Re: [cobalt-users] RaQ3 massive hits - trouble!

["Kevin D" <kdlists@xxxxxxxxxxxxxxx>]

Um, this sounds a bit questionable to me... 100 hits a minute starting at
midnight? A single defunct web site? Logs not being generated? I suggest you
make sure you are not experiencing some form of a denial of service attack.
Check /var/log/httpd/access to verify that these splurge hits are not coming
from the same set of sources.

Kevin

----- Original Message -----
From: "James Riordon" <outofcontrol@xxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Friday, November 10, 2000 1:33 PM
Subject: [cobalt-users] RaQ3 massive hits - trouble!


> Hi all,
>
> This is a multipart question. we started receiving what looks
> like about 500 hits every 5 minutes or so on our RaQ (poor thing). we
> started receiving the hits last night around midnight. I guess our
> new marketing guy knows what he is doing. All legally too!
>
> We have had a few irregularities though.
>
> 1 - We see <defunct> beside httpd and one of our cgi scripts a few
> times a minute while monitoring top.
> 2 -  After awhile of this our server gets slower and slower. Nothing
> in top is out of the ordinary.
> 3 - The logs forth e site in question for the first time were not
> generated. I beleive this due to the lack of disk space allotted to
> the site. I have since increased the amount of harddisk space to
> 200MB. The site takes only about 5 meg if that. How do we now force
> rotate the logs to regenerate the weblog for that site since the last
> log rotate?
>
>
> Thanks to any help that might be around. This is kinda time sensitive
> for us for we need to fixe the defunct situation quickly and we need
> to know where these splurge of hits are coming from to see if  this
> is good or not.
>
> Thanks all for any answers you may have.
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>