Session Hijacking with Apache Tomcat

[Jasbinder Singh Bali]

Hi,
I have to demonstrate Session Hijacking with Apache Tomcat to my advisor
when some precautionary measures are not taken.
I'm just wondering how can I do this.
After a satisfactory demonstration, I need to demonstrate the steps I
would take to get rid of this session hijacking.

In short, i need to demonstrate session hijacking in apache tomcat and
then show measures that would be
taken to get rid of it.

Any kind of help would be highly appreciated.

Thanks in advance,
~Jas