Vista RTM can't open new socket.
- Started here.
Due to (stupid) limitation in TCP/IP driver (10 half-open connection) sometimes Vista loosing ability to access an internet (open new socket for communication). It happens when user uses P2P applications (BitTorrent, eMule). But in could be caused even by too busy IIS. BUT all existing internet-connected programs (WLM, Skype) are running. PC even is accessible via RDP. No any entries in EventLog relating to any problem with sockets. "Event 4226" appears in absolutely different time, not in time when connection was blocked.
Only reboot or (sometimes) "Network Connections" (and ICS) service restart can help to revive network back to live.
This problem is accepted by many people (see post on Channel9).
Any settings in registry (see MSDN documentation relating to TCP/IP settings) doesn't works at all.
All Replies
- I found what stopping "Internet Connection Sharing (ICS)" service helps to revive connection back to live without restart. If ICS service is completely disabled then connection works perfectly without any problems at all.
There is only one more or less related message in EventLog:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-SharedAccess_NAT" Guid="{A6F32731-9A38-4159-A220-3D9B7FC5FE5D}" EventSourceName="ipnathlp" />
<EventID Qualifiers="0">34001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2006-12-28T10:20:04.000Z" />
<EventRecordID>10571</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>AP-HOME</Computer>
<Security />
</System>
<EventData Name="IP_ICS_IPV6_LOG_CONFIG_IPV6_STACK_FAILED" />
</Event>
No more any errors are reported in EventLog.
IPv6 is disabled (unchecked in Network Connection properties and
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponents = 0xFF).
PS: Vista Ultimate RTM from MSDN of cause...
PPS: I have 2 network cards in my system. One for direct Internet access, second for home ad-hoc wireless network to access internet from my second PC. - I've changed hardware. Same problem with new hardware.
"Internet Connection Sharing" CONTAINS BLOODY BUGS! Is any related bug posted to MS? Does MS knows about this problem in ICS service? This bug is confirmed by other people.
Disabling of ICS service helps connection to stay alive but network sharing is disabled too.
PS: Why MSDN forums are so useless?... I concur with your experiences. When (Vista RTM) I enabled ICS I could (mostly) get it to work ... but it could not see one machine on the network but others were fine so I assumed is was merely a flaw in the setup of ICS on that one machine.
VERY shortly after that, however, I began to get almost routine "... is not working ..." messages from the startup of anything (PC-Cillin, IE7, Mail) that involved the internet (which generated millions of bytes of "troubleshooting help" to MS which are doubtless wasted). A way around that - though a nuisance and not really acceptable - was to Logoff and Logon as a Guest (different account). I finally yielded and disabled ICS (and the IP6 setting for good measure) since it gives one great happiness to use IE, Mail, PCC, etc. in their intended manner.
I'm sure others will be reporting similar experiences, too, before long. Perhaps MS will get it fixed and make an update available before tjhe "official" release date. If not, they'll be in for some real customer heat since many of us want and need ICS and can't "go live" without it working correctly.
hey,
i got exactly the same MS-Mishap on my PC.
hope for some MS-Remedy soon. it'd be a shame to go back to XP only for this reason.
Hi,
I, Arpan Gupta (arpan.gupta@microsoft.com), am test owner of ICS. I tried to repro the issue (which you are facing.) locally but was unable to repro. I followed the following steps:
1. Enable ICS
2. Unchecked IPv6 feature on public as well as private (Ad-Hoc) adapter
3. Wait around 3 hours
4. IE and internet was working properly.
Please let me know, have you intentionally created reg key HKLM\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponents=0xFF ?
Please also let me know what else services are running on your machine when you faced this issue and after stopping them did ICS work fine?
Is this a consistent repro on your machine?
Please confirm us that at the time of repro Public adapter had global IP address or not?
Please help us to serve you better.
Your useful feedback will improve the quality of Vista.
Thanks and Regards
Arpan Gupta
Hi, Mr. Gupta.
The IPv6 feature does not affect the problem (it occurs regardless to whether IPv6 is enabled or not).
Did you try having a p2p program running in the background? This contributes to appearance of the problem. It could take several hours and it could even take several days till it happens.
Thanks for your feedback. I will get back to you, if I need more information.
Thanks and regards
Arpan Gupta
Hi there,
I am also getting the same error. The only p2p app I have installed is Skype. My RTM Vista Bussiness was probably up and running for about 20 or 25 hours before this happened. Turning off ICS fixed the problem. I saw similar events as listed above in my log.
If this is really a 1/2 open port problem then I figured a netstat dump might be helpful. Here is the dump when the problem was happening (i.e. I couldn't open any new sockets):
Active ConnectionsProto Local Address Foreign Address State
TCP 0.0.0.0:80 Brickwall:0 LISTENING
[Skype.exe]
TCP 0.0.0.0:135 Brickwall:0 LISTENING
RpcSs
[svchost.exe]
TCP 0.0.0.0:443 Brickwall:0 LISTENING
[Skype.exe]
TCP 0.0.0.0:554 Brickwall:0 LISTENING
[wmpnetwk.exe]
TCP 0.0.0.0:990 Brickwall:0 LISTENING
WcesComm
[svchost.exe]
TCP 0.0.0.0:3389 Brickwall:0 LISTENING
Dnscache
[svchost.exe]
TCP 0.0.0.0:10511 Brickwall:0 LISTENING
[Skype.exe]
TCP 0.0.0.0:49152 Brickwall:0 LISTENING
[wininit.exe]
TCP 0.0.0.0:49153 Brickwall:0 LISTENING
Eventlog
[svchost.exe]
TCP 0.0.0.0:49154 Brickwall:0 LISTENING
nsi
[svchost.exe]
TCP 0.0.0.0:49155 Brickwall:0 LISTENING
Schedule
[svchost.exe]
TCP 0.0.0.0:49156 Brickwall:0 LISTENING
[lsass.exe]
TCP 0.0.0.0:49157 Brickwall:0 LISTENING
[services.exe]
TCP 0.0.0.0:51618 Brickwall:0 LISTENING
[RSSBandit.exe]
TCP 127.0.0.1:5679 Brickwall:0 LISTENING
WcesComm
[svchost.exe]
TCP 127.0.0.1:7438 Brickwall:0 LISTENING
WcesComm
[svchost.exe]
TCP 127.0.0.1:61338 Brickwall:0 LISTENING
[NewsClient.exe]
TCP 192.168.1.200:139 Brickwall:0 LISTENINGCan not obtain ownership information
TCP 192.168.1.200:59438 xxx:http CLOSE_WAIT
[OUTLOOK.EXE]
TCP [::]:135 Brickwall:0 LISTENING
RpcSs
[svchost.exe]
TCP [::]:445 Brickwall:0 LISTENINGCan not obtain ownership information
TCP [::]:554 Brickwall:0 LISTENING
[wmpnetwk.exe]
TCP [::]:990 Brickwall:0 LISTENING
WcesComm
[svchost.exe]
TCP [::]:2869 Brickwall:0 LISTENINGCan not obtain ownership information
TCP [::]:3389 Brickwall:0 LISTENING
Dnscache
[svchost.exe]
TCP [::]:5357 Brickwall:0 LISTENINGCan not obtain ownership information
TCP [::]:10243 Brickwall:0 LISTENINGCan not obtain ownership information
TCP [::]:49152 Brickwall:0 LISTENING
[wininit.exe]
TCP [::]:49153 Brickwall:0 LISTENING
Eventlog
[svchost.exe]
TCP [::]:49154 Brickwall:0 LISTENING
nsi
[svchost.exe]
TCP [::]:49155 Brickwall:0 LISTENING
Schedule
[svchost.exe]
TCP [::]:49156 Brickwall:0 LISTENING
[lsass.exe]
TCP [::]:49157 Brickwall:0 LISTENING
[services.exe]
TCP [::1]:5679 Brickwall:0 LISTENING
WcesComm
[svchost.exe]
UDP 0.0.0.0:123 *:*
W32Time
[svchost.exe]
UDP 0.0.0.0:500 *:*
IKEEXT
[svchost.exe]
UDP 0.0.0.0:3702 *:*
FDResPub
[svchost.exe]
UDP 0.0.0.0:3702 *:*
FDResPub
[svchost.exe]
UDP 0.0.0.0:4500 *:*
IKEEXT
[svchost.exe]
UDP 0.0.0.0:5004 *:*
[wmpnetwk.exe]
UDP 0.0.0.0:5005 *:*
[wmpnetwk.exe]
UDP 0.0.0.0:5355 *:*
Dnscache
[svchost.exe]
UDP 0.0.0.0:6004 *:*
[OUTLOOK.EXE]
UDP 0.0.0.0:10511 *:*
[Skype.exe]
UDP 0.0.0.0:49174 *:*
SharedAccess
[svchost.exe]
UDP 0.0.0.0:49208 *:*
FDResPub
[svchost.exe]
UDP 127.0.0.1:1900 *:*
SSDPSRV
[svchost.exe]
UDP 127.0.0.1:49175 *:*
SharedAccess
[svchost.exe]
UDP 127.0.0.1:52751 *:*
[OUTLOOK.EXE]
UDP 127.0.0.1:52880 *:*
[RSSBandit.exe]
UDP 127.0.0.1:52903 *:*
[wmplayer.exe]
UDP 127.0.0.1:52904 *:*
[wmplayer.exe]
UDP 127.0.0.1:58110 *:*
[YahooMusicEngine.exe]
UDP 127.0.0.1:58455 *:*
[iexplore.exe]
UDP 127.0.0.1:58750 *:*
SSDPSRV
[svchost.exe]
UDP 127.0.0.1:58752 *:*
[wmpnetwk.exe]
UDP 127.0.0.1:58754 *:*
ShellHWDetection
[svchost.exe]
UDP 127.0.0.1:58772 *:*
[dw20.exe]
UDP 127.0.0.1:61827 *:*
[Skype.exe]
UDP 127.0.0.1:62586 *:*
[wlmail.exe]
UDP 192.168.1.200:137 *:*Can not obtain ownership information
UDP 192.168.1.200:138 *:*Can not obtain ownership information
UDP 192.168.1.200:1900 *:*
SSDPSRV
[svchost.exe]
UDP 192.168.1.200:58749 *:*
SSDPSRV
[svchost.exe]
UDP [::]:123 *:*
W32Time
[svchost.exe]
UDP [::]:500 *:*
IKEEXT
[svchost.exe]
UDP [::]:3702 *:*
FDResPub
[svchost.exe]
UDP [::]:3702 *:*
FDResPub
[svchost.exe]
UDP [::]:5004 *:*
[wmpnetwk.exe]
UDP [::]:5005 *:*
[wmpnetwk.exe]
UDP [::]:5355 *:*
Dnscache
[svchost.exe]
UDP [::]:49209 *:*
FDResPub
[svchost.exe]
UDP [::1]:1900 *:*
SSDPSRV
[svchost.exe]
UDP [::1]:58747 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::a9:153a:3f57:fe37%11]:1900 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::a9:153a:3f57:fe37%11]:58748 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::91bf:3690:8eee:cd9%8]:1900 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::91bf:3690:8eee:cd9%8]:58746 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::ec8d:a8a8:74bb:f1f%10]:1900 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::ec8d:a8a8:74bb:f1f%10]:58745 *:*
SSDPSRV
[svchost.exe]And here is the dump right after I disabled ICS and also make sure that I could make a connection (lots of stuff that had dropped connections then powered back up):
Active ConnectionsProto Local Address Foreign Address State
TCP 0.0.0.0:80 Brickwall:0 LISTENING
[Skype.exe]
TCP 0.0.0.0:135 Brickwall:0 LISTENING
RpcSs
[svchost.exe]
TCP 0.0.0.0:443 Brickwall:0 LISTENING
[Skype.exe]
TCP 0.0.0.0:554 Brickwall:0 LISTENING
[wmpnetwk.exe]
TCP 0.0.0.0:990 Brickwall:0 LISTENING
WcesComm
[svchost.exe]
TCP 0.0.0.0:3389 Brickwall:0 LISTENING
Dnscache
[svchost.exe]
TCP 0.0.0.0:10511 Brickwall:0 LISTENING
[Skype.exe]
TCP 0.0.0.0:49152 Brickwall:0 LISTENING
[wininit.exe]
TCP 0.0.0.0:49153 Brickwall:0 LISTENING
Eventlog
[svchost.exe]
TCP 0.0.0.0:49154 Brickwall:0 LISTENING
nsi
[svchost.exe]
TCP 0.0.0.0:49155 Brickwall:0 LISTENING
Schedule
[svchost.exe]
TCP 0.0.0.0:49156 Brickwall:0 LISTENING
[lsass.exe]
TCP 0.0.0.0:49157 Brickwall:0 LISTENING
[services.exe]
TCP 0.0.0.0:51618 Brickwall:0 LISTENING
[RSSBandit.exe]
TCP 127.0.0.1:5679 Brickwall:0 LISTENING
WcesComm
[svchost.exe]
TCP 127.0.0.1:7438 Brickwall:0 LISTENING
WcesComm
[svchost.exe]
TCP 127.0.0.1:61338 Brickwall:0 LISTENING
[NewsClient.exe]
TCP 192.168.1.200:139 Brickwall:0 LISTENINGCan not obtain ownership information
TCP 192.168.1.200:59438 xxx:http CLOSE_WAIT
[OUTLOOK.EXE]
TCP 192.168.1.200:64174 svwc3-15:13264 ESTABLISHED
[Skype.exe]
TCP 192.168.1.200:64175 199.239.137.245:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64176 ibucp-vip-d:5190 TIME_WAIT
TCP 192.168.1.200:64178 akamai-070:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64179 205.188.10.253:5190 ESTABLISHED
[gaim.exe]
TCP 192.168.1.200:64185 65.55.251.108:https TIME_WAIT
TCP 192.168.1.200:64189 eqvamegamdvip1:http TIME_WAIT
TCP 192.168.1.200:64190 caim-m02b:5190 ESTABLISHED
[gaim.exe]
TCP 192.168.1.200:64192 199.239.137.245:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64193 65.55.251.108:https TIME_WAIT
TCP 192.168.1.200:64197 akamai-070:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64198 akamai-070:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64199 akamai-070:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64200 65.55.251.108:https TIME_WAIT
TCP 192.168.1.200:64201 omniture:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64202 208.185.127.34:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64204 209.50.189.199:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64205 akamai-070:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64206 akamai-070:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64207 akamai-070:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64208 12.130.81.249:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64209 akamai-072:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64210 192.217.199.105:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64212 12.130.81.249:http ESTABLISHED
[iexplore.exe]
TCP 192.168.1.200:64213 65.55.251.108:https TIME_WAIT
TCP 192.168.1.200:64214 65.55.251.108:https TIME_WAIT
TCP 192.168.1.200:64216 216-166-75-104:https ESTABLISHED
[FolderShare.exe]
TCP 192.168.1.200:64217 192.168.1.1:rrac SYN_SENT
ShellHWDetection
[svchost.exe]
TCP [::]:135 Brickwall:0 LISTENING
RpcSs
[svchost.exe]
TCP [::]:445 Brickwall:0 LISTENINGCan not obtain ownership information
TCP [::]:554 Brickwall:0 LISTENING
[wmpnetwk.exe]
TCP [::]:990 Brickwall:0 LISTENING
WcesComm
[svchost.exe]
TCP [::]:2869 Brickwall:0 LISTENINGCan not obtain ownership information
TCP [::]:3389 Brickwall:0 LISTENING
Dnscache
[svchost.exe]
TCP [::]:5357 Brickwall:0 LISTENINGCan not obtain ownership information
TCP [::]:10243 Brickwall:0 LISTENINGCan not obtain ownership information
TCP [::]:49152 Brickwall:0 LISTENING
[wininit.exe]
TCP [::]:49153 Brickwall:0 LISTENING
Eventlog
[svchost.exe]
TCP [::]:49154 Brickwall:0 LISTENING
nsi
[svchost.exe]
TCP [::]:49155 Brickwall:0 LISTENING
Schedule
[svchost.exe]
TCP [::]:49156 Brickwall:0 LISTENING
[lsass.exe]
TCP [::]:49157 Brickwall:0 LISTENING
[services.exe]
TCP [::1]:5679 Brickwall:0 LISTENING
WcesComm
[svchost.exe]
UDP 0.0.0.0:123 *:*
W32Time
[svchost.exe]
UDP 0.0.0.0:500 *:*
IKEEXT
[svchost.exe]
UDP 0.0.0.0:3702 *:*
FDResPub
[svchost.exe]
UDP 0.0.0.0:3702 *:*
FDResPub
[svchost.exe]
UDP 0.0.0.0:4500 *:*
IKEEXT
[svchost.exe]
UDP 0.0.0.0:5004 *:*
[wmpnetwk.exe]
UDP 0.0.0.0:5005 *:*
[wmpnetwk.exe]
UDP 0.0.0.0:5355 *:*
Dnscache
[svchost.exe]
UDP 0.0.0.0:6004 *:*
[OUTLOOK.EXE]
UDP 0.0.0.0:10511 *:*
[Skype.exe]
UDP 0.0.0.0:49208 *:*
FDResPub
[svchost.exe]
UDP 127.0.0.1:1900 *:*
SSDPSRV
[svchost.exe]
UDP 127.0.0.1:52751 *:*
[OUTLOOK.EXE]
UDP 127.0.0.1:52880 *:*
[RSSBandit.exe]
UDP 127.0.0.1:52903 *:*
[wmplayer.exe]
UDP 127.0.0.1:52904 *:*
[wmplayer.exe]
UDP 127.0.0.1:58110 *:*
[YahooMusicEngine.exe]
UDP 127.0.0.1:58455 *:*
[iexplore.exe]
UDP 127.0.0.1:58752 *:*
[wmpnetwk.exe]
UDP 127.0.0.1:58772 *:*
[dw20.exe]
UDP 127.0.0.1:58792 *:*
SSDPSRV
[svchost.exe]
UDP 127.0.0.1:58803 *:*
[gaim.exe]
UDP 127.0.0.1:58804 *:*
[gaim.exe]
UDP 127.0.0.1:58825 *:*
[gaim.exe]
UDP 127.0.0.1:58826 *:*
[gaim.exe]
UDP 127.0.0.1:58853 *:*
CscService
[svchost.exe]
UDP 127.0.0.1:58856 *:*
ShellHWDetection
[svchost.exe]
UDP 127.0.0.1:61827 *:*
[Skype.exe]
UDP 127.0.0.1:62586 *:*
[wlmail.exe]
UDP 192.168.1.200:137 *:*Can not obtain ownership information
UDP 192.168.1.200:138 *:*Can not obtain ownership information
UDP 192.168.1.200:1900 *:*
SSDPSRV
[svchost.exe]
UDP 192.168.1.200:58791 *:*
SSDPSRV
[svchost.exe]
UDP [::]:123 *:*
W32Time
[svchost.exe]
UDP [::]:500 *:*
IKEEXT
[svchost.exe]
UDP [::]:3702 *:*
FDResPub
[svchost.exe]
UDP [::]:3702 *:*
FDResPub
[svchost.exe]
UDP [::]:5004 *:*
[wmpnetwk.exe]
UDP [::]:5005 *:*
[wmpnetwk.exe]
UDP [::]:5355 *:*
Dnscache
[svchost.exe]
UDP [::]:49209 *:*
FDResPub
[svchost.exe]
UDP [::1]:1900 *:*
SSDPSRV
[svchost.exe]
UDP [::1]:58789 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::a9:153a:3f57:fe37%11]:1900 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::a9:153a:3f57:fe37%11]:58790 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::91bf:3690:8eee:cd9%8]:1900 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::91bf:3690:8eee:cd9%8]:58788 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::ec8d:a8a8:74bb:f1f%10]:1900 *:*
SSDPSRV
[svchost.exe]
UDP [fe80::ec8d:a8a8:74bb:f1f%10]:58787 *:*
SSDPSRV
[svchost.exe]I have done no analysis of this data -- this is raw. As soon as I submit this message I'll turn ICS back on (I need it because I use VM's). I'll post here to let you know if the connection fails right away.
Hi again,
With ICS back on, things still seem to be working. I'll post again if things fail and see if I can tell what happened...
Hi,
I think you are trying to say that this issue repros only when you run P2P application. If you stop P2P application everything comes in normal state. Correct me if I am wrong.
Please help us to serve you better.
Your useful feedback will improve the quality of Vista.
Thanks and Regards
Arpan Gupta
hi again Mr Gupta,
You've got to be kidding me...
Please refer to my post from the 12.1.07 that said: "Did you try having a p2p program running in the background? This contributes to appearance of the problem. It could take several hours and it could even take several days till it happens."
are you sure you're an M$ employee or your just another bored teenager looking to pull someones leg?
I'm sure hope I'm wrong because this issue is very annoying and I consider not upgrading our firm's 150 PCs to vista solely due to this problem!
Jerry
Mr. Jerry,
I am sorry if you thought me wrong. Please mail me your personal E- mail ID at arpan_iitd@hotmail.com so that I could talk to you from my official mail ID. I am trying hard to repro this issue and need your help for same. Hope we will fix this issue soon and you will feel better experience with Vista. Please help us.
Thanks and Regards
Arpan Gupta
Mr Gupta,
sorry for earlier emotional reaponse but this problem is driving me crazy. I would rather to coninute this correspondence through this channel for the benefit of all the rest of the folks suffering from this issue.
Did you install any p2p app and ran in in the BG? I think it may contribute to the reoccurence of the problem. Make sure ICS service is running as well.
Regards,
Jerry
It's OK Mr. Jerry, I am here to serve you better.
I am using internal P2P application since 3 days with ICS on, but was not able to find any difficulty in internet browsing. Could you please specifically tell me which P2P service you are running while facing this issue. One more question, are your ICS clients able to browse the internet when you are facing the internet issue on ICS host?
Thanks and Regards
Arpan Gupta
well, i'm using emule plus v1.2b ( http://emuleplus.info/ ) as p2p and flashget 1.81 ( http://www.flashget.com/index_en.htm ) for torrents.
moreover, when the browsing stops on my PC - there is no problem surfing the net on the other client PC.
hope it'd be useful...
Regards,
Jerry
Hi Jerry,
Sorry to bother you again. We tried hard to repro this issue but due to some setup or P2P application mismatch everything seems working fine. The TCPIP stack wants more information from us. I will appreciate if you can collect following information. Sorry for the inconvenience. We could not locate in which layer the problem occurs. So we could not tell you what are all the information we want first time itself.
Please capture network messages exchanged when you access internet sites after the failure happens. One can use netman for this purpose and steps to install it are listed below.
Go to http://connect.microsoft.com
Sign in with your Windows Live or Passport account
Choose "Available Connections" on the left
Choose "Apply" for Network Monitor 3.0 (once you have finished with the application, the selection appears in your "My Participation" page)
Go to the Downloads page (on the left side), and select the appropriate build (32 or 64 bit build.)
Trouble shooting if you do not see netmon build:
You have to be logged in with your passport account to see it.
If you are logged in, you have search down to the second table on the page (search for Network)
If you’ve already joined this project it shows up under “My Participation” now.
How to capture packets:
After the issue is hit:
Start netmon.
In 'Select networks', select the connections that you are using.
Click on 'create new catpure tab'
Select 'capture->start'
Access internet site using IE
After the failure, 'capture->stop'
Save the capture using 'File->Save as'
Please send netmon capture file.
Please help us. Thanks a ton in advance.
Thanks and Regards
Arpan Gupta
ok. i'm on it.
I've installed the netmon and as the problem will reoccur, i'll send you the capture file.
Jerry
Update - the problem was captuerd and the file was sent to Mr Arpan.
Jerry
Hi Jerry,
Thanks a ton.
I am really grateful to you for your help. I will try my best to resolve this issue ASAP.Thanks and Regards
Arpan Gupta- Oh please I hope you can solve this problem. Not only am I having it but about 20 other people in my forums are having it too. Really a burden to have to use my old router instead of ICS
- I stop ipv6 and ICS.
I have got the TCPIP 4226 warning.
I have got the .cap file.
My System Windows Vista Ultimate
It seems begin with abc(Yet another bittorrent client 3.1, pingpong-abc.sourceforge.net/download.php)
The system log TCPIP 4226 appear at 警告(Warning) 2007/3/5 21:55:58 Tcpip 4226 无(none)
And I have got the cap file in my hand.
Could anyone tell me how to upload the 10Mb .cap file here?
Thanks.
By the way, it seems that when the abc program started, the tcpip 4226 would show. And the abc program could get no more than 10 clients (upload and download in total). Hi hutigers,
Please send capture file to arpan_iitd@hotmail.com
I will take care of it.
Thanks a lot for your kind effort.
Thanks and Regards
Arpan Gupta
I have sent you the .cap file by my email.
Is there already more information about this problem? I am experiencing the same and was looking for a solution for days already and found it here. On my computer it happens daily and sometimes multiple times on one day.
In my even viewer I see a list of 4226 warnings, but internet continues to work anyway. However on the main computer with ICS enabled internet sometimes stops working as discribed earlier. All other programs such as MSN, Skype and BT continues to work normally. Also the computers connected with ICS work normally as well with full internet access. Disabling the ICS is the solution to get internet back on the main computer without rebooting. I am glad that I finally found a solution without having to reboot my computer and I am wondering if there is need for more capture files? This problem has been reported back in December, but it seems that there is no solution yet.
Hello,
Im experiencing the same problem, and what to give some feedback and conclusions i made.
At first i was running Vista RC, and thought it was something that surely was gonna be corrected in RTM, but no.
It has nothing todo with IPV6 protocoll more than if the protocoll itself makes some half-open connection.
I belive the problem is with ICS, when the problem occurs it always works for me to disable sharing of my primary nic.
Already connected connections/sockets works fine, but cant open new ones.
The problem only occurs for me when using p2p application, but i have also tried coding an application of my own, that tries to start some/alot of sockets, and the problem happends also there. Was no problem in windows XP/2000 doing same things. Event viewer saying alot of the 4226 warning.
The computers connected thru the ICS works fine all the time.
I have tried limiting half-open connections on the p2p application to like 2, and that helps (it takes alot longer before the problem happends) but it does after some time.
And lets say the problem happends on the evening, then i shut down all internet applications and let the computer be on, and in the morning next day, it sometimes can be functional again.
I have the same problem on 2 computers, different vendors. Its not in the hardware, its in how you use the system.
What i belive is that when ICS is on, some of the half-open connections made by some(all?) applications stays half-open. They dont timeout or closes.
I have some logs of the open connections when the problem occurs and when it doesnt, i will post later, but dont have them atm @ work.
If MS dont fix this problem asap, there will be no other solution that someone eventually makes an edited tcpip.sys (like was made for windows xp) that removes the limit on half-open connections.
- Hello Arpan,
any news about ICS?
i have here an vista corporate, new install, with 2 network cards. i tried to make ICS work on LAN card and sometimes work sometimes give me that error 34001 and warning 34005 ( sharedNAT crashes when alocating memory). I don't have NAT. What's the status? Two options:
1. buy a router (i did so).
2. go back to XP.
don't waste your time wating for MSBS...
Jerr
I can try give som more feedback on the issue, as for me(more some posts up)...
The ICS clients can still do anything, browse, open sockets etc..
But on the Computer with the ICS sharing enabled, no new sockets can be made, im connected to irc and can chat, im still streaming internet music etc.
So what do i do when this happens? disable ICS then enable it again.. then it works for some more hours.. (endless if i dont use p2p it seems)
So what is different between my setup and yours ArpanGupta?
My thought is that i have ~50 p2p files running with each connected to many hosts and tries to connect/disconnect to hundred of new hosts all the time.. With maybe connected to total of 500 hosts. The client itself is set to handle maximum of 8 half open connections at the time, due to the 10 limit. Have tried lower it to 3-4 but its not in the halfopen limit from my experience. its in the ICS.
I can confirm the problem does NOT happend if ICS is off.
I tried running this p2p thing on an ICS Client... then the problem doesnt happend for either the client or the ICS "server/host" (cannot confirm this 100% though, didnt try it that long)
Im not using any router that has an connection limit etc. Its fiber straight in to the main computer. Tried 3 differend vendors of NICs.
Cheers...
I experience the internet dying many times like it is described in this forum. It seems to be related to p2p.
Also,
When I run ICS, these messages appear, and ICS doesn't work
1. EVENT 34001, SharedAccess_NAT ERROR
The ICS_IPV6 failed to configure IPv6 stack.
<Provider Name="Microsoft-Windows-SharedAccess_NAT" Guid="{A6F32731-9A38-4159-A220-3D9B7FC5FE5D}" EventSourceName="ipnathlp" /><EventID Qualifiers="0">34001</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2007-05-19T23:35:11.000Z" /><EventRecordID>24693</EventRecordID><Correlation /><Execution ProcessID="0" ThreadID="0" /><Channel>System</Channel><Computer>Neon</Computer><Security /></System><EventData Name="IP_ICS_IPV6_LOG_CONFIG_IPV6_STACK_FAILED" /></Event>1. EVENT 34005, SharedAccess_NAT WARNING
The ICS_IPV6 was unable to allocate bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.
This event is not displayed correctly because the underlying XML is not well formed. Below is the raw text of the event.
Anybody knows how I can fix these problems?Hi,
This problem happens for me even when I'm _not_ running any p2p application other than Skype. For a while it happened when I opened a SSH connection (it was very predictable -- happened within 20 mintues) but that no longer seems to be the case. BUT -- p2p doesn't seem to be a requirement; just the way most people seem to tickle the bug.
Cheers,
Gordon.
Hi,
I have the same problem, it took me weeks to diagnose the problem, i even called to my ISP and blamed them to come over and replace the modem they gave me.
but then some how i notice it comes from the ICS service.
did you fix it ? why does it happened ?
I think it also occurs when I'm not using the eMule.
pls, help me to solve Microsoft bugs.
******************************************
34005 SharedAccess_NAT
The ICS_IPV6 was unable to allocate bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.
SharedAccess_NAT 34001
The ICS_IPV6 failed to configure IPv6 stack.I have the same porblem , when I use utorrent, SopCast or Tvants, in in event viewer I got only this error
- System - Provider [ Name] Microsoft-Windows-SharedAccess_NAT [ Guid] {A6F32731-9A38-4159-A220-3D9B7FC5FE5D} [ EventSourceName] ipnathlp - EventID 30013 [ Qualifiers] 0 Version 0 Level 2 Task 0 Opcode 0 Keywords 0x80000000000000 - TimeCreated [ SystemTime] 2007-09-02T16:07:18.000Z EventRecordID 56410 Correlation - Execution [ ProcessID] 0 [ ThreadID] 0 Channel System Computer 1 Security - EventData param1 10.10.0.1 param2 192.16.0.0 - If I stop my ICS(internet connection sharring) internet start work normally , if I enable ICS I loose my internet again
- ICS in Vista is definetly not working well on many computers. I solved my problem with a router, but maybe after SP1 for Vista this problem will be solved. For me that is a much better solution then a seperate router.
- This appears to be my problem as well. I lose my connection, shut down ICS, then the connection is available. Restart ICS and the problem comes back. Is this something that is being worked on and we can expect a fix for in the near future. It makes ICS unusable.
Dan Hinsley - mr gupta,where should i send the cap file to you?
mr gupta,where should i send the cap file to you? if double send pls ignore,something wrong with the connection,i suspect is the window network problem.thanksHi Guy's,
I encountered the same issue. Working with virtual environments I install loopback connectors. I am using Vista Ultimate 64 bits edition by the way.
When I tried to share my wifi intel 4965AGN adapter I got the same errors. But I when I shared my loopback adapter it worked just fine.
I installed the Hotfix but it did not work.
I got it working though by using this workarround.Disable the Wifi adapter
turn on sharing and link it to the network adapter by choice.
Enable your wifi adapter.
Hope this works for your guys as well.
Cheers,
It worked for me on Windows Server 2008.
Thanks for the tip.
- Hey
I'm trying your solution.. but I need a little help. Please.. this is urgent for me.
I have a laptop (Vista) and a desktop (Server 2008) with a LAN connection between, static IP.
The laptop gets to Internet through WIFI connection, dynamic IP. I want to share this WIFI connection for the desktop to get to Internet too. The LAN between laptop and desktop works.
To follow your solution, I installed a loopback adapter on the laptop. And shared this loopback connection, linked to the WIFI. But it doesn't work. I'm not sure I followed exactly your steps..
What am I doing wrong? - Having the same problem (Event 34001, SharedAccess_NAT) on Server 2008 64-bit, SP2 (with Hyper-V)+ 16GB RAM since
massive pre-SP2 Windows Update.
System has 2 NIC's (wired).
Running ICS on NIC connected to cable modem.
Other NIC is connected to 8-way switch that other clients use for local shares and Internet access.
Clients all get their IP's from ICS, including guest OS's on Server.
Not sure I understand the "solution" alluded to in v-3mad's post.
The only way I could make the problem disappear is by totally disabling IPV6 in the registry and rebooting.
(HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponents=0x000000ff)
On April 28,( before I applied SP2) I got a HUGE (50+pages in Event Viewer) series of Hotfixes, updates, and "Feature Packs" from Windows Update.
The error had never occurred until about 30 minutes after this update completed. I would reproduce it here, but my Windowsupdate.log file no longer contains this info.
In the middle of these updates there were several Service Control MGR messages with 1 error, and the updating resumed.
The sequence was as follows:
Servicing: KB952287(Hotfix)
Servicing: KB960715(Security Update)
Service Control MGR: The start type of the Net.Tcp Port Sharing Service service was changed from disabled to demand start. (7040)
Service Control MGR: The start type of the Net.Tcp Listener Adapter service was changed from disabled to auto start. (7040)
Service Control MGR: The Net.Tcp Port Sharing Service service entered the running state. (7036)
Service Control MGR: The start type of the Net.Pipe Listener Adapter service was changed from disabled to auto start. (7040)
Service Control MGR: The Net.Tcp Listener Adapter service entered the running state. (7036)
Service Control MGR: The start type of the Net.Msmq Listener Adapter service was changed from disabled to auto start. (7040)
Service Control MGR: Error: The Net.Msmq Listener Adapter service depends the following service: msmq. This service might not be installed. (7033)
Service Control MGR: The Net.Pipe Listener Adapter service entered the running state. (7036)
Service Control MGR: The start type of the Net.Msmq Listener Adapter service was changed from auto start to disabled. (7040)
Service Control MGR: The start type of the Windows Modules Installer service was changed from auto start to demand start. (7040)
Servicing: Continues with the hotfixes, updates , and Feature Packs
When this completed the IPV6 stack errors began.
The application of SP2 did not fix it.
Something went nuts after those updates. If anyone has any insight as to how I can reenable IPV6 without getting the errors, I would be grateful.
- Hi !
was happy to find this, running Windows 7 RTM here, with ICS, this computer does mostly nothing. just routes. and keeps fileshares. that's it.
no P2P no actually nothing.
of course i cannot try the KB.
disabling IPV6 is the way to go, because I've done this also since upgrading first to vista...
