tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ryan Lissack <rliss...@buildonline.com>
Subject RE: Tomcat 4.1.24 stops responding due to attack
Date Tue, 22 Jun 2004 08:42:50 GMT
Hi,

It may not be an 'attack' ... probably just due to RH9s threading lib ...

See this message for the possible solution:
http://marc.theaimsgroup.com/?l=tomcat-user&m=108670043100516&w=2

Also see the following messages for further explanations:
http://marc.theaimsgroup.com/?l=tomcat-user&w=2&r=1&s=tomcat+jitters%2C+then
+hangs+-+please+help&q=b

HTH,
Ryan.

-----Original Message-----
From: Kedar [mailto:kedar@sutra.co.jp]
Sent: 22 June 2004 05:09
To: tomcat-user@jakarta.apache.org
Subject: Tomcat 4.1.24 stops responding due to attack


Hi,
I am facing following problem :

Problem : After working properly for a day or 2, I cannot access my website.
Only way to restart is kill the process and again run "startup.sh". I 
cannot stop normally
using "shutdown.sh"

Configuration : Red Hat Linux release 9 (Shrike), Tomcat 4.1.24, Postgres
7.3.4

Points Checked -
1. The tomcat is not down, I can see process by "ps -ef"
2. However, as a result of "netstat -tcp" I am getting some unknown users 
accessing my "mysqld".
Under normal working conditions I can recognise the IP address and accessed 
processes listed under "netstat -tcp"
Actually I am not using "mysql" at all.
No other application on server is using mysqld.
3. The default Apache 80 port can be accessed normally(Tomcat is running on 
8080).
4. I have changed the port to 8081, but problem persists.

Is it that someone is making lot of fake connections to slow down my 
tomcat, or am I infected by virus?

Any hint or pointer will be appreciated.
Regards,
Kedar 


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Mime
View raw message