You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Blachon, Philippe" <Ph...@wto.org> on 2014/07/01 09:57:54 UTC
Apache Tomcat7 service start randomly after the installation of
McAfee antivirus.
Good morning,
We have 4 identical servers with a scheduled task running every night on each of them. This task Stop Tomcat -> Update some data -> Start Tomcat.
This worked fine for months.
We have installed a new antivirus McAfee 3 weeks ago. Now the Tomcat7 service starts randomly. At least 1 of the 4 server needs a manual start of the Tomcat7 service every morning.
Do you know if there is specifics problems between Tomcat and Mc Afee ?
We have already tried to exclude Tomcat.exe from McAfee scanning. Is there other thing we could exclude without compromising the security ?
Configuration:
Windows server 2008 R2 Standard - SP1
Apache Tomcat 7.0.29 Server
McAffee Agent 4.8.0.1500
Mcafee VirusScan Enterprise 8.8.04001
Thanks, have a nice day,
Philippe Blachon.
Please consider the environment before printing this email or its attachment(s). Please note that this message may contain confidential information. If you have received this message in error, please notify me and then delete it from your system.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [somewhat OT] Apache Tomcat7 service start randomly after the
installation of McAfee antivirus.
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
André,
On 7/2/14, 3:33 AM, André Warnier wrote:
> Blachon, Philippe wrote:
>> Good morning,
>>
>> We have 4 identical servers with a scheduled task running every
>> night on each of them. This task Stop Tomcat -> Update some data
>> -> Start Tomcat. This worked fine for months. We have installed a
>> new antivirus McAfee 3 weeks ago. Now the Tomcat7 service starts
>> randomly. At least 1 of the 4 server needs a manual start of the
>> Tomcat7 service every morning.
>>
>> Do you know if there is specifics problems between Tomcat and Mc
>> Afee ? We have already tried to exclude Tomcat.exe from McAfee
>> scanning. Is there other thing we could exclude without
>> compromising the security ?
>>
>> Configuration: Windows server 2008 R2 Standard - SP1 Apache
>> Tomcat 7.0.29 Server McAffee Agent 4.8.0.1500 Mcafee VirusScan
>> Enterprise 8.8.04001
>>
>> Thanks, have a nice day, Philippe Blachon.
>>
>
> Not a direct answer to your question, but maybe a bit of lateral
> and logical thinking here :
>
> Why would one run a virus scanner permanently on a Tomcat server ?
> And why run it on most of the disk space, as opposed to just the
> few directories where some client /might/ upload external files ?
> Do the applications even allow clients to put files on that server
> ?
As someone who has to meet certain government-mandated regulations, I
can commiserate with the OP: sometimes you have to do stupid crap just
so somebody doesn't say "why aren't you following industry-standard
guidelines?"
The good news is that "use anti-virus and anti-malware" can be
interpreted in ... liberal ways.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=nGv9
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [somewhat OT] Apache Tomcat7 service start randomly after the
installation of McAfee antivirus.
Posted by André Warnier <aw...@ice-sa.com>.
Leo Donahue wrote:
> On Wed, Jul 2, 2014 at 2:33 AM, André Warnier <aw...@ice-sa.com> wrote:
>
>> Blachon, Philippe wrote:
>>
>>> Good morning,
>>>
>>> We have 4 identical servers with a scheduled task running every night on
>>> each of them. This task Stop Tomcat -> Update some data -> Start Tomcat.
>>> This worked fine for months.
>>> We have installed a new antivirus McAfee 3 weeks ago. Now the Tomcat7
>>> service starts randomly. At least 1 of the 4 server needs a manual start of
>>> the Tomcat7 service every morning.
>>>
>>> Do you know if there is specifics problems between Tomcat and Mc Afee ?
>>> We have already tried to exclude Tomcat.exe from McAfee scanning. Is
>>> there other thing we could exclude without compromising the security ?
>>>
>>> Configuration:
>>> Windows server 2008 R2 Standard - SP1
>>> Apache Tomcat 7.0.29 Server
>>> McAffee Agent 4.8.0.1500
>>> Mcafee VirusScan Enterprise 8.8.04001
>>>
>>> Thanks, have a nice day,
>>> Philippe Blachon.
>>>
>>>
>> Not a direct answer to your question, but maybe a bit of lateral and
>> logical thinking here :
>>
>> Why would one run a virus scanner permanently on a Tomcat server ?
>>
>
> Does the OP work in the government? My former employer had virus scanning
> software on every server. You couldn't get a server image without it.
>
> The answer to that question is really based on policy, if he works in
> government. Eventually, that server has the potential for getting a virus
> somehow from something or someone, and someone has to answer the question:
> "why wasn't there virus scanning software on the server?"
>
Leo, I understand what you're saying above.
But if one extrapolates that logic, then at some point the whole IT infrastructure and the
whole Internet would grind to a halt, as only the POTUS would be allowed to upload
anything onto a computer.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [somewhat OT] Apache Tomcat7 service start randomly after the
installation of McAfee antivirus.
Posted by Leo Donahue <do...@gmail.com>.
On Wed, Jul 2, 2014 at 2:33 AM, André Warnier <aw...@ice-sa.com> wrote:
> Blachon, Philippe wrote:
>
>> Good morning,
>>
>> We have 4 identical servers with a scheduled task running every night on
>> each of them. This task Stop Tomcat -> Update some data -> Start Tomcat.
>> This worked fine for months.
>> We have installed a new antivirus McAfee 3 weeks ago. Now the Tomcat7
>> service starts randomly. At least 1 of the 4 server needs a manual start of
>> the Tomcat7 service every morning.
>>
>> Do you know if there is specifics problems between Tomcat and Mc Afee ?
>> We have already tried to exclude Tomcat.exe from McAfee scanning. Is
>> there other thing we could exclude without compromising the security ?
>>
>> Configuration:
>> Windows server 2008 R2 Standard - SP1
>> Apache Tomcat 7.0.29 Server
>> McAffee Agent 4.8.0.1500
>> Mcafee VirusScan Enterprise 8.8.04001
>>
>> Thanks, have a nice day,
>> Philippe Blachon.
>>
>>
> Not a direct answer to your question, but maybe a bit of lateral and
> logical thinking here :
>
> Why would one run a virus scanner permanently on a Tomcat server ?
>
Does the OP work in the government? My former employer had virus scanning
software on every server. You couldn't get a server image without it.
The answer to that question is really based on policy, if he works in
government. Eventually, that server has the potential for getting a virus
somehow from something or someone, and someone has to answer the question:
"why wasn't there virus scanning software on the server?"
Leo
Re: [somewhat OT] Apache Tomcat7 service start randomly after the
installation of McAfee antivirus.
Posted by André Warnier <aw...@ice-sa.com>.
Blachon, Philippe wrote:
> Good morning,
>
> We have 4 identical servers with a scheduled task running every night on each of them. This task Stop Tomcat -> Update some data -> Start Tomcat.
> This worked fine for months.
> We have installed a new antivirus McAfee 3 weeks ago. Now the Tomcat7 service starts randomly. At least 1 of the 4 server needs a manual start of the Tomcat7 service every morning.
>
> Do you know if there is specifics problems between Tomcat and Mc Afee ?
> We have already tried to exclude Tomcat.exe from McAfee scanning. Is there other thing we could exclude without compromising the security ?
>
> Configuration:
> Windows server 2008 R2 Standard - SP1
> Apache Tomcat 7.0.29 Server
> McAffee Agent 4.8.0.1500
> Mcafee VirusScan Enterprise 8.8.04001
>
> Thanks, have a nice day,
> Philippe Blachon.
>
Not a direct answer to your question, but maybe a bit of lateral and logical thinking here :
Why would one run a virus scanner permanently on a Tomcat server ?
And why run it on most of the disk space, as opposed to just the few directories where
some client /might/ upload external files ?
Do the applications even allow clients to put files on that server ?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: Apache Tomcat7 service start randomly after the installation of
McAfee antivirus.
Posted by "Blachon, Philippe" <Ph...@wto.org>.
Good morning,
Yes, it was "random occasions where Tomcat appears not to re-start ".
Finally we have excluded from McAfee scanning : Tomcat7.exe, Java.exe and .zip files. As the launched application is Java opening a 3.5 Go .zip file surely the server was too busy to launch Tomcat and scan all that.
Everything has worked fine for the last 2 days ;)
Thanks for the help.
Philippe .
-----Original Message-----
From: Christopher Schultz [mailto:chris@christopherschultz.net]
Sent: Tuesday, July 01, 2014 3:48 PM
To: Tomcat Users List
Subject: Re: Apache Tomcat7 service start randomly after the installation of McAfee antivirus.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Philipe,
On 7/1/14, 3:57 AM, Blachon, Philippe wrote:
> We have 4 identical servers with a scheduled task running every night
> on each of them. This task Stop Tomcat -> Update some data -> Start
> Tomcat.
>
> This worked fine for months.
>
> We have installed a new antivirus McAfee 3 weeks ago. Now the
> Tomcat7 service starts randomly. At least 1 of the 4 server needs a
> manual start of the Tomcat7 service every morning.
So the service starts randomly (spontaneously), or there are random occasions where Tomcat appears not to re-start after the scheduled stop/start dance? It sounds like the latter.
Anything in the log files indicating that Tomcat even /tried/ to start?
> Do you know if there is specifics problems between Tomcat and McAfee?
None that I know of.
> We have already tried to exclude Tomcat.exe from McAfee scanning.
> Is there other thing we could exclude without compromising the
> security?
>
> Configuration: Windows server 2008 R2 Standard - SP1 Apache Tomcat
> 7.0.29 Server McAffee Agent 4.8.0.1500 Mcafee VirusScan Enterprise
> 8.8.04001
You should check the log files -- likely something like "catalina*" in your logs directory. The filename can be changed in the service runner, so the file does not necessarily have a predictable name.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=wBcZ
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Please consider the environment before printing this email or its attachment(s). Please note that this message may contain confidential information. If you have received this message in error, please notify me and then delete it from your system.
Re: Apache Tomcat7 service start randomly after the installation
of McAfee antivirus.
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Philipe,
On 7/1/14, 3:57 AM, Blachon, Philippe wrote:
> We have 4 identical servers with a scheduled task running every
> night on each of them. This task Stop Tomcat -> Update some data ->
> Start Tomcat.
>
> This worked fine for months.
>
> We have installed a new antivirus McAfee 3 weeks ago. Now the
> Tomcat7 service starts randomly. At least 1 of the 4 server needs a
> manual start of the Tomcat7 service every morning.
So the service starts randomly (spontaneously), or there are random
occasions where Tomcat appears not to re-start after the scheduled
stop/start dance? It sounds like the latter.
Anything in the log files indicating that Tomcat even /tried/ to start?
> Do you know if there is specifics problems between Tomcat and
> McAfee?
None that I know of.
> We have already tried to exclude Tomcat.exe from McAfee scanning.
> Is there other thing we could exclude without compromising the
> security?
>
> Configuration: Windows server 2008 R2 Standard - SP1 Apache Tomcat
> 7.0.29 Server McAffee Agent 4.8.0.1500 Mcafee VirusScan Enterprise
> 8.8.04001
You should check the log files -- likely something like "catalina*" in
your logs directory. The filename can be changed in the service
runner, so the file does not necessarily have a predictable name.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=wBcZ
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org