Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Apache: 127.0.0.1 in access_log when launching new processes
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
ChrisM87
l33t
l33t


Joined: 07 Aug 2004
Posts: 728
Location: Rheinland-Pfalz (Germany)

PostPosted: Thu Oct 04, 2007 10:40 pm    Post subject: Apache: 127.0.0.1 in access_log when launching new processes Reply with quote

Hello,

this is a problem that I am trying to hunt down quite some time now.

It all started with me noticing irregular "GET /" requests from localhost in Apache's access_log on my productive system. After checking the usual suspects like badly coded PHP scripts or one of my monitoring system, I found out that these requests originate from Apache itself.

I am using the preform MPM and I get one "GET /" for every process that starts up freshly in a running Apache.

I have prepared a clean Apache installation with nothing but "-D DEFAULT_VHOST" for APACHE2_OPTS and Gentoo-shipped configuration files and the show the same behavior.

So if I have this Apache running with the default of minimum 5 worker processes and issue "apache2ctl graceful", this is what I get with tail -f *:

Quote:
==> access_log <==
127.0.0.1 - - [05/Oct/2007:00:38:28 +0200] "GET / HTTP/1.0" 200 305
127.0.0.1 - - [05/Oct/2007:00:38:28 +0200] "GET / HTTP/1.0" 200 305
127.0.0.1 - - [05/Oct/2007:00:38:28 +0200] "GET / HTTP/1.0" 200 305
127.0.0.1 - - [05/Oct/2007:00:38:28 +0200] "GET / HTTP/1.0" 200 305
127.0.0.1 - - [05/Oct/2007:00:38:28 +0200] "GET / HTTP/1.0" 200 305

==> error_log <==
[Fri Oct 05 00:38:28 2007] [notice] Graceful restart requested, doing restart
[Fri Oct 05 00:38:28 2007] [notice] Digest: generating secret for digest authentication ...
[Fri Oct 05 00:38:28 2007] [notice] Digest: done
[Fri Oct 05 00:38:29 2007] [notice] Apache/2.2.6 (Unix) configured -- resuming normal operations


I have the same "problem" on another system but without the "HTTP/1.0" request part there (which makes this requests non-RFC-compliant).

The GET / also occur if a worker process is dynamically spawned due to high load. The do not occur when using apache2ctl restart.

Can somebody tell me where this localhost requests stem from?

ChrisM
_________________
born to be root - sorry for my bad English!
Back to top
View user's profile Send private message
steveb
Advocate
Advocate


Joined: 18 Sep 2002
Posts: 4564

PostPosted: Thu Oct 04, 2007 10:46 pm    Post subject: Reply with quote

I think this is done by the internal Apache checking mechanism. Have you enabled mod_status or mod_info? Can you try to disable them and look if this is the problem?

// SteveB
Back to top
View user's profile Send private message
ChrisM87
l33t
l33t


Joined: 07 Aug 2004
Posts: 728
Location: Rheinland-Pfalz (Germany)

PostPosted: Thu Oct 04, 2007 11:04 pm    Post subject: Reply with quote

Hello,

I have removed the LoadModule statements for mod_info and mod_status (though they were not loaded anyway, since I did not include -D INFO) but I'm afraid that didn't fix the problem.

ChrisM
_________________
born to be root - sorry for my bad English!
Back to top
View user's profile Send private message
snIP3r
l33t
l33t


Joined: 21 May 2004
Posts: 853
Location: germany

PostPosted: Fri Oct 05, 2007 9:14 am    Post subject: Reply with quote

hi all!

same problem here... still don't know how to fix it. mod_info and mod_status are both loaded.
it occured first time after upgrade to new apache 2.2.4...

greets
snIP3r
_________________
Intel i3-4130T on ASUS P9D-X
Kernel 5.15.88-gentoo SMP
-----------------------------------------------
if your problem is fixed please add something like [solved] to the topic!
Back to top
View user's profile Send private message
ChrisM87
l33t
l33t


Joined: 07 Aug 2004
Posts: 728
Location: Rheinland-Pfalz (Germany)

PostPosted: Fri Oct 05, 2007 5:14 pm    Post subject: Reply with quote

Hello,

snIP3r wrote:
it occured first time after upgrade to new apache 2.2.4...

yes, I can confirm this.

Already suspected this but was not 100% sure...

ChrisM
_________________
born to be root - sorry for my bad English!
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum