Summarize Apache Extended server-status to show longest running requests

links --dump 1 http://localhost/server-status|grep ^[0-9]|awk 'BEGIN {print "Seconds, PID, State, IP, Domain, TYPE, URL\n--"} $4 !~ /[GCRK_.]/ {print $6, $2, $4, $11, $12, $13 " " $14|"sort -n"}'

Ever need to know why Apache is bogging down *right now*? Hate scanning Apache's Extended server-status for the longest running requests? Me, too. That's why I use this one liner to quickly find suspect web scripts that might need review. Assuming the Extended server-status is reachable at the target URL desired, this one-liner parses the output through elinks (rendering the HTML) and shows a list of active requests sorted by longest running request at the bottom of the list. I include the following fields (as noted in the header line): Seconds: How long the request is alive PID: Process ID of the request handler State: State of the request, limited to what I think are the relevant ones (GCRK_.) IP: Remote Host IP making the request Domain: Virtual Host target (HTTP/1.1 Host: header). Important for Virtual Hosting servers TYPE: HTTP verb URL: requested URL being served. Putting this in a script that runs when triggered by high load average can be quite revealing. Can also capture "forgotten" scripts being exploited such as "formmail.pl", etc.

Sample Output

Seconds, PID, State, IP, Domain, TYPE, URL
--
0 9683 W 127.0.0.1 web1.example.com GET /server-status
30228 11849 W 222.222.222.222 example.com POST /phpAds//adxmlrpc.php/xmlrpc.php
50251 1010 W 111.111.111.111 example.com POST /phpAds//adxmlrpc.php/xmlrpc.php

By: rjamestaylor

2009-02-19 13:06:44

Submit An Alternative

What Others Think

Very nice! Using this almost verbatim, but added CPU util back in.. FWIW, debian links does not like the --dump, just a single - is fine.

Guyverix · 734 weeks and 3 days ago

hm, getting back: Unknown option http://localhost/server-status but the apache2 module is on: a2enmod status Module status already enabled links -dump 1 http://localhost/server-status|grep ^[0-9]|awk 'BEGIN {print "Seconds, PID, State, IP, Domain, TYPE, URL\n--"} $4 !~ /[GCRK_.]/ {print $6, $2, $4, $11, $12, $13 " " $14|"sort -n"}' Seconds, PID, State, IP, Domain, TYPE, URL -- Unknown option http://localhost/server-status

Ovidiu · 676 weeks and 6 days ago

seofox · 126 weeks and 5 days ago

https://seofox.ir/seo/ https://seofox.ir/gray-hat-seo/ https://seofox.ir/search-engine/ https://seofox.ir/page-rank/ https://seofox.ir/backlink-definition/ https://seofox.ir/seo-techniques/ https://seofox.ir/technical-seo/ https://seofox.ir/on-page-seo/ https://seofox.ir/seo-tools/ https://seofox.ir/off-page-seo/ https://seofox.ir/seo-consultation/ https://seofox.ir/on-page-seo/ https://seofox.ir/google-seo-book/ https://seofox.ir/add-site-in-google/ https://seofox.ir/category/seo/ https://seofox.ir/seo-training/ https://seofox.ir/order/ https://seofox.ir/page-speed/ https://seofox.ir/seo-company https://seofox.ir/white-hat-seo/ https://seofox.ir/seo-principles/ https://seofox.ir/category/seo-content/ https://seofox.ir/seo-checklist/ https://seofox.ir/category/seo-content/ https://seofox.ir/google-algorithms/ https://seofox.ir/google-penalty-removal/ https://seofox.ir/rules-of-link-building/ https://seofox.ir/analyze-seo/ https://seofox.ir/backlink/ https://seofox.ir/seo-services-prices/ ??? ? ????? ????

seofox · 116 weeks ago

seofox · 115 weeks and 1 day ago

rahimhh21 · 85 weeks and 1 day ago

Perfecthomepugs · 77 weeks ago

???? ??????? ??????

apadanaa44 · 58 weeks and 1 day ago

pugpuppies95 · 39 weeks ago

donperi1 · 32 weeks and 5 days ago

Untuk memulai bermain di BOS717, kalian hanya perlu mendaftar dan membuat akun secara gratis. Proses pendaftaran sangat mudah dan cepat, sehingga kalian tidak perlu repot-repot menunggu lama untuk bisa bermain. Setelah memiliki akun, kalian bisa melakukan deposit dengan mudah melalui berbagai metode pembayaran yang disediakan.

projack · 13 weeks and 5 days ago

What do you think?

Any thoughts on this command? Does it work on your machine? Can you do the same thing with only 14 characters?

You must be signed in to comment.

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Similar Commands

Poke a Webserver to see what it's powered by.

benchmark web server with apache benchmarking tool

Real time duplication of Apache app traffic to a second server

Filter IP's in apache access logs based on use

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

» all commands
» commands with 3 up-votes (commandlinefu3)
» commands with 10 up-votes (commandlinefu10)