Name

jstatd - Virtual Machine jstat Daemon

SYNOPSIS

f3
jstatd [ f4optionsf3 ]

f3

PARAMETERS

options Command-line options. The options may be in any order. If there are redundant or contradictory options, the last option specified will take precedence.

DESCRIPTION

The f3jstatd tool is an RMI server application that monitors for the creation and termination of instrumented HotSpot Java virtual machines (JVMs) and provides a interface to allow remote monitoring tools to attach to JVMs running on the local host.

The f3jstatd server requires the presence of an RMI registry on the local host. The f3jstatd server will attempt to attach to the RMI registry on the default port, or on the port indicated by the f2-p port option. If an RMI registry is not found, one will be created within the f3jstatd application bound to the port indicated by the f2-p port option or to the default RMI registry port if f2-p port is omitted. Creation of an internal RMI registry can be inhibited by specifying the f2-nr option.

f3NOTE: This utility is unsupported and may or may not be available in future versions of the JDK. It is not currently available on the Windows 98 and Windows ME platforms.

OPTIONS

The f3jstatd command supports the following options:

-nr Do not attempt to create an internal RMI registry within the f2jstatd process when an existing RMI registry is not found.

-p port Port number where the RMI registry is expected to be found, or, if not found, created if f2-nr is not specified.

-n rminame Name to which the remote RMI object is bound in the RMI registry. The default name is f2JStatRemoteHost. If multiple f3jstatd servers are started on the same host, the name of the exported RMI object for each server can be made unique by specifying this option. However, doing so will require that the unique server name be included in the monitoring client's f2hostid and f2vmid strings.

-Joption Pass f2option to the f3java launcher called by f3javac. For example, f3-J-Xms48m sets the startup memory to 48 megabytes. It is a common convention for f3-J to pass options to the underlying VM executing applications written in Java.

SECURITY

The f3jstatd server can only monitor JVMs for which it has the appropriate native access permissions. Therefor the f3jstatd process must be running with the same user credentials as the target JVMs. Some user credentials, such as the f2root user in UNIX(TM) based systems, have permission to access the instrumentation exported by any JVM on the system. A f3jstatd process running with such credentials can monitor any JVM on the system, but introduces additional security concerns.

The f3jstatd server does not provide any authentication of remote clients. Therefore, running a f3jstatd server process exposes the instrumentation export by all JVMs for which the f3jstatd process has access permissions to any user on the network. This exposure may be undesireable in your environment and local security policies should be considered before starting the f3jstatd process, particularly in production environments or on unsecure networks.

The f3jstatd server installs an instance of RMISecurityPolicy if no other security manager has been installed and therefore requires a security policy file to be specified. The policy file must conform to the default policy implementation's

f2Policy File Syntax @

http://docs.oracle.com/javase/7/docs/technotes/guides/security/PolicyFiles.html.

The following policy file will allow the f3jstatd server to run without any security exceptions. This policy is less liberal then granting all permissions to all codebases, but is more liberal than a policy that grants the minimal permissions to run the f3jstatd server.

f3
grant codebase "file:${java.home}/../lib/tools.jar" {

f3
   permission java.security.AllPermission;

f3
};

f3

To use this policy, copy the text into a file called f2jstatd.all.policy and run the f3jstatd server as follows:

f3
jstatd -J-Djava.security.policy=jstatd.all.policy

f3

For sites with more restrictive security practices, it is possible to use a custom policy file to limit access to specific trusted hosts or networks, though such techniques are subject to IP addreess spoofing attacks. If your security concerns cannot be addressed with a customized policy file, then the safest action is to not run the f3jstatd server and use the f3jstat and f3jps tools locally.

REMOTE INTERFACE

The interface exported by the f3jstatd process is proprietary and is guaranteed to change. Users and developers are discouraged from writing to this interface.

EXAMPLES

Here are some examples of starting f3jstatd. Note that the f3jstatd scripts automatically start the server in the background.

Using Internal RMI Registry

This example demonstrates starting f3jstatd with an internal RMI registry. This example assumes that no other server is bound to the default RMI Registry port (port 1099).

f3
jstatd -J-Djava.security.policy=all.policy

Using External RMI Registry

This example demonstrates starting f3jstatd with a external RMI registry.

f3
rmiregistry&
jstatd -J-Djava.security.policy=all.policy

This example demonstrates starting f3jstatd with an external RMI registry server on port 2020.

f3
rmiregistry 2020&
jstatd -J-Djava.security.policy=all.policy -p 2020

This example demonstrates starting f3jstatd with an external RMI registry on port 2020, bound to name AlternateJstatdServerName.

f3
rmiregistry 2020&
jstatd -J-Djava.security.policy=all.policy -p 2020 -n AlternateJstatdServerName

Inhibiting creation of an in-process RMI registry

This example demonstrates starting f3jstatd such that it will not create a RMI registry if one is not found. This example assumes an RMI registry is already running. If it is not, an appropriate error message is emitted.

f3
jstatd -J-Djava.security.policy=all.policy -nr

Enabling RMI logging capabilities.

This example demonstrates starting f3jstatd with RMI logging capabilities enabled. This technique is useful as a troubleshooting aid or for monitoring server activities.

f3
jstatd -J-Djava.security.policy=all.policy -J-Djava.rmi.server.logCalls=true