I've got one pc on the network which has an awful lot of event id 4226
"TCP/IP has reached the security limit imposed on the number of concurrent
TCP connection attempts"
I've Googled this and I understand that changes were made to tcpip.sys in
the service pack install so this is by design but I don't understand what is
the cause. The machine in question has no additional or unusual software on
it compared to another and a virus scan and malware scan show nothing.

I've downloaded a patch to fix this
(http://www.lvllord.de/?lang=en&url=downloads) but I don't really want to
apply the patch without understanding why I'm getting so many 4226 events.

Any thoughts?