RE: Problems with IIS and Tomcat
Code Red can cause the cpu to spin at 100%(even with the MS band-aids). It should have settled down for now, but check the script mappings in IIS and remove the .ida mapping. note that every time you install an IIS update from MS, it turns these back on because you really didn't mean to disable them. :) Charlie > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > Sent: Monday, September 03, 2001 6:16 AM > To: [EMAIL PROTECTED] > Subject: Problems with IIS and Tomcat > > > Hallo, > > i have problems with IIS (win NT 4.0) and tomcat. > Normaly it is working, but sometimes the IIS needs 100% of > the cpu and then > nothing works until I restart the IIS and the tomcat. > The IIS only redirect to the tomcat. > Is this a problem of the tomcat or of the IIS?? > > Frank > > > > > -- > GMX - Die Kommunikationsplattform im Internet. > http://www.gmx.net > > __ Do You Yahoo!? Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com
RE: Filepath quesiton
I'm not an expert with javascript, but doesn't the script tag need a language or type attribute so the browser knows what to do with this file? Also if you front-end Tomcat with Apache or IIS, you need to let the .js requests go through to Tomcat. Charlie > -Original Message- > From: Ramesh Yerneni [mailto:[EMAIL PROTECTED]] > Sent: Thursday, August 30, 2001 11:07 AM > To: [EMAIL PROTECTED] > Subject: Re:Filepath quesiton > > > In my jsp file tried to replace > > with > > and it doesn't work. The .js file and .jsp file are in same directory. > What intrigues me more is in the same jsp the following line works > <%@include file="footer.jsp" %> > For some reason I can't get .js files to work without giving > full path where > as included jsp are loaded properly wihtout full path. > Anybody knows why? > > > > _ > Get your FREE download of MSN Explorer at > http://explorer.msn.com/intl.asp > __ Do You Yahoo!? Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com
RE: Strange Number format exception
I have received this a few times and I thought it was related to the Code Red virus as the only time I received them was right before Code Red abused my IIS. I also thought that it may be an attempt to send a malformed header request with a invalid content length for an .htr file to IIS which is one of the many IIS exploits. I tried using Randy's RequestLogger to log these requests to see what the request was before tomcat tried to process it, but they stopped before I enabled it. what I did notice is that viewing stderr.log in notepad showed a space following the 3569. And when I was nosing around the tomcat source(3.2.1), it looked like it was the content length that was invalid, based upon the stack trace and the error message. Charlie > -Original Message- > From: Brandon Cruz [mailto:[EMAIL PROTECTED]] > Sent: Monday, August 27, 2001 5:34 PM > To: [EMAIL PROTECTED] > Subject: RE: Strange Number format exception > > > >I believe, from Brandon's post, that he understands the concept of a > >NumberFormatException. He real question is why it is > occurring and as > >you can see in his stack trace: > > > 2001-08-27 02:04:14 - ContextManager: Error reading > request, ignored - > > java.lang.NumberFormatException: 3379 > > > >the String which is trying to be interpreted seems to be > 3379 which is > >a perfectly valid Number(providing there are no "invisible" > whitespace > >characters after the 9. > > >I would pose that this is a bug and would suggest searching > the developer > >list to see if anyone has mentioned this one. > > >Also, check all your config/xml files and make sure there is > no whitespace > >where there shouldn't be. A good idea would be to search for a file > >containing > >the string 3379. > > >Good Luck. > > Thank you! You are correct, I do understand what the exception is > conceptually, but I can't find out what is causing it. It > must be a bug > because I have seen other people with this post and it is > always the same > number. There is not any string "3379" in my files, extra > whitespace is > always a possiblity. Since it does not seem to do much more > than put a > bunch of extra garbage in the logs, I guess I'll ignore it > and try to get > more important things done first. If anyone else is familiar > with this > problem or the solution, please send me an email. I would > really appreciate > it! > > >--- > >Michael Wentzel > >Software Developer > >Software As We Think - http://www.aswethink.com > > > Brandon > > __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/
RE: New to servlets2: Parameter initialisation in web.xml
I thought you only need super.init(config) if you
override init(ServletConfig config), not if you just
have init()
Charlie
> -Original Message-
> From: Rob S. [mailto:[EMAIL PROTECTED]]
> Sent: Monday, August 20, 2001 10:38 AM
> To: [EMAIL PROTECTED]
> Subject: Re: New to servlets2: Parameter
initialisation in web.xml
>
>
> > public void init() throws ServletException
> > {
>
> Don't you have to do a "super.init()" here? I
remember this
> being a common problem...
>
> - r
>
__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/
RE: ABSOLUTELY WORLDS NO. 1 ..MEGA !
I don't know if this is possible or not, but could you allow messages with 'Tomcat', 'context','mod_jk' etc., in the subject and then moderate only the messages without those keywords. Of course this guy can post to the list and I still can't from my subscribed account(outlook's multipart/alt 'feature'). I guess they haven't fixed our exchange server yet :( Charlie > -Original Message- > From: Pier P. Fumagalli [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, August 14, 2001 5:48 PM > To: [EMAIL PROTECTED] > Subject: Re: ABSOLUTELY WORLDS NO. 1 ..MEGA ! > > > ENTERTAINMENT at [EMAIL PROTECTED] wrote: > > > > [...] > > Awww... I'm sorry guys... I'll have to enable moderation > (once one gets in, > we'll be flooded)... Sorry... :( :( :( > > > Pier > __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/
RE: Virtual Hosts on IIS & Tomcat
what I have done is created mulitple virtual hosts on IIS, set up the uriworkermap.properties to send the superset of requested url's to tomcat, and then also set up tomcat with virtual hosts to determine the context and validity of requests coming through for each virtual host. This allows me to have a /servlet directory in each with the directory being isolated to each context. of course if your superset of urls overlaps(/examples for domain1.com handled by tomcat and /examples of doamin2 handled by iis) then you will have problems hope this helps Charlie > -Original Message- > From: Knaggs, George R [mailto:[EMAIL PROTECTED]] > Sent: Friday, August 03, 2001 8:19 PM > To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]' > Subject: Virtual Hosts on IIS & Tomcat > > > Mr Shachor / Tomcat-User, > > I hope you don't mind this email but I've been unable to find any > information on how to configure IIS with Tomcat using a > Virtual Host where > the context path / URI is the root (http://one.domain.com/ and > http://two.domain.com/). I have more than one virtual host > on this server > and the uriworkermap.properties doesn't mention anything > about configuring > more than one host using the same uri /servlet/*. The > tomcat-iis-howto > discusses a similar setup but the contexts have different > URIs (/examples/* > and /webpages/*). > > I've also had trouble installing the isapi filter for an > additional web site > using the IIS management console. It doesn't seem to be able load the > filter a second time. Is there anything that has to be configured > differently for installing the filter on a second web-site on > the same web > server. > > Can you please tell me if this is possible and if there is > any documentation > on how to set this up. I've configured this many times with > Apache but I'm > locked into using IIS4.0 inorder to use a different ISAPI filter that > provides single-signon features used at my company. > > Any help you can provide would be greatly appreciated. > > Thanks in advance, > George Knaggs > __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/
RE: CPU going to 100%
are you sure tomcat is taking 100% of the cpu and not IIS(inetinfo). I'm assuming you have IIS since you have a c:\inetpub directory. the Code Red worm can have this effect on IIS. Charlie > -Original Message- > From: Joe Clem [mailto:[EMAIL PROTECTED]] > Sent: Friday, August 03, 2001 3:19 PM > To: [EMAIL PROTECTED] > Subject: Re: CPU going to 100% > > > > Perhaps I misunderstood about a properly configured > server.xml file with a root > context. > > Here is what I put in my server.xml to get what I thought was > a root context. > >docBase="c:\inetpub\wwwroot > crossContext="false" > debug="0" > reloadable="true" > > > I still get 100% cpu usage. > > Hopefully I just misunderstood and someone can clarify. > > Thanks. > > Joe > > Andrew Robson wrote: > > > Hi, > > Following is taken from the readme for 3.2 and is probably > > what the person was referring to > > > > "6.11 Misconfiguration Can Cause CPU-Bound Loop > > > > If you misconfigure Tomcat 3.2 in a way that there is no > valid context to > > handle a request (such as removing the root context and > then attempting a > > request that should be handled by that context), Tomcat > will enter a CPU-bound > > loop instead of responding with a 404 error. > > > > Workaround: kill the offending Tomcat process and correct > your server.xml > > file such that there is a properly configured root context." > > > > Haven't checked whether this is still an issue for 3.2.3 > but at least you > > know now where this advice is coming from even if it > doesn't help ;-) > > > > andrew > > > > On Fri, 03 Aug 2001, you wrote: > > > I know there have been some discussion a few weeks ago. > That is when I > > > was just getting started with tomcat. A person refered > to the a section > > > in the readme file 6.11. My readme file 6.11 deals with > SSL and APJ12? > > > > > > My problem is that 100% of my cpu is taken up after > tomcat has been > > > running for a while. > > > > > > tomcat v3.2.3 > > > iis > > > nt4 > > > > > > If the answer should be in the documentation please point > me in the > > > right direction, but it is not in the readme file under 6.11 > > > > > > Thanks. > > > > > > Joe > > -- > __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/
Fwd: FW: Code Red Worm virus
I had to send this from my alternate email as my other email is outlook and when you tell outlook 'plain text' it says 'oh, he meant multipart-alternative(containing plain text)' If anyone can tell me how to make outlook treat plain text as text/plain, I would appreciate it. This is the error that I received(note there is a 'text/plain' at the end: Hi. This is the qmail-send program at apache.org. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. <[EMAIL PROTECTED]>: ezmlm-reject: fatal: Sorry, I don't accept messages of MIME Content-Type 'multipart/alternative' (#5.2.3) --- Below this line is a copy of the message. Return-Path: <[EMAIL PROTECTED]> Received: (qmail 62449 invoked from network); 3 Aug 2001 11:44:51 - Received: from crusher.cincom.com (198.8.67.11) by h31.sny.collab.net with SMTP; 3 Aug 2001 11:44:51 - Received: by imail.cincom.com with Internet Mail Service (5.5.2650.21) id <36YCJ7Z7>; Fri, 3 Aug 2001 07:50:06 -0400 Message-ID: <[EMAIL PROTECTED]> From: "Cox, Charlie" <[EMAIL PROTECTED]> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> Subject: FW: Code Red Worm virus Date: Fri, 3 Aug 2001 07:44:23 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: multipart/alternative; boundary="_=_NextPart_001_01C11C11.A4057F50" X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --_=_NextPart_001_01C11C11.A4057F50 Content-Type: text/plain; charset="iso-8859-1" actual text Charlie __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/
FW: Code Red Worm virus
I thought I had the latest patch on it(latest critical update as of Tuesday),but it still sent my inetinfo spinning. We also had to remove the script mappings(.ida, etc). Note the service pack put these back for us when we installed the latest(w2k sp2). I thought service packs were to close holes, not reopen them? That's right, I may have accidentally clicked on each one, delete and then 'yes' 3 times to remove all of them :) I didn't expect that it would cause a problem for me as I have a uriworkermap.properties setting of: /* = ajp12 Note that *somehow* IIS still took it upon itself to process this request. This is still a mystery to me. It should have gone to tomcat and IIS should have ignored it. Maybe script mappings take precedence over ISAPI filters in IIS? I only found out what it was by turning off IIS (not using it for anything else at the moment) and making tomcat the port 80 owner. (I must admit its nice to be able to do this) I also installed Randy's requestLogger(thank you randy) to log requests before tomcat tried to process it. That is when I saw the http request posted below. > -Original Message- > From: Randy Layman [mailto:[EMAIL PROTECTED]] > Sent: Thursday, August 02, 2001 12:04 PM > To: [EMAIL PROTECTED] > Subject: RE: Code Red Worm virus > > > > The message is the virus checking if you are a vulnerable host. > Only IIS will respond to the default.ida request. This > indicates that you > have been scanned, not infected. If you don't run IIS then > you don't have a > problem. If you run IIS and have installed the patches from > Microsoft then > you shouldn't have a problem. > > Randy > > > -Original Message- > > From: Brandon Cruz [mailto:[EMAIL PROTECTED]] > > Sent: Thursday, August 02, 2001 12:09 PM > > To: [EMAIL PROTECTED] > > Subject: RE: Code Red Worm virus > > > > > > We are using tomcat-apache and have also seen this message. > > I don't know > > what causes that either. I saw it about a month ago. > > > > Brandon Cruz > > > > > > -Original Message- > > From: G.Nagarajan [mailto:[EMAIL PROTECTED]] > > Sent: Thursday, August 02, 2001 10:57 AM > > To: [EMAIL PROTECTED] > > Subject: RE: Code Red Worm virus > > > > > > I think it attacks only IIS web servers. > > > > -Original Message- > > From: David Domenico [mailto:[EMAIL PROTECTED]] > > Sent: Thursday, August 02, 2001 5:30 PM > > To: [EMAIL PROTECTED] > > Subject: Code Red Worm virus > > > > > > I am running Tomcat 3.2.1 standalone for development > > purposes, as a web > > server using port 80. Yesterday I noticed the message, see > > below, on my > > Tomcat console window. This is identified as the "Code Red" > > virus as noted > > in the http://www.cert.org/advisories/CA-2001-19.html. The > > advisory states > > that the system may not have been compromised, but I am still > > concerned. > > > > I notified our network administrator and he applied the > > neccessary patchs > > from MS. However I am not running IIS. Does anyone know of a > > problem with > > Tomcat and the code red virus? I will download the latest > > release build, > > Tomcat 3.2.3. and install it. > > > > Full GET > > > /default.ida?N > > NN > > NN > > > > NN > > NN > > > > NNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090% > > u6858%ucbd3%u7 > > 801% > > u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u%u0 > > 0=a HTTP/1.0 > > Content-type: text/xmlHOST:www.worm.com Accept: */* > > > > > > regards, > > > > David Domenico > > Software Engineer > > > > > > "We should take care not to make the intellect our god; it > > has, of course, > > powerful muscles, but no personality." - Albert Einstein > > > > > > > > > ** > > This email and any files transmitted with it are confidential and > > intended solely for the use of the individual or entity to whom they > > are addressed. If you have received this email in error > please notify > > [EMAIL PROTECTED] > > > > This footnote also confirms that this email message has been swept > > for the presence of computer viruses. > > > > > ** > > > > > > > __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/
