Windows XP SP2 TCP Connection Limit (Event ID 4226)
With the release of Service Pack 2 (SP2) for Microsoft Windows XP, the SP2 has introduced a feature that limit concurrent TCP connection attempts that are possible to 10 per seconds. In Service Pack 1 or without Service Pack, there is no limit on concurrent TCP connection attemps.
This feature is introduced in order to reduce the threat of computer worms spreading too fast without control. With the limit, only a maximum of 10 connection attemps per second are allowed. This may have affects applications, servers and p2p programs that attemp to open many outbound connections at the same time.
To know if you’re hitting concurrent TCP connection attempts limit, use the Event Viewer. Under “System”, look for TCP/IP Warnings saying: “TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts”. It has the Event ID of 4226.
To change or remove the limit imposed on connection attempts in Windows XP SP2, you can use the following program that works on every language of Windows XP:
Event ID 4226 Patcher version 2.23d
Website: http://www.lvllord.de/
Update: TCP/IP simultaneous connection limit patch for Windows Vista
You might want to back up the tcpip.sys, although the program has the ability to restore tcpip.sys to original state.
Related Articles
- Windows Vista tcpip.sys Connection Limit Patch for Event ID 4226
- Windows Half-Open Limit Fix (Patch) Free Download to Remove XP, Vista and Server 2003 (32 and 64-bit) TCP 4226 Connection Attempts Limit
- TCP/IP Has Reached the Security Limit Imposed on the Number of Concurrent TCP Connect Attempts Error on Windows Vista
- Download Vista tcpip.sys and UAC Auto Patcher to Increase TCP Connection Limit
- ppStream Connection Limit in Configuration Settings
- Half-Open Outbound TCP Connections Limit Removed in Windows 7 and Vista SP2 (No Patch Required)
- VistaTcpPatch Windows Vista TCP Half Open Limit Auto Patcher GUI Version
- Disable and Remove Half-Open TCP Connections Limit (to Unlimited) in Windows 7 and Vista SP2 with EnableConnectionRateLimitin Registry Key
- How to Enable Concurrent Half-Open TCP Connect Attempts Limit in Windows Server 2008 and Vista SP2 or Windows 7
- Limit Maximum TCP Connections to Web Servers










































October 15th, 2008 02:09
[...] outbound half-open TCP/IP connection? For Windows XP, LvlLord.de wrote an automated tool EventID 4226 Patcher to patch the binary of tcpip.sys without user manual intervention. However, for Windows Vista, [...]
September 11th, 2008 13:54
Does the Event 4226 patch work with XP Pro SP3? I already know that it works with SP2 if it is done correctly.
September 7th, 2008 15:36
please help!!!
How can I configure my dialer to call and receive phone line usig usb external voice modem.
I don’t use internet.
I use phone line only.
August 6th, 2008 23:58
Damn it, i still got a BSOD :
Driver_IRQL_LESS_OR_EQUAL
It only happens when azareus vuze runs.
Help me out.
August 6th, 2008 21:32
Hey, thanks for posting this tip, i was passing through hell with VUZE AZAREUS, until my mind stroke me the idea of increasing connection, now i can forget about DRIVER_IRQL_LESS_OR_EQUAL.
Funny though it is simple.
Keep posting dude.
July 19th, 2008 18:38
How can I patch the XP x64 bit TCP system?
the latest “Event ID 4226 Patcher version 2.23d” doesn’t work..
Maybe because it’s updated with SP2 !?
Please help..
June 20th, 2008 16:47
Loosers! Every body don’t download this crap file , it fucked system and doesn’t work perfectly . i prefere to doit manually if there is anyway !
May 4th, 2008 06:25
So instead of fixing the exploits worms use, they simple cripple the system and call it a fix. Fucking microshit retards!
April 28th, 2008 10:48
lol, keep in mind that the patch didn’t work on your computer. That doesn’t mean it doesn’t work.
I just upgraded my limit from 10 to 50 with that program (It was the EvID4226Patch.exe).
So thanks for these instructions!
April 25th, 2008 00:47
The patch fucked up my PC!
the firewall intrusions are blocking traffic every seoncd!!
don’t download this crap FILE IT Didn’t work
fuck off biotch
March 13th, 2008 08:25
Lvlord’s patcher is crap. It doesn’t work. It simply disables the event 4226, doesn’t actually remove the limit of 10 half-open connections.
December 1st, 2007 05:03
I’m trying to use the LvlLord’s TCP/IP patcher on my OS which is Windows Vista. When the dos screen comes up, it tells me that there is an error. The error says: Error read file “C:\Windows\System32\Drivers\TCPIP.SYS” at position 0. Press any key to continue. I can’t get to press “Y” as it won’t allow me pass the error screen. Any help here? is there one suitable to run on Vista?
May 30th, 2007 09:21
When I try to do LvlLord’s patch I am told that the following files could not be renamed:
-\I386\TCPIP.SY_
Please rename these files manually.
How do I do this?
May 8th, 2007 23:02
[...] are good to go. Please note that Windows XP SP has limited connection. Check this article on how to remove the limitation. It would be better if you use your Windows 2000 Server/Windows 2003 Server as the VPN server since [...]
April 9th, 2007 03:30
[...] half-open (incomplete) outbound TCP connection attempts per second that the system can make, as in Windows XP SP2, in order to protect the system from being used by malicious programs, such as viruses and worms, [...]
March 26th, 2007 23:25
[...] And this -> Windows Xp Sp2 Tcp Connection Limit Event Id 4226 [...]
February 18th, 2007 02:46
[...] Vista Network Connections Is there a Vista network connection limit thing just like SP2 of XP has? example of the SP2 limit: http://www.mydigitallife.info/2005/1…event-id-4226/ [...]
February 8th, 2007 22:11
Hello,
I used it but it didnt work. My system WinXP Pro SP2 opened in Safe Mode and when I run this file, said “do you want to change limit to 50″ I said yes. Restarted system but what is the problem??? Please help me.
November 20th, 2006 19:31
The file is not infected. It just does something that a virus/worm might also want to do (to increase its transmission rate). So it is correctly reported as having virus like behaviour.
Google* “Event ID 4226″ and read the comments on David Kaspar’s blog (top link for me).
* Of course I really mean “use a non-specific internet search tool that will not sue you for using their name as a verb”. c.f. “Hoover”
November 18th, 2006 11:25
The File is infected. You loosers!
November 9th, 2006 14:58
FYI — AVG scan of the ZIP file containing the Event ID 4226 Patcher version 2.23d is infected with embedded object HackTool.AB
August 31st, 2006 14:47
It doesen’t work with my system, WTF?
January 6th, 2006 18:38
[...] Disable Windows XP Service Pack 2 TCP Connection Limit [...]
January 4th, 2006 13:18
[...] Note: TCP connection limit of Microsoft Windows XP SP2 must be altered to higher value in order for this tweak to work properly. [...]
January 2nd, 2006 02:46
[...] Note: If you’re using Windows XP with SP2, you need to patch the limit of simultaneous TCP/IP connection of 10 to higher number, i.e. 100. Note: As the ppStream will download media stream at optimum speed of about 372 kbps, so it’s best to have a faster Internet connection to have better experience. 512 kbps is simply not enough. [...]