How to fix Error 708 on Windows 11

by

Windows Error 708: Expedited Data Received

Why This Error Happens

Error 708 is an informational network event, not a critical failure, generated when the TCP/IP stack receives data marked with the “urgent” or “expedited” flag (TCP URG flag) from a remote host. This typically occurs during legacy application communications, specific network protocols like Telnet, or certain database/financial transaction systems that prioritize small bursts of data outside the normal stream. In most cases, this is triggered by outdated network drivers, third-party firewall/antivirus software misinterpreting the TCP flags, or a legacy application still using out-of-band (OOB) data signaling that Windows 11 handles differently than older OS versions.

Step-by-Step Resolution Guide

  1. Update Network Adapter Drivers
    Open Device Manager → expand Network Adapters → right-click your active adapter → Update driver → Search automatically for drivers. Outdated NIC drivers frequently mishandle expedited/urgent TCP packets.

  2. Reset TCP/IP Stack
    Open Command Prompt as Administrator and run:

   netsh int ip reset
   netsh winsock reset

Restart the machine afterward to apply the reset cleanly.

  1. Check Third-Party Firewall/Antivirus Interference
    Temporarily disable third-party firewall or antivirus software (via their respective settings panels) and monitor if Event ID 708 stops appearing in Event Viewer under Windows Logs > System. If it resolves, whitelist the application generating the traffic or update the security software.

  2. Disable TCP Offloading Features
    Some NICs mishandle urgent flags when hardware offloading is enabled. Run:

   netsh int tcp set global chimney=disabled
   netsh int tcp set global rss=disabled

Reboot and check if the event log entries decrease.

  1. Update the Source Application
    If the error correlates with a specific legacy app (e.g., a Telnet client, POS software, or financial terminal app), check the vendor’s site for a patch that aligns with Windows 11’s updated Winsock implementation.

Alternative or Verification Steps

  • Verify: Open Event Viewer (eventvwr.msc) → Windows Logs > System, filter by Event ID 708, and confirm the frequency has stopped or reduced after applying the fixes.
  • Alternative: If the issue persists and is non-disruptive (no actual application errors or connection drops), you can safely suppress it by creating a custom Event Viewer filter to hide Event 708, since it is often benign and only logged for diagnostic purposes.