When you get remote user calls the originating thread is a system thread
(one that comes from SVR component).
I mean, the current process is SYSTEM.
Usually, although not always, when a local user request takes place, the
incomming thread does not
belong to system process, it is a user space thread.
So you could use a simple (although unsafe) check to discriminate request
incomming from remote users by
means of checking current process when you receive a request. If it is
SYSTEM you may think it is comming
from a remote user.
Please, note that I said ‘not always’. For example, request for local mapped
drives are received through SVR and
current process is SYSTEM. On the other hands, some fllters may hook calls
and generate
new requests from different threads…
Inaki.
-----Original Message-----
From: xxxxx@erinet.com
Sent: mi?rcoles 29 de marzo de 2000 3:01
To: File Systems Developers
Subject: [ntfsd] How to differentiate between requests that come from
local with remote computer?Hi all,
I did see a similar question asked with 1 answer. However, the response
suggested to check the DeviceType of DEVICE_OBJECT structure. I suspect
the
answer was intended for a local computer that map a remote disk from a
remote computer.What I want to know is from the local fixed disk on a local computer’s
perspective, is it possible for a filter driver that attach on top of the
filesystem to know that a request like IRP_MJ_CREATE is coming from a useron a remote computer ?
Thanks for your help !
Jack Cheng
(Curriculum Corp.)
You are currently subscribed to ntfsd as: xxxxx@pandasoftware.es
To unsubscribe send a blank email to $subst(‘Email.Unsub’)