Hi,

> Are you fronting with a web server/reverse proxy? Those "-" requests
> looks suspiciously like the kinds of requests that Apache httpd makes
> to itself to verify that worker threads are still available for
> certain things.

No, there is no web server or proxy in front of Tomcat.

> I'm curious... why are the requests coming from "10.xxx"... isn't that
> within your own network? Shouldn't you KNOW what that stuff is?

It's somewhere in the customer's network. Not entirely sure what it
is, the sysadmin of that box will be back tomorrow, it is probably
some kind of security scan. When he's back we will be able to check if
the problem is indeed caused by the scanner. It's only a couple of
requests, so it shouldn't trigger a high CPU use (would be a DoS issue
in Tomcat/Java), but if it's reproducible it will at least allow us to
better pinpoint the problem. The problem hasn't resurfaced after a
switch to NIO2, so it seems NIO specific.

Kind regards,

Mike

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to