Massive 2.0.53 errors on 5.4-PRE

[Emanuel Strobl]

Am Montag, 4. April 2005 21:38 schrieb Clement Laforet:
> On Mon, Apr 04, 2005 at 07:16:36PM +0200, Emanuel Strobl wrote:
> > Am Sonntag, 3. April 2005 23:50 schrieb Clement Laforet:
> > > On Sun, Apr 03, 2005 at 09:24:59PM +0200, Emanuel Strobl wrote:
> > > > I see the following line in the error log every second!
> > > > [Sun Apr 03 21:07:15 2005] [warn] (61)Connection refused: connect to
> > > > listener
[...]
> Thanks, I presume pf and altq are running on this machine.
> How many request per second do you have?

Well, the error gets logged every second without any request! But if you're 
interested in general load, this machine will stay quiet idle, at least 
regarding http reverse-proxy requests. I never checked, it belongs to a 
friend with a small company, I'd guess about 1k requests/_day_.
And you're right, pf is running, but not at high load, only two 3MB/s lines 
are to feed, mainly with some reply-to rules.

> > I'm absolutely no apache guru and like i said, this is a productive
> > machine, so I don't know where to start finding out the meaning of the
> > error.
>
> From source, httpd-2.0.53/server/mpm_common.c ;-)

;)

>
> Does sysctl oid net.inet.ip.intr_queue_drops increase when these
> warnings occur? if yes:
> - increase net.inet.ip.intr_queue_maxlen to see if it solve the
>   problem or limit the rate of error.
> - does apache compiled  with WITH_KQUEUE_SUPPORT fix the problem?
>
> OTOH, it can come from you sslmutex configuration  which may prevent
> apache to work correctly in a jail.

Hmm, while trying to regenerate the problem to check the sysctl oid you 
mentioned (which I never noticed before, and alwas is 0 here) I can't 
reproduce the error after I altered the $/etc/apache2/ssl.conf (but I could 
see it before, so it was reproducable today!). I changed the errorlog from 
httpd-error to httpdssh-error (after I had reenabled the "LoadModule 
ssl_module" line inside the ifdefined in httpd.con) and the error logging 
stopped. After rediting ssl.conf (to httpd-error again instead of 
httpdssh-error) the error doesn't occur any more !?!

Maby it's something todo with mtime or ctime of $/etc/apache2/ssl.conf?

I'm confused, but like I said this machine is productive, so I don't want to 
deinstall apache just to see what mtime ssl.conf has after reinstalling it.

Thanks for your attention,

-Harry

>
>
> I'll give a try when I have some free time, thanks for the reports.
>
> clem
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-apache/attachments/20050404/dd198768/attachment.bin