Skip to content

Server Status page totally messed up on apache 2.4.25 with MPM Event #1337

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
tjikkun opened this issue Feb 28, 2017 · 3 comments
Closed

Server Status page totally messed up on apache 2.4.25 with MPM Event #1337

tjikkun opened this issue Feb 28, 2017 · 3 comments
Assignees

Comments

@tjikkun
Copy link

tjikkun commented Feb 28, 2017

I have Apache 2.4.25 running with MPM Event, but as soon as I load mod_security the Apache status page goes all bonkers: I see stuff like:
Total accesses: 9985310457595812052 - Total Traffic: 12398867456.0 GB
CPU Usage: u5.40831e+11 s1.87 cu0 cs0 - 1.56e+11% CPU load
2.89e+16 requests/sec - 35834876.0 GB/second - 1 B/request
Also the requests have incorrect IP's sometimes (73.101 as example, it is missing 2 dots)

@tjikkun tjikkun changed the title scoreboard scoreboard totally messed up on apache 2.4.25 with MPM Event Feb 28, 2017
@tjikkun tjikkun changed the title scoreboard totally messed up on apache 2.4.25 with MPM Event Server Status page totally messed up on apache 2.4.25 with MPM Event Feb 28, 2017
@bostrt
Copy link

bostrt commented Mar 2, 2017

@tjikkun what version of mod_security are you using? Do you have any SecRule/Actions applied or are you just loading the module?

@tjikkun
Copy link
Author

tjikkun commented Mar 2, 2017

@bostrt Ah good questions. Sorry I forgot to mention this happens with both 2.9.0 and 2.9.1, haven't tested older versions.

As to your second question, I hadn't really thought about it but I did some digging and as it turns out just loading the module does not show the problem, minimum config to reproduce needs to have
SecConnReadStateLimit <any number>

@tjikkun
Copy link
Author

tjikkun commented Mar 2, 2017

I found the issue, will try to put in a pull request tomorrow, should also fix #786

tjikkun added a commit to AntagonistHQ/ModSecurity that referenced this issue Mar 3, 2017
This is unsafe, and messes up the scoreboard on Apache >= 2.4.25 with Event MPM
@zimmerle zimmerle self-assigned this May 4, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants