I’ve tried using WinDbg(ver 4.0.0018.0) to
capture “dbgprint” messages from a target machine running
tfilter sample driver from M.S. IFS development kit. I’m
sure that the driver is loaded successfully into the
machine. Since, I can capture two “dbgprint” messages
from “IDriverEntry” and “SfPassThrough” modules when the
driver is loading into the machine. Then, no matter what
kind of file operations I’ve done on the target machine,
no any “dbgprint” messages displayed on the WinDbg console
again.
Moreover, I’ve problem in loading all symbols. The WinDbg
prompted me that some timestamps of symbol files are
mismatched. The target machine I’m using is a W2k server.
What I can find from MSDN is symbol files for W2k. Is the
symbol files compatible between these two OSs ?
Thanks a lot.
Regards,
– Philip
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Well since you are getting some prints we can assume that Windbg is
hooked up right. We can also assume that you are using the dbgprint API
correctly. So that would imply that the code for the missing messages
is not executing. Not sure what advise I or other people can give on
that without more information about what you are doing.
The symbol issue may be caused due to hotfixes or service packs. I
suggest using the symbol server on the internet. See
http://www.microsoft.com/ddk/debugging for more info on how to use it.
The site also has links to download the symbol packs for Win2k if you
would rather install them on your machine.
Luck
-----Original Message-----
From: Philip Hong [mailto:xxxxx@issl.com.hk]
Sent: Saturday, January 19, 2002 6:00 PM
To: File Systems Developers
Subject: [ntfsd] Cannot see “DbgPrint” message from TFilter sample from
IFS FileSys
I’ve tried using WinDbg(ver 4.0.0018.0) to
capture “dbgprint” messages from a target machine running
tfilter sample driver from M.S. IFS development kit. I’m
sure that the driver is loaded successfully into the
machine. Since, I can capture two “dbgprint” messages
from “IDriverEntry” and “SfPassThrough” modules when the
driver is loading into the machine. Then, no matter what
kind of file operations I’ve done on the target machine,
no any “dbgprint” messages displayed on the WinDbg console
again.
Moreover, I’ve problem in loading all symbols. The WinDbg
prompted me that some timestamps of symbol files are
mismatched. The target machine I’m using is a W2k server.
What I can find from MSDN is symbol files for W2k. Is the
symbol files compatible between these two OSs ?
Thanks a lot.
Regards,
– Philip
You are currently subscribed to ntfsd as: xxxxx@microsoft.com To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Since I’m a newbie in writing filter driver. I’m only at the stage of
checking the calling sequence of Win 2k file operations by using TFilter
source from IFS kit as the sample. However, the sample is so strange that I
cannot detect any file operations after installing that driver.
Do you have any idea of what is going on with this sample driver ? Does it
really hooked to the file system of Win 2k ? Since, I need to keep track of
all file operations under win 2k OS, how can I modify the source to archive
that ?
Thanks and Regards,
– Philip
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com