Feeds

Vista's Long Goodbye strikes again

OS networking buckles under single media file

SANS - Survey on application security programs

New data documenting quirky networking characteristics in Vista have surfaced courtesy of Windows architecture guru Mark Russinovich, who confirms that simply by playing media files, users can bring throughput in Microsoft's new and improved operating system to a screeching halt.

The degradation is caused by a new feature known as Multimedia Class Scheduler Service (MMCSS), which has been baked in to the Vista kernel. Its mission is to automatically prioritize the playback of audio and video to prevent skipping, sputtering and other unseemly glitches. Unfortunately, it ends up fixing a problem that was largely non-existent and leaving in its place a major headache for many sysadmins.

According to various bloggers, including ZDNet's Adrian Kingsley-Hughes, the playing of seemingly insignificant media files - say the many beeps accompanied by Windows error messages - cut throughput on his local area network in half. The playing of games and files in iTunes or Real Player caused the same slow down.

As the self-appointed watchdogs of a glitch we dubbed Vista's Long Goodbye, we latched on to these reports like a pit bull on a poodle. Microsoft has yet to formally acknowledge the problem, which causes severe delays when using Vista to delete or move files on a network. More than seven months after first coming to light, the problem is still causing users grief, judging from this TechNet forum.

Russinovich didn't address whether the overly protective MMCSS is the cause of Vista's Long Goodbye, but his findings may provide important clues as to what is. (It may also shatter one popular conspiracy theory that digital rights management was at the root of the problem.)

According to Russinovich, Vista developers recognized that heavy network traffic can be draining on system resources, given that the arrival of each new packet triggers a CPU interrupt. So the good folks in Redmond built network throttling into MMCSS to limit the delivery of no more than 10,000 packets per second.

Normally, this limitation would only be noticeable on a 1Gb/s network and would then only amount to about a 15-percent drop in throughput. But it turns out there's a bug in the throttling code that magnifies the throttling with each network interface card installed. That means a system with both an Ethernet and wireless adapter will process at most 8,000 packets per second. And woe to those who might also have a Bluetooth adapter, for they shall digest no more than 6,000.

Russinovich documents how a throughput of about 20 percent on his 1Gb local area network dropped to about 6 percent simply by trying to pass the time by playing a tune in Windows Media Player. Effects like that will also be felt on 100MB networks.

The throttling won't affect traffic on even the fastest broadband net connections because the many hops between the Vista system and the destination already slows down the packet travel. In other words, TCP/IP reduces the transmission rate so Vista doesn't have to.

"The throttling rate Vista uses was derived from experiments that reliably achieved glitch-resistant playback on systems with one CPU on 100Mb networks with high packet receive rates," Russinovich writes. "The hard-coded limit was short-sighted with respect to today's systems that have faster CPUs, multiple cores and Gigabit networks."

Microsoft's networking people are now talking to its MMCSS people on how to fix the problem.

In the meantime, a Russinovich reader who goes by the user name Courtney has provided a simple workaround that's likely to work as well as anything. It involves modifying the key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Audiosrv\Dep" to remove MMCS and set MMCS to disabled in services. Reboot, and presto.

"As soon as I rebooted," Courtney reports, "I was able to copy files at 40mb/s+ while listening to audio." ®

Top three mobile application threats

More from The Register

next story
OpenBSD founder wants to bin buggy OpenSSL library, launches fork
One Heartbleed vuln was too many for Theo de Raadt
Got Windows 8.1 Update yet? Get ready for YET ANOTHER ONE – rumor
Leaker claims big release due this fall as Microsoft herds us into the CLOUD
This time it's 'Personal': new Office 365 sub covers just two devices
Redmond also brings Office into Google's back yard
Ubuntu 14.04 LTS: Great changes, but sssh don't mention the...
Why HELLO Amazon! You weren't here last time
Patch iOS, OS X now: PDFs, JPEGs, URLs, web pages can pwn your kit
Plus: iThings and desktops at risk of NEW SSL attack flaw
Next Windows obsolescence panic is 450 days from … NOW!
The clock is ticking louder for Windows Server 2003 R2 users
Batten down the hatches, Ubuntu 14.04 LTS due in TWO DAYS
Admins dab straining server brows in advance of Trusty Tahr's long-term support landing
Red Hat to ship RHEL 7 release candidate with a taste of container tech
Grab 'near-final' version of next Enterprise Linux next week
Apple inaugurates free OS X beta program for world+dog
Prerelease software now open to anyone, not just developers – as long as you keep quiet
prev story

Whitepapers

Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.