet6 addr: ::1/128 Scope:Host
              UP LOOPBACK RUNNING  MTU:16436  Metric:1
              RX packets:561131 errors:0 dropped:0 overruns:0 frame:0
              TX packets:561131 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:0
              RX bytes:77269514 (73.6 MiB)  TX bytes:77269514 (73.6 MiB)
    
    
     
    Last edited: Aug 13, 2008
  10. falko

    falko Super Moderator Howtoforge Staff

    And can you still execute commands when this happens? I'm still thinking it's a driver problem.
     
  11. kyriakos

    kyriakos New Member

    Yes, I have try to restart some services, netstat -tap. Its working fine.
    What do you thing about the two network cards?
     
  12. falko

    falko Super Moderator Howtoforge Staff

    You can try to remove one of them to see if that changes anything. Then put it back in and remove the other one and test again.
     
  13. allwayson

    allwayson New Member

    Same Problem

    I am having the exact same problem. My Fedora Core 5 server has been up and running for nearly two months and the problem just started within the past week. The really strange part is that I have two identical Dell servers running identical hardware but one is running Fedora Core 4/ISPConfig and one is running Fedora Core 5/ISPConfig. Only the server running FC5 is having this problem. I did notice last night that when the server quit responding about 12AM the server ran out of memory and died. Here is the error log. Also I have a bunch of these lame server resolving messages? Is that some kind of attack?

    Nov 13 23:46:45 tao named[10193]: lame server resolving '249.red-82-159-109.user.auna.net' (in 'user.auna.net'?): 62.42.63.51#53
    Nov 14 00:01:29 tao kernel: local invoked oom-killer: gfp_mask=0x201d2, order=0, oomkilladj=0
    Nov 14 00:04:21 tao kernel:
    Nov 14 00:04:21 tao kernel: Call Trace:
    Nov 14 00:04:25 tao kernel: [<ffffffff802691d9>] show_trace+0x34/0x47
    Nov 14 00:04:27 tao kernel: [<ffffffff802691fe>] dump_stack+0x12/0x17
    Nov 14 00:04:27 tao kernel: [<ffffffff802bbefe>] out_of_memory+0x53/0x271
    Nov 14 00:04:27 tao kernel: [<ffffffff8020f1b5>] __alloc_pages+0x23a/0x2c3
    Nov 14 00:04:27 tao kernel: [<ffffffff80212790>] __do_page_cache_readahead+0x98/0x1da
    Nov 14 00:04:27 tao kernel: [<ffffffff802131db>] filemap_nopage+0x14b/0x351
    Nov 14 00:04:28 tao kernel: [<ffffffff80208aa6>] __handle_mm_fault+0x472/0xc42
    Nov 14 00:04:29 tao kernel: [<ffffffff802645b3>] do_page_fault+0x49d/0x815
    Nov 14 00:04:29 tao kernel: [<ffffffff8025ccdd>] error_exit+0x0/0x84
    Nov 14 00:04:35 tao kernel: DWARF2 unwinder stuck at error_exit+0x0/0x84
    Nov 14 00:04:46 tao kernel: Leftover inexact backtrace:
    Nov 14 00:04:55 tao kernel:
    Nov 14 00:04:55 tao kernel: Mem-info:
    Nov 14 00:04:55 tao kernel: Node 0 DMA per-cpu:
    Nov 14 00:05:01 tao kernel: cpu 0 hot: high 0, batch 1 used:0
    Nov 14 00:05:01 tao kernel: cpu 0 cold: high 0, batch 1 used:0
    Nov 14 00:05:01 tao kernel: cpu 1 hot: high 0, batch 1 used:0
    Nov 14 00:05:01 tao kernel: cpu 1 cold: high 0, batch 1 used:0
    Nov 14 00:05:14 tao kernel: Node 0 DMA32 per-cpu:
    Nov 14 00:06:13 tao kernel: cpu 0 hot: high 186, batch 31 used:72
    Nov 14 00:07:13 tao kernel: cpu 0 cold: high 62, batch 15 used:49
    Nov 14 00:07:18 tao kernel: cpu 1 hot: high 186, batch 31 used:49
    Nov 14 00:07:18 tao kernel: cpu 1 cold: high 62, batch 15 used:43
    Nov 14 00:07:18 tao kernel: Node 0 Normal per-cpu: empty
    Nov 14 00:07:18 tao kernel: Node 0 HighMem per-cpu: empty
    Nov 14 00:07:25 tao kernel: Free pages: 8016kB (0kB HighMem)
    Nov 14 00:07:28 tao kernel: Active:96223 inactive:128382 dirty:0 writeback:0 unstable:0 free:2004 slab:6941 mapped:988 pagetables:14132
    Nov 14 00:07:28 tao kernel: Node 0 DMA free:4008kB min:40kB low:48kB high:60kB active:4496kB inactive:2340kB present:10524kB pages_scanned:12918 all_unreclaimable? yes
    Nov 14 00:07:29 tao kernel: lowmem_reserve[]: 0 992 992 992
    Nov 14 00:07:30 tao kernel: Node 0 DMA32 free:4008kB min:4008kB low:5008kB high:6012kB active:380396kB inactive:511188kB present:1015812kB pages_scanned:4046757 all_unreclaimable? yes
    Nov 14 00:07:31 tao kernel: lowmem_reserve[]: 0 0 0 0
    Nov 14 00:07:32 tao kernel: Node 0 Normal free:0kB min:0kB low:0kB high:0kB active:0kB inactive:0kB present:0kB pages_scanned:0 all_unreclaimable? no
    Nov 14 00:07:32 tao kernel: lowmem_reserve[]: 0 0 0 0
    Nov 14 00:07:33 tao kernel: Node 0 HighMem free:0kB min:128kB low:128kB high:128kB active:0kB inactive:0kB present:0kB pages_scanned:0 all_unreclaimable? no
    Nov 14 00:07:35 tao kernel: lowmem_reserve[]: 0 0 0 0
    Nov 14 00:07:37 tao kernel: Node 0 DMA: 0*4kB 1*8kB 0*16kB 1*32kB 0*64kB 1*128kB 1*256kB 1*512kB 1*1024kB 1*2048kB 0*4096kB = 4008kB
    Nov 14 00:07:39 tao kernel: Node 0 DMA32: 30*4kB 0*8kB 9*16kB 5*32kB 10*64kB 1*128kB 1*256kB 1*512kB 0*1024kB 1*2048kB 0*4096kB = 4008kB
    Nov 14 00:07:40 tao kernel: Node 0 Normal: empty
    Nov 14 00:07:40 tao kernel: Node 0 HighMem: empty


    Any more help with this would be greatly appreciated. My server dies 2 or 3 times per day and has to be rebooted.
     
  14. falko

    falko Super Moderator Howtoforge Staff

    I think you should install munin ( http://munin.projects.linpro.no/ ) on your FC5 system so that you get graphs of what is happening on your system. This might help to track down the problem.

    Also, do you see unusual processes in the output of
    Code:
    top
    ?
     

Share This Page