TCPIP.SYS issue

[Burleyman]

I am getting this warning on all the users I have checked so far (40+), Event
ID:4226, Source Tcpip, and it states TCP/IP has reached the security limit
imposed on the number of concurrent TCP connection attempts. I know it means
that over 10 connections did not fully connect in 1 second (if I am wrong let
me know). What I need to do is to find out how I can increase that amount, as
it is causing problems with my users. I was going to use a hex editor for the
TCPIP.SYS file but I do not know the offset to the area that would need to be
changed. Can someone please help me with something that I can do to increase
this? I really don't want to download some new TCPIP.SYS file from some
unknown on the web, I would prefer something from Microsoft.

 

[Thee Chicago Wolf]

I am getting this warning on all the users I have checked so far (40+), Event

ID:4226, Source Tcpip, and it states TCP/IP has reached the security limit
imposed on the number of concurrent TCP connection attempts. I know it means
that over 10 connections did not fully connect in 1 second (if I am wrong let
me know). What I need to do is to find out how I can increase that amount, as
it is causing problems with my users. I was going to use a hex editor for the
TCPIP.SYS file but I do not know the offset to the area that would need to be
changed. Can someone please help me with something that I can do to increase
this? I really don't want to download some new TCPIP.SYS file from some
unknown on the web, I would prefer something from Microsoft.

Use bittorrent much?

- Thee Chicago Wolf

 

[Tonnie]

I am getting this warning on all the users I have checked so far (40+), Event
ID:4226, Source Tcpip, and it states TCP/IP has reached the security limit
imposed on the number of concurrent TCP connection attempts. I know it means
that over 10 connections did not fully connect in 1 second (if I am wrong let
me know). What I need to do is to find out how I can increase that amount, as
it is causing problems with my users. I was going to use a hex editor for the
TCPIP.SYS file but I do not know the offset to the area that would need to be
changed. Can someone please help me with something that I can do to increase
this? I really don't want to download some new TCPIP.SYS file from some
unknown on the web, I would prefer something from Microsoft.
--

check here: http://www.lvllord.de/?url=tools

Not from Microsoft though....

 

[Burleyman]

No...don't use bittorrent......
Well it does not seem that there is a Microsoft solution so I will move on.

Thanks for your post.

 

[Burleyman]

Thanks....I did find that but was hoping for a Microsoft solution. Maybe I
will contact them on this.

 

[Thee Chicago Wolf]

No...don't use bittorrent......

Well it does not seem that there is a Microsoft solution so I will move on.

Thanks for your post.

The only way that happens if from a P2P client or Bittorrent. There is
no other way to evoke that Event ID that I am aware of. The is no
Microsoft solution because they have hard-coded that 10 connection
limitation into the tcpip.sys driver when the outbreak of Sasser and
other worms from before SP2 was released as a way of combating
hundreds of connection sending or communicating virii. XP was the
first Windows OS to use RAW sockets and the original SP0 and SP1
connection limit was 100 (or more), if I remember right. It's a
"damage control" kludge really.

- Thee Chicago Wolf