• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Question PHP general protection errors in syslog since Nov 29th

mr-wolf

Silver Pleskian
Plesk Guru
Because I had some server-related problems last year (on another server, btw) I started to monitor my /var/log/syslog for entries containing "php.*error".
For this I use Zabbix.

Since Nov 29th at 05:01 am I'm getting this in my syslog from time to time:

grep -i php-fpm /var/log/syslog.1 | head -n1 | sed 's/p:[0-9a-f]*/p:******/g'
Code:
Nov 29 05:01:37 ns4 kernel: [6134283.993177] traps: php-fpm[12051] general protection ip:****** sp:****** error:0

This moment corresponds with some update that has been made here:

ls -altr /opt/plesk/php/7.1/etc/
Code:
total 104K
-rw-r--r-- 1 root root 4.1K Feb 17  2017 php-fpm.conf
-rw-r--r-- 1 root root 1.2K Feb 17  2017 pear.conf
-rw-r--r-- 1 root root  70K Jul  7 05:48 php.ini
drwxr-xr-x 9 root root 4.0K Jul  7 16:14 ..
drwxr-xr-x 2 root root 4.0K Nov 29 04:27 rpm
drwxr-xr-x 2 root root 4.0K Nov 29 04:27 php.d
drwxr-xr-x 5 root root 4.0K Nov 29 04:27 .
drwxr-xr-x 2 root root 4.0K Nov 29 19:07 php-fpm.d

I have not much to go by besides the certainty that this didn't occur for quite some time and that it is only happening on one of my servers.
I have a few other Plesk servers.
This one is running Ubuntu 16.04 and Plesk 17.5.3

Anyone some tips to troubleshoot?
I have not received any feedback that something is not working properly....
 
Last edited:
I have more info available now...
One of my own sites was apparently related to this.
The submenus of a WordPress site didn't work and these caused the PHP crashes.

I first restored the site to somewhere in September.
This is before any recent WordPress updates and it's 100% sure the site was working properly then.
The problem stayed.

The site was set to PHP 7.1.2
Setting it to PHP 7.0.15 (by OS vendor) made it work again.
Setting it to PHP 7.0.26 or 7.1.2 made it crash again.
I was also able to get it to work on PHP 5.6.23

This is in the site's error log

Code:
[Sat Dec 02 18:46:47.181749 2017] [proxy_fcgi:error] [pid 7816] [client 92.211.242.32:41132] AH01067: Failed to read FastCGI header, referer: https://hmvc.eu/
[Sat Dec 02 18:46:47.181779 2017] [proxy_fcgi:error] [pid 7816] (104)Connection reset by peer: [client 92.211.242.32:41132] AH01075: Error dispatching request to : , referer: https://xxxx.eu/
 
Back
Top