RE: Invalid HTTP Header - attack?

2019-08-01 Thread Justiniano, Tony
Dale Sent: Thursday, August 1, 2019 4:37 PM To: Tomcat Users List Subject: Re: Invalid HTTP Header - attack? This e-mail is from an external source. Use caution when opening attachments or clicking on links. 9.0.16.0 - this is the version installed with apt-get tomcat9 on ubuntu 18.04 Thank you

Re: Invalid HTTP Header - attack?

2019-08-01 Thread John Dale
9.0.16.0 - this is the version installed with apt-get tomcat9 on ubuntu 18.04 Thank you for your feedback. John On 8/1/19, Konstantin Kolinko wrote: > чт, 1 авг. 2019 г. в 22:11, John Dale : >> >> Great feedback. Thanks. >> >> I am the network department. :) >> >> This is a public facing

Re: Invalid HTTP Header - attack?

2019-08-01 Thread Konstantin Kolinko
чт, 1 авг. 2019 г. в 22:11, John Dale : > > Great feedback. Thanks. > > I am the network department. :) > > This is a public facing service and shortly after I see this in the > log, I get an OOM exception and server shutdown. Twice now this > morning. > The exception text is a bit misleading.

Re: Invalid HTTP Header - attack?

2019-08-01 Thread John Dale
Great feedback. Thanks. I am the network department. :) This is a public facing service and shortly after I see this in the log, I get an OOM exception and server shutdown. Twice now this morning. Hmm .. :\ John On 8/1/19, Michael Osipov wrote: > Am 2019-08-01 um 20:36 schrieb Mark

Re: Invalid HTTP Header - attack?

2019-08-01 Thread Michael Osipov
Am 2019-08-01 um 20:36 schrieb Mark Thomas: On 01/08/2019 19:08, John Dale wrote: I'm getting this in my logs - is this an attack do you think? Unlikely to be an attack. Most likely a broken client. There is another scenario: Regular security scans on all corporate subnets from sec dept. I

Re: Invalid HTTP Header - attack?

2019-08-01 Thread Mark Thomas
On 01/08/2019 19:08, John Dale wrote: > I'm getting this in my logs - is this an attack do you think? Unlikely to be an attack. Most likely a broken client. > How > might I determine this? debug logging for org.apache.coyote.http11.Http11InputBuffer is going to log the request line and HTTP

Invalid HTTP Header - attack?

2019-08-01 Thread John Dale
I'm getting this in my logs - is this an attack do you think? How might I determine this? Could this be pushing bytes to the handler and causing a memory issue? Error parsing HTTP request header Aug 1 17:37:58 dom1 tomcat9[9793]: Note: further occurrences of HTTP request parsing errors will