David Wall wrote:
I hope all this 'bot' talk doesn't prevent a resolution to the bug
long-standing bug regarding sessions that never terminate, long after
I've been monitoring one of our public apps using Lambda Probe and we
don't seem to suffer from the problem, on tc5.5.17. We have our ses
id Wall <[EMAIL PROTECTED]>
To: Tomcat Users List
Sent: Friday, February 9, 2007 1:00:02 PM
Subject: Re: [OT]Re: Large number of active sessions
I hope all this 'bot' talk doesn't prevent a resolution to the bug
long-standing bug regarding sessions that never terminate, long a
I hope all this 'bot' talk doesn't prevent a resolution to the bug
long-standing bug regarding sessions that never terminate, long after
they should have expired. All of our web apps have a background thread
that periodically terminates sessions that haven't been accessed in 24
hours, even tho
-Rashmi
- Original Message
From: Pid <[EMAIL PROTECTED]>
To: Tomcat Users List
Sent: Friday, February 9, 2007 7:10:49 AM
Subject: Re: [OT]Re: Large number of active sessions
Rashmi Rubdi wrote:
I'm sorry that I didn't express myself in a clear manner. I was simply saying t
In the above cases index.jsp is using sessions, and so are almost all other JSP
pages on the web app.
So since bots are HTTP/1.1 capable that might explain why I don't see
jsessionid appended to the jsp pages in the access logs.
-Rashmi
- Original Message
From: Pid <[EMAI
p; URL encoding.
Whether the bot then sends the cookie back to maintain the session is a
different matter of course...
rgds,
p
-Regards
Rashmi
- Original Message
From: Pid <[EMAIL PROTECTED]>
To: Tomcat Users List
Sent: Thursday, February 8, 2007 8:46:22 AM
Subject: Re: [OT]Re: La
al Message
From: Pid <[EMAIL PROTECTED]>
To: Tomcat Users List
Sent: Thursday, February 8, 2007 8:46:22 AM
Subject: Re: [OT]Re: Large number of active sessions
Rashmi Rubdi wrote:
> I agree that many have experienced the jsessionid on URLs accessed by bots,
> perhaps it happens
Rashmi Rubdi wrote:
I agree that many have experienced the jsessionid on URLs accessed by bots,
perhaps it happens in a Struts environment or some other environment.
In certain set-ups (only JSPs, no servlets, no MVC - session is removed and
created freshly on each JSP page) the jsessionid doe
I agree that many have experienced the jsessionid on URLs accessed by bots,
perhaps it happens in a Struts environment or some other environment.
In certain set-ups (only JSPs, no servlets, no MVC - session is removed and
created freshly on each JSP page) the jsessionid doesn't appear on URLs
a
]
Sent: Tuesday, February 6, 2007 3:46:12 PM
Subject: Re: Large number of active sessions
1. Sure. But I have only 100 users.
2. Users: Google Analytics. Sessions: Tomcat manager
3. 5.5.17
4. Yes
Guess I have to go the long way of creating my own session listener then,
Had hoped there was an eas
I have the same problem. Java 1.5_08, Tomcat 5.5.20. Issue also happened
with JDK 1.4.2 and Tomcat 5.5.12
Our session timeout is set to 20 minutes and most of the time it works
fine. At any given moment we have around 2000 active sessions, and we get
around 10 that won't timeout every hour. W
Google Analytics is Javascript based, it won't show bot activity.
Some bots also use sessions.
- Original Message
From: Christer Nordvik <[EMAIL PROTECTED]>
To: Tomcat Users List ; [EMAIL PROTECTED]
Sent: Tuesday, February 6, 2007 3:46:12 PM
Subject: Re: Large number of acti
1. Sure. But I have only 100 users.
2. Users: Google Analytics. Sessions: Tomcat manager
3. 5.5.17
4. Yes
Guess I have to go the long way of creating my own session listener then,
Had hoped there was an easy solution for this. 13000 sessions must indicate
that something is very very wrong? I've n
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
David,
David Wall wrote:
> It seems that Tomcat 5.5.17 (and earlier) has had some sort of problem
> in timing out sessions.
I think it's still in 5.5.20, if this is the one you're talking about:
http://issues.apache.org/bugzilla/show_bug.cgi?id=37356
David Wall wrote:
It seems that Tomcat 5.5.17 (and earlier) has had some sort of problem
in timing out sessions. I'm not sure if it would clean itself up if the
person really came back and did another HTTP transaction or not, but
I've noted that Tomcat Manager will show sessions that are have
be able to block certain bots by IP address or User Agent string.
-Rashmi
- Original Message
From: David Wall <[EMAIL PROTECTED]>
To: Tomcat Users List
Sent: Tuesday, February 6, 2007 1:54:52 PM
Subject: Re: Large number of active sessions
It seems that Tomcat 5.5.17 (and earlie
It seems that Tomcat 5.5.17 (and earlier) has had some sort of problem
in timing out sessions. I'm not sure if it would clean itself up if the
person really came back and did another HTTP transaction or not, but
I've noted that Tomcat Manager will show sessions that are have been
idle much lon
1) Lower your session timeout.
2) How are you measuring/calculating statistics?
3) Which version of Tomcat?
4) Are you url encoding all of your links?
Christer Nordvik wrote:
Hi!
I've got a website with pretty low traffic (200 visitors a day). Lately
it's
been very slow and when I look in Tom
Hi!
I've got a website with pretty low traffic (200 visitors a day). Lately it's
been very slow and when I look in Tomcat's manager it says that it has a lot
of sessions.
Once I had 13000(!) active sessions. The session timeout is set to 30
minutes.
How can this happen? Isn't this something that
19 matches
Mail list logo
