Blue Screen Error Tcip.sys

[verachion]

I have been downloading large files recently and today I have received a blue screen of death.

Its main title was something like TCIP.SYS ERROR - (numbers and letters) no time stamp, after googling this I have found out that it has something to do with SP2 and limited number of TCIP ports to open.

I would really appreciate some expert feedback on this and how to prevent it from happening in the future.

[pangea33]

I don't do the pee too pee thing anymore, but I know about the problem you're describing from Google. It has to do with sp2 and the maximum number of concurrent, HALF-OPEN, tcp ports. I've used the patch and it fixed my problem, but our symptoms don't sound quite the same. My system logged a specific event code in the event viewer, and downloads were failing. It never blue-screened, but I was using XP Pro. Don't know if it makes a difference.

You're on your own if you want to experiment with the patch, but I could help shortcut your search with a link. I learned about it from a group that focuses on helping independent artists distribute their own material. They shun the multitude of tools who share copy written stuff, so I refuse to mention it's name publicly. If you send an email through my profile, we can discuss it further.

[verachion]

Thanks for the reply PANGEA, things are going from bad to worst, everytime I load up BitComet, and the download starts, i.e connecting to people.......The dreaded BSOD appears. the exact errors read:

TCPIP.SYS ADDRESS BFAD BASE AT B2F4D000 DATE STAMP 4294CC20

Another error reads:

NLTDI.SYS ADDRESS B2F1AC90 BASE AT B2F0B000

I have never had any problems before this is a very recent thing since I installed a programme called NETLIMITER PRO? do you think this may be the cause?

*Is there anyway I can actually copy the error message from event viewer to
Notepad so I can paste the exact error message?

[pangea33]

I don't know anything about that program, but if you're installing things from Bit Comet, its a real safe bet that something bad is on your machine. That program seems especially suspect if you started noticing this problem soon after installing it. Hopefully you're at least running a firewall and virus scanner. It's probably a real good idea to have someone inspect a HiJackThis log from your machine, but I don't have the expertise to do that. This is something that is out of my league. Its probably not a bad idea to at least uninstall that new app if nothing else.

[verachion]

I patched the pc today and all seems well. Fingers crossed. By the way what number ports did you use on the patch ?

[pangea33]

About 50 max half-open connections strikes me as a good number for this patch, but I've heard others claim they have set the number higher than 1000. Doesn't apply to me though, because file sharing is questionable business. Talking about such a thing in public is even more questionable. Keep in mind the issue in question logs an error in your event viewer with eventid 4226. It may only show up in there once, but as far as I know the error doesn't cause blue screens. Did you image your machine before patching the tcpip.sys file? I am not totally confident in the rollback procedure, especially considering the scarcity of download sources for this patch.

[verachion]

Thanks for your Help, By Coincedence I had actually set it to 50 I had a scan through Microsoft web pages and found the Procedure to reset the Ports through CMD. I have uninstalled Bit Comet (more hastle than its worth) and my computer is running absolutely fine now.

I must say I learnt alot about all this thanks.