View unanswered posts    View active topics

Board index KnoppMyth General

All times are UTC - 6 hours





Post new topic Reply to topic  Page 1 of 1
  [ 15 posts ] 
Print view Previous topic   Next topic  
Author Message
Search for:
bigbri9
 Post subject: MythWeb suddenly dead???
PostPosted: Thu Jun 22, 2006 11:17 am 
Offline
Joined: Wed Jul 07, 2004 1:22 am
Posts: 52
Location: Chicago, IL
So I was using MythWeb yesterday at the office, and everything was working fine. Today I try to connect and I just get a blank white page. Nothing is loading at all. So I figured the problem is in my IP changing, so I logged into my home windows machine and tried to access mythweb from there, but again I get nothing. I can SSH into the box just fine, but no love from MythWeb. MythBackend is running, but that is the only open process for user MythTV. I checked my Apache Error Log, and here's what I got.

Quote:
[Mon Jun 19 10:21:06 2006] [error] [client 192.168.1.123] File does not exist: /var/www/MYTHTV
[Mon Jun 19 10:21:06 2006] [error] [client 192.168.1.123] File does not exist: /var/www/MYTHTV
[Mon Jun 19 10:21:12 2006] [error] [client 192.168.1.123] File does not exist: /var/www/myth
[Mon Jun 19 10:21:12 2006] [error] [client 192.168.1.123] File does not exist: /var/www/myth
sh: /usr/share/mythstreamtv/mythstreamtvactive.sh: No such file or directory
sh: /usr/share/mythstreamtv/mythstreamtvactive.sh: No such file or directory
sh: /usr/share/mythstreamtv/mythstreamtvactive.sh: No such file or directory
sh: mythstreamtvctrl.sh: command not found
sh: /usr/share/mythstreamtv/mythstreamtvactive.sh: No such file or directory
sh: mythstreamtvctrl.sh: command not found
sh: /usr/share/mythstreamtv/mythstreamtvactive.sh: No such file or directory
sh: mythstreamtvctrl.sh: command not found
sh: /usr/share/mythstreamtv/mythstreamtvactive.sh: No such file or directory
sh: mythstreamtvctrl.sh: command not found
[Thu Jun 22 09:33:18 2006] [error] mod_gzip: EMPTY FILE [/tmp/_4078_116_17.wrk] in sendfile2
[Thu Jun 22 09:33:18 2006] [error] mod_gzip: Make sure all named directories exist and have the
correct permissions.
[Thu Jun 22 09:33:19 2006] [error] mod_gzip: EMPTY FILE [/tmp/_4079_125_26.wrk] in sendfile2
[Thu Jun 22 09:33:19 2006] [error] mod_gzip: Make sure all named directories exist and have the
correct permissions.
[Thu Jun 22 09:33:41 2006] [error] mod_gzip: EMPTY FILE [/tmp/_1584_116_17.wrk] in sendfile2
[Thu Jun 22 09:33:41 2006] [error] mod_gzip: Make sure all named directories exist and have the
correct permissions.


Anybody know what's going on with my myth? Or at least where I should be looking (what logs, what seaches)?
Top
 Profile  
 
mjl
 Post subject:
PostPosted: Thu Jun 22, 2006 7:47 pm 
Offline
Joined: Sun Jun 12, 2005 10:55 pm
Posts: 3161
Location: Warwick, RI
Hi,
Don't know what kind of a set up you have but if there are holes to the outside world, it is possible someone used one of those holes to get in. Check your /var/log files, look toward the ends of messages, syslog
Mike
Top
 Profile  
 
bigbri9
 Post subject:
PostPosted: Fri Jun 23, 2006 1:26 am 
Offline
Joined: Wed Jul 07, 2004 1:22 am
Posts: 52
Location: Chicago, IL
I looked through the Syslog and didn't see anything that struck me as completely out of the ordinary, but it also only had in for the last 24 hours or so. I do have a hole in my firewall to direct port 80 and 8001 to the myth, but you need a pw to access it (The password isn't that strong however). If I was hacked, what do I do to fix my myth? Pretend it's Windoze and reinstall everything? Can I use the backup feature of knoppmyth if I'm partially hosed?
Top
 Profile  
 
mjl
 Post subject:
PostPosted: Fri Jun 23, 2006 5:44 am 
Offline
Joined: Sun Jun 12, 2005 10:55 pm
Posts: 3161
Location: Warwick, RI
Hi,

If logs have been cleaned out, that is root power so you have no idea if something "fishy" got dropped on to your box for "later use". Take a survey as I may be wrong, but I would have all ready done a rebuild.

You may want to re-evaluate you network system as an over all also.

KnoppMyth doesn't claim to be hardened agaist the outside world so you have to carefully protect it as you would a child.

My opinion for the day.
Mike
Top
 Profile  
 
bigbri9
 Post subject:
PostPosted: Fri Jun 23, 2006 8:38 am 
Offline
Joined: Wed Jul 07, 2004 1:22 am
Posts: 52
Location: Chicago, IL
Mike -
It doesn't look like the logs have been cleaned out, they're still chock full of info but there was nothing that I picked up on as suspicious. There were some unknown IPs requestings pages, but that could just be some robots crawling the net. As I don't have any idea on how to fix this, I'll probably rebuild tonight. What do you think about running knoppmyth's backup program. I don't want to include any "badness" that is already in my system in the new one.

[/i]
Top
 Profile  
 
khrusher
 Post subject:
PostPosted: Fri Jun 23, 2006 8:43 am 
Offline
Joined: Tue Apr 13, 2004 6:51 pm
Posts: 890
Location: Groton, MA
rebuild? yikes. While an intruder is possible, it would be near the bottom of my list. Maybe a better look at the issue.

Some thoughts

    Does everything besides mythweb work? does a frontend run?
    Do you have any full disks?
    Are the files listed in your initia error dump truely missing?
    Maybe a check of your database is in order (http://mysettopbox.tv/phpBB2/viewtopic.php?t=1043)
    How about looking in /var/log/apache/, anything in there?
    You can peek in the apache access.log file to see if anyone has been accessing the apache server...that will contain more then 24 hours

_________________
R5F1 - Dell P4 2.4Ghz 500MB - PVR250 x 2 - GeForce FX 5200 - Onboard sound/NIC 80GB ATA/250GB ATA/400GB SATA
Top
 Profile  
 
bigbri9
 Post subject:
PostPosted: Fri Jun 23, 2006 9:02 am 
Offline
Joined: Wed Jul 07, 2004 1:22 am
Posts: 52
Location: Chicago, IL
thanks, i'll give it a shot when I get home from work.
Top
 Profile  
 
mad_paddler
 Post subject:
PostPosted: Fri Jun 23, 2006 9:11 am 
Offline
Joined: Sun Jun 12, 2005 2:39 pm
Posts: 464
Location: UK
Have you checked if your root partition has any free space? The only time I've had mythweb crap out on me was when the root partition was full!
Top
 Profile  
 
bigbri9
 Post subject:
PostPosted: Fri Jun 23, 2006 10:32 am 
Offline
Joined: Wed Jul 07, 2004 1:22 am
Posts: 52
Location: Chicago, IL
Kudos to the mad_paddler, I just checked and dev/hda1 is totally full. Where do I start cleaning that out?
Top
 Profile  
 
bigbri9
 Post subject:
PostPosted: Fri Jun 23, 2006 10:37 am 
Offline
Joined: Wed Jul 07, 2004 1:22 am
Posts: 52
Location: Chicago, IL
just found this link, i'll report back if i fix things

http://mysettopbox.tv/phpBB2/viewtopic. ... light=hda1
Top
 Profile  
 
bigbri9
 Post subject:
PostPosted: Fri Jun 23, 2006 10:46 am 
Offline
Joined: Wed Jul 07, 2004 1:22 am
Posts: 52
Location: Chicago, IL
FIXED!!!!
Mad props to the mad paddler, my mysql.log file was huge and it had filled up my root directory. Now everything is back to normal besides missing my shows for the last few days. Thank you so much, I really didn't want to have to rebuild from scratch.
Top
 Profile  
 
ceenvee703
 Post subject:
PostPosted: Fri Jun 23, 2006 11:08 am 
Offline
Joined: Fri Apr 02, 2004 10:08 am
Posts: 1637
Location: Virginia, USA
Bigbri: note that the mysql log will continue to grow to ridiculous sizes unless you take some steps to get it to do the log rotation it's supposed to be doing.

http://mysettopbox.tv/phpBB2/viewtopic.php?t=10273
Top
 Profile  
 
mjl
 Post subject:
PostPosted: Fri Jun 23, 2006 12:28 pm 
Offline
Joined: Sun Jun 12, 2005 10:55 pm
Posts: 3161
Location: Warwick, RI
Hi,

Being exposed to the external world, I would error on the side of caution. However as a disclaimer, I did say this:
Quote:
Take a survey as I may be wrong, but I would have all ready done a rebuild.


Humbly admitting, I was... this time.

Have a great day! Curious, what version? R5B7 needs to have an edit to mythlink.sh as it make a bunch of little files in /myth/tv
.
Mike
Top
 Profile  
 
bigbri9
 Post subject:
PostPosted: Fri Jun 23, 2006 12:54 pm 
Offline
Joined: Wed Jul 07, 2004 1:22 am
Posts: 52
Location: Chicago, IL
R5B7 would be correct.
Top
 Profile  
 
mjl
 Post subject:
PostPosted: Fri Jun 23, 2006 1:56 pm 
Offline
Joined: Sun Jun 12, 2005 10:55 pm
Posts: 3161
Location: Warwick, RI
Hi bigbri9,

In the /myth/tv there will probably be a bunch of .nuv (small) files. Those are being created because of the recording extension change to mpg. They may be safely deleated.

I don't have the details with me, however I will post the edits to mythlink to stop them. It was for housekeeping that isn't required now. R5C7 fixes that and other issues.

Mike
Top
 Profile  
 

Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 15 posts ] 


Board index KnoppMyth General

All times are UTC - 6 hours




Who is online

Users browsing this forum: No registered users and 29 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group

Theme Created By ceyhansuyu