divendres, 10 de maig del 2013

cpu 0 k.o. per scannejar amb clamscan ?

avui ha estat un dia llarg......... mirant el syslog podem veure ...... May 7 10:30:29 ies-sabadell kernel: [613402.936520] BUG: soft lockup - CPU#1 stuck for 61s! [clamscan:4941] May 7 10:30:29 ies-sabadell kernel: [613402.937202] Modules linked in: binfmt_misc sco bridge stp bnep rfcomm l2cap crc16 bluetooth rfkill acpi_cpufreq cpufreq_userspace cpufreq_powersave cpufreq_stats cpufreq_conservative xt_recent ipt_LOG xt_state ts_bm xt_string iptable_filter ipt_REDIRECT xt_tcpudp iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 iptable_mangle iptable_raw ip_tables x_tables quota_v2 quota_tree fuse firewire_sbp2 firewire_core crc_itu_t loop snd_hda_codec_intelhdmi snd_hda_codec_via snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq i915 drm_kms_helper snd_timer snd_seq_device i2c_i801 drm i2c_algo_bit i2c_core video output snd soundcore snd_page_alloc psmouse usb_storage serio_raw pcspkr evdev button asus_atk0110 processor ext3 jbd mbcache sd_mod crc_t10dif ata_generic 8139too ata_piix ehci_hcd r8169 8139cp mii libata scsi_mod usbcore nls_base thermal thermal_sys [last unloaded: scsi_wait_scan] May 7 10:30:29 ies-sabadell kernel: [613402.937297] CPU 1: May 7 10:30:29 ies-sabadell kernel: [613402.937299] Modules linked in: binfmt_misc sco bridge stp bnep rfcomm l2cap crc16 bluetooth rfkill acpi_cpufreq cpufreq_userspace cpufreq_powersave cpufreq_stats cpufreq_conservative xt_recent ipt_LOG xt_state ts_bm xt_string iptable_filter ipt_REDIRECT xt_tcpudp iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 iptable_mangle iptable_raw ip_tables x_tables quota_v2 quota_tree fuse firewire_sbp2 firewire_core crc_itu_t loop snd_hda_codec_intelhdmi snd_hda_codec_via snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq i915 drm_kms_helper snd_timer snd_seq_device i2c_i801 drm i2c_algo_bit i2c_core video output snd soundcore snd_page_alloc psmouse usb_storage serio_raw pcspkr evdev button asus_atk0110 processor ext3 jbd mbcache sd_mod crc_t10dif ata_generic 8139too ata_piix ehci_hcd r8169 8139cp mii libata scsi_mod usbcore nls_base thermal thermal_sys [last unloaded: scsi_wait_scan] May 7 10:30:29 ies-sabadell kernel: [613402.937383] Pid: 4941, comm: clamscan Tainted: G W 2.6.32-5-amd64 #1 System Product Name May 7 10:30:29 ies-sabadell kernel: [613402.937387] RIP: 0010:[] [] intel_crt_detect+0xc1/0x226 [i915] May 7 10:30:29 ies-sabadell kernel: [613402.937407] RSP: 0018:ffff880212d3be58 EFLAGS: 00000286 May 7 10:30:29 ies-sabadell kernel: [613402.937411] RAX: 0000000083f50000 RBX: ffff88021e35a800 RCX: ffffffffa02106b1 May 7 10:30:29 ies-sabadell kernel: [613402.937415] RDX: ffffffffa0209010 RSI: ffffffffa02106c3 RDI: 0000000000000004 May 7 10:30:29 ies-sabadell kernel: [613402.937418] RBP: ffffffff8101166e R08: 0000000080f50000 R09: ffff88021f06b000 May 7 10:30:29 ies-sabadell kernel: [613402.937422] R10: ffff880212d3a000 R11: 0000000000000000 R12: ffff88021f06b000 May 7 10:30:29 ies-sabadell kernel: [613402.937426] R13: 0000000080f50000 R14: ffff880212d3bf48 R15: 0000000000000000 May 7 10:30:29 ies-sabadell kernel: [613402.937431] FS: 00007f05c1968720(0000) GS:ffff880008c20000(0000) knlGS:0000000000000000 May 7 10:30:29 ies-sabadell kernel: [613402.937435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 May 7 10:30:29 ies-sabadell kernel: [613402.937438] CR2: 00007f05c17a7000 CR3: 00000001e73aa000 CR4: 00000000000006e0 May 7 10:30:29 ies-sabadell kernel: [613402.937442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 May 7 10:30:29 ies-sabadell kernel: [613402.937446] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 May 7 10:30:29 ies-sabadell kernel: [613402.937449] Call Trace: May 7 10:30:29 ies-sabadell kernel: [613402.937464] [] ? intel_crt_detect+0xa7/0x226 [i915] May 7 10:30:29 ies-sabadell kernel: [613402.937480] [] ? status_show+0x12/0x36 [drm] May 7 10:30:29 ies-sabadell kernel: [613402.937488] [] ? dev_attr_show+0x1f/0x42 May 7 10:30:29 ies-sabadell kernel: [613402.937495] [] ? sysfs_read_file+0xa7/0x125 May 7 10:30:29 ies-sabadell kernel: [613402.937503] [] ? vfs_read+0xa6/0xff May 7 10:30:29 ies-sabadell kernel: [613402.937508] [] ? sys_pread64+0x57/0x77 May 7 10:30:29 ies-sabadell kernel: [613402.937515] [] ? page_fault+0x25/0x30 May 7 10:30:29 ies-sabadell kernel: [613402.937520] [] ? system_call_fastpath+0x16/0x1b ja portava tot el matí fent-lo cada 2 minuts generant el missatge per una altra banda mysql s'ha accelerat deixant el servidor inservible per rendiment i tenint que tallar la connexió de l'exterior , per garantir el servei intern AL VOLTANT DE LES 12 - 12:15 HE TINGUT QUE PARAR SERVEIS I ANALITZAR, DE REVISAR TROBO FITXER ACCESS.LOG peticions extranyes i habituals 108.54.193.165 - - [07/May/2013:08:30:26 +0200] "k\xcd\xb5`x\x8bF,\xc9\x92\xd8" 301 2 "-" "-" 109.124.194.61 - - [07/May/2013:08:33:02 +0200] "-" 408 - "-" "-" 193.159.115.1 - - [07/May/2013:08:33:13 +0200] "-" 408 - "-" "-" 96.227.71.97 - - [07/May/2013:08:39:54 +0200] "-" 408 - "-" "-" 77.78.104.50 - - [07/May/2013:08:40:05 +0200] "GET /server-status HTTP/1.0" 200 26241 "-" "-" 66.249.78.71 - - [07/May/2013:08:47:41 +0200] "GET /~12damixb7/UF2/UF2-2-P4/UF2-2-P4-hotels-Oracle.xml HTTP/1.1" 200 24180 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.75.234 - - [07/May/2013:08:48:27 +0200] "GET /~11damixb15/UF1/imatges/UF1-2-P6-informatico.jpg HTTP/1.1" 304 - "-" "Googlebot-Image/1.0" 157.55.32.96 - - [07/May/2013:08:48:31 +0200] "GET /robots.txt HTTP/1.1" 200 68 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 58.173.114.220 - - [07/May/2013:08:50:06 +0200] "-" 408 - "-" "-" 31.163.166.23 - - [07/May/2013:08:50:36 +0200] "9\x16\x84O\xc5\xb1\xbbF" 301 2 "-" "-" 77.78.104.50 - - [07/May/2013:08:51:25 +0200] "GET /server-status HTTP/1.0" 200 26932 "-" "-" 24.126.94.42 - - [07/May/2013:08:52:09 +0200] "-" 408 - "-" "-" 110.174.228.195 - - [07/May/2013:08:54:52 +0200] "-" 408 - "-" "-" 72.14.199.141 - - [07/May/2013:09:02:04 +0200] "GET /~12damixc3/rss.xml HTTP/1.1" 200 1735 "-" "Feedfetcher-Google; (+http://www.google.com/feedfetcher.ht 66.249.78.71 - - [07/May/2013:07:02:23 +0000] "GET /~12damixc6/UF1/html/ProjecteSergiExtremo.html HTTP/1.1" 304 - "-" "Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_1 like Mac OS X; en-us) AppleWebKit/ 98.229.193.152 - - [07/May/2013:09:06:10 +0200] "-" 408 - "-" "-" 66.249.75.141 - - [07/May/2013:09:06:23 +0200] "GET /~12damixb5/M4-UF1/M4_UF1-2-P9-Formularis-I.html 81.88.152.225 - - [07/May/2013:09:07:52 +0200] "\xa6\x16\x86\xd1\x10\xdeb>\xb2\xbf\xc9-\xf5\x9c\xab\x13\x8eS\b\xddq\xe4\x93\x8c" 301 2 "-" "-" 115.184.219.126 - - [07/May/2013:09:08:07 +0200] "-" 408 - "-" "-" 31.103.134.62 - - [07/May/2013:09:08:22 +0200] "-" 408 - "-" "-" 95.52.218.49 - - [07/May/2013:09:11:22 +0200] "-" 408 - "-" "-" 180.75.220.154 - - [07/May/2013:09:12:10 +0200] "-" 408 - "-" "-" 5.9.112.68 - - [07/May/2013:09:19:24 +0200] "GET /robots.txt HTTP/1.1" 200 68 "-" "Mozilla/5.0 (compatible; SISTRIX Crawler; http://crawler.sistrix.net/)" 5.9.112.68 - - [07/May/2013:09:19:24 +0200] "GET / HTTP/1.1" 301 2 "-" "Mozilla/5.0 (compatible; SISTRIX Crawler; http://crawler.sistrix.net/)" 5.9.112.68 - - [07/May/2013:09:19:24 +0200] "GET /intraweb HTTP/1.1" 302 325 "-" "Mozilla/5.0 (compatible; SISTRIX Crawler; http://crawler.sistrix.net/)" 66.249.78.123 - - [07/May/2013:09:20:43 +0200] "GET /moodle/index.php?cal_m=4&cal_y=2578 HTTP/1.1" 200 8166 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 41.108.97.207 - - [07/May/2013:09:21:44 +0200] "-" 408 - "-" "-" 188.254.175.55 - - [07/May/2013:08:14:01 +0000] "\xb4\xa4\x8d\xdcW_y\xc7\x82\x91\xae\x92\xd2\xf09\xc1jo{Fa\xa6\xc7\xbdG\x06g%\xa1V\x99@v\x16\xc2\x81Yp\xbc\x97\x07c\xdb\xe9RC\xb5\xd3\x8b\xff|\xdf\xe0\xe0@j\x8d" 301 2 "-" "-" 192.168.130.195 - - [07/May/2013:10:14:05 +0200] "POST /moodle2/login/index.php HTTP/1.1" 200 6172 "https://ies-sabadell.cat/moodle2/login/index.php" "Mozilla/5.0 (Windows NT 5.1; rv:15.0) Gecko/20100101 Firefox/15.0.1" 204.14.48.164 - - [07/May/2013:11:39:38 +0200] "\x85\xcb\xccA\xd6\x9b\xed\xa1\x82\xf7\xe3\xb7n]\xa0\xe6\xf1|\xe8\xa5\v\x8ex]c4/*w0\xb9n-" 400 312 "-" "-" 1.170.191.191 - - [07/May/2013:11:46:24 +0200] "\xbb\xa0o.\bs\xc2u\x1b\x0f\xd0gV" 301 2 "-" "-" CURIOS QUE ENCARA EL FITXER ACCESS.LOG ESTÀ CONTINUAT VA COPIANT DIFERENTS HORES ? ERROR ESCRITURA ? 62.83.218.106 - - [07/May/2013:11:07:16 +0200] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/j_arrow.png HTTP/1.1" 200 239 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:11:07:16 +0200] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-checkin.png HTTP/1.1" 200 469 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:09:07:16 +0000] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-clear.png HTTP/1.1" 200 566 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:09:07:16 +0000] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-purge.png HTTP/1.1" 200 513 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:09:07:16 +0000] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-info.png HTTP/1.1" 200 590 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:09:07:16 +0000] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-newarticle.png HTTP/1.1" 200 520 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:11:07:16 +0200] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-groups.png HTTP/1.1" 200 826 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:11:07:16 +0200] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-levels.png HTTP/1.1" 200 281 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:09:07:16 +0000] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-user-note.png HTTP/1.1" 200 359 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:09:07:16 +0000] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-category.png HTTP/1.1" 200 263 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:09:07:16 +0000] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-massmail.png HTTP/1.1" 200 703 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:09:07:16 +0000] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-menumgr.png HTTP/1.1" 200 519 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:11:07:16 +0200] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-menu.png HTTP/1.1" 200 427 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:11:07:16 +0200] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-article.png HTTP/1.1" 200 523 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:09:07:16 +0000] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-featured.png HTTP/1.1" 200 552 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 62.83.218.106 - - [07/May/2013:09:07:16 +0000] "GET /~12smx2c4/Joomla_recuperacion/administrator/templates/bluestork/images/menu/icon-16-media.png HTTP/1.1" 200 608 "http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 192.168.0.1 - - [07/May/2013:08:14:06 +0000] "GET /intraweb HTTP/1.0" 302 255 "http://www.google.es/url?sa=t&rct=j&q=institut+sabadell&source=web&cd=1&ved=0CDEQFjAA&url=http%3A%2F%2Fies-sabadell.cat%2Fintraweb&ei=zLeIUY_9A8LC7Aae0YGQCQ&usg=AFQjCNHXfxEsA247aQOWHbfxhD6LvM_tZg" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31" 77.78.104.50 - - [07/May/2013:08:14:06 +0000] "GET /server-status HTTP/1.0" 200 26931 "-" "-" [Tue May 07 11:40:56 2013] [error] [client 62.83.218.106] PHP Warning: simplexml_load_file(/etc/xml/catalog): failed to open stream: Permission denied in /home/alumnes/smx2c-12/12smx2c4/public_html/Joomla_recuperacion/libraries/joomla/factory.php on line 444, referer: http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/installation/index.php [Tue May 07 11:41:44 2013] [error] [client 78.61.25.86] Invalid URI in request \xf1k\xed\xb2L\x82\x80\xcd\xfb\x1f\x14X~\xaf\xa0z\xa1\x13\xccb\xa9\x92M\xe8et\xe7\x82\x83\x8b\x07\xd9*OX"[\xaf*L\xccF\x19\xde\x0c\xf3>t\x8c'\x9c\x1dt\xa2\x02 [Tue May 07 11:41:44 2013] [error] [client 78.61.25.86] ModSecurity: Warning. Match of "rx ModSecurity" against "WEBSERVER_ERROR_LOG" required. [file "/etc/apache2/mod-security/modsecurity_crs_21_protocol_anomalies.conf"] [line "65"] [id "960913"] [msg "Invalid request"] [severity "CRITICAL"] [hostname "ies-sabadell.xtec.net"] [uri "\\xf3>t\\x8c'\\x9c\\x1dt\\xa2\\x02"] [unique_id "UYjMWH8AAQEAAAG2CegAAAAg"] [Tue May 07 11:42:57 2013] [error] [client 62.83.218.106] File does not exist: /home/alumnes/smx2c-12/12smx2c4/public_html/Joomla_recuperacion/installation, referer: http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/installation/index.php [Tue May 07 11:43:21 2013] [error] [client 192.168.129.209] File does not exist: /srv/www/favicon.ico [Tue May 07 11:43:22 2013] [error] [client 192.168.129.209] File does not exist: /srv/www/favicon.ico [Tue May 07 11:43:27 2013] [error] [client 62.83.218.106] File does not exist: /home/alumnes/smx2c-12/12smx2c4/public_html/Joomla_recuperacion/installation, referer: http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/installation/index.php [Tue May 07 11:44:06 2013] [error] [client 62.83.218.106] PHP Notice: Trying to get property of non-object in /home/alumnes/smx2c-12/12smx2c4/public_html/Joomla_recuperacion/libraries/joomla/updater/adapters/collection.php on line 131, referer: http://ies-sabadell.cat/~12smx2c4/Joomla_recuperacion/administrator/index.php FITXER ERROR.LOG [Tue May 07 11:35:42 2013] [error] [client 189.176.248.154] request failed: error reading the headers [Tue May 07 11:39:38 2013] [error] [client 204.14.48.164] Invalid URI in request \x85\xcb\xccA\xd6\x9b\xed\xa1\x82\xf7\xe3\xb7n]\xa0\xe6\xf1|\xe8\xa5\v\x8ex]c4/*w0\xb9n- [Tue May 07 11:39:38 2013] [error] [client 204.14.48.164] ModSecurity: Warning. Match of "rx ModSecurity" against "WEBSERVER_ERROR_LOG" required. [file "/etc/apache2/mod-security/modsecurity_crs_21_protocol_anomalies.conf"] [line "65"] [id "960913"] [msg "Invalid request"] [severity "CRITICAL"] [hostname "ies-sabadell.xtec.net"] [uri "\\x8ex]c4/*w0\\xb9n-"] [unique_id "UYjL2n8AAQEAAAH0xjsAAAAv"] [Tue May 07 11:40:25 2013] [error] [client 62.83.218.106] File does not exist: /srv/www/favicon.ico fitxer netstat i conntrack - podem veure com el top de connexió, agafant referència cada hora és les 12 on estem a les 12:05 a 259 connexions establertes mar may 7 11:05:01 CEST 2013 ESTABLISHED 2 18 240 todo 63 567 7494 contrack 180 /proc/net/ip_conntrack mar may 7 12:05:09 CEST 2013 ESTABLISHED 259 2331 31080 todo 386 3474 46254 contrack 1191 /proc/net/ip_conntrack mar may 7 13:05:01 CEST 2013 ESTABLISHED 9 81 1080 todo 24 216 2814