Access tp pagefile.sys

NTDEV
1

Hi all

I’m writing a backup tool that does an image for an existing NTFS volume.
When doing a backup for a system volume I don’t want to include in the image
file the data from some temporary and windows files like pagefile.sys so I
need to obtain the Logical Clusters for pagefile.sys and to exclude them
from my local bitmap tree of the clusters that will be written in the
imagefile.
I tried to open pagefile.sys with CreateFile but as expected I can’t obtain
a handle to it.
My question: is there a way to get a handle to pagefile.sys so I can read
the data runs of the file (or a way to read directly the data runs of
pagefile.sys) ? Or the only solution is to search through the MFT of the
volume to get the MFT Record of pagefile.sys and from there to obtain the
data runs ?

2

Hi,

I am not a “GURU” in Windows Kernel. But, I just had a question.

For your backup application, cant you traverse the directory and
eliminate those files that you dont want to backup ?

Let me know if this logic holds good.

Thanks,
Vinay

On 5/11/06, Victor Asavei wrote:
>
> Hi all
>
> I’m writing a backup tool that does an image for an existing NTFS volume.
> When doing a backup for a system volume I don’t want to include in the image
> file the data from some temporary and windows files like pagefile.sys so I
> need to obtain the Logical Clusters for pagefile.sys and to exclude them
> from my local bitmap tree of the clusters that will be written in the
> imagefile.
> I tried to open pagefile.sys with CreateFile but as expected I can’t obtain
> a handle to it.
> My question: is there a way to get a handle to pagefile.sys so I can read
> the data runs of the file (or a way to read directly the data runs of
> pagefile.sys) ? Or the only solution is to search through the MFT of the
> volume to get the MFT Record of pagefile.sys and from there to obtain the
> data runs ?
> — Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256 To unsubscribe,
> visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer

3

No.
I do the backup using the logical clusters from the volume…not the files.
I read the bitmap of the volume to determine which clusters are
occupied…so now I need a method to exclude from the bitmap the clusters of
pagefile.sys.

On 5/12/06, Vinay Kalkoti wrote:
>
> Hi,
>
> I am not a “GURU” in Windows Kernel. But, I just had a question.
>
> For your backup application, cant you traverse the directory and
> eliminate those files that you dont want to backup ?
>
> Let me know if this logic holds good.
>
> Thanks,
> Vinay
>
> On 5/11/06, Victor Asavei wrote:
> >
> > Hi all
> >
> > I’m writing a backup tool that does an image for an existing NTFS
> volume.
> > When doing a backup for a system volume I don’t want to include in the
> image
> > file the data from some temporary and windows files like pagefile.sys so
> I
> > need to obtain the Logical Clusters for pagefile.sys and to exclude them
> > from my local bitmap tree of the clusters that will be written in the
> > imagefile.
> > I tried to open pagefile.sys with CreateFile but as expected I can’t
> obtain
> > a handle to it.
> > My question: is there a way to get a handle to pagefile.sys so I can
> read
> > the data runs of the file (or a way to read directly the data runs of
> > pagefile.sys) ? Or the only solution is to search through the MFT of the
> > volume to get the MFT Record of pagefile.sys and from there to obtain
> the
> > data runs ?
> > — Questions? First check the Kernel Driver FAQ at
> > http://www.osronline.com/article.cfm?id=256 To unsubscribe,
> > visit the List Server section of OSR Online at
> > http://www.osronline.com/page.cfm?name=ListServer
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>