It happened again--the cause was: the index.html I created 
*disappeared*!

It appears the person abusing our system has exploited the 
ACLs on /afs/hep.wisc.edu/cms/data/rootFiles.

Since /afs/hep/home/dasu/www/rootFiles was a symlink to the 
directory above, so I just removed it (the symlink.)  The
loadave and the server is okay now.

On a lark, I checked for "viagra" in the logs and,
alas, found that we served up various URLs of the form
http://www.hep.wisc.edu//dasu/rootFiles/*/viagra about 1500
times during the last 32 days.

I guess we're okay now, but we should be aware that it seems
there's someobody out there who understands AFS and is 
using loose ACLs to "own" us.

steve
--