I think you did not configure it properly for the regular expression. can you post a screen shot of that page?
Another solution is to use proxy context, instead of servlet context. But, you still need to get the regular expression right.
Which version did you upgrade from?
Are you using a VPS?
"find: /proc/irq/ ..." is normal, it does not hurt. the error regarding "read()" is abnormal, Is there anything in error log?
Can do "strace /usr/local/bin/lsws/lshttpd -d" and send us the output?
Yes, CSF need to be configured to parse error log file for detected IP attacking the server.
We will leave it for CSF developer or someone familiar with their regex setup.
Please download and do a manual upgrade to 4.0.12 again. the latest build is more aggressive in closing files, it may solve your problem.
Since the web server load is pretty high, I think it is better to have a dedicate DB server.
If DB server is not that busy, you can use it as secondary web...
It is likely a PHP/APC internal problem.
Try turning off APC, or try eAccelerator, or upgrade APC.
Also, if it does not solve the problem, do
"strace -tt -T -p <pid_of_lsphp5>" and "strace -tt -T -p <pid_of_lshttpd>"
and send us the output.
You have some mismatched PHP modules I think. those modules need to be build manually, it cannot be taken care of by cpeasyapache.
try run
/usr/local/lsws/fcgi-bin/lsphp-5.2.12 -i
from command line, see if you got any error.
For PHP 5.3, LiteSpeed SAPI is included, so, you do not need to run "buildconf" again.
Sometimes, at the end of configure output, it will say certain configuration is not known, like "--with-litespeed", but actually,it is successful if scroll back to check the SAPI used.
If buildconf failed for...
Please follow our trouble shooting guide in our wiki
http://www.litespeedtech.com/support/wiki/doku.php?id=litespeed_wiki:php:lsapi#trouble_shooting
If cannot solve it by following those steps, please post more detail information about the issue.