Return-Path: Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org Received: (qmail 55454 invoked from network); 23 Jun 2004 02:39:33 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 23 Jun 2004 02:39:33 -0000 Received: (qmail 1207 invoked by uid 500); 23 Jun 2004 02:38:51 -0000 Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org Received: (qmail 636 invoked by uid 500); 23 Jun 2004 02:38:43 -0000 Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Tomcat Users List" Reply-To: "Tomcat Users List" Delivered-To: mailing list tomcat-user@jakarta.apache.org Received: (qmail 510 invoked by uid 99); 23 Jun 2004 02:38:41 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received: from [211.9.57.83] (HELO sutra.co.jp) (211.9.57.83) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 22 Jun 2004 19:38:39 -0700 Received: from Spooler by sutra.co.jp (Mercury/32 v3.21c) ID MO008B3E; 23 Jun 04 11:19:00 +0900 Received: from spooler by sutra.co.jp (Mercury/32 v3.21c); 23 Jun 04 11:18:53 +0900 Received: from hikarigaoka.sutra.co.jp (211.9.57.82) by sutra.co.jp (Mercury/32 v3.21c) with ESMTP ID MG008B3D; 23 Jun 04 11:18:43 +0900 Message-Id: <5.0.2.5.2.20040623113530.00c647b8@localhost> X-Sender: Kedar/dns1.sutra.co.jp@localhost X-Mailer: QUALCOMM Windows Eudora Version 5.0.2-J Date: Wed, 23 Jun 2004 11:37:18 +0900 To: "Tomcat Users List" , 'Tomcat Users List' From: Kedar Subject: RE: Tomcat 4.1.24 stops responding due to attack In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Hi Ryan, At 09:42 04/06/22 +0100, Ryan Lissack wrote: >Hi, > >It may not be an 'attack' ... probably just due to RH9s threading lib ... > >See this message for the possible solution: >http://marc.theaimsgroup.com/?l=tomcat-user&m=108670043100516&w=2 > >Also see the following messages for further explanations: >http://marc.theaimsgroup.com/?l=tomcat-user&w=2&r=1&s=tomcat+jitters%2C+then >+hangs+-+please+help&q=b ## Thanks for help. Accordingly I have made changes, hope this helps. Regards, Kedar >HTH, >Ryan. > >-----Original Message----- >From: Kedar [mailto:kedar@sutra.co.jp] >Sent: 22 June 2004 05:09 >To: tomcat-user@jakarta.apache.org >Subject: Tomcat 4.1.24 stops responding due to attack > > >Hi, >I am facing following problem : > >Problem : After working properly for a day or 2, I cannot access my website. >Only way to restart is kill the process and again run "startup.sh". I >cannot stop normally >using "shutdown.sh" > >Configuration : Red Hat Linux release 9 (Shrike), Tomcat 4.1.24, Postgres >7.3.4 > >Points Checked - >1. The tomcat is not down, I can see process by "ps -ef" >2. However, as a result of "netstat -tcp" I am getting some unknown users >accessing my "mysqld". >Under normal working conditions I can recognise the IP address and accessed >processes listed under "netstat -tcp" >Actually I am not using "mysql" at all. >No other application on server is using mysqld. >3. The default Apache 80 port can be accessed normally(Tomcat is running on >8080). >4. I have changed the port to 8081, but problem persists. > >Is it that someone is making lot of fake connections to slow down my >tomcat, or am I infected by virus? > >Any hint or pointer will be appreciated. >Regards, >Kedar > > >--------------------------------------------------------------------- >To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org >For additional commands, e-mail: tomcat-user-help@jakarta.apache.org > >--------------------------------------------------------------------- >To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org >For additional commands, e-mail: tomcat-user-help@jakarta.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org For additional commands, e-mail: tomcat-user-help@jakarta.apache.org