1. The
servlet engine unbinds all attached data as it is invalidating (expiring) a session so it would not do you any good to have one.
2. In
Tomcat the management application will list the number of active sessions - or you could use one of the listeners.
Bill