Please explain to me what these eventviewer logs mean

[etzina]

---

Hello, please help me with this. My computer suddenly restarts itself and I don't know what's wrong. If I go to eventvwr, these are the logs that have the stati error or warning:

event ID 4226: TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
--> how to increase the max number?

event ID 1001 ("information status"): The computer has rebooted from a bugcheck. The bugcheck was: 0x100000d1 (0x00000400, 0x00000002, 0x00000000, 0xf988fa96). A dump was saved in: C:\WINDOWS\Minidump\Mini112505-02.dmp.

event ID 10010: The server {F81CD990-910B-4BBF-9CB3-6A77F3D697B3} did not register with DCOM within the required timeout.

event ID 1003 (system error): Error code 100000d1, parameter1 00000400, parameter2 00000002, parameter3 00000000, parameter4 f988fa96.

event ID 2504: The server could not bind to the transport \Device\NetBT_Tcpip_{2EC15539-D2C3-4A71-95F3-EF1952721E8C}.

I hope you guys can help me. Is this a hardware issue or just something I need to configure on this comp? Help...

[BayouPinoy]

From a g-search, it appears that:

Windows XP SP2 limits half-open connections (SYN) to a maximum of 10 (the previous limit was over 65,000). This is supposed to slow down certain viruses because their spreading strategy is to try to connect to a high amount of random IP numbers.

The drawback with this connection limit is that other legitimate network intensive applications can be slowed down as well. Applications like security network scanners, peer-to-peer (P2P) applications or a combination of network applications that a power user may be using (VPN, FTP, p2p, RDP, SSH, "Firefox on steroids" and more).

There are two scenarios:
1. You computer may be infected with a virus/worm that is trying to spread
2. You are a networking power users and your applications are being stalled by the XP SP2

If you have anti virus software running and you scan your computer regularl ywith anti-spyware software like AdAware then case 1 is not likely.

You can find out which process is responsible for the many half-open connections with the command 'netstat -no | find "SYN"'. Half-open connections will have a state of other than ESTABLISHED. Note the PID (process id), open Task Manager and locate the process and application responsible for the half-open connections.

The second case means that SP2 is stalling your work. An unofficial patch will modify the locked tcpip.sys and let you set the limit to whatever you wish. 50 half-open connections is a reasonable limit or you can set the limit back to 65,535 which it was before the SP2.

[etzina]

thanks!!!

The second case means that SP2 is stalling your work. An unofficial patch will modify the locked tcpip.sys and let you set the limit to whatever you wish. 50 half-open connections is a reasonable limit or you can set the limit back to 65,535 which it was before the SP2.

i already ran that patch and set it to 50... but is it enough? im downloading some stuff using torrent.....