I am not sure about
Tomcat specific tools. But I'd do it manually in my application. Use a HttpSessionListener to register the sessions created into the
servlet context. Now we could write an admin servlet to retreive the registered sessions from the servlet context which tell us many things including no. of current users.