Is it possible to determine if webservices are being used? - web-services

There is an old OC4J server where 200+ web services are deployed. Now all have been ported to weblogic. The question is whether can I check if anyone is still accessing the webservices deployed in oc4j. Can't rely on app logs as this is quite old (not much standard followed)
If anyone is accessing is it possible to understand who is it?
PS: Am a newbie please help me in understanding this (if possible) in detail.
Much appreciated.

You can use a tool like TCPDump to locate in real-time traffic on the LAN where the destination and port number match the host/port of the running OC4J

Related

WAMP 3.1.7 x64 my webpage accessible from anywhere in the world

Before I give out my question, I'd like to tell you my reasons of why I need this to work. I am currently making a game and in the future I'll need people to test the game to help me look for bugs. The purpose of this website I am making is to be used as a guide/wiki and for people to report the bugs and later on when the game is near to be open to public, to be the official page with a proper server/domain. With this said, I would like to temporarily have my PC as my webpage server and to be able to allow only the IPs of the game testers to connect my PC.
Can someone help me on this, please? Thank you in advance.
Exposing your ports publicly on the internet is always very tricky because it poses a huge security threat - especially since you just notified the world that you want to do that!
Instead, you should use Ngrok, a secure tool used extensively in the industry build specifically for this. It basically serves, in one line of code, a server running locally in a public url looking like https://<some-code>.ngrok.io. The only think you'll have to worry about would be hostname mismatch, but believe me, that's still a thousand times easier than to securely expose your personal machine to the internet ;)

Socket file transfer from webserver

So, I have a desktop application and I want it to be able to check a website for new versions of itself. I am completely new to sockets (Windsocks and Berkeley), so before I invest time learning network programming I want some guidance to point me in the right direction.
The application is going to pretty much download an installation file from its website. The connection will not be secure as it doesn't matter if users can see it or not. Also the application's website will most likely be hosted # godaddy (in case somebody wants to be specific).
So my questions are; What technology should I be looking into, FTP, TCP or UDP? What are some things I should keep in mind as far as the client/server communication when it comes to file transfer with a remote server? Does anybody knows if godaddy allows this type of thing?
PS. If you think this might be a little too much to accomplish without enough theoretical/technical background, then please don't hesitate to recommend a book.
Use HTTP, and use a library to download a URL to a file. This should take 1-5 lines of code.
Why build a file transfer protocol yourself using sockets? Everything you need is built-in with HTTP. There are pre-made clients and servers available.

Tomcat Server using 100% CPU?

I am new in using Tomcat Server. In one of the my web application i am using Tomcat 6.0.33 as a Server, it using 100% CPU. I couldn't find it why. Guys could you sort out this problem,
Why this tomcat using 100%CPU?
How to identify the problems of the above?
How to monitor the tomcat in windows?
Please, it would be more helpful for me..
Thanks in advance
Tomcat itself doesn't use 100% CPU, it is not designed that way. Most probably it is some application that is deployed on it. To make 100% sure that it's not Tomcat just download its distribution and start it up - I bet you CPU usage will be closer to 0.
To tell which application inside your Tomcat is misbehaving you will need to use profiling tools.
The best one IMO is Oracle's VisualVM. Start it from your JDK bin directory (it is called jvisualvm.exe), then follow the guide at the link. In particular its Profiling section.

Django web server -- where should I draw the line between production and development?

I know that it's bad to use the Django web server in production. There's been at least one Stackoveflow question on this already.
But I'm wondering about where to draw the line between development and production? If I'm only allowing HTTP access to one (or a few) IP addresses, then I know I'm in development. What if I open it to all IP addresses, but only e-mail a couple friends to see what they think of what I've built?
As far as I can tell, the problems with using the Django server are:
It's single-threaded
Security
I don't think (1) is likely to be an issue if I'm only sharing it with a few people. For (2)--what's the worst-case scenario? Does it make a difference that I'm running on an Amazon EC2 server that I could very easily restart from a backup if something bad happened?
Well, the answer is very simple actually, you've left development when you have something you must protect: real user personal information, real data in your database that you'd be afraid to lose, etc.
Security isn't a concern until these things are present. The rule about not using the dev server in "production" is guidance, not mandatory. You can fire up the dev server in your production environment any time you want. However, you'd be silly to do so and then open up universal access to it, once your site is truly live and in use by the world.
Setting up mod_wsgi (or some other WSGI container) on a development machine takes all of 5 minutes, and can help you sort out deployment issues before you actually reach deployment. So really, why ever use the development server if you don't have to?

Can I do this? Apache + mod_jk + Tomcat + Axis

We're making a product which requires a web service to hook up to an existing database used by one of our other products. Owing to time constraints we need to get this thing up and running pretty quickly. Our web server is Apache on a Linux machine, and the client software for the new product is constrained to communication on Port 80. Our dilemma is that we can't just get a new server in time (Apache can't share port 80) and so the plan is to route requests through the existing Apache server.
I know we can hook Apache up to Tomcat using mod_jk, but what I want to do is overlay Apache Axis on Tomcat to make use of SOAP. I'm currently downloading everything I need to test this out, but not having used Axis before, I'm just curious as to whether anybody has actually tried this before and if so, does it / can it work? If there are going to be any roadblocks stopping me from doing this then a heads-up would be much appreciated.
I can't seem to find anything which says this particular setup will or won't work, apart from a posting on the Ubuntu forums which looks similar to what I'm attempting to do but on closer inspection appears to be different.
So to summarise, what I'm curious about is whether accessing a SOAP Web Service through Apache web server, connected to an Axis / Tomcat combo would work?
I'm assuming for now that with a little jiggery-pokery it should be ok, but I'll admit I'm in unfamiliar territory here so any advice / information would be a big help.
Thanks,
Tom
Having just installed and configured all of the necessary components, it appears that this does work. I'm yet to test whether it allows a web service to work from a client machine properly yet, but all signs look good so far!
I worked on a product that had exactly this setup about a year ago. I'm afraid the details are a bit fuzzy, but I don't remember having any problems with the software stack. If you find you need help, comment back here and I'll try to dig up some more info.