best way for HTTP requests logging with TC 3.2

[laurent marot - alliacom]

hi,

i'm trying to find the best way for writting a kind of like Apache http requests log 
files using standalone tomcat 3.2.4

should i :

- upgrade to TC 4 ?
- use Apache and a connector so my logs will be added to Apache's logsfile ?
- add code in each servlet to write request in file ?
- use an existing product who does the work ?

thanks

Platform : TC 3.2.2 standalone on Red Hat 7.1 server

Apache Tomcat Web Root Path Disclosure Vulnerability

[laurent marot - alliacom]

is there  a way to solve this problem :

A vulnerability has been reported for Apache Tomcat 4.0.3 on a Microsoft
Windows platform. Reportedly, it is possible for a remote attacker to make
requests that will result in Apache Tomcat returning an error page
containing information that includes the absolute path to the server's web
root.

For example, submitting a request for LPT9 to Tomcat will result in the
following error message: "java.io.FileNotFoundException: C:\Program
Files\Apache Tomcat 4.0\webapps\ROOT\lpt9 (The system cannot find the file
specified)"

Re: NIGHTMARE

[laurent marot - alliacom]

and my grand mother did it too !


  - Original Message - 
  From: Martin Mauri 
  To: Tomcat Users List 
  Sent: Monday, April 08, 2002 4:48 PM
  Subject: Re: NIGHTMARE


  Do what you want. I feel sorry about you. You're losing the best and calling
  Tomcat a "crap" tells you're a loser.
  I've installed Tomcat in 5 minutes.

  - Original Message -
  From: "Árni Arent" <[EMAIL PROTECTED]>
  To: <[EMAIL PROTECTED]>
  Sent: Monday, April 08, 2002 10:22 AM
  Subject: NIGHTMARE


  > Your software, Tomcat, is a nightmare to install. I've spent 2 WHOLE days
  > trying to make it work without success.
  >
  > Endless configuration files, paths, etc. making this a impossible software
  > to use. I doubt I'm the only one who has complaint.
  >
  > I won't use this crap, I'm switching to PHP, took me 5 minutes to figure
  > that out.
  >
  >  || |||  
  >
  >Árni Arent Guðlaugsson
  >Forritari og Autonomy sérfræðingur
  >Íslandsvefir ehf.
  >Thorvaldsensstræti 4
  >101 Reykjavík / Iceland
  >--
  >Tel: +354 552 6300
  >Fax: +354 552 6302
  >E-mail: [EMAIL PROTECTED]
  >http://www.islandsvefir.is/
  >http://www.ha.is/
  >
  >Bættu ha.is á vefsíðuna þína:
  >http://www.ha.is/almennt/tenging.asp
  >
  > || |||  
  >
  >
  > --
  > To unsubscribe:   
  > For additional commands: 
  > Troubles with the list: 


  --
  To unsubscribe:   
  For additional commands: 
  Troubles with the list: