On 02/09/2010 23:20, Paul Szynol wrote: > > Hi, Chris, > > Thanks for your response. I do get those requests, but it seems they > always generate standard user agent information, which I then store in > the associated session object. These session objects don't have any > user agent information--that's why I am wondering if they're generated > internally.
Not all bots are well behaved. How many are being created? p > Best, > Paul > > > On 9/2/10 6:07 PM, Christopher Schultz wrote: > Paul, > > On 9/2/2010 5:10 PM, Paul Szynol wrote: >>>> I don't have the minor version information, but it's Tomcat 6. Each >>>> session object is added to a ConcurrentHashMap when SessionListener's >>>> sessionCreated() is invoked. > You likely have a default page (responds to requests for "/") that is a > JSP without a session="false" header. That means that the session is, by > default, created. > > That means anyone visiting your website and then wandering away -- > including robots, screen-scrapers, and search indexers -- gets a session > that sticks around for a long time and does nothing. > > -chris >> --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org >> >> > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org
0x62590808.asc
Description: application/pgp-keys
signature.asc
Description: OpenPGP digital signature
