• Post Reply Bookmark Topic Watch Topic
  • New Topic

RedWorm Attack  RSS feed

 
Meenahere
Greenhorn
Posts: 1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi!
I am developing an online game. I used Apache Web Server, Apache JServ (web container) and GNUJSP ( a Java Server pages compiler). I encountered a situation where none other than the static pages on my server are being served. I mean to say that none of the servlets and JSP pages are working. After Reviewing the log files of the server I could identify the default.ida encounter and out of memory space comment. I think this is due to the attack of RedWorm.
My operating System is Windows ME.
I request you to please help me in fixing this bug.
thanks,
Meena
 
Madhav Lakkapragada
Ranch Hand
Posts: 5040
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator

"Meenahere"
your name doesn't agree with the javaranch guidelines.
please take a moment andre-register after reviewing the
guidelines at http://www.javaranch.com/name.jsp
thanks for your cooperation.
- satya
 
Randall Twede
Ranch Hand
Posts: 4589
6
Java Python Scala
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
ahhh so it is not just me. I am experiencing similar problems
http://www.javaranch.com/ubb/Forum7/HTML/005337.html
 
Tim Holloway
Bartender
Posts: 18531
61
Android Eclipse IDE Linux
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Apache's immune to "Code Red" - it gets in by overflowing the webserver's input buffer, and apache checks and blocks such animals.
While it's possible that Windows is choking on that oversized packet (Naw, not WINDOWS! ), what it looks like is that the mechanism by which Apache knows to pass requests off to the GNU JSP proccessor isn't configured properly.
Three things, then.
1. Use the Performance Monitor (System Monitor) to make sure you have enough RAM - though in Windows, you'd normally get into Virtual Memory thrashing and know about it quick.
2. Review your apache config file(s) - httpd.conf and anything it's calling. Make sure that the config you you THINK it's using is in fact the one it really IS using!
3. Check the error log file. If the error's before the handoff to GNUJSP, chances are that Apache noted and logged it.
I believe that the command "httpd -l" will list the installed modules, BTW.
 
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!