Re: Problem starting Tomcat 6.0.39 (64) service under Windows 7/64

2014-02-08 Thread Neven Cvetkovic
On Fri, Feb 7, 2014 at 11:59 PM, Jain, Shailesh shj...@suncor.com wrote: Hello Chris, Iam getting very high memory utilization issue in tomcat 7 , which is installed on Windows (Vmware) Let me know if oyu want logs , and let me know the ftp link where I can upload the logs. Regards,

Re: SSL with Form Fallback on Tomcat 7 or 8

2014-02-08 Thread Gary Briggs
On Fri, Feb 07, 2014 at 11:02:35AM +, Mark Thomas wrote: On 07/02/2014 06:32, Gary Briggs wrote: Evening, I've been reading this page: http://wiki.apache.org/tomcat/SSLWithFORMFallback I'm currently using Tomcat 7 on Linux. In short, Neither of the bits of code linked on that

Re: SSL with Form Fallback on Tomcat 7 or 8

2014-02-08 Thread Mark Thomas
On 08/02/2014 17:29, Gary Briggs wrote: On Fri, Feb 07, 2014 at 11:02:35AM +, Mark Thomas wrote: On 07/02/2014 06:32, Gary Briggs wrote: Evening, I've been reading this page: http://wiki.apache.org/tomcat/SSLWithFORMFallback I'm currently using Tomcat 7 on Linux. In short, Neither of

Re: SSL with Form Fallback on Tomcat 7 or 8

2014-02-08 Thread Gary Briggs
On Sat, Feb 08, 2014 at 06:43:42PM +, Mark Thomas wrote: On 08/02/2014 17:29, Gary Briggs wrote: On Fri, Feb 07, 2014 at 11:02:35AM +, Mark Thomas wrote: On 07/02/2014 06:32, Gary Briggs wrote: Evening, I've been reading this page:

Re: SSL with Form Fallback on Tomcat 7 or 8

2014-02-08 Thread Mark Thomas
On 08/02/2014 18:45, Gary Briggs wrote: On Sat, Feb 08, 2014 at 06:43:42PM +, Mark Thomas wrote: On 08/02/2014 17:29, Gary Briggs wrote: snip/ I'm trying to edit the wiki to add my new one, but apparently those pages are immutable? You need to be added to the list of contributors

Re: SSL with Form Fallback on Tomcat 7 or 8

2014-02-08 Thread Gary Briggs
On Sat, Feb 08, 2014 at 06:55:26PM +, Mark Thomas wrote: On 08/02/2014 18:45, Gary Briggs wrote: On Sat, Feb 08, 2014 at 06:43:42PM +, Mark Thomas wrote: On 08/02/2014 17:29, Gary Briggs wrote: snip / Done. Done [added page SSLWithFORMFallback7 and link]:

sudden increase in tomcat sessions..?

2014-02-08 Thread Kumar Muthuramalingam
Hi, I 'm using tomcat version 6 and 7. One day there was a sudden increase in number of sessions in both tomcats. And all the sessions had no username, same lastaccessed time, same created time and the inactive time was 00:00:00. It is not happening always but it happens some times on some day.

Re: sudden increase in tomcat sessions..?

2014-02-08 Thread David Kerber
On 2/8/2014 7:08 PM, Kumar Muthuramalingam wrote: Hi, I 'm using tomcat version 6 and 7. One day there was a sudden increase in number of sessions in both tomcats. And all the sessions had no username, same lastaccessed time, same created time and the inactive time was 00:00:00. It is not

Re: sudden increase in tomcat sessions..?

2014-02-08 Thread Kumar Muthuramalingam
Hi David, Thanks for your reply. How can I verify that it is a DOC attack? which log i should refer.please guide me. Thanks, Kumar. On Sat, Feb 8, 2014 at 7:42 PM, David Kerber dcker...@verizon.net wrote: On 2/8/2014 7:08 PM, Kumar Muthuramalingam wrote: Hi, I 'm using tomcat

RE: sudden increase in tomcat sessions..?

2014-02-08 Thread Martin Gainty
DOS (Denial of Service) Attack one type is endless ping if someone is running a endless loop of ping attacks on your TC server you can disable ICMP on TC server https://www.serverintellect.com/support/windowsserversecurity/disable-icmp-requests/ DOC attack usually results in TROJ_MDROPPER.*

Re: sudden increase in tomcat sessions..?

2014-02-08 Thread Kumar Muthuramalingam
Thanks for your reply. What happened actually was there was a sudden increase in invalid sessions as I said before and we manually deleted those sessions using the tomcat manager. And then it appeared to be normal. But then it occurred three times in last two weeks. It' s a production environment.