[CLUG-tech] pppd listening on port 80?

Stefano Rivera stefano at clug.org.za
Sun Apr 3 20:40:38 SAST 2005


I've just been updating a machine, and after the update, apache2 failed
to come up again - it said that something was already bound to port
80...

# netstat -lntp | grep 80
tcp 0  0  0.0.0.0:80  0.0.0.0:*  LISTEN  32737/pppd

WTF?

A closer look:
# lsof -p 32767
COMMAND   PID USER   FD   TYPE             DEVICE    SIZE    NODE NAME
pppd    32737 root  cwd    DIR                9,0     712       2 /
pppd    32737 root  rtd    DIR                9,0     712       2 /
pppd    32737 root  txt    REG              253,3  272936   62852 /usr/sbin/pppd
pppd    32737 root  mem    REG                9,0   90288    3036 /lib/ld-2.3.2.so
pppd    32737 root  mem    REG              253,4   32768    1570 /var/run/pppd.tdb
pppd    32737 root  mem    REG              253,3 1482075    1687 /usr/lib/libcrypto.so.0.9.7
pppd    32737 root  mem    REG                9,0   21536    3114 /lib/libcrypt-2.3.2.so
pppd    32737 root  mem    REG                9,0   37288    3108 /lib/libpam.so.0.76
pppd    32737 root  mem    REG                9,0   12072    3097 /lib/libdl-2.3.2.so
pppd    32737 root  mem    REG              253,3  125968    1654 /usr/lib/libpcap.so.0.7.2
pppd    32737 root  mem    REG                9,0 1294784    3090 /lib/libc-2.3.2.so
pppd    32737 root    0u   CHR                1,3            2225 /dev/null
pppd    32737 root    1u   CHR                1,3            2225 /dev/null
pppd    32737 root    2u   CHR                1,3            2225 /dev/null
pppd    32737 root    3u  IPv4             353854             TCP *:www (LISTEN)
pppd    32737 root    4r  FIFO                0,5          353864 pipe
pppd    32737 root    5w  FIFO                0,5          353864 pipe
pppd    32737 root    6w   REG              253,4  896653    2405 /var/log/apache2/error.log.1
pppd    32737 root    7u  sock                0,4          353695 can't identify protocol
pppd    32737 root    8w   REG              253,4 1992910    2404 /var/log/apache2/access.log.1
pppd    32737 root    9u  unix 0x00000100023a3a40         1245997 socket
pppd    32737 root   10u  sock                0,4         1205648 can't identify protocol
pppd    32737 root   11u   CHR                1,3            2225 /dev/null
pppd    32737 root   12u  sock                0,4         1246000 can't identify protocol
pppd    32737 root   13u   REG              253,4   32768    1570 /var/run/pppd.tdb
pppd    32737 root   14u   CHR               4,64            3228 /dev/ttyS0
pppd    32737 root   15u   CHR              108,0            2483 /dev/ppp
pppd    32737 root   16u   CHR              108,0            2483 /dev/ppp

Something is mighty wrong in the state of Denmark...

It seems to have taken over several apache2 file descriptors...

I'm suspection dodgy memory - I'll go out to visit it with a memtest CD
ASAP this week.

I'll also try a more vanilla kernel (it's running a debian-patched one
at the moment).

Any other ideas?

SR

-- 
+---------------------------------------------------------+
| Stefano Rivera                     http://rivera.za.net |
|  H: +27 21 794 7937    () ASCII Ribbon Campaign:        |
|  C: +27 72 419 8559    /\ Say "No!" to HTML email.      |
+---------------------------------------------------------+
Intel Inside, Idiot Outside.



More information about the Clug-tech mailing list