tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Paul Szynol <pj...@columbia.edu>
Subject Re: Phantom Sessions
Date Thu, 02 Sep 2010 23:32:39 GMT

Hey, Pid,

A few a day.  Seems fairly random, which would support the bot theory.  
But the sessions don't show up in batches, which is the behavior I 
typically see from bots.

Paul


On 9/2/10 7:27 PM, Pid wrote:
> On 02/09/2010 23:20, Paul Szynol wrote:
>> Hi, Chris,
>>
>> Thanks for your response.  I do get those requests, but it seems they
>> always generate standard user agent information, which I then store in
>> the associated session object.  These session objects don't have any
>> user agent information--that's why I am wondering if they're generated
>> internally.
> Not all bots are well behaved.
> How many are being created?
>
>
> p
>
>> Best,
>> Paul
>>
>>
>> On 9/2/10 6:07 PM, Christopher Schultz wrote:
>> Paul,
>>
>> On 9/2/2010 5:10 PM, Paul Szynol wrote:
>>>>> I don't have the minor version information, but it's Tomcat 6.  Each
>>>>> session object is added to a ConcurrentHashMap when SessionListener's
>>>>> sessionCreated() is invoked.
>> You likely have a default page (responds to requests for "/") that is a
>> JSP without a session="false" header. That means that the session is, by
>> default, created.
>>
>> That means anyone visiting your website and then wandering away --
>> including robots, screen-scrapers, and search indexers -- gets a session
>> that sticks around for a long time and does nothing.
>>
>> -chris
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message