Re: Internally generated spam - but from where?

Ok, the plot thickens.

I have found the script that is responsible for this *, it is having
data posted to it so i cant see how they are actually breaking it but I
have done the following.

Protected the directory with a .htaccess file and added the IP of the
culprit to my iptables firewall.

So, i think i am protected from this spammer and i have prevented
anyone else finding the file untill i can find a suitable replacement.
(its instant web mail and a lot of my clients use it so i cant just
delete it)

So, i have a new problem. I now have a single httpd process owned by
apache using up 99% of my CPU. How can i track down what is causing
this single process to use up so much CPU? I am just downloading,
installing and reading up on ethereal as Hristo kindly suggested. Will
this allow me to filter all http connections to see what is coming in
from where etc?

Any suggestions to help me track down what this process is doing and
who is causing it to do this?

Thanks again all, am learning some great stuff as i go!
Mac



Script causing the problems is instant web mail -
http://instantwebmail.sourceforge.net/
It is the latest version and everything so i suggest people avoid this
like the plague.

.

Relevant Pages

  • Re: create database fatal error
    ... error message. ... In that your script would try to overwrite system01.dbf with a file of ... Thats because I cant read your mind, so I dont know what you need to ... Jorge Corvazar'. ...
    (comp.databases.oracle.server)
  • .CopyFile to User TEMP - Permission Denied??
    ... I cant copy a file to a users %TEMP% variable using vbscript? ... I am running and testing this script from my local desktop and a full ...
    (microsoft.public.scripting.vbscript)
  • Re: Parse error from bad variable?
    ... >> I hope you don't mind, but I am enclosing the entire script as is. ... I have been running a test version of our program in Japanese. ... Little did I know that the same problem which is apparently causing havoc ... This of course, is a pretty important character, and is what's causing our ...
    (alt.php)
  • Re: generating sql scripts of stored procedures
    ... What could be causing this ... > Whenever I build a new stored procedure into my database I specifically ... > at the end of the script. ... All my settings in sql server and database ...
    (microsoft.public.sqlserver.programming)
  • Re: no point...
    ... I tried the new google groups and I keep getting the message ... "something is causing this script to run too slowly" (or something ... The Washington Post political "blogs" displayed incorrectly under XP and are ...
    (rec.music.makers.guitar.jazz)