Apache just stopped :O!!

[nicolas]

rauschr Wrote:you have a find in apache2.conf
uncomment this lines
and add ExtendedStatus On

<ifmodule mod_status.c>
<location /server-status>
SetHandler server-status
</location>
....

after you'll see the apache tread, if you type a webbrowser your ip and /server-status
examp. : 87.229.2.55/server-status
some website make a lot ordering width not too much traffic.
they run out it apache threads
you can find the domain in the server-status list (80%),what many times can be found
that is a advertisement server swich off!

or DOS you are the victim of an attack

Server-status is up, and Apache server is running fine. No overload, or other problem.

Anyway I just noticed ownerships and rights in /var/log/apache2 were a mess. I am trying to investigate any possibilities. Given the fact apache is dying after log rotation that may be a path to investigate. Could anyone post which ownerships and mode should be used for /var/log/apache2 directory and files inside?

Currently I have:
/var/log
drwxr-x--- 4 root adm 16384 2008-09-01 07:29 apache2

/var/log/apache
drwxr-xr-x 2 root root 4096 2008-08-21 21:42 backup
drwxr-xr-x 2 www-data www-data 20480 2008-09-01 07:29 users
-rw-r----- 1 root adm 5328 2008-09-01 13:13 suexec.log
-rw-r----- 1 root adm 99968 2008-08-30 19:15 suexec.log.1
-rw-r--r-- 1 root www-data 313 2008-08-22 17:39 suexec.log.2.gz
-rw-r----- 1 root adm 14696714 2008-09-01 13:31 site1.com-combined.log
-rw-r----- 1 root adm 67363979 2008-08-31 07:31 site1.com-combined.log.1
-rw-r--r-- 1 root root 265528 2008-08-27 06:38 site1.com-combined.log.2.gz
-rw-r----- 1 root adm 278791 2008-09-01 13:31 site1.com-traf.log
-rw-r----- 1 root adm 1316532 2008-08-31 07:31 site1.com-traf.log.1
-rw-r--r-- 1 root root 21991 2008-08-27 06:38 site1.com-traf.log.2.gz
... etc

/var/log/apache2/users
-rw-r----- 1 root adm 5766735 2008-09-01 13:32 site1.com-access.log
-rw-r----- 1 root adm 25967717 2008-08-31 07:31 site1.com-access.log.1
-rw-r--r-- 1 root root 167339 2008-08-27 06:38 site1.com-access.log.2.gz
-rw-r----- 1 root adm 34015 2008-09-01 11:41 site1.com-error.log
-rw-r----- 1 root adm 57657 2008-08-31 02:28 site1.com-error.log.1
-rw-r--r-- 1 root root 296 2008-08-22 14:56 site1.com-error.log.2.gz
... etc