tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Kedar <ke...@sutra.co.jp>
Subject RE: Tomcat 4.1.24 stops responding due to attack
Date Wed, 23 Jun 2004 02:37:18 GMT
Hi Ryan,
At 09:42 04/06/22 +0100, Ryan Lissack wrote:
>Hi,
>
>It may not be an 'attack' ... probably just due to RH9s threading lib ...
>
>See this message for the possible solution:
>http://marc.theaimsgroup.com/?l=tomcat-user&m=108670043100516&w=2
>
>Also see the following messages for further explanations:
>http://marc.theaimsgroup.com/?l=tomcat-user&w=2&r=1&s=tomcat+jitters%2C+then
>+hangs+-+please+help&q=b

## Thanks for help.
Accordingly I have made changes, hope this helps.
Regards,
Kedar

>HTH,
>Ryan.
>
>-----Original Message-----
>From: Kedar [mailto:kedar@sutra.co.jp]
>Sent: 22 June 2004 05:09
>To: tomcat-user@jakarta.apache.org
>Subject: Tomcat 4.1.24 stops responding due to attack
>
>
>Hi,
>I am facing following problem :
>
>Problem : After working properly for a day or 2, I cannot access my website.
>Only way to restart is kill the process and again run "startup.sh". I
>cannot stop normally
>using "shutdown.sh"
>
>Configuration : Red Hat Linux release 9 (Shrike), Tomcat 4.1.24, Postgres
>7.3.4
>
>Points Checked -
>1. The tomcat is not down, I can see process by "ps -ef"
>2. However, as a result of "netstat -tcp" I am getting some unknown users
>accessing my "mysqld".
>Under normal working conditions I can recognise the IP address and accessed
>processes listed under "netstat -tcp"
>Actually I am not using "mysql" at all.
>No other application on server is using mysqld.
>3. The default Apache 80 port can be accessed normally(Tomcat is running on
>8080).
>4. I have changed the port to 8081, but problem persists.
>
>Is it that someone is making lot of fake connections to slow down my
>tomcat, or am I infected by virus?
>
>Any hint or pointer will be appreciated.
>Regards,
>Kedar
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Mime
View raw message