There is a session timeout in the default web.xml that gives timeout in minutes:
You can also set the timeout for any session - see the HttpSession API. Your only control over session size is the amount of stuff you store in it. If everything saved in a session is Serializable, most servlet engines can save it to disk. Bill
Author and all-around good cowpoke
Joined: Mar 22, 2000
Serializable is an interface - it doesn't define any methods - it is just used as a label. So if you declare your class as implements Serializable, Java object serialization will attempt to serialize an instance.