http://java-monitor.com/forum/ This is a discussion forum about monitoring, tuning and troubleshooting Java application servers. en Fri, 18 May 2012 14:36:00 GMT vBulletin 15 http://www.java-monitor.com/forum/images/styles/java/misc/rss.jpg http://java-monitor.com/forum/ http://java-monitor.com/forum/showthread.php?t=2423&goto=newpost Thu, 17 May 2012 11:14:36 GMT Topic: Liferay Portal Privilege Escalation Risk: Medium Text:Liferay users can assign themselves to organizations, leading to possible privilege... Topic: Liferay Portal Privilege Escalation Risk: Medium Text:Liferay users can assign themselves to organizations, leading to possible privilege escalation Description: https://bugzil...




More... ]]> Java Security Advisories Java-monitor RSS bot http://java-monitor.com/forum/showthread.php?t=2423 http://java-monitor.com/forum/showthread.php?t=2422&goto=newpost Thu, 17 May 2012 11:14:36 GMT Topic: Liferay 5.x / 6.x Cross Site Scripting Risk: Low Text:Multiple xss issues in Liferay Description: Liferay Portal is an enterprise portal... Topic: Liferay 5.x / 6.x Cross Site Scripting Risk: Low Text:Multiple xss issues in Liferay Description: Liferay Portal is an enterprise portal written in Java Multiple xss vulner...




More... ]]> Java Security Advisories Java-monitor RSS bot http://java-monitor.com/forum/showthread.php?t=2422 http://java-monitor.com/forum/showthread.php?t=2421&goto=newpost Thu, 17 May 2012 11:14:36 GMT Liferay version 6.1 suffers from a circumvention issue when restricting access to ip blocks. Proof of concept exploit included. More...... Liferay version 6.1 suffers from a circumvention issue when restricting access to ip blocks. Proof of concept exploit included.

More... ]]> Java Security Advisories Java-monitor RSS bot http://java-monitor.com/forum/showthread.php?t=2421 http://java-monitor.com/forum/showthread.php?t=2420&goto=newpost Thu, 17 May 2012 11:14:36 GMT Liferay versions 5.x and 6.x suffer from multiple cross site scripting vulnerabilities. More...... Liferay versions 5.x and 6.x suffer from multiple cross site scripting vulnerabilities.

More... ]]> Java Security Advisories Java-monitor RSS bot http://java-monitor.com/forum/showthread.php?t=2420 http://java-monitor.com/forum/showthread.php?t=2419&goto=newpost Thu, 17 May 2012 11:14:36 GMT Liferay version 6.1 suffers from a vulnerability where it is possible to retrieve the names and email addresses of all users. Proof of concept code... Liferay version 6.1 suffers from a vulnerability where it is possible to retrieve the names and email addresses of all users. Proof of concept code included.

More... ]]> Java Security Advisories Java-monitor RSS bot http://java-monitor.com/forum/showthread.php?t=2419 http://java-monitor.com/forum/showthread.php?t=2418&goto=newpost Thu, 17 May 2012 11:14:36 GMT Liferay version 6.1 is vulnerable to JSON-related cross site request forgery attacks. Proof of concept code is included. More...... Liferay version 6.1 is vulnerable to JSON-related cross site request forgery attacks. Proof of concept code is included.

More... ]]> Java Security Advisories Java-monitor RSS bot http://java-monitor.com/forum/showthread.php?t=2418 http://java-monitor.com/forum/showthread.php?t=2401&goto=newpost Tue, 15 May 2012 21:49:55 GMT

Kees Jan,

I'm getting the following from all my servers:
May 15, 2012 4:30:55 PM com.javamonitor.JavaMonitorCollector$CollectorDriv er run
SEVERE: This probe was hit by an unexpected exception: Connection reset
java.net.SocketException: Connection reset
at java.net.SocketInputStream.read(SocketInputStream. java:168)
at java.io.BufferedInputStream.fill(BufferedInputStre am.java:218)
at java.io.BufferedInputStream.read1(BufferedInputStr eam.java:258)
at java.io.BufferedInputStream.read(BufferedInputStre am.java:317)
at sun.net.http://www.http.HttpClient.parseHTTP...lient.java:687)
at sun.net.http://www.http.HttpClient.parseHTTP...lient.java:632)
at sun.net.http://www.http.HttpClient.parseHTTP...lient.java:652)
at sun.net.http://www.protocol.http.HttpURLConn...tion.java:1072)
at com.javamonitor.Collector.push(Collector.java:332)
at com.javamonitor.Collector.push(Collector.java:140)
at com.javamonitor.JavaMonitorCollector$CollectorDriv er.run(JavaMonitorCollector.java:150)
at java.lang.Thread.run(Thread.java:619)


This happens frequently throughout the day from all my servers. WEB1, WEB2, and STG are hosted with Rackspace and the DEVx servers are here in our data center.

As you can see from this thread graph, I'm missing several reports throughout the day and this is typical on all servers in both data centers.

Any idea of what could be happening and how to fix it?

Thanks...Ron ]]> Java Administration ron http://java-monitor.com/forum/showthread.php?t=2401 http://java-monitor.com/forum/showthread.php?t=2355&goto=newpost Sun, 06 May 2012 18:50:33 GMT Hi,

I want to collect hibernate-statistics and I'm considering enabling JMX to do this with the java-monitor-probe.

However i need some advice on security.

If i enable JMX without any form of security, what will this mean? Anyone can access my statistics? Or anything more severe?

And if I choose to implement some form of security. How would i set this up so only the probe gets access?

Using Tomcat 6 btw.

Thanks! ]]> Tomcat Administration erkdahl http://java-monitor.com/forum/showthread.php?t=2355 http://java-monitor.com/forum/showthread.php?t=2340&goto=newpost Fri, 04 May 2012 15:29:25 GMT Hello,

are there any problems since last week? From about last Thursday I'm constantly getting "server offline" messages immediately followed by "server back online" at least a few times a day, which was never happening before (at least not from the start of February when I activated the monitoring). The internet connectivity on the server is never down when I receive these messages, so it has to be the network problem between my server and the monitoring server specifically which is not very likely in my opinion, or it has to be some problem with the monitoring tool itself...
For now, I can of course increase the timeout from 2 minutes to 5 minutes or even 20 minutes, but I wonder if there are any known issues which might cause this...

Thanks. ]]> Monitoring Tool Questions dopicechodte http://java-monitor.com/forum/showthread.php?t=2340 http://java-monitor.com/forum/showthread.php?t=2319&goto=newpost Wed, 02 May 2012 12:59:37 GMT I have this problem. Any solutions? Thank You Image: http://www.coolwebsolutions.net/loginError.png I have this problem.

Any solutions?

Thank You

]]> Monitoring Tool Questions mikycol http://java-monitor.com/forum/showthread.php?t=2319 http://java-monitor.com/forum/showthread.php?t=2309&goto=newpost Tue, 01 May 2012 18:24:41 GMT Hi, we have a performance problem in production. we are getting out of memory error. Setting in production is -Xmx1024m -Xms256m... Hi, we have a performance problem in production. we are getting out of memory error.
Setting in production is
-Xmx1024m -Xms256m -XX:MaxPermSize=320m.

When i monitor the memory usage using Jconsole.
I noticed that "PS Survivor Space" stops "normal swapping".

I tested Development environment.
it has better performance. "PS Survivor Space" has normal swapping.

Dev setting: -Xmx1024m -Xms512m -XX:MaxPermSize=320m.

I noticed that -Xms in dev and prod are different.
I am not sure why "PS Survivor Space" stops "normal swapping" in production.
Production become very slow after two or three weeks..

thank you!
Siva ]]> Monitoring Tool Questions Siva http://java-monitor.com/forum/showthread.php?t=2309 http://java-monitor.com/forum/showthread.php?t=2306&goto=newpost Sun, 29 Apr 2012 18:57:44 GMT I deployed a JCAPS application on a gfish2, the application is deployed as "disabled". The normal situation is that the key com.sun.appserv:j2eeType=J2EEApplication,name=MyDi sabledApp is created and I can retrieve some informations through VisualVM

For some reasons, I have few cases where the app is deployed successfully as said by asadmin and read in the gfish log but the app is not visible (1) in the admin console and (2) in the JMX keys.

By the way, restarting the gfish instance shows us (1) that the app is deployed, (2) as disabled and (3) the keys are created.

Do you know a particular tip to receive the "error" possibly occurred (through the log or the asasdmin return e.g.) ?

Thanks for your time,

Christophe. ]]> Glassfish Administration cfd http://java-monitor.com/forum/showthread.php?t=2306 http://java-monitor.com/forum/showthread.php?t=2291&goto=newpost Fri, 27 Apr 2012 03:25:35 GMT I noticed in the Maintenance forum that there has been an outage for the last two days. I have 2 separate probes (for two separate companies) and... I noticed in the Maintenance forum that there has been an outage for the last two days. I have 2 separate probes (for two separate companies) and neither one of them appear to be working. Is anyone else having any problems? ]]> Monitoring Tool Questions thcampbell http://java-monitor.com/forum/showthread.php?t=2291 http://java-monitor.com/forum/showthread.php?t=2267&goto=newpost Mon, 23 Apr 2012 22:53:37 GMT Actually i have a problem tomcat throw FileNotFoundException after about 5hours from correct working. After the error occurs if we restarted the... Actually i have a problem tomcat throw FileNotFoundException after about 5hours from correct working.

After the error occurs if we restarted the server it goes to work fine, also if we removed the doctype from the template client it goes to work fine.

tomcat version: 6.0.35
Jsf2, spring 3 and jpa2.

Error Screen Shoot.
https://docs.google.com/open?id=0B2B...3Bla2toSWswNUE

Thanks.
Nabil ]]> Tomcat Administration nabilTawfik http://java-monitor.com/forum/showthread.php?t=2267 http://java-monitor.com/forum/showthread.php?t=2261&goto=newpost Mon, 23 Apr 2012 07:58:49 GMT First of all, great piece of software, beats the hell out of ssh tunnels, jstatd, remote jmx and all that other messy stuff. I am putting together... First of all, great piece of software, beats the hell out of ssh tunnels, jstatd, remote jmx and all that other messy stuff. I am putting together my own probe for our WebObjects applications hosted on EC2.

Was just wondering if a feature request to get notifications on memory or cpu usage had ever come up? i.e. send a notification if heap memory or cpu gets to 90%. For our applications that usually means excess load on the system usually due to crawlers, which needs attention. If we get notified when the heap starts to approach 100% then we can take corrective action before the entire app goes down.

Thanks
Gerard ]]> Monitoring Tool Questions gerarddougan http://java-monitor.com/forum/showthread.php?t=2261