tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Pid <...@pidster.com>
Subject Re: Phantom Sessions
Date Thu, 02 Sep 2010 23:27:29 GMT
On 02/09/2010 23:20, Paul Szynol wrote:
> 
> Hi, Chris,
> 
> Thanks for your response.  I do get those requests, but it seems they
> always generate standard user agent information, which I then store in
> the associated session object.  These session objects don't have any
> user agent information--that's why I am wondering if they're generated
> internally.

Not all bots are well behaved.
How many are being created?


p

> Best,
> Paul
> 
> 
> On 9/2/10 6:07 PM, Christopher Schultz wrote:
> Paul,
> 
> On 9/2/2010 5:10 PM, Paul Szynol wrote:
>>>> I don't have the minor version information, but it's Tomcat 6.  Each
>>>> session object is added to a ConcurrentHashMap when SessionListener's
>>>> sessionCreated() is invoked.
> You likely have a default page (responds to requests for "/") that is a
> JSP without a session="false" header. That means that the session is, by
> default, created.
> 
> That means anyone visiting your website and then wandering away --
> including robots, screen-scrapers, and search indexers -- gets a session
> that sticks around for a long time and does nothing.
> 
> -chris
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>

> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org



Mime
View raw message