сб, 24 окт. 2020 г. в 03:08, Eric Robinson <eric.robin...@psmnv.com>: > > > - Answers to the additional questions would be nice but the access log > > %b value for a failed request is the key piece of information required > > at this point. > > > > Good news! I enabled that parameter a few days ago and we have already caught > some instances of the problem occurring. Here is the logging format... > > <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" > prefix="localhost_access." suffix=".log" pattern="%h %l %D %u > %t %{JSESSIONID}c %{cookie}i %r %s %b %S %q" />
I usually also have the following pattern in my access logs: [%{org.apache.catalina.parameter_parse_failed}r %{org.apache.catalina.parameter_parse_failed_reason}r] It captures whether a request.getParameter() call completed abnormally and why. That is unlikely your cause, but there may be some other request attributes that may be of interest, but nothing comes to mind at the moment. > Due to some sensitive content in the HTTP requests below, I have globally > replaced certain words and addresses with random-ish strings, but I don't > think I've done anything to impact the issue. > > Following is an example from Wednesday. > > This is a request being sent from the nginx proxy to the first of 2 upstream > servers, 10.51.14.46 > > 2020/10/21 15:51:22 [error] 39268#39268: *842342531 upstream prematurely > closed connection while reading response header from upstream, client: > 99.88.77.66, server: redacted.domain.com, request: "GET > /sandhut/jsp/catalog/xml/getWidgets.jsp?eDate=2020-10-21&statueId=64438&facilityId=0&DeptId=0&CompressXML=Yes&sessionDID=0&GzUserId=75064&gizusrlogtblid=322095&gizappprocessid=8568&rnd2=0.5650846×tamp=21102020155122.472656 > HTTP/1.1", upstream: > "http://10.51.14.46:3016/sandhut/jsp/catalog/xml/getWidgets.jsp?eDate=2020-10-21&statueId=64438&facilityId=0&DeptId=0&CompressXML=Yes&sessionDID=0&GzUserId=75064&gizusrlogtblid=322095&gizappprocessid=8568&rnd2=0.5650846×tamp=21102020155122.472656", > host: "redacted.domain.com" I wonder what "CompressXML=Yes" does. I also recommend to add the following system property to the configuration: org.apache.catalina.connector.RECYCLE_FACADES=true https://cwiki.apache.org/confluence/display/TOMCAT/Troubleshooting+and+Diagnostics#TroubleshootingandDiagnostics-TroubleshootingunexpectedResponsestateproblems > Drat, slight correction. I now recall that although we initially installed > 7.0.76 from the CentOS repo, the application vendor made us lower the version > to 7.0.72, and I DO NOT know where we got that. It is possible to compare the files with pristine version from ASF archive dist site, https://archive.apache.org/dist/tomcat/tomcat-7/ If it was installed as an RPM package, `rpm -qf` should be able to answer what installed package those files belong to. https://stackoverflow.com/questions/1133495/how-do-i-find-which-rpm-package-supplies-a-file-im-looking-for Best regards, Konstantin Kolinko --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org