tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Kedar <ke...@sutra.co.jp>
Subject RE: Tomcat 4.1.24 stops responding due to attack
Date Wed, 23 Jun 2004 02:41:22 GMT
Hi Carl,

Thanks for the help.
At 09:03 04/06/22 +0200, Carl Olivier wrote:
>Hi.
>
>I had this problem myself - and I have found that there is a potential
>memory leak in the JK connector code (in the mod and the Java
>implementation?).  My solution was to remove Apache and go solo with Tomcat
>5.0.25 (will keep upgrading though).
>
>My problem has gone away!  Tomcat stays up serving requests beautifully with
>NO memory problems whatsoever!
>
>I will be posting a better summary of my problem, the tests I ran, and the
>eventual solution.

## At present I have tried the Solution suggested by Ryan(Changing env 
variable LD_ASSUME_KERNEL)
If still problem persists, I ll try solution given by you.
Regards,
Kedar


>Regards,
>
>Carl
>
>-----Original Message-----
>From: Kedar [mailto:kedar@sutra.co.jp]
>Sent: 22 June 2004 06:09 AM
>To: tomcat-user@jakarta.apache.org
>Subject: Tomcat 4.1.24 stops responding due to attack
>
>
>Hi,
>I am facing following problem :
>
>Problem : After working properly for a day or 2, I cannot access my website.
>Only way to restart is kill the process and again run "startup.sh". I
>cannot stop normally
>using "shutdown.sh"
>
>Configuration : Red Hat Linux release 9 (Shrike), Tomcat 4.1.24, Postgres
>7.3.4
>
>Points Checked -
>1. The tomcat is not down, I can see process by "ps -ef"
>2. However, as a result of "netstat -tcp" I am getting some unknown users
>accessing my "mysqld".
>Under normal working conditions I can recognise the IP address and accessed
>processes listed under "netstat -tcp"
>Actually I am not using "mysql" at all.
>No other application on server is using mysqld.
>3. The default Apache 80 port can be accessed normally(Tomcat is running on
>8080).
>4. I have changed the port to 8081, but problem persists.
>
>Is it that someone is making lot of fake connections to slow down my
>tomcat, or am I infected by virus?
>
>Any hint or pointer will be appreciated.
>Regards,
>Kedar
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Mime
View raw message