When analyzing traffic with a packet sniffer, we are seeing an http response from a weblogic server prior to the completion of the http post to that server.

In this case, the jsp page on the server is basically a static page, no logic to do anything with the contents of the post at this time.

But why would the server send the response prior to completion of the post?

I found Weblogic documentation about how to configure the server to ignore a denial-of-service attack using Http post. Maybe that is what is happening?

No one I know has seen this behaviour before. Maybe some weblogic-savvy person will know what is going on.

Thanks