Incase your still looking for one..
Full Version: [win Xp Sp 2/win 2k3 Server] Tcpip.sys Fix
| CODE |
| Event ID 4226 Patcher (4226 fix) What's this all about? After almost everybody knows the <<EventID 4226: TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts>>, I used a day to create for educational purpose a fix for this argumentative feature. Unfortunately there exists no REG-key which could easily be set (would be so nice and easy, right? *smile*). The file TCPIP.SYS in the directory C:\WINDOWS\SYSTEM32\DRIVERS and C:\WINDOWS\SERVICEPACKFILES\I386 has to be changed (system dependend eventually in C:\WINDOWS\SYSTEM32\DLLCACHE, too). What's been done: To say it easy: the before 10 half-open connections are beeing increased to 50 (can be changed during runtime and with the parameter /L) and the CRC is been corrected. And that's it! Comment: The method described here, should only be used by users, who know how to handle all the described. With the download of the here published program the user know, that changes are made on third party files. For damages in every kind I cannot be hold responsible for. Indeed, tests worked fine here. However, nothing is impossible. Info: When error occurs, the patcher can change the TCPIP.SYS back to the original! Instruction: Just download the patcher and execute it. It will automatically find the windows directory and ask, if it should increase/decrease. For higher values, please check the help with parameter /?. After a successful patch, the new TCPIP.SYS will be automatically installed. After that, the computer should be restartet. |
"restartet ".. hmm nice typo for a decent site
HomePage for more info: www.lvllord.de
English version:
http://www.lvllord.de/download.php?url=en/...Patch212-en.zip
German version:
http://www.lvllord.de/download.php?url=de/...Patch212-de.zip
The above languages work all all version of WIN XP SP2 + win server 2003 SP1
it's just that the application will gives all text back to you in the language chosen
If I am right it sets the connectionlimit 0f 10 to 50..
but there is an option to increase this by running
EvID4226Patch /L 100
for example...
there is also an option for incase you get errors cause connection higher then 50 might cause some problems..
| CODE |
/U = Uninstall patch and reinstall safety-copy |
so
EvID4226Patch /U
will uninstall the patch incase it gives some errors.. for more command line stuff..
EvID4226Patch /?
Didn't tested it mself yet cause I didn't install SP2 yet..
Serhat
I had no idea such a thing existed, this will make work at the office more efficient, can't be that hard to apply such a simple patch 
Thanks alot Serhat.
Thanks alot Serhat.
Hey I might replace my TCP stack with some unknown patch from a little known German site. hehe
Sounds like this patch is fairly new. Only been around for a month. I think i might wait a little while and see how it fairs. Don't know what the side effects might be???
I've already run into this issue when performing network stress testing. A little annoying but i've always found other solutions to get around it. Apparently though people who use P2P are most effected with the 10 Max concurrent connections. I'm not a big user of P2P so I haven't really noticed this yet.
Sounds like this patch is fairly new. Only been around for a month. I think i might wait a little while and see how it fairs. Don't know what the side effects might be???
I've already run into this issue when performing network stress testing. A little annoying but i've always found other solutions to get around it. Apparently though people who use P2P are most effected with the 10 Max concurrent connections. I'm not a big user of P2P so I haven't really noticed this yet.
| QUOTE (uko @ Sep 26 2004, 10:23 PM) |
| Sounds like this patch is fairly new. Only been around for a month. I think i might wait a little while and see how it fairs. Don't know what the side effects might be??? |
well if there are any side effects there is an option to uninstall it anway.. so you should have to worry..that is.. if there is no bug in the uninstall option heheh
These kinda fixes were around for some time..but not for TOO long..
there are also some other alternatives..
like there is this application called nlite which can slipstream stuff for your XP CD and some other usefull stuff aswell.. and if I didn't readit wrong that software got this option aswell...so your slipstreamed version will have the fix also..
http://nuhi.msfn.org/ for it's homepage..
[EDIT]Found some more info about this fix.. many think it limits P2P crap etc too but seems not..atleast according to this guy on a forum..
| QUOTE |
| Ok, this weekend we saw a bunch of fud on the issue of the 10 connections through TCP/IP in windows XP sp2 and how some people thought that it would limit their connections to P2P applications. Alot of the infomation that was spreaded was not true, in fact it was very similar to the similar fud that came out about QoS in windows XP in how it allegedly limited bandwidth for itself (news flash, it dosn't) so im here to set the record straight. Feel free to archive this in a faq somewhere. 1. First order of business. the new TCPIP.sys file DOES NOT LIMIT MAX CONNECTIONS OUT! I dont care if you connected to kazaa before and after you did the patch it wont make any difference on the amount of people you are connected to. Likely the people who saw a drop in connections are having issues with the new XP firewall. if you need proof do the following. surf for a while. go to a command prompt and type in 'netstat -a' a lot more than 10 connections eh? What actually is going on is that windows is now queueing up the amount of connections it will make in a second. an example of this is say that program X wants to make 100 connections in one second, but the max allowed out is 25, windows will send out 25 per opening. To tell you the truth a fair amount of modems in general do the same thing in hardware. its not createing lag, it wont prevent you from connecting, its all to prevent network congestion. Did you know that some Blaster infected machine sent out as many as 3,000 connections per second? Now you see why they did it. now the possibility of millions of XP machines online all broadcasting a virus wont slow the entire web down similar to what happened then. 2. But Event 4226 is filling out my logs, that must be bad right? NO. its fine. what the event is telling you is that its queueing connections. Use this as a tool, if you see this coming often and you are not doing anything that can cause it to sometimes occur like P2P apps check your system out! I can guarantee that half the people who say "I use common sense so I dont need AV" were most of the people coming here crying because their machine was rebooting when blaster hit. Be a responsible Netizen and keep your machine in check! 3. I dont care, I still want to patch. Thats fine. just remember to keep your system in check, if you are running a server you probably definitely want to do it if you want to maximize capacity. The widely circulated way of going into the registry to fix the problem does not work as its for something entirely different and only deals with Internet Explorer. The only way that you can change this is to edit out tcpip.sys. The site at the moment that has correct info is http://www.lvllord.de/index2.htm He provides a patch that you must run in safe mode that will update the stop to 50 connections. For most people even hardcore users this is good enough. it wont help you if you go to unlimited connections and will only cause you to spread whatever you have if your caught unpatched on the next big virus. He also provides the correct keys if you still want to go unlimited. |
Dear Serhat
Lord is a member of gso
And it was posted 1 or 2 days after sp2 rls but..
but thx for the great effort
faithfully your KuerbY
Lord is a member of gso
And it was posted 1 or 2 days after sp2 rls but..
but thx for the great effort
faithfully your KuerbY
yea i had it for a whilw now and i also wrote a tutorial, but on a diff. board.
its quiet old...
its quiet old...
| QUOTE (KuerbY @ Sep 27 2004, 09:07 AM) |
| Dear Serhat Lord is a member of gso And it was posted 1 or 2 days after sp2 rls but.. but thx for the great effort faithfully your KuerbY |
lol lord wrote it then huh? cool
and also like I stated in the first post.
| QUOTE |
| Incase your still looking for one.. |
some are still sleeping.,,
and m8.. don't talk like that to me.. you freaking me out..
heh will look out for it on IRC though
Serhat
CODE
Offset ............. Wert Original .............. Wert Unlimitiert
1 3 0 ............. 6 E 1 2 0 6 ..................... F F F F 0 6
4 F 3 2 2 ............. 0 A 0 0 0 0 ..................... F F F F F F
1 3 0 ............. 6 E 1 2 0 6 ..................... F F F F 0 6
4 F 3 2 2 ............. 0 A 0 0 0 0 ..................... F F F F F F
use that offset 2 correct the tcp.sys
taken from lvllords forum
not testet already
also heard replace with the old file before the sp2
it should also work
I dont use sp2 myself but read abt thi 10 connection limit Per port . Myfreind use to have lotta dloading problems from p2p programs So i tried this patch on his machine . Everything worked fine and he now dont have much prob while downloading multiple files from p2p networks . Dunno exactly if it was this patch that corrected prob or something else i did . But this patch works for sure
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
