FILE_OPEN -> FILE_SUPERSEDED

I have a strange situation that occurs only when opening a file “ss.ini”
belonging to a VSS server installed somewhere in LAN. MJ_CREATE for this
file is about an open because I see the flag FILE_OPEN, but after the
lower level drivers finish processing the IoStatus.Information is
FILE_SUPERSEDED. Is this normal ? In my filter driver there is a
difference in processing the opening and creation of files, and
superseding a file is for my filter like a file creation.

Daniel

While local FSes DO set the IoStatus.Information correctly, you will not
get a right code from the network.
It is usually FILE_OPENED in IoStatus.Information (i.e. zeroed out).

Daniel Turcanu wrote:

I have a strange situation that occurs only when opening a file “ss.ini”
belonging to a VSS server installed somewhere in LAN. MJ_CREATE for this
file is about an open because I see the flag FILE_OPEN, but after the
lower level drivers finish processing the IoStatus.Information is
FILE_SUPERSEDED. Is this normal ? In my filter driver there is a
difference in processing the opening and creation of files, and
superseding a file is for my filter like a file creation.

Daniel


You are currently subscribed to ntfsd as: xxxxx@alfasp.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.