Re: SECURITY breach in Tomcat

2009-01-22 Thread Brian Clark
I suggest removing all of the bundled web apps (in the webapps folder), including root, manager and host-manager. Also, upgrade your JVM to the latest 1.5.x version, which I think is 1.5.15 or something like that. Finally, scan your app/system for vulnerabilities with something like these: ht

Re: SECURITY breach in Tomcat

2009-01-22 Thread Brian Clark
What version of Tomcat are you using? What version of the JVM? What version of Windows? Are you up to date on your Windows patches? From: Toby Kurien To: users@tomcat.apache.org Sent: Thursday, January 22, 2009 9:16:46 AM Subject: SECURITY breach in Tomcat

Re: Monitor Tomcat

2009-01-21 Thread Brian Clark
I use Sun's Visual VM. https://visualvm.dev.java.net/ Brian From: Zaki Akhmad To: Tomcat Users List Sent: Tuesday, January 20, 2009 10:02:51 PM Subject: Monitor Tomcat Hello, I am deploying my web application on Tomcat. How do I monitor the tomcat perform

Re: "maxKeepAliveRequests" attribute configuration

2009-01-18 Thread Brian Clark
Do you monitor your tomcat server(s) for memory and CPU use? I'd get some baseline measurements and then incrementally increase your maxKeepAliveRequests value until your problem goes away, all the while making sure you don't have memory or CPU issues. Brian Clark VP, IS Omeda

Re: SSL Accelerator - Front ending Tomcat

2009-01-07 Thread Brian Clark
From: Rainer Jung To: Tomcat Users List Sent: Tuesday, October 14, 2008 9:46:56 AM Subject: Re: SSL Accelerator - Front ending Tomcat Mike Koponick schrieb: > Hello Everyone, > > I have not been a frequent administrator of Tomcat, but it seems that > I am b

Re: Optimizing Tomcat with Http11NioProtocol?

2008-12-30 Thread Brian Clark
5 minutes to tell you where the real problem is will be worth it. Other techniques (access logs, jmeter, etc) should point you in the right direction but you'll need to do soem more work to figure out exactly where the bottleneck(s) is(are). Mark > > -nodje > > > Brian Cla

Re: Optimizing Tomcat with Http11NioProtocol?

2008-12-29 Thread Brian Clark
good to know it's possible to use that much memory! cheers Brian Clark-10 wrote: > > Try using jconsole.exe (it is part of the Sun JDK) to review memory and > thread usage of your JVM. That should help you narrow down where the issue > is. One key thing to look at with Jconsole i

Re: Hints on upgrading from 6.0.14 to 6.0.18 on production server

2008-12-29 Thread Brian Clark
The only thing we found when going from 6.0.16 to 6.0.18 was an issue with some of our JSP's. The fix is described by "jroller" here: http://www.searchfull.net/1289260.html Since I had a real hard time getting to this website, I'll copy and paste the article here Tomcat 6.0.18 includes a f

Re: Optimizing Tomcat with Http11NioProtocol?

2008-12-29 Thread Brian Clark
Try using jconsole.exe (it is part of the Sun JDK) to review memory and thread usage of your JVM. That should help you narrow down where the issue is. One key thing to look at with Jconsole is the heap memory used figure. You are setting your -Xmx, but how much of it are you actually using? Heap

Re: SSL Accelerator - Front ending Tomcat

2008-10-13 Thread Brian Clark
I don't know if this will actually help Mike do what he wants to do. I don't think he needs to know about Tomcat SSL configuration. I think we do exactly what Mike wants to do...we have a network load balancer with SSL accelerator in front of all of our Tomcat instances. All of our incoming SSL

Re: jstack and Tomcat 6 on Windows

2008-09-22 Thread Brian Clark
Thanks again for all of our suggestions. The Eclipse Memory Analyzer Tool looks very interesting and helpful. It also calls out the JAVA_OPT -XX:+HeapDumpOnOutOfMemoryError to auto generate a heap dump for me. I was originally looking for a way to automatically generate a thread dump, but this

Re: jstack and Tomcat 6 on Windows

2008-09-19 Thread Brian Clark
Thanks everyone for their suggestions. Unfortunately, that doesn't help me with my particular issue. I have a memory leak in one of my apps, and when the system runs out of memory, it stops responding to new requests. I have a script that will detect this condition and automatically restart To

jstack and Tomcat 6 on Windows

2008-09-19 Thread Brian Clark
Hello, I run Tomcat 6.0.x as a service on Windows 2003, using Sun JDK 1.6. I was trying to use the jstack program, part of the JDK, to get a stack dump from Tomcat/Java on my server. However, I ran into a problem. First of all, Tomcat on Windows seems to "hide" the JVM instance. Java doesn't sh

Re: Non-Heap Memory always increasing during deployment for TC 5.5.26/Solaris/JVM 1.5.0_16

2008-09-16 Thread Brian Clark
I think you need to add one more line to your CATALINA_OPTS statement: -Dcom.sun.management.jmxremote=true If that does not help you, I'd try using port 6969 (the default) instead of . It should not matter, but I would at least give it a try as part of the troubleshooting process. You could

Re: Fw: Tomcat Patch Management

2008-09-11 Thread Brian Clark
"So, do you think Automatic windows patch management and manual tomcat patch management would ideal as patch releases from Tomcat is very rare?" Yes, that's the way we do it. We use WSUS for Windows patch management, and manually upgrade Tomcat as needed. This has not been an issue for us, as Tom

Re: Tomcat logging properties

2008-09-10 Thread Brian Clark
have a look here if you still need more info http://tomcat.apache.org/tomcat-6.0-doc/logging.html On Thu, Sep 11, 2008 at 2:10 AM, Brian Clark <[EMAIL PROTECTED]> wrote: > At the bottom of my Tomcat 6.0.16 logging.properties file, I have the

Tomcat logging properties

2008-09-10 Thread Brian Clark
At the bottom of my Tomcat 6.0.16 logging.properties file, I have the following entries: #org.apache.catalina.startup.ContextConfig.level = FINE #org.apache.catalina.startup.HostConfig.level = FINE #org.apache.catalina.session.ManagerBase.level = FINE #org.apache.catalina.core.AprLifecycleListener

Problems with running 64-bit Tomcat 6 as a Windows service

2008-09-03 Thread Brian Clark
Hello, I am trying to get Tomcat 6.0.18 to run on my Win2k3 x64 edition server. I basically did the same thing talked about here: http://markmail.org/message/kptleixb6duxgwhm but it didn't work for me. I didn't use the service.bat install though. I installed the service manually with the sc.exe

Re: Tomcat Native library for Windows

2008-09-02 Thread Brian Clark
day, September 2, 2008 7:19:32 PM Subject: RE: Tomcat Native library for Windows > From: Brian Clark [mailto:[EMAIL PROTECTED] > Subject: Re: Tomcat Native library for Windows > > Hmmm...on Windows, what is the difference between > java.library.path and the Windows environmental variabl

Re: Tomcat Native library for Windows

2008-09-02 Thread Brian Clark
t necessarily endorse content contained within this transmission. > Date: Tue, 2 Sep 2008 23:38:45 +0100 > From: [EMAIL PROTECTED] > To: users@tomcat.apache.org > Subject: Re: Tomcat Native library for Windows > > Brian Clark wrote: > > Hello, > > > > I am gett

Re: Tomcat Native library for Windows

2008-09-02 Thread Brian Clark
library for Windows Brian Clark wrote: > Hello, > > I am getting the following error when starting up Tomcat 6.0.16 on Windows > 2003: > > "Sep 2, 2008 4:18:13 PM org.apache.catalina.core.AprLifecycleListener init > INFO: The APR based Apache Tomcat > Native library which

Tomcat Native library for Windows

2008-09-02 Thread Brian Clark
t.apache.org/msg29111.html Any ideas on what is going on here? Brian Clark