Re: SECURITY breach in Tomcat

2009-01-22 Thread Brian Clark
What version of Tomcat are you using? What version of the JVM? What version of Windows? Are you up to date on your Windows patches? From: Toby Kurien tobyis7...@gmail.com To: users@tomcat.apache.org Sent: Thursday, January 22, 2009 9:16:46 AM Subject:

Re: SECURITY breach in Tomcat

2009-01-22 Thread Brian Clark
I suggest removing all of the bundled web apps (in the webapps folder), including root, manager and host-manager. Also, upgrade your JVM to the latest 1.5.x version, which I think is 1.5.15 or something like that. Finally, scan your app/system for vulnerabilities with something like these:

Re: Monitor Tomcat

2009-01-21 Thread Brian Clark
I use Sun's Visual VM. https://visualvm.dev.java.net/ Brian From: Zaki Akhmad zakiakh...@gmail.com To: Tomcat Users List users@tomcat.apache.org Sent: Tuesday, January 20, 2009 10:02:51 PM Subject: Monitor Tomcat Hello, I am deploying my web application on

Re: maxKeepAliveRequests attribute configuration

2009-01-18 Thread Brian Clark
Do you monitor your tomcat server(s) for memory and CPU use? I'd get some baseline measurements and then incrementally increase your maxKeepAliveRequests value until your problem goes away, all the while making sure you don't have memory or CPU issues. Brian Clark VP, IS Omeda On Jan 18

Re: SSL Accelerator - Front ending Tomcat

2009-01-07 Thread Brian Clark
From: Rainer Jung rainer.j...@kippdata.de To: Tomcat Users List users@tomcat.apache.org Sent: Tuesday, October 14, 2008 9:46:56 AM Subject: Re: SSL Accelerator - Front ending Tomcat Mike Koponick schrieb: Hello Everyone, I have not been a frequent

Re: Optimizing Tomcat with Http11NioProtocol?

2008-12-30 Thread Brian Clark
minutes to tell you where the real problem is will be worth it. Other techniques (access logs, jmeter, etc) should point you in the right direction but you'll need to do soem more work to figure out exactly where the bottleneck(s) is(are). Mark -nodje Brian Clark-10 wrote: Glad to be of help

Re: Optimizing Tomcat with Http11NioProtocol?

2008-12-29 Thread Brian Clark
Try using jconsole.exe (it is part of the Sun JDK) to review memory and thread usage of your JVM. That should help you narrow down where the issue is. One key thing to look at with Jconsole is the heap memory used figure. You are setting your -Xmx, but how much of it are you actually using?

Re: Hints on upgrading from 6.0.14 to 6.0.18 on production server

2008-12-29 Thread Brian Clark
The only thing we found when going from 6.0.16 to 6.0.18 was an issue with some of our JSP's. The fix is described by jroller here: http://www.searchfull.net/1289260.html Since I had a real hard time getting to this website, I'll copy and paste the article here Tomcat 6.0.18 includes a

Re: Optimizing Tomcat with Http11NioProtocol?

2008-12-29 Thread Brian Clark
that much memory! cheers Brian Clark-10 wrote: Try using jconsole.exe (it is part of the Sun JDK) to review memory and thread usage of your JVM. That should help you narrow down where the issue is. One key thing to look at with Jconsole is the heap memory used figure. You are setting your -Xmx

Re: SSL Accelerator - Front ending Tomcat

2008-10-13 Thread Brian Clark
I don't know if this will actually help Mike do what he wants to do. I don't think he needs to know about Tomcat SSL configuration. I think we do exactly what Mike wants to do...we have a network load balancer with SSL accelerator in front of all of our Tomcat instances. All of our incoming

Re: jstack and Tomcat 6 on Windows

2008-09-22 Thread Brian Clark
Thanks again for all of our suggestions. The Eclipse Memory Analyzer Tool looks very interesting and helpful. It also calls out the JAVA_OPT -XX:+HeapDumpOnOutOfMemoryError to auto generate a heap dump for me. I was originally looking for a way to automatically generate a thread dump, but this

jstack and Tomcat 6 on Windows

2008-09-19 Thread Brian Clark
Hello, I run Tomcat 6.0.x as a service on Windows 2003, using Sun JDK 1.6. I was trying to use the jstack program, part of the JDK, to get a stack dump from Tomcat/Java on my server. However, I ran into a problem. First of all, Tomcat on Windows seems to hide the JVM instance. Java doesn't

Re: jstack and Tomcat 6 on Windows

2008-09-19 Thread Brian Clark
Thanks everyone for their suggestions. Unfortunately, that doesn't help me with my particular issue. I have a memory leak in one of my apps, and when the system runs out of memory, it stops responding to new requests. I have a script that will detect this condition and automatically restart

Re: Non-Heap Memory always increasing during deployment for TC 5.5.26/Solaris/JVM 1.5.0_16

2008-09-16 Thread Brian Clark
I think you need to add one more line to your CATALINA_OPTS statement: -Dcom.sun.management.jmxremote=true If that does not help you, I'd try using port 6969 (the default) instead of . It should not matter, but I would at least give it a try as part of the troubleshooting process. You could

Re: Fw: Tomcat Patch Management

2008-09-11 Thread Brian Clark
So, do you think Automatic windows patch management and manual tomcat patch management would ideal as patch releases from Tomcat is very rare? Yes, that's the way we do it. We use WSUS for Windows patch management, and manually upgrade Tomcat as needed. This has not been an issue for us, as

Tomcat logging properties

2008-09-10 Thread Brian Clark
At the bottom of my Tomcat 6.0.16 logging.properties file, I have the following entries: #org.apache.catalina.startup.ContextConfig.level = FINE #org.apache.catalina.startup.HostConfig.level = FINE #org.apache.catalina.session.ManagerBase.level = FINE

Re: Tomcat logging properties

2008-09-10 Thread Brian Clark
properties have a look here if you still need more info http://tomcat.apache.org/tomcat-6.0-doc/logging.html On Thu, Sep 11, 2008 at 2:10 AM, Brian Clark [EMAIL PROTECTED] wrote: At the bottom of my Tomcat 6.0.16 logging.properties file, I have the following entries

Problems with running 64-bit Tomcat 6 as a Windows service

2008-09-03 Thread Brian Clark
Hello, I am trying to get Tomcat 6.0.18 to run on my Win2k3 x64 edition server. I basically did the same thing talked about here: http://markmail.org/message/kptleixb6duxgwhm but it didn't work for me. I didn't use the service.bat install though. I installed the service manually with the sc.exe

Tomcat Native library for Windows

2008-09-02 Thread Brian Clark
is going on here? Brian Clark

Re: Tomcat Native library for Windows

2008-09-02 Thread Brian Clark
Native library for Windows Brian Clark wrote: Hello, I am getting the following error when starting up Tomcat 6.0.16 on Windows 2003: Sep 2, 2008 4:18:13 PM org.apache.catalina.core.AprLifecycleListener init INFO: The APR based Apache Tomcat Native library which allows optimal performance

Re: Tomcat Native library for Windows

2008-09-02 Thread Brian Clark
not necessarily endorse content contained within this transmission. Date: Tue, 2 Sep 2008 23:38:45 +0100 From: [EMAIL PROTECTED] To: users@tomcat.apache.org Subject: Re: Tomcat Native library for Windows Brian Clark wrote: Hello, I am getting the following error when starting up Tomcat

Re: Tomcat Native library for Windows

2008-09-02 Thread Brian Clark
: Tuesday, September 2, 2008 7:19:32 PM Subject: RE: Tomcat Native library for Windows From: Brian Clark [mailto:[EMAIL PROTECTED] Subject: Re: Tomcat Native library for Windows Hmmm...on Windows, what is the difference between java.library.path and the Windows environmental variable PATH? By default