Vista tcpip.sys Auto Patcher v2.2


Recommended Posts

I'm getting "TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts" in my event viewer when I use bit torrent lately. I used the wrong vista tcpip auto patcher version and really screwed up my OS, I had to restore an image. Since I know what I did wrong I think I'll try again but use the correct auto patcher for my version of the tcpip.sys file.

Is there another way around this problem or what?

Link to comment
https://www.neowin.net/forum/topic/666548-vista-tcpipsys-auto-patcher-v22/
Share on other sites

Is there another way around this problem or what?
yeah correctly configure your BT client to not make so many half open connections!! A lower half open connection has no effect on your download speed.. But hitting the limit sure will.

the tcpip patcher doesn't work on Vista x64 very well. it's extremely hard to get it working properly, so if you have vista x64 then give up and just set your connections lower

if you on windows xp or vista 32-bit then there are plenty of guides out there

I run utorrent, and have my net.max_halfopen set to the default 8, and have never once had the 4226 error in the event log. I just double checked -- the log goes back to 2/11/08, not one 4226 error

And utorrent is running 24/7/365 -- normally download and seeding multiple items.

if you are getting these errors, you most likely have something else running at the same time as your bt client also creating half open connections.

if you don't believe us that its FUD, here is some more info

http://www.p2pforums.com/viewtopic.php?f=111&t=32557

TCP/IP.sys Half-open connection limit guide.

Do your own research you will find that anyone telling you to install some patch has not a freaking clue to what they are talking about - PERIOD!

Does the limit in anyway actually slow down what its suppose to slow down -- I highly doubt it.. 10 half open connections a second it a lot of connections! So that worm could still find lots of machines to infect.. but hopefully the slow down it will cause in the normal traffic would alert the user that something is clearly wrong, etc.

I would suggest you look to what else might be causing your 4226 errors. Grab your fav sniffer and take a look at what is being put on the wire.. But even if you managed to remove the 10 half open connections a second limit, you did not fix anything. And only managed to mask an underlaying issue with your system.

And what problem did it fix exactly? Do you have any idea why the limit is there in the first place or even what a half-open connection is?

it fixed my error in event viewer and my internet doesn't drop when I use utorrent. I read a couple weeks ago that the limit is there because of worms that use to run IRC and make multiple connections as hosts. I'm probably wrong, I just skimmed over what I read, and I don't know what a half-open connection is.

the tcpip patcher doesn't work on Vista x64 very well. it's extremely hard to get it working properly, so if you have vista x64 then give up and just set your connections lower

if you on windows xp or vista 32-bit then there are plenty of guides out there

you can see from my last post that I got it working, and it was very easy. I just ran the batch file that installed the patched tcpip.sys file and readydriver plus to automate the disabling of digital driver signature signing check. it took less then 2 minutes, i have a true image backup in case things go wrong.

I have no idea why people still believe this FUD. The patch does nothing!

read my last post.

I run utorrent, and have my net.max_halfopen set to the default 8, and have never once had the 4226 error in the event log. I just double checked -- the log goes back to 2/11/08, not one 4226 error

And utorrent is running 24/7/365 -- normally download and seeding multiple items.

if you are getting these errors, you most likely have something else running at the same time as your bt client also creating half open connections.

if you don't believe us that its FUD, here is some more info

http://www.p2pforums.com/viewtopic.php?f=111&t=32557

TCP/IP.sys Half-open connection limit guide.

Do your own research you will find that anyone telling you to install some patch has not a freaking clue to what they are talking about - PERIOD!

Does the limit in anyway actually slow down what its suppose to slow down -- I highly doubt it.. 10 half open connections a second it a lot of connections! So that worm could still find lots of machines to infect.. but hopefully the slow down it will cause in the normal traffic would alert the user that something is clearly wrong, etc.

I would suggest you look to what else might be causing your 4226 errors. Grab your fav sniffer and take a look at what is being put on the wire.. But even if you managed to remove the 10 half open connections a second limit, you did not fix anything. And only managed to mask an underlaying issue with your system.

I did some research, and its a common problem on vista as well as XP. I reformatted to see if I receive the error on a fresh install, and I did. So I ruled out a possible infection. I have suspicion that my onboard NIC is going bad, so that could be my underlaying cause.

I don't know what a half-open connection is.
Then it's quite clear you did not even make a half ass attempt at any research to what your issue really is.. Just as the rest of the lemmings out there following the FUD about the so called "patch" Who then pass on the nonsense to their buddy :rolleyes:

Did you even bother reading the info I linked to?

Then it's quite clear you did not even make a half ass attempt at any research to what your issue really is.. Just as the rest of the lemmings out there following the FUD about the so called "patch" Who then pass on the nonsense to their buddy :rolleyes:

Did you even bother reading the info I linked to?

I probably read what it is but I didn't remember. You could be right, or you could be wrong, it just depends what site you get your info on, if you google the problem theres a wealth of information. I could find 20 links that agree with you or 20 that don't. But I have nothing to prove, if my problem creeps back, then I have images to restore to. My PC is clean, with eset smart security 3.0, spybot, and windows defender so I'm not worried about a malware infection.

I probably read what it is but I didn't remember. You could be right, or you could be wrong, it just depends what site you get your info on, if you google the problem theres a wealth of information. I could find 20 links that agree with you or 20 that don't. But I have nothing to prove, if my problem creeps back, then I have images to restore to. My PC is clean, with eset smart security 3.0, spybot, and windows defender so I'm not worried about a malware infection.

Rest assured, in this area, if Budman says you're wrong...you're wrong.

I agree with you there are plenty of sites that promote the patch -- and I will state again, none of them have a clue to WTF they are talking about.. Heres a hint -- there is lots of FUD out there!!!

But it's common sense in understanding your not fixing anything -- why do you think you need to make more than 10 HALF OPEN connections a second?

Half open connections are connections that do not answer.. Your machine should not be trying to connect to IPs that do not answer.. When you try to make connections to IPs that do not answer faster than 10 a second, you end up filling up the queue, and now all new connections - even ones that would answer will be slower, since they have to wait their turn in the queue to be created..

This is really what would help find infections, not the limiting to 10 connections a second factor. Since if there are process(es) on your machine looking at random IPs (that do not answer) to infect -- it will fill up the queue, and you will NOTICE the slow down in your internet connection -- ie just browsing can be really slow when your queue is full.. You would then look into WHY this is happening and correct it from doing it -- not just hack it so you do not see the symptom of the problem anymore, like your doing.

If you want to see which process is doing this -- a simple quick easy way to verify that its your BT client doing it.. Then from a command line do a netstat -ano -- this will show you your connections that are half open. Ie they will be in the SYN_SENT state

You can create an example by trying to make a connection to an IP that you know will not answer..

In one command prompt I tried to telnet to this IP, that I know does not listen on telnet, From another command prompt I can see that it is in the half open state.

Active Connections

Proto Local Address Foreign Address State PID

TCP 10.40.0.4:1163 10.10.10.10:23 SYN_SENT 932

The 932 is the PID of the process trying to make the connection. You can then find this processing using your task manager or tasklist from the command line, or just doing a -b on netstat will give you the process name (but can be slow to finish)

If your BT client is in fact doing it, then lower the half open setting again.. Some people run it at 1, due to the fact they use other software at the same time that creates half open connections. This is in no way going to slow down downloads -- since half open connections are not helping you download anything anyway ;) It might just take a few extra seconds to make valid connections is all. If some other process is creating lots of half open connections -- look to why it would be doing that.

It could be your nic I guess -- if your connection attempts are not actually going out on the wire, or your not seeing the answer then your OS would think the connection is half open.. I tend to doubt that -- but sure it could happen I guess, if you have a faulty nic -- that does not put connection requests on the wire, or that does not see the answer.. Don't you think you should FIX THAT vs just masking the issue.

Hacking the stack to remove this limit is like pulling out the check engine light when it comes on vs looking to WHY it is coming on. Like I said before if you managed to remove the limit, you did NOT FIX ANYTHING you masked the issue from you noticing it -- just like pulling out the check engine light on your car cause you don't like it flashing at you ;)

You could be right, or you could be wrong, it just depends what site you get your info on, if you google the problem theres a wealth of information. I could find 20 links that agree with you or 20 that don't. But I have nothing to prove, if my problem creeps back, then I have images to restore to. My PC is clean, with eset smart security 3.0, spybot, and windows defender so I'm not worried about a malware infection.

What is that, Internet Logic? Here's one for you:

5 + 5 = 10 (citing Neowin.net, this post).

5 + 5 = 11 (citing Neowin.net, this post).

One of the above statements is clearly wrong, since they directly contradict each other. Reality does not depend on "what site you get your info on". Realize that you're experiencing a problem, and have addressed the symptoms because that involves double-clicking on some executable file that you downloaded off the Internet, as opposed to actually taking time to diagnose the cause of the issue.

Here's some more food for thought - if you're going to download and run some executable from the Internet without knowing exactly what it does, or why it is useful/not useful, then why exactly do you expect your security software to protect you from malware? Most malware infections these days aren't the fault of the software - they're the fault of the idiot with the admin password, sitting at the keyboard.

^ well said!

And I completely agree with this "fault of the idiot with the admin password, sitting at the keyboard."

But they do not always need the admin password to screw it up.. So you could shorten it to "Fault of the idiot sitting at the keyboard"

Or to really shorten it up -- "PEBKAC" ;)

While I agree that half-op[en connections shouldn't matter, I have had the same experiences as these guys. On multiple machines, Vista and XP. Even after a fresh install.

The patch does something. How else can it be explained that applying the patch fixes the slowdown issues so many users have while using BT?

I recently set up a new Vista box for a friend. The first thing they did was to start downloading a bunch of stuff using uTorrent. Not long after, the web browsing became very slow. The uTorrent D/L and U/L rates where appropriately capped and all other settings where set correctly. Did the TCP/IP patch and everything has been smooth since.

It DOES provide a benefit, albeit a small one, for a small period of time.

I used to use it on my XP system, but didn't bother after reformatting. I only notice BT is slow to get connections for the first minute or so, then it's established and running. I've repeated that behaviour a few times on various systems.

While I agree it does help, it's not really a good solution because of other reasons. (Refer to Budman's post/s)

  • 4 weeks later...
...

Half open connections are connections that do not answer.. Your machine should not be trying to connect to IPs that do not answer.. When you try to make connections to IPs that do not answer faster than 10 a second, you end up filling up the queue, and now all new connections - even ones that would answer will be slower, since they have to wait their turn in the queue to be created..

...

Thanks for clearing that up BudMan. I was just sitting here with the patch ready to go resting my finger on executing it. Well, it seems I have no reason to.

If I understand correctly then I should be able to lower my halfopen connections setting in Utorrent down to... 4? Because if a computer doesnt answer within 4 seconds when I am using a 100Mbit connection then I definately dont wont anything to do with that connection(?).

Anyone kno if Uttorrent recently change their setting for half open connections? Ive never had this problem before and just recently updated Utorrent.

Not sure where you came up with the doesn't answer in 4 seconds? Setting it to 4 does not mean that is how long it waits.

As to the comment "While I agree it does help" -- BS plain and simple.

edIt: @ "The patch does something. How else can it be explained that applying the patch fixes the slowdown issues so many users have while using BT?"

What part do you not understand about if you go over 10 half open connections a second your new connections have to get queued?????? Yes if you have hit the limit, ie a 4226 error -- then yes everything can become slow as Molasses.. Does not matter what you limited the upload/download or number of connections too.

As I thought I clearly went over, and the link I provided also goes over --- correct you application to not create so many freaking half open connections and you will never hit the error limit.. And you will not start queue up new connections.

How you set your bandwidth limits or max number of connections on your application has NOTHING to do with the number half open connections it might try to make. Utorrent defaults to 8, you can lower it if you have other applications running that might also create half open connections or that setting still puts you over the limit -- ie 4226 errors in the event log.. The latest version makes mention of something so it will never go over the half open limits -- the details I am not sure on yet.. But you can lower it to 1 if you need too.. It will not slow down your torrent speeds at all.

Edited by BudMan
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Dude, im talking about simply disable it from settings app. Because of the eu regulation, you could disable it here for years.
    • One big question about Mars was answered thanks to Einstein's 100 year old theory by Sayan Sen Image via DepositPhotos Scientists at the U.S. National Institute of Standards and Technology (NIST) have calculated how time passes on Mars compared with Earth, adding detail to how timekeeping would need to work beyond Earth’s orbit. The study, published in The Astronomical Journal, found that clocks on Mars run an average of 477 microseconds, or millionths of a second, faster per day than clocks on Earth. A microsecond is one millionth of a second, a very small unit used in precise scientific timing systems such as atomic clocks, which measure time using consistent atomic behavior. This difference is not constant. Because Mars moves around the Sun in a non-circular path (an eccentric orbit, meaning its distance from the Sun changes over time instead of staying fixed) and is affected by gravity from other bodies, the daily difference can vary by as much as 226 microseconds over a Martian year. The study also identifies smaller repeating changes of about 40 microseconds per day linked to synodic cycles (repeating periods that describe how planets line up with each other as they orbit the Sun from different positions). These longer patterns affect how time differences slowly rise and fall. To make these estimates, researchers compared Mars with Earth and the Moon. The work looks at relativistic proper time (the time actually measured by a clock depending on its speed and the strength of gravity where it is located, as described in Einstein’s relativity). This shows that each world has its own slightly different “rate” of time. This becomes more important as space missions expand into cislunar space (the region between Earth and the Moon) and toward Mars. On Earth, time systems rely on atomic clocks and satellites, which stay closely synchronized for navigation and communication. The study is based on Albert Einstein’s theory of relativity, which shows that time is affected by gravity and motion. Stronger gravity makes clocks run slower, while weaker gravity makes them run faster. “The time is just right for the Moon and Mars,” said NIST physicist Bijunath Patla. “This is the closest we have been to realizing the science fiction vision of expanding across the solar system.” A day on Mars is about 40 minutes longer than on Earth, and a Martian year lasts 687 Earth days. But the main question is not just about days and years, but how fast time itself passes. An atomic clock placed on Mars would function normally, but compared with one on Earth, the two would slowly drift apart due to differences in gravity and motion. This requires careful calculation of what is similar to a time-zone difference across planets. Researchers modeled Mars using a reference surface and included gravitational effects from the Sun, Earth, the Moon, and other planets. This includes a multi-body gravitational system (often described as a three-body or four-body problem, where predicting motion becomes difficult because multiple large objects all pull on each other at the same time through gravity). Mars also follows a Keplerian orbit (an idealized elliptical orbit based on simple gravitational laws that assume smooth motion, before adding real-world disturbances from other bodies). In addition, the researchers accounted for solar tides (small changes in gravitational force caused by the Sun that slightly distort planetary motion and timing, especially in systems involving Earth and the Moon). These combined effects are described as relativistic proper-time offsets (small but measurable differences in elapsed time between locations caused by gravity and motion), which must be included when comparing clocks across planets. “But for Mars, that’s not the case. Its distance from the Sun and its eccentric orbit make the variations in time larger. A three-body problem is extremely complicated. Now we’re dealing with four: the Sun, Earth, the Moon and Mars,” Patla explained. “The heavy lifting was more challenging than I initially thought.” Although the differences are extremely small, they matter for navigation and communication systems that depend on precise timing. Even modern networks on Earth, such as mobile systems, rely on timing accuracy at very small fractions of a second. Communication between Earth and Mars currently takes about four to 24 minutes or more depending on planetary positions, meaning signals are not real-time. A shared and accurate time system could help future missions reduce confusion in navigation and data exchange. “If you get synchronization, it will be almost like real-time communication without any loss of information. You don’t have to wait to see what happens,” Patla said. Researchers note that fully developed interplanetary communication networks are still far in the future. However, understanding how time behaves across planets helps prepare for those systems. “It may be decades before the surface of Mars is covered by the tracks of wandering rovers, but it is useful now to study the issues involved in establishing navigation systems on other planets and moons,” said Neil Ashby. “Like current global navigation systems like GPS, these systems will depend on accurate clocks, and the effects on clock rates can be analyzed with the help of Einstein’s general theory of relativity.” Patla added that the results also help improve understanding of time itself under relativity. “It's good to know for the first time what is happening on Mars timewise. Nobody knew that before. It improves our knowledge of the theory itself, the theory of how clocks tick and relativity,” he said. Source: NIST, IOPscience This article was generated with some help from AI and reviewed by an editor. Under Section 107 of the Copyright Act 1976, this material is used for the purpose of news reporting. Fair use is a use permitted by copyright statute that might otherwise be infringing.
    • TeraCopy 4.0 Build 26 by Razvan Serea TeraCopy is a compact program designed to copy and move files at the maximum possible speed, also providing you with a lot of features. Copy files faster. TeraCopy uses dynamically adjusted buffers to reduce seek times. Asynchronous copy speeds up file transfer between two physical hard drives. Pause and resume transfers. Pause copy process at any time to free up system resources and continue with a single click. Error recovery. In case of copy error, TeraCopy will try several times and in the worse case just skips the file, not terminating the entire transfer. Interactive file list. TeraCopy shows failed file transfers and lets you fix the problem and recopy only problem files. Shell integration. TeraCopy can completely replace Explorer copy and move functions, allowing you work with files as usual. TeraCopy is free for non-commercial use only. For commercial use you need to buy a license. The paid version of the program includes the following features: Copy/move to your favorite folders. Save reports as HTML and CSV files. Select files with the same extension/folder. Remove the selected files from the copy queue. TeraCopy 4.0 Build 26 changelog: Added support for receiving files via the LocalSend protocol. Improved exception handling and automated bug report upload. Fixed several minor bugs and small memory leaks. Build 26 (June 24) Fixed a rare exception when a transfer completed. Features added since version 3.17: Enhanced speed graph. New multi-threaded copy engine. Support for copying to multiple targets. Queue system for managing multiple copy operations. Support for receiving files via the LocalSend protocol. TeraCopy entry in the modern Windows Explorer context menu. Integrated toolbar in the title bar. Why receive LocalSend transfers with TeraCopy? Handle file conflicts: Skip, overwrite, or rename files when a file with the same name already exists. LocalSend always creates another copy, which can waste time and disk space, especially when resuming an interrupted transfer. Filter unwanted files: Apply ignore lists or remove files manually before accepting a transfer, so unnecessary files are not downloaded. Better performance on fast networks: In tests over a 10 Gbps connection, TeraCopy received files several times faster than the standard LocalSend app on Windows. Download: TeraCopy 4.0 Build 26 | 14.5 MB (Freeware, paid upgrade available) View: TeraCopy Website | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Briefly used Turbo Pascal (and Turbo C++) in 97 and soon after that I bought PC magazine that included a full version of Delphi 2. I still use Delphi today, some 29 years later.
    • Age of Empires Mobile comes to PC, here's how to carry over progress from your phone by Ivan Jenic Image: YouTube/Microsoft Microsoft just released Age of Empires Mobile for PC. The game, officially called Age of Empires Mobile: PC Edition, is available for free on Steam and Microsoft Store, almost two years after its initial release for handheld devices. Age of Empires is one of those franchises that entire generations grew up with. The original came out in 1997, and immediately got people hooked to building civilizations and crushing their enemies on the battlefield. However, the franchise today is a far cry from its roots, as Age of Empires Mobile is, well, a game optimized for handheld devices, and not a classic RTS title we’ve all loved for years. And, of course, it includes in-game purchases. The PC version is still a mobile game at its core, but it’s been optimized for desktop play. There’s mouse control, full keyboard compatibility, and a refined UI. Microsoft also refreshed the visuals with some 4k textures, so the game should look better on larger screens. The game supports Crossplay, so you can switch between your phone, tablet, and PC without losing anything. But linked progress doesn’t come out of the box, as you have to enable it first. Here’s how to link your progress: On your mobile device, open Age of Empires Mobile. Go to Settings (Gear icon) > Account. Select Bind Account and choose a sign-in option. Once you enable account binding, sign in on PC using the same method, and your progress will be accessible across all your devices. Xbox Game Pass subscribers also get a bonus reward pack on PC, which includes: 1 Monthly Pass Token 1 Custom Resource Chest 10 Universal 60-Minute Speed-Ups 1,000 Empire Coins Exclusive Player Portrait Frame You can find more info about Age of Empires Mobile: PC Edition, as well as download links, on the Age of Empires official website.
  • Recent Achievements

    • One Year In
      Philsl earned a badge
      One Year In
    • Dedicated
      Scoobystu earned a badge
      Dedicated
    • First Post
      Tom Schmidt earned a badge
      First Post
    • One Month Later
      D0nn13 earned a badge
      One Month Later
    • Rookie
      +ChiefOfNeo went up a rank
      Rookie
  • Popular Contributors

    1. 1
      +primortal
      460
    2. 2
      +Edouard
      177
    3. 3
      PsYcHoKiLLa
      124
    4. 4
      Michael Scrip
      79
    5. 5
      Xenon
      76
  • Tell a friend

    Love Neowin? Tell a friend!