I am trying to use "HttpSessionBindingListener" to keep track of the users who do not logout properly. For this in the "valueUnbound" event I want to check for a particular session variable (attribute). But when I try to call the "getAttribute" method of session object (Session object I've retrieved from getSession() method of HttpSessionBindingEvent), it throws an exception that session is already invalidated. Is it a normal behavior? or there is something wrong with my Tomcat (I m using Tomcat 4.1) An early reply would be appreciated.