Share via


Event ID 4002 — TCP/IP Network Performance

Applies To: Windows Server 2008

Network performance encompasses all aspects of data transfer performance, such as download and upload speeds, number of packets dropped versus packets delivered, and the round-trip time of connections.

These aspects of network performance might be affected by congestion in the network. In the case of wireless networks, signal attenuation, electromagnetic interference, and the mobility of the host also affect network performance.

Event Details

Product: Windows Operating System
ID: 4002
Source: tcpip
Version: 6.0
Symbolic Name: EVENT_TCPIP_TCP_SYN_ATTACK
Message: %2 message allocations have failed since initialization.

Resolve

Reduce the load on the remote computer

If the packets are dropped because of network congestion and poor network performance, reduce the load on, or increase the capacity of, the computer.

Verify

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To measure network performance, run Performance Monitor:

  1. Click Start, click All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type perfmon, and then press ENTER.
  3. Click Continue when prompted by User Account Control, and then provide the administrator password, if requested.
  4. In the Performance Monitor console tree, click Reliability and Performance.
  5. Network, CPU, and memory utilization data are available in the details pane.

If you have recorded Performance Monitor counters in the past, compare the current load to your average loads over time. If you do not have any baseline readings from past performance monitoring, continue to monitor network, CPU, and memory utilization by looking for large fluctuations in performance that might indicate a heavy traffic load or an attack.

TCP/IP Network Performance

Networking