Event ID 4002 — TCP/IP Network Performance
Applies To: Windows Server 2008
.jpg)
Network performance encompasses all aspects of data transfer performance, such as download and upload speeds, number of packets dropped versus packets delivered, and the round-trip time of connections.
These aspects of network performance might be affected by congestion in the network. In the case of wireless networks, signal attenuation, electromagnetic interference, and the mobility of the host also affect network performance.
Event Details
| Product: | Windows Operating System |
| ID: | 4002 |
| Source: | tcpip |
| Version: | 6.0 |
| Symbolic Name: | EVENT_TCPIP_TCP_SYN_ATTACK |
| Message: | %2 message allocations have failed since initialization. |
Resolve
Reduce the load on the remote computer
If the packets are dropped because of network congestion and poor network performance, reduce the load on, or increase the capacity of, the computer.
Verify
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
To measure network performance, run Performance Monitor:
- Click Start, click All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
- Type perfmon, and then press ENTER.
- Click Continue when prompted by User Account Control, and then provide the administrator password, if requested.
- In the Performance Monitor console tree, click Reliability and Performance.
- Network, CPU, and memory utilization data are available in the details pane.
If you have recorded Performance Monitor counters in the past, compare the current load to your average loads over time. If you do not have any baseline readings from past performance monitoring, continue to monitor network, CPU, and memory utilization by looking for large fluctuations in performance that might indicate a heavy traffic load or an attack.