Tomcat does not release timedout sessions

I'm working with Tomcat 5 under JBoss.

When my application is running for a long while I can see that there are some sessions that although their timeout has passed still were not invalidated by Tomcat.

These sessions getLastAccessedTime() is about 30 sec after creation.

Their time out is set to 420sec (7min).

Trying to invalidate those works just fine, after invalidating them they are just gone.

Important to remember that most sessions are invalidated automatically by Tomcat.

Are there any known defects in Tomcat creating this behavior?

Thanks,

Yohai

[613 byte] By [ydaroma] at [2007-10-2 5:50:00]