Dear James, Dear others,
I just get notice of this long thread. Sorry, if already give this suggestion.
But James: If it's possible, you may use (J)VisualVM with the "VisualGC" Plugin
to get some live impressions of "what's going on" with the heaps. To my
experience this visual perceptions is
Dear all,
some time ago, I also need to pass JXM through a tunneled connection (using
STunnel). The Problem with JMX via RMI is that here is more than one connection
and involved in the handshake is an IP address that is different on both ends
of the tunnel. A solution was to use an
Dear Michael,
you may read the statistic values provided by the Connector (and others like
busy works, load, heap usage or even the request scoreboard) via JXM or even
(by help of the JMX Proxy Servlet) via HTTP. You may contact me if you need
more advice.
greetings
Guido
>-Original
Dear Joan,
by use of the common scripts, the file catalina.out will contain the console
output (stdout/tderr) of the *JVM* process and -- if not configured in another
way -- of the applications. Therefore, you have to deal with the features of
output formatting of current JVMs. Or -- as me
Hi,
that's a question that is not specific to Zabbix or Tomcat but to all kind of
cases that use *one* JVM to run more than one "Application". And that's also an
open point to me since nearly decades.
Some years ago I googled something that is called "Classmexer" (as a
subproject(?) of
>Some years ago I googled something that is called "Classmexer" (as a
>subproject(?) of something that is called "Javamex"
>
> https://www.javamex.com/classmexer/
>
I just noticed, that I also have bookmarked an post called "Instrumentation
Memory Counter"
>From: Daniel Castilla | thin(k)design [mailto:d...@thin-k-design.com]
>Sent: Thursday, March 14, 2019 12:37 PM
>To: Jäkel, Guido ; users@tomcat.apache.org
>Subject: Re: Crash in http connector random once a day
>
>Dear Guido,
>
>thanks for the reply. The requests are reach
Dear Daniel,
a request is logged in the access log after it has finished. (In addition, on
Tomcat the log is flushed with some delay, but that's not the problem here).
But if the request is stall while processing, there's no hint in the access
log. Therefore: Is there an application log that
>-Original Message-
>From: André Warnier (tomcat) [mailto:a...@ice-sa.com]
>Sent: Wednesday, March 13, 2019 12:11 PM
>To: users@tomcat.apache.org
>Subject: Re: How to add an header field to all requests unconditionally
>
>The OP wants to insert a *Request* header, not a Response header.
Dear Thomas,
you may include a filter servlet into the application to modify the response
header. A quick search offers e.g. https://gist.github.com/danlangford/3669475
, which states to implement a generic, configurable Response Header Filter.
You may compile this servlet independent from an
t;
>On Tue, 12 Mar. 2019, 9:45 pm Jäkel, Guido, wrote:
>
>Correct me if I'm wrong. The original reason of this discussion if the file
>extension does not end with war right? I don't see from test above that the
>links do not ends with war. Or is it because of trailing dot at the
>-Original Message-
>From: Mark Thomas [mailto:ma...@apache.org]
>Sent: Tuesday, March 12, 2019 12:51 AM
>To: users@tomcat.apache.org
>Subject: Re: Followup2: Changed behaviour of Tomcat
>Deployment/Context/Lifecycle Manager concerning symbolic links
>Looking at the code in
>-Original Message-
>From: Rainer Jung [mailto:rainer.j...@kippdata.de]
>Sent: Monday, March 11, 2019 9:03 AM
>To: Tomcat Users List ; Michael Osipov
>
>Subject: Re: Followup2: Changed behaviour of Tomcat
>Deployment/Context/Lifecycle Manager concerning symbolic links
>
>Am 11.03.2019 um
the motivation to "fully expand" the path here at Java level instead of
delegating this to the underlying OS?
greetings
Guido
>-Original Message-
>From: Jäkel, Guido [mailto:g.jae...@dnb.de]
>Sent: Friday, March 08, 2019 11:39 AM
>To: 'Tomcat Users List'
>S
My investigations so far: This is thrown by
java/org/apache/catalina/webresources/StandardRoot.java
protected WebResourceSet createMainResourceSet() {
String docBase = context.getDocBase();
WebResourceSet mainResourceSet;
if (docBase == null) {
Dear Mark Thomas, other developers and list members,
caused by the requirement of an external software product, I currently have to
upgrade a Tomcat-8.5 installation from Tomcat-8.5.23 to >=8.5.32 and therefore
I concretely choose 8.5.38. As I expect from a minor update, in the first
moment
>On 05/02/2019 08:23, Johan Compagner wrote:
>> problem is that our customers are doing this.
>> also they can have 1 tomcat with a few webapps that they want to map under
>> different domains
>>
>> so that would mean for them starting 3 different tomcats under 3 different
>> ports and configure
Dear Mallory and Mark,
then I'm the one of the rare who use an "unusual" setups for more than 10
years :) . On a staged farm of about 3*10 Tomcat's we run a whole bunch of
"webapps"; most of them in at least two instances for failover.
But I never configured more than one Service and one
>Does it really ? If some tomcat code is at that time processing a client POST
>request,
>which potentially modifies data on the server (or a back-end database), is
>ditto tomcat
>code "informed" of the JVM shutdown, and does it have time to interrupt the
>processing in
>some
Dear Frank,
I don't agree that this is "better". It will trigger the same things in the
backend in the end. And obviously don't need the Tomcat Connector to be
available.
This might be important in situation with some malfunctions caused by near-OOM
or out-of-request-workers (caused by long
Dear Frank,
I guess you have configured autodeployment of the WARs. And it seems to me that
you want to use a tree in a filesystem to place your deployments. Given that,
you may use an arbitrary way to place the WARs to that location, because it's
not the Tomcat Manager application that
Dear Giles,
what aspects do you use in you myapplication#foo.xml ? You may symlink this
files from an application-specific master template, e.g. myapplication.xml
greeatings
Guido
>-Original Message-
>From: Gilles SCHLIENGER [mailto:gilles.schlien...@cncc.fr]
>Sent: Thursday,
>Has anyone ever attacked one of your web applications? There are some
>fun ways to make an application use a huge amount of memory. Just
>because the applications themselves are behaving doesn't mean that all
>the users are behaving.
>
>For example, do you have a max POST size set for your
>-Original Message-
>From: Torsten Krah [mailto:krah...@gmail.com]
>Sent: Tuesday, October 30, 2018 2:55 PM
>To: users@tomcat.apache.org
>Subject: Re: Number of Web Applications in one Tomcat
>
>Am Dienstag, den 30.10.2018, 14:39 +0100 schrieb Ahmed, Tarek:
>> "With Tomcat 7.0.23+ you can
Dear Igor and others,
in this context maybe the attached Java program together with this script is
useful for you ...
#!/bin/bash
if [ -z "$1" ]; then
cat >&2 <<-EOT
syntax : $0 [-d] [-a]
purpose: check ssl certificate path. Use [#]
>Just to make it clear, when I mentioned Java8u91 as an example I meant for
>the time when lets say Java8u81 was latest at that moment. In that case
>when using the built in JVM store you would encounter failed connections to
>servers with G2 signed certificates. Then as you said you would need to
Dear Igor,
>> 3. In case JAVA_HOME/lib/security/cacerts is my trust store (the default) I
>> would
>> expect Java to use the system store(s) too in case a certificate can not be
>> validated
>> simply because a CA is missing in the Java store. Example, DigiCert Global
>> Root G2 CA is missing
Dear Christopher,
my 5ct on that: We're using Solr for years like (and together with) all other
Webapps on Tomcat (and since some month on Wildfly) in a "classic" (non-cloud)
setup without any the need for special tweaks.
There is no official support for an webapp artifact since some Versions,
Dear Dave,
I walk through that years before, too.
Yes - you can't let write different Log4J Appenders to the same file or you get
this garbage.
Yes - you have property resolving here, but there are no properties you need.
We did a solution using an additional servlet called at application
Dear Loai,
Your client can't very (don't trust) the certificate (chain) of the target.
Either target's certificate is not an "official" one (e.g. self signed) or your
clients JVM certificate trust chain is not up to date.
I you like I may send you a small java commandline tool to check the
Dear Louis,
I would recommend to use a tool like JVisualVM (with Plugins*) to take a look
on this things while it's still running or have blocked. You may live watch
things like running threads or the Java heap occupation or investigate JVM,
Java and Tomcat parameters (and even run some
Dear Bill,
usually the Tomcat is configured in such a way that it watches the file
.../WEB-INF/web.xml of your application an reload the application then. If you
use autodeploy of a WAR, it's the same with the archive file.
Said that, may you please try to reload your application by just
Dear Tim,
maybe you can do an "independent" check using the JGroups lib stand-alone,
which offers two sets of a cluster demo. This may help to narrow down the issue
to the Tomcat setup or the "other" (OS or network configuration) areas.
Please refer to
Dear Lance
I don't know the motivation for your usecase. But note that the access log is
written after handling the complete request (therefore its able to log the
number of bytes send) and, because it's typical buffered, with a delay, too.
This means, that a request is listed there only in
Dear Leon,
I suggest to use the Tomcat Manager Application to investigate the session data:
* Use the Session Display (/manager/html/sessions?path=/foo) to take a look on
the different Timers (Creation Time, Last Accessed Time, Used Time, Inactive
Timemm,TTL) or even the session data
* Use
Dear Chuck,
>It's a hierarchy for the URLs, but not from a webapp location, construction,
>or execution perspective - /foo/bar is completely independent of /foo, not
>inside or a subset of it.
Reading that I understand what you have pointed out and of course fully agree
to it :)
Greetings
Dear Chales (and James)
why do you call it not really a hierachy? If you name the deployments e.g.
ROOT.war
foo.war
foo#bar.war
then the "expected" will happen: The longest context path will match to the
corresponding container:
* all /foo/bar{,/.*} will be served by
Dear Will,
I agree to Your approach. Said that, I also don't have any experience with the
concrete question, but from my Tomcat and Java experience, I would say that --
from a quick look -- the docs
Dear Sergey,
does this actually happen on a restart situation (with less than about 5min
pausing time)? Then maybe you have a dangling connection (close/time waiting)
on the TCP stack from the shutdown of a client connection (or the reverse
proxy). Please check if any is still open after
:07 PM
>To: Tomcat Users List
>Subject: Re: mod_proxy_http and "Expect: 100-continue" don't play well
>
>Am 2018-07-05 um 14:44 schrieb Jäkel, Guido:
>> Dear Michael,
>>
>> I wasn't faced by this yes, but what's about adding something like
>>
>
Dear Michael,
I wasn't faced by this yes, but what's about adding something like
RequestHeader unset Expect early
at the Apache httpd?
Greetings
Guido
>-Original Message-
>From: Michael Osipov [mailto:1983-01...@gmx.net]
>Sent: Thursday, July 05, 2018
Dear Michael,
i don't know if this issue also take happen with it, but may be using mod_jk
an option for you, also?
Greetings
Guido
>-Original Message-
>From: Michael Osipov [mailto:micha...@apache.org]
>Sent: Wednesday, July 04, 2018 9:26 PM
>To: users@tomcat.apache.org
>Subject:
Hi also,
to archive a full graceful shutdown, it's also save to just send a SIGTERM to
the JVM running the Tomcat. This will result in invoking exactly the same
mechanisms as the official top-level methods described by André without the
need to start an extra VM. The PID should be available
>> When I am trying to start my server I got following error as:
>> A fatal error has been detected by the Java Runtime Environment:
>> #
>> # SIGSEGV (0xb) at pc=0x7fd4f206e28a, pid=2412, tid=2412
>> #
>> # JRE version: (11.0+18) (build )
>> # Java VM: Java HotSpot(TM) 64-Bit Server VM
Dear Markus,
I'm not using Tomcat as backend here. And in addition, this will not help in
case of syntactically wrong URL patterns like '%252F' produced by mod_jk.
thank you, anyway -- maybe emphasizing this option is useful for others here
using Tomcat.
Guido
>-Original Message-
Hi all,
I have problems to pass (REST-) URLs containing escaped slashes ('%2F') in path
elements using the Apache httpd and mod_jk to the application server (in
fact not Tomcat, but Wildfy. But this is of no matter, here).
This kind of URL may be accepted by the httpd using the option
Dear Kiran,
there might be many other ways to compromise your server. But I wonder about
the application you run on you Tomcat and if you know about the wide-used
exploit in the Java JSF library "Primefaces" (see
https://www.exploit-db.com/exploits/43733/).
With greetings
Guido
Dear Srinath,
take a look at the Configuration Elements for
/Context/WatchedResource
Probably included at the main context.xml file or the one of your application
(, see https://tomcat.apache.org/tomcat-8.5-doc/config/context.html).
Greetings
Guido
>-Original Message-
Dear Adhavan,
I think this is quiet normal, because the browser clients "in front" will reuse
connections (using keep-alive at TCP level) but an in-between load balancer may
be not work or configured in this way and will use a new connection for each
request to the backend.
Then, you'll see a
>From: Hildegard Meier [mailto:daku8...@gmx.de]
>Sent: Thursday, September 01, 2016 10:14 AM
>To: users@tomcat.apache.org
>Subject: [SOLVED] mod_jk/1.2.37 Apache/2.4.7 (Ubuntu): AJP established
>connections pile up, connection_pool_timeout has
>no effect?
>
>Dear Guido,
>
>many thanks for Your
Dear Hildegard,
I wrote:
>Note that the AJP connection pool is used per child (and per tomcat backend
>definition if you're using more than one). You
>use connection_pool_minsize=1. Please also note, that the spare threads will
>no gather to the lowest possible number of
>childs. May this
Dear Hildegard,
you wrote, you're using the worker MPM. What are the pool sizes for child
workers and it's threads, i.e. the values for ServerLimit, ThreadsPerChild?
And what's the minimum thread pool size, i.e. MinSpareThreads?
Note that the AJP connection pool is used per child (and per
>-Original Message-
>From: Berneburg, Cris J. - US [mailto:cberneb...@caci.com]
>Sent: Thursday, July 21, 2016 6:18 PM
>To: Tomcat Users List
>Subject: RE: OutOfMemoryError: PermGen space
>
>Mark
>
>Thanks again for taking the time to assist with the OutOfMemoryError. BLUF,
>it looks
>-Original Message-
>From: Christopher Schultz [mailto:ch...@christopherschultz.net]
>Sent: Thursday, July 21, 2016 5:51 PM
>To: Tomcat Users List
>Subject: Re: No binary distribution for mod_jk?
>
>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA256
>
>Paul,
>
>On 7/20/16 12:12 PM, Paul
>In Visual VM, under File, Compare Memory Snapshots, it does not see the
>snapshots I generated. The snapshots appear to
>be extension *.apps, but the compare function looks for files with extension
>*.nps. I don't know how to get the compare
>function to work.
>
>Not sure where to go from
Hi Mark,
I just applied the patchset to the released source tarball of 8.0.36 and with
performing some cycling and deployments of applications I confirm the issue has
gone as expected.
with thanks again
Guido
>-Original Message-
>From: Guido Jäkel [mailto:g.jae...@dnb.de]
>Sent:
Hi Mark,
OK - as a newbie I read this from the stack trace: ...
>20160713-161427.340 ERROR [catalina-exec-64] [] [[/]] StandardWrapper.Throwable
>[...]
>at
> org.springframework.web.servlet.HttpServletBean.init(HttpServletBean.java:136)
>at
>> Dear André,
>>
>> thank you for quickly announcing your idea for an workaround. But you right
>> see the limits, and the more important
>impact of disabling the connectors is that it will also disable the traffic to
>all the other running applications (and we have a
>bunch of it on each of
>So it would appear that if the Connectors are disabled, the monitoring system
>is not able
>to reach Tomcat, and the problem does not occur then.
>
>So would it not be possible to create some little piece of software, which
>would
>temporarily "suspend" or "disable" the Connectors, while the
Dear Developers,
I have an elaborate issue migrating from Tomcat 6.0.41 to 8.0.36 (currently
using java 8.0.66 on Gentoo Linux, but this is not of importance I think): It
is related to the build-in manager application used as a jmxproxy. And to
initialization of the Spring framework during an
60 matches
Mail list logo
