You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by deepak suldhal <de...@yahoo.com> on 2005/02/14 04:56:48 UTC

JDBC setup

All I have is 
Eclipse with JDK
Tomcat 5.0.28
Now I need to set up a JDBC connection (to connect to
Sybase)
Should I download Jconnect for this ?
How do I define a resourse Reference ?
Should this code be in web.xml under conf.

If I do this with admin tool does that work ?

Thanks
D








		
__________________________________ 
Do you Yahoo!? 
Read only the mail you want - Yahoo! Mail SpamGuard. 
http://promotions.yahoo.com/new_mail 

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


GC Behavior

Posted by sysdba <sy...@ohiointernet.us>.
Could someone with a good understanding of gc in Tomcat 5.0.30 explain what
the normal behavior is. It appears that dead sessions are not collected
until the allocated heap is totally used up, and then it frees only 20 to
30MB. By my rough estimate, there should be at least 128MB of expired
sessions in there using Xmx512m.

Gary


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: tomcat hackers ...

Posted by Tim Funk <fu...@joedog.org>.
If you use relative URLS (with ..) on tour site - it is probably a bad(not 
evil, just poorly written) bot impersonating IE.

-Tim

B Wiley wrote:
> 
>> Hello, I've been getting some things in my logs like ...
> 
> 
> 
> 217.20.113.110 - - [13/Feb/2005:09:41:39 -0500] "GET 
> /Myapp/../Myapp/../Myapp/../Myapp/../Myapp/../Myapp/../Myapp/../hosting.html 
> HTTP/1.1" 200 5564 "-" "Mozilla/4.0 (compatible; MSIE 5.16; Mac_PowerPC)"
> 
> 
> What is this guy getting from this ? Am I just paranoid or what ???

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


[OT] Re: tomcat hackers ...

Posted by Joel <re...@ddcom.co.jp>.
> >Hello, I've been getting some things in my logs like ...

Always good to see people reading their logs.

> 217.20.113.110 - - [13/Feb/2005:09:41:39 -0500] "GET 

You could look that IP address up, try either dig or nslookup (or on Mac
OS X there iseven a GUI network utility with an easy interface to
looking up domain names).

> /Myapp/../Myapp/../Myapp/../Myapp/../Myapp/../Myapp/../Myapp/../hosting.html 

If every /.. is balanced by a preceding /Myapp, that's going nowhere in
particular fast. I'd explain it, but calculate the path out yourself.
Then check it from outside, say, from your home box, just so you get
comfortable with it. Try putting an extra ../ various places.

If the path substring were 32Kbytes long or longer, you could guess it
was an attempt at hiding a buffer overflow. Also, attempts at getting a
shell on a MSWxxx box tend to end in command.com or something.lib, so it
doesn't look like that. 

The one remaining danger, if /hosting.html is supposed to be restricted
access, it might be an attempt to hide an access to it.

> HTTP/1.1" 200 5564 "-" "Mozilla/4.0 (compatible; MSIE 5.16; Mac_PowerPC)"

Bleagh. Talk about a browser no one should be using any more, ...

> What is this guy getting from this ? Am I just paranoid or what ???

Like I say, you can always put the url together from your logs and try
it from an external box to see.

Paranoia is good. But you should follow up on it yourself.

--
Joel Rees   <re...@ddcom.co.jp>
digitcom, inc.   株式会社デジコム
Kobe, Japan   +81-78-672-8800
** <http://www.ddcom.co.jp> **


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


tomcat hackers ...

Posted by B Wiley <in...@wileynet.com>.
>Hello, I've been getting some things in my logs like ...


217.20.113.110 - - [13/Feb/2005:09:41:39 -0500] "GET 
/Myapp/../Myapp/../Myapp/../Myapp/../Myapp/../Myapp/../Myapp/../hosting.html 
HTTP/1.1" 200 5564 "-" "Mozilla/4.0 (compatible; MSIE 5.16; Mac_PowerPC)"


What is this guy getting from this ? Am I just paranoid or what ???







---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org