A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Windows Service Pack 2
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

XP SP2 event ID 4226 - TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts



 
 
Thread Tools Display Modes
  #1  
Old September 1st 04, 05:48 PM
Torgeir Bakken \(MVP\)
external usenet poster
 
Posts: n/a
Default XP SP2 event ID 4226 - TCP/IP has reached the security limitimposed on the number of concurrent TCP connect attempts

Eitan Caspi wrote:

Hello,

After installing windows XP SP2, I was unable to browse web sites or send /
receive emails.
I disabled the use of windows firewall (I am using another personal fw).

My system is not infected by anything, checked.

I have found in the "system" event log the event ID 4226 - "TCP/IP has
reached the security limit imposed on the number of concurrent TCP connect
attempts".

I was able to find a text referring to this issue only by clicking the link
within the event ID description. It didn't include a way to overcome this
limitation.
I could not find any TechNet article by MS referring to this issue and thus
not a workaround, either by a binary or by a registry key / value.

I wish to know, preferably by someone from "Microsoft", how can I remove
this limitation or set it to a higher limit?

Hi

http://www.microsoft.com/technet/pro.../sp2netwk.mspx

Click TCP/IP in the link above and look for:

"Limited number of simultaneous incomplete outbound TCP connection attempts"


You should not be able to reach this limit by only surfing some Web
sites and send / receive emails manually. There must be something
else in your computer that creates a lot of TCP connections.

There is no supported way to change the limitation, but I have seen
statements that it is possible to do a hex edit on the tcpip.sys file
to increase the limit.


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx
Ads
  #2  
Old September 1st 04, 06:28 PM
Eitan Caspi
external usenet poster
 
Posts: n/a
Default XP SP2 event ID 4226 - TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts

Hello,

After installing windows XP SP2, I was unable to browse web sites or send /
receive emails.
I disabled the use of windows firewall (I am using another personal fw).

My system is not infected by anything, checked.

I have found in the "system" event log the event ID 4226 - "TCP/IP has
reached the security limit imposed on the number of concurrent TCP connect
attempts".

I was able to find a text referring to this issue only by clicking the link
within the event ID description. It didn't include a way to overcome this
limitation.
I could not find any TechNet article by MS referring to this issue and thus
not a workaround, either by a binary or by a registry key / value.

I wish to know, preferably by someone from "Microsoft", how can I remove
this limitation or set it to a higher limit?

Thanks in advance,


--
Eitan Caspi
Israel


  #3  
Old September 1st 04, 06:57 PM
Torgeir Bakken \(MVP\)
external usenet poster
 
Posts: n/a
Default XP SP2 event ID 4226 - TCP/IP has reached the security limitimposed on the number of concurrent TCP connect attempts

Eitan Caspi wrote:

Thank you Torgeir,

The text you referred to is similar to the one from the link in the link
followed from the event ID description.

I have also found this "patch", that hacks tcpip.sys, but I don't want to
use it until I read an official statement by MS regarding this issue, and of
course, it is not so safe to use such unknown solution. you can never know
when this "hacked" version will hit you.
This is why I didn't mention it here or provided a link.

I understand MS base reasoning for this issue, but it can't decide for me
what is "normal" in the way I activate my system.
Not all half-open TCP connections are driven from a malicious cause. Maybe I
am network admin scanning my network for threats?

I believe MS should provide a registry value to be added, that will omit
this limitation for users who know what they are doing, and know how to
protect themselves in the first place.
The current state is really not acceptable, and it is defecting XP.

Hi

The official statement from Microsoft at the time being is "Sorry,
there is no way to change this limit, this is by design".

But I would not be very surprised if Microsoft some time in the
future will release a hotfix that makes it possible to adjust the
limit (but I would guess that would be a type of hotfix documented
in a Knowledge Base article and where you need to call Microsoft
to obtain the updated file(s)).


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx
  #4  
Old September 1st 04, 07:48 PM
Eitan Caspi
external usenet poster
 
Posts: n/a
Default XP SP2 event ID 4226 - TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts

Thank you Torgeir,

The text you referred to is similar to the one from the link in the link
followed from the event ID description.

I have also found this "patch", that hacks tcpip.sys, but I don't want to
use it until I read an official statement by MS regarding this issue, and of
course, it is not so safe to use such unknown solution. you can never know
when this "hacked" version will hit you.
This is why I didn't mention it here or provided a link.

I understand MS base reasoning for this issue, but it can't decide for me
what is "normal" in the way I activate my system.
Not all half-open TCP connections are driven from a malicious cause. Maybe I
am network admin scanning my network for threats?

I believe MS should provide a registry value to be added, that will omit
this limitation for users who know what they are doing, and know how to
protect themselves in the first place.
The current state is really not acceptable, and it is defecting XP.

--
Eitan Caspi


"Torgeir Bakken (MVP)" wrote in message
...
Eitan Caspi wrote:

Hello,

After installing windows XP SP2, I was unable to browse web sites or send
/ receive emails.
I disabled the use of windows firewall (I am using another personal fw).

My system is not infected by anything, checked.

I have found in the "system" event log the event ID 4226 - "TCP/IP has
reached the security limit imposed on the number of concurrent TCP
connect attempts".

I was able to find a text referring to this issue only by clicking the
link within the event ID description. It didn't include a way to overcome
this limitation.
I could not find any TechNet article by MS referring to this issue and
thus not a workaround, either by a binary or by a registry key / value.

I wish to know, preferably by someone from "Microsoft", how can I remove
this limitation or set it to a higher limit?

Hi

http://www.microsoft.com/technet/pro.../sp2netwk.mspx

Click TCP/IP in the link above and look for:

"Limited number of simultaneous incomplete outbound TCP connection
attempts"


You should not be able to reach this limit by only surfing some Web
sites and send / receive emails manually. There must be something
else in your computer that creates a lot of TCP connections.

There is no supported way to change the limitation, but I have seen
statements that it is possible to do a hex edit on the tcpip.sys file
to increase the limit.


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx



  #5  
Old September 1st 04, 08:23 PM
BW
external usenet poster
 
Posts: n/a
Default XP SP2 event ID 4226 - TCP/IP has reached the security limit i

Have you checked how many connections you have?
Start - Run - cmd
Type in netstat -a This will give you all of your connections (open and
listening)


"Torgeir Bakken (MVP)" wrote:

Eitan Caspi wrote:

Thank you Torgeir,

The text you referred to is similar to the one from the link in the link
followed from the event ID description.

I have also found this "patch", that hacks tcpip.sys, but I don't want to
use it until I read an official statement by MS regarding this issue, and of
course, it is not so safe to use such unknown solution. you can never know
when this "hacked" version will hit you.
This is why I didn't mention it here or provided a link.

I understand MS base reasoning for this issue, but it can't decide for me
what is "normal" in the way I activate my system.
Not all half-open TCP connections are driven from a malicious cause. Maybe I
am network admin scanning my network for threats?

I believe MS should provide a registry value to be added, that will omit
this limitation for users who know what they are doing, and know how to
protect themselves in the first place.
The current state is really not acceptable, and it is defecting XP.

Hi

The official statement from Microsoft at the time being is "Sorry,
there is no way to change this limit, this is by design".

But I would not be very surprised if Microsoft some time in the
future will release a hotfix that makes it possible to adjust the
limit (but I would guess that would be a type of hotfix documented
in a Knowledge Base article and where you need to call Microsoft
to obtain the updated file(s)).


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Tcp concurrent connection limit in sp2 Roman Windows Service Pack 2 7 September 2nd 04 12:12 PM
XP boots very slow Prive Windows XP Help and Support 0 August 16th 04 11:33 PM






All times are GMT +1. The time now is 09:24 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.