[qu_est]

Zaheer, on Aug 9 2004, 12:10 AM, said:

Yep, this is the unlimited one.  Look at this page and you will see the hex changes to make so that tcpip.sys is unlimited and not just 50.  I also use eMule and so I've even tested the tcpip.sys that I edited and I can confirm that it is actually unlimited

I looked at that page, it doesn't mention the beta build I currently have on this machine which is working so well, I'm reluctant to change it at the moment.

Will I have a problem with simultaneous connections using build 2142?

[Zaheer]

<<Removed by user>>

This post has been edited by Zaheer: 26 February 2008 - 04:38 AM

[nolookingca]

qu_est, on Aug 10 2004, 10:15 AM, said:

I looked at that page, it doesn't mention the beta build I currently have on this machine which is working so well, I'm reluctant to change it at the moment.

Will I have a problem with simultaneous connections using build 2142?

here's the autopatcher, should work for all sp2 builds http://www.lvllord.d...fix/4226fix.htm

[BAM]

Hi all!

I just installed my brand new customized XPCD with slipstreamed SP2 final.
Used the patched UXtheme.dll and the tcpip.sys from zaheer's post:
"Modified Files Slipstream Pack"

My simple (?) question is how to test if the tcpip file is doing the job we all expect??
Has anyone been able to test it using the non-modified tcpip file and produce the event id: 4226 ? Perhaps with an cmd file or something??

And if he produced it, how can i try to see if i DON'T get it now i'm using the modified file?

Hope you get the point what i want.. I just want to make sure it's all working as it's suppost to do!

(ps. the UXtheme.dll is hereby confirmed as working good)

[BAM]

Nobody has an answer???

I didn't mean to be rude or something like that...
I read the pages in the posts over and over, and don't think that this question was aked before.
Just want to understand how i can check now and in the future if it allready is patched!

Come on guy's, i can't belief that nobody has a simple answer for me!

[prathapml]

BAM, on Aug 10 2004, 11:58 PM, said:

how to test if the tcpip file is doing the job we all expect??

Simple, really.

1. d/l and Install ShareAza (no spyware embedded in it, don't worry).
2. Start it up, finish registration.
3. Let it connect to the peers.
4. Now see if it is connecting to eDonkey network, if it is not, make it do so.
5. Effectively, you've now used requested atleast 70 or 100 (max. = no limit AFAIK) concurrent TCP connections (which SP2 blocks, normally with unhacked files).
5. Run "eventvwr.msc", go to "System" grouping
6. click Event number field (top) to arrange accordingly. Search for EventID 4226, manually with eyes (its orered by numerical order, so you can guess you far you need to scroll before seeing one.

If you don't see any such item as "4226" listed under the "Events" category, you know that your TCPIP.SYS hack was successful.

[gamehead200]

Hmmm... My System Event Log is corrupt... Help? When I'm in Shareaza, all I see is eDonkey "Connecting..." and "Handshaking...", but no "Connected." and I did replace the file...

[visaversa]

time to get the new edonkey 1.0 lol...

[Alanoll]

ewwwww.
edonkey 1.0??? Who uses THAT anymore? pssh, eMule is the new edonkey. lol.

[visaversa]

true, i use bittorrent anyway...edonkey pff

[prathapml]

besides talk of bringing home new donkeys to test something.....

@gamehead-
See if ShareAza is able to connect to the Gnutella1 network (or atleast is able to contact peers to request a connect). If not, then you have some firewall at your end blocking it from connecting outwards - Windows Firewall works fine, ZoneAlarm not.

Using eMule or BitTorrent clients is just as well too! That would also serve the same purpose. Basically, we want to run an app which swiftly raises the number of requests for outward open TCP connections - and then see (through event viewer) if that has been blocked.

[Toonz]

What setting are you guys using for the Windows Firewall for eMule, etc? When I open up tcp 4662 and udp 4672 for use in emule i still get HEAPS of dropped connections.

???

Thanks guys,

[gamehead200]

Gnutella 1 and 2 connect fine, its just eDonkey that doesn't connect...

Attached File(s)

•  ok.jpg (7.77K)
  Number of downloads: 4

[prathapml]

gamehead200, on Aug 11 2004, 07:50 AM, said:

Gnutella 1 and 2 connect fine, its just eDonkey that doesn't connect...

OK, that's fine - sufficient.
Now try downloading something (umm.... something popular which lots of people have shared - ah, why not download XP SP2 itself) for 5 minutes. By this time, the needed results have come. Stop the download and check for EventID 4226 (hopefully that hadn't appeared ).

[gamehead200]

Seems to be connected now... Got an updated server list and it connects... I guess that was the problem! Nothing in the event logs!

[prathapml]

OK, that's cool then!
I suppose we know what that means (unless your logs were lying or your eyes didn't search properly) - it was successful.

[gamehead200]

prathapml, on Aug 10 2004, 11:03 PM, said:

OK, that's cool then!
I suppose we know what that means (unless your logs were lying or your eyes didn't search properly) - it was successful.

My logs got corrupted somehow, so I saved a copy, and cleared it, so now I'm waiting to see what will happen in the next few days...

[gabriel_buc]

I read the entire thread, but I'm confused ....

Which is the link to the patched tcpip.sys file with UNLIMITED connections for SP2 FINAL RTM 2180 ?

EDIT: Nevermind I found the right file. I even verified if it's the correct one and if it's properly hexedited.

[BAM]

@prathapml:

Thnx for youre very nice answer!

It took so long before i got any answer.
I will test it tonight after the last few adjustments i want for my unattend sp2.

Thnx alot.

[dirtyepic]

Hey guys, i just wanted to point something out. SP2's TCPIP.SYS limits the maximum half-open connections made PER SECOND. So yes, you can have 400 connections open in EMule, and yes BT programs let you have 100 or more connections per torrent or 1000 globally by default. That's the number of concurrent (total) connections you can have and that is the number that is controlled by the registry key on the first page of the post. These numbers are not related in any way.

A half-open connection means a connection that is open on your end but doesn't nessessarily have to be connected by another peer, so like opening a listening port that has nothing coming in yet, or requesting a connection to another machine but not established yet. Anyways, you get 10 of these per second under SP2. That's admittedly pretty low for BT or any p2p sharing prog where you can connect to say 200 people within a couple seconds time. But, what happens when you manage to hit this limit for whatever reason is the TCP/IP stack goes into a flood control kind of mode, and queues pending connections and processes them at the rate set by Max Connects per Second (ie. 10, or 50 if you've patched).

Now, if you consider that for a second (or 10 connections), it's pretty rare that any application you're running needs to establish a huge amount of connections for any considerable length of time. Usually it's a burst of connection activity - when you start a torrent or download a whatever you crazy eMule people call it - and once they're established there's a pretty big dropoff. So, basically the only way this setting is even affecting you is it takes a few more seconds than usual to establish connections when there's a lot of TCP/IP activity.

That's it.

In fact, in Azureus there's a feature, "Slowly connect new peers", and it does the exact same thing as this TCP/IP stack change does, altho i'm not sure of the rate. This isn't unique to Azureus, it's a concept that's been around for a long time - look at mIRC flood control, it's the same thing. The point is, because mass-opening connections is an effective way to make an OS scream like a little girl, many programs that have the ability to do so already have built-in traffic control you've just never noticed.

Seriously, the only thing that will be hindered by this change is software that opens a very large amount of new connections in a very short amount of time, for a very long amount of time. i think that made sense. you get what i mean. other than port scanners and malware/worms, i can't think of anything else that would require more than 10 (or 50) connections per second for any reasonably large period of time. (there very well may be legit programs that do, i just can't think of any).

Sorry bout the long post. One of my biggest annoyances is misinformation. Thanks for your time and please try to spread the word.