Overloaded Sessions

You can specify a default timeout for session in the cfadmin, if they are not in your application file as well.

The default should be 20 minutes, this should be sufficient, for users, but in the instance of a bot, this would be an issue since they don't pass a cookie back to your server.

I would look at your web logs and see where the new session are originating from.

Keep in mind in order for a session to maintain itself, the client has to pass the cfid and cftoken cookie values (or in the url) back to the server.  Otherwise the same originating IP over a few minutes, seconds, etc, will keep creating a new session.

Most bots like google or msn have documentation on their web sites on how to create a robot.txt that should be placed in your web root. 

Otherwise you could be getting a DOS attack or some other system that is automatically hitting your site.

Byron Mann

mannb@hostmysite.com

byronosity@gmail.com

Software Architect

hosting.com | hostmysite.com

http://www.hostmysite.com/?utm_source=bb

This can be caused by bots. Search Google for more information on how

to not generate a CF session for a bot request (I think Ben Nadel has

a few blog entries on this).

Mack