[NCLUG] Apache Seg Faults

[Jeff Moe]

On Tuesday 18 September 2001 02:23 pm, Michael Dwyer wrote:
[chop]
> Can you find the matching request that caused this fault?

It doesn't happen with the same frequency as the typical worm hits. I can't 
think of a good way to correlate it to a hit. Ideas?

>  Also, are
> you running anything strange in your Apache?  We're not seeing this in
> a vanilla 1.3.12 with mod_php and mod_perl.
>
> The attacks I am seeing are all generally unicode attacks.  If Apache
> has problems with Unicode decoding, it could be related to that.
> Otherwise,
> this appears to be pretty much IIS-specific.
>
> Also, the only current problems I know of with Apache have to do with
> some database-based auth modules.

Kernel: 2.4.9
Apache: 1.3.20
PHP: 4.0.6
mod_perl: 1.26
These other modules:
mod_access.o
mod_actions.o
mod_alias.o
mod_asis.o
mod_auth.o
mod_autoindex.o
mod_cgi.o
mod_dir.o
mod_env.o
mod_imap.o
mod_include.o
mod_log_config.o
mod_mime.o
mod_negotiation.o
mod_rewrite.o
mod_setenvif.o
mod_speling.o
mod_usertrack.o

Any info greatly appreciated,

-Jeff