Possibilities that occur to me: 1. Some program is setting the session timeout very low. (pretty unlikely but possible) 2. The session contains a reference to an object that is not serializable, the servlet container is attempting to serialize the session as part of normal upkeep, when it cant be serialized, the container is invalidating the session. (look for error reports in logs) Bill