Cache Problem in file system filter driver

NTFSD
1

Hi all,
i am writing a file system upper filter driver. i am unable to catch the
data that is being read from cache manager.
What should I do to acheive this.

Thanks in advance.
Your advices and any sort of help is aprreciated.

Regards,
Kedar

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

2

You must filter the fastio entry points.

Jamey
xxxxx@storagecraft.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@hotmail.com
Sent: Tuesday, September 04, 2001 11:48 AM
To: File Systems Developers
Subject: [ntfsd] Cache Problem in file system filter driver

Hi all,
i am writing a file system upper filter driver. i am unable to catch
the
data that is being read from cache manager.
What should I do to acheive this.

Thanks in advance.
Your advices and any sort of help is aprreciated.

Regards,
Kedar

You are currently subscribed to ntfsd as: xxxxx@storagecraft.com To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

3

Hai EveryOne,

I am developing a file system Filter driver on windows 2000 basing the
filemon example of www.sysinternal.com

When I Create a new file and save it i get IRP_MJ_WRITE. But if i close it
and try to open the same file I do not get any IRP_MJ_READ but still my
application is getting the data. I do not understand how this can happen,
could any one help me out. Does cache manager or VMM has anything to do
here. It at all they play thier part how to handle that.

Thanks in advance.

Regards,
Kedar.

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

4

Kedar,

Are you receiving an IRP_MJ_CLOSE between the time you ‘Close’ the file and
when you open it? I would guess not, indicating that the CM still has a
reference on your file;i.e. it keeps the file cached.

Pete

Peter Scott
xxxxx@KernelDrivers.com
http://www.KernelDrivers.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of
xxxxx@hotmail.com
Sent: Thursday, September 13, 2001 12:00 AM
To: File Systems Developers
Subject: [ntfsd] File system Filter Driver

Hai EveryOne,

I am developing a file system Filter driver on windows 2000 basing the
filemon example of www.sysinternal.com

When I Create a new file and save it i get IRP_MJ_WRITE. But if i close it
and try to open the same file I do not get any IRP_MJ_READ but still my
application is getting the data. I do not understand how this can happen,
could any one help me out. Does cache manager or VMM has anything to do
here. It at all they play thier part how to handle that.

Thanks in advance.

Regards,
Kedar.

You are currently subscribed to ntfsd as: xxxxx@home.com
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

5

> When I Create a new file and save it i get IRP_MJ_WRITE. But if i close it

and try to open the same file I do not get any IRP_MJ_READ but still my
application is getting the data. I do not understand how this can happen,

The data are cached and the app access it using FastIo routines.

Max

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com