[教學] Windows Vista tcpip.sys Connection Limit Patch for Event ID 4226 - qkShare香港討論區

返回   qkShare香港討論區 > 電腦專區 > WindowOS應用交流區 > Window精華區


Window精華區 Window Vista 教學 分享

回覆
 
主題工具
舊 22-08-2008, 22:55   #1
初心者
 
註冊日期: Jan 2008
文章: 32
致謝數: 0
獲感謝文章數:3
獲會員感謝數:3
預設 [教學] Windows Vista tcpip.sys Connection Limit Patch for Event ID 4226

Share on facebook
Apparently in Windows Vista, Microsoft still enforce and hard-limit (hard coded in tcpip.sys) the maximum simultaneous half-open (incomplete) outbound TCP connection attempts per second that the system can make, as in Windows XP SP2, in order to protect the system from being used by malicious programs, such as viruses and worms, to spread to uninfected computers, or to launch distributed denial of service attack (DDoS). When the limit is hit, in Event Viewer, there will be such an entry:

EventID 4226: TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts

Unless Windows XP SP2 which has 10 maximum incomplete concurrent connection attempts limit per second, Windows Vista default limit is based on which edition of Vista users are using. For example, Home Basic has maximum limit of 2, and Vista Ultimate is 25 per second. Normal Windows Vista users should not face any problem or slow network connection with the half-open connections limit. However, heavy P2P (peer-to-peer) applications users such as uTorrent, BitTorrent, BitComet, Azureus, ABC, eMule (eDonkey network), etc, or P2PTV such as TVants, PPLive, PPStream, Sopcast, etc may face some error or slow download and upload speed due to this limit.
Due to enhanced security, to fix or crack the TCP concurrent connection limit in Vista is not as easy as in Windows XP. To remove maximum concurrent half-open connection limits in Windows Vista, apply the patched tcpip.sys with the following steps:
  1. Download patched tcpip.sys: Vista TCP/IP and UAC Auto Patcher (patched tcpip.sys is contained inside the archive) 64-bit tcpip.sys or 32-bit tcpip.sys. Alternative download link for 32-bit and 64-bit.
  2. Open command prompt, and run the following 2 commands: 1. takeown /f c:\windows\system32\drivers\tcpip.sys
    2. cacls c:\windows\system32\drivers\tcpip.sys /G “username”:F
    Replace username with the actual user name that used to log on to Windows Vista currently.
    The second command can also used improved lcacls:
    icacls c:\Windows\System32\drivers\tcpip.sys /grant “username”:f
  3. Disable the TCP/IP Auto-Tuning feature by running the following command in command prompt: netsh int tcp set global autotuninglevel=disable
  4. For 64-bit Windows Vista (x64), the integrity checks need to be disabled as it need all drivers to be signed. So run the following command in DOS prompt: bcdedit.exe -set loadoptions DDISABLE_INTEGRITY_CHECKS
    Note: Above command no longer supported, and users require to press F8 on system startup to bypass driver signing integrity check.
  5. Replace the tcpip.sys in C:\windows\system32\drivers folder with the patched tcpip.sys downloaded from step 1 (remember the use the correct x64 or x86 version). Normally, this procedure can be done by simply login to Windows Vista with administrator account. However, if the process failed, reboot the computer and then press F8 to boot up in Safe Mode, and then copy and paste overwrite the tcpip.sys.
  6. Next, the maximum number of TCP half complete connection limits need to be set in registry. Open registry editor (regedit), and navigate to the following registry key: HKEY_LOCALL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
  7. Right click on the right pane, select “New”, then select “DWORD value”. Enter the new value name as “TcpNumConnections” (without quotes).
  8. Double click on TcpNumConnections registry value, and modify the value data to the desired maximum TCP/IP connection limit that you want to allow, in decimal value. For example, enter 500 as the value data for TcpNumConnections. You can use any limit that you prefer. Alternatively, download this registry registration file (another download link) that when executed, will set the TCP simultaneous connection limit to 16777214 (you can always modify the value in the file or in the registry after applied).
  9. Restart computer.
New: Windows Vista Event ID 4226 Auto Patcher
Latest Version: 2.0
Windows Vista Event ID 4226 Auto Patcher has been renamed as Vista tcpip.sys and UAC Auto Patcher, which now has 6 versions of auto patcher download links for different versions of tcpip.sys with the release of various hotfixes and SP1. Visit here for details.
Driver Version: CrackTcpip.sys for Vista SP1 v.668 - a non-patching method to bypass TCP connection limit.
Also available is TCP/IP auto patcher for 64-bit (x64) Windows Vista SP1.
Gui Version: VistaTcpPath TCP Auto Patcher which works for Vista RTM (non-SP1) version of tcpip.sys.
Old Version:
Version 1.0
Version 1.2
Version 1.3
Version 1.4
Version 1.5
With thanks to YaronMaor for batch script.
The TCP connection limit which trigger Event ID 4226 has now increased to 500 (or any other value you set), and will likely fix the error for re-occurring again.




http://www.lvllord.de/

此篇文章於 22-08-2008 22:57 被 master12 編輯。
master12 目前離線   回覆時引用此篇文章
回覆

主題工具

發文規則
不可以發表新主題
不可以發表回覆
不可以上傳附件
不可以編輯自己的文章

啟用 BB 代碼
論壇啟用 表情符號
論壇啟用 [IMG] 代碼
論壇禁用 HTML 代碼
Trackbacks are 禁用
Pingbacks are 禁用
Refbacks are 禁用



所有時間均為 +8。現在的時間是 15:00


qkShare All Rights Reserved.
重要聲明:本討論區是以即時上載留言的方式運作,qkShare香港討論區 對所有留言的真實性、完整性及立場等,不負任何 法律責任。而一切留言之言論只代表留言者個人意見,並非本網站之立場,用戶不應信賴內容,並應自行判斷內容之真實性。於有關情形下,用戶應尋求專業意見 (如涉及醫療、法律或投資等問題)。 由於本討論區受到「即時上載留言」運作方式所規限,故不能完全監察所有留言,若讀者發現有留言出現問題,請聯絡我們。qkShare香港討論區有權刪除任何留言及拒絕任何人士上載留言,同時亦有不刪除留言的權利。切勿撰寫粗言穢語、誹謗、渲染色情暴力或人身攻擊的言論,敬請自律。本網站保留一切法律權利。
Powered by Translate
af sq ar be bg ca zh-CN hr cs da nl en et tl fi fr gl de el iw hi hu is id ga it ja ko lv lt mk ms mt no fa pl pt ro ru sr sk sl es sw sv zh-TW th tr uk vi cy yi