File System Filter Driver

NTFSD
1

Hai Every Body,

I am trying to write a file system filter driver on Windows 2000 in which i
want to change the data(assume that i am encrypting the data).

Can any of you tell me when is the data taken from actual harddisk and when
is the data taken from cache manager. I am not able to catch cache manager
calls,if i want to get them what should i do.

If i am not clear pls. send your comment to xxxxx@hotmail.com

thanks in advance.

Regards
Kedar

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

2

Kedar,

You will need to hook both the Fast I/O entry points and the standard Irp
Entry points for I/O handling.

Have you considered sitting below the FSD?

Pete

Peter Scott
xxxxx@KernelDrivers.com
http://www.KernelDrivers.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of
xxxxx@hotmail.com
Sent: Friday, August 31, 2001 8:17 AM
To: File Systems Developers
Subject: [ntfsd] File System Filter Driver

Hai Every Body,

I am trying to write a file system filter driver on Windows 2000 in which i
want to change the data(assume that i am encrypting the data).

Can any of you tell me when is the data taken from actual harddisk and when
is the data taken from cache manager. I am not able to catch cache manager
calls,if i want to get them what should i do.

If i am not clear pls. send your comment to xxxxx@hotmail.com

thanks in advance.

Regards
Kedar

You are currently subscribed to ntfsd as: xxxxx@home.com
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

3

> Can any of you tell me when is the data taken from actual harddisk and
when

is the data taken from cache manager. I am not able to catch cache manager
calls,if i want to get them what should i do.

The IRP flag of IRP_NOCACHE.

Max

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com