Question

Based on how is generated the session ID by Tomcat, is there a way to retrieve the IP address of the client from her session ID, using some decoding tool/method?

Using Tomcat 6.

NB: not sure it is relevant / possible at all.

The question could be about "How is generated the Tomcat session ID, does the calculation use the client IP, and is there a way to get it back"

edit

In case it matters, this is for a one time use, the analysis of an old log file via a Tomcat 6 generated session id. We are not looking at an implementation that works over time.

Was it helpful?

Solution

As it isn't specified how Tomcat or any other container generates a sessionID the answer is 'no'.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top