Knowledge Base

Removing XP SP2's limitation on outgoing TCP connection attempts

Cette page n’existe pas en français en ce moment. Nous vous prions de nous excuser.

Microsoft has introduced a new security feature with the release of Windows XP SP2 that limits the number of possible TCP connection attempts per second to 10 (was unlimited before). This feature can possibly affect programs that make heavy use of TCP/IP connections, e.g. Paessler's Webserver Stress Tool and IPCheck Server Monitor. This article explains how to patch your system to remove the limitation.

The Problem

With 10 new connections per second you can still create 600 connections per minute, but this is still not enough for a load testing tool like Webserver Stress Tool, or when monitoring large networks with IPCheck Server Monitor.

If you experience event ID 4226 in your event log or receive the message "TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts" while running Webserver Stress Tool you must make changes to your Windows installation!

Unfortunately there exists no REG-key which could easily be set. The only way to get rid of this limitation is to apply a patch to the TCP/IP Windows library. The file TCPIP.SYS in the directory C:\WINDOWS\SYSTEM32\DRIVERS and C:\WINDOWS\SERVICEPACKFILES\I386 has to be changed (system dependend eventually in C:\WINDOWS\SYSTEM32\DLLCACHE, too).

The Solution

To change or remove the limit, you can use the following program: Event ID 4226 Patcher v2.x - A patching program for removing or changing the limit imposed on connection attempts in SP2. The patcher has the ability to restore tcpip.sys back to the original... Still, you might want to back up tcpip.sys, use it at your own risk.

The URL of the download page is:
www.lvllord.de/?lang=en&url=downloads

(The author of this patch can be reached at www.lvllord.de).

This program increases the value from 10 half-open connections to 50 and the CRC is been corrected. The value can be changed during runtime and with the parameter /L.

Instructions

Just download the patcher and execute it. It will automatically find the windows directory and ask you if it should increase/decrease the value. For higher values than 50, please check the help with parameter /?. After a successful patch, the new TCPIP.SYS will be automatically installed. After that, the computer should be restarted.

By Category

General Networking

Webserver Stress Tool