Where is websphere http session cookie stored

[Mohamed Farouk]

Hello All
Where is websphere http session cookie stored inour local machine if i send a request to the Websphere application server for a url

[WarnerJan Veldhuis]

Session cookies are in-memory cookies, so you probably would't find them on disk...

[Mohamed Farouk]

Thanks
In memory cookies, I thaught that a cookie is created by the server in the users local machine to point to session id. And when the client sends the next request then the browser will send the sessionid along with the request to create server and session affinity. In Memory cookie?

[Mohamed Farouk]

Thats how i thaught HTTP session Management works , Please correct me if I am wrong?

[Ben Souther]

That's correct.
The cookie is send from the server as a response header.

The browser stores the cookie in memory and sends it as a header in all subsequent requests.

You can see all of this by downloading and installing hte HttpLiveHeaders plugin:
http://livehttpheaders.mozdev.org/

[Mohamed Farouk]

Thanks
That explains it. Now we have performance testing going on right now using
Load Runner. The issue is there are 2 injector servers doing IPSPOOFING to generate around 30 IP addresses and send requiest to the server. I am not sure what will be the name of the cookie which is created in this case with load runner. The question here is is there any posibility of sessions of different users getting mixed up when we run it for around 50000 transactions within 1 hour.
Thanks

[Ben Souther]

I am not sure what will be the name of the cookie which is created in this case with load runner.

Here is a typical response from a Tomcat server

 
HTTP/1.x 200 OK
Server: Apache-Coyote/1.1
[B]Set-Cookie: JSESSIONID=BE2CA9383821A930CD747F0FD9FA8EF1; Path=/SessionMonitor[/B]
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 1168
Date: Thu, 16 Jun 2005 13:34:49 GMT

This was grabbed with the liveHttpHeaders plugin that I spoke of earlier.
[ June 16, 2005: Message edited by: Ben Souther ]

[Mohamed Farouk]

Thanks Ben
Did you read my situation with Load runner in previous quesiton. Can you shed your lights on that would really appeciate

Thanks
Farouk

[Ben Souther]

I've never used loadRunner and haven't touched websphere in years so I can't really help you.

Someone else may chime in.

[David O'Meara]

Unless you're using LTPA authentication, in which case the session cookie exists, but session state is actually carried in a separate (encrypted) LTPA-TOKEN cookie