Webserver sending corrupt or corrupting served files

Question

EDIT: Looks like the problem was a rootkit that corrupted a bunch of low level linux commands, including top, ps, ifconfig, netstat and others. The problem was resolved by taking all web files off the server and wiping it.

---

A dedicated server we operate is having a strange issue. Files are not be sent complete or are showing up with garbage data. Example: http://sustainablefitness.com/images/banner_bootcamps.jpg

To make matters more confusing this corruption does NOT happen when the files are served as https, (I would post a link, but I don't have enough rep points, just add an 's' after http in the link above.)

When I throw load at the server, I get dozens of (swapd)s in top this is the only thing that really jumps out.

I can't post images but ( imgur.com / ZArSq.png ) is a screenshot of top.

I have tried a lot of stuff so far, I am willing to try anything that I can. A dedicated server we operate is having a strange issue. Files are not be sent complete or are showing up with garbage data. Example: http://sustainablefitness.com/images/banner_bootcamps.jpg

To make matters more confusing this corruption does NOT happen when the files are served as https, (I would post a link, but I don't have enough rep points, just add an 's' after http in the link above.)

When I throw load at the server, I get dozens of (swapd)s in top this is the only thing that really jumps out.

I can't post images but ( imgur.com / ZArSq.png ) is a screenshot of top.

I have tried a lot of stuff so far, I am willing to try anything that I can.

Answer 1

Where are you seeing this garbage data? In a browser? Are you downloading the content using something else? via a proxy? What webserver are you using? what client? what's in between? Have you tried capturing and decoding the stream using a wire tap? How the is the content produced? Is it a file accessed directly from the local filesystem by Apache? Is it wrapped in a script?

There's nowhere near enough information here to identify whats happenning nor any indication of what you've done to investigate.

Have a google for Eric S Raymond/s Howto Ask Questions doc.

C.