Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

modprobe generated by apache - security issue?

Status
Not open for further replies.

mmmdoughnuts

Technical User
Nov 1, 2007
4
US
I find myself very confused by something happening to one of my servers. I noticed that it was running very slow so I did a ps and saw the following two lines (among other things of course):

apache-user 18250 1.4 1.5 22736 13932 ? S 21:16 0:22 \_ /usr/sbin/apache2 -k start
root 27786 1.0 0.0 1916 872 ? R 21:41 0:00 | \_ /sbin/modprobe -s -k -- net-pf-10

I'm running Debian Sarge on a 2.4 kernel with the latest updates for everything.

I did the typical googling to see if anything came up, but I couldn't find anything definitive. But that aside, why on earth would an apache process be doing anything with modprobe? Isn't that kinda like finding polar bears in the Amazon basin? In any case, I've noticed that a new apache process with a modprobe child will pop up every few seconds or minutes, go away for a bit, and then come back again. I haven't been able to have it coincide with anything that I'm doing on the server or anything else that may be running at the time.

I guess above all else, I want to make sure everything is stable with my system and that I'm not under any type of threat. Any insight would be much appreciated!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top