Filtering Named Pipes operations

NTFSD
1

Hello,

I have a minifilter that filters the following FS types: NTFS, FAT, CDFS, UDFS, LANMAN, MUP and EXFAT, and also for DISK, CDROM and NETWORK device types. Everything works fine, but I cannot see any Create operation for Named Pipes.
I am also registering for IRP_MJ_CREATE_NAMED_PIPE, but to no avail (I am testing with the “service” SDK sample and also with an application made by myself).

Maybe the create operation for a Named Pipe goes first with a device or volume open? Or maybe I should attach to another FS?
I know Pipes are managed by NPFS, but I can’t find any reference in WDK docs.

Thanks in advance.
J

2

Minifilters do not see named pipe operations. There was a discussion on this
list about this a couple of months ago.

Bill Wandel

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@yahoo.es
Sent: Tuesday, December 01, 2009 7:25 AM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Filtering Named Pipes operations

Hello,

I have a minifilter that filters the following FS types: NTFS, FAT, CDFS,
UDFS, LANMAN, MUP and EXFAT, and also for DISK, CDROM and NETWORK device
types. Everything works fine, but I cannot see any Create operation for
Named Pipes.
I am also registering for IRP_MJ_CREATE_NAMED_PIPE, but to no avail (I am
testing with the “service” SDK sample and also with an application made by
myself).

Maybe the create operation for a Named Pipe goes first with a device or
volume open? Or maybe I should attach to another FS?
I know Pipes are managed by NPFS, but I can’t find any reference in WDK
docs.

Thanks in advance.
J

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars (including our new fs
mini-filter seminar) visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

3

Thanks Bill.
However, I can’t find that discussion by now, It’s a very big load of messages.

De: Bill Wandel
Para: Windows File Systems Devs Interest List
Enviado: mar,1 diciembre, 2009 13:28
Asunto: RE: [ntfsd] Filtering Named Pipes operations

Minifilters do not see named pipe operations. There was a discussion on this
list about this a couple of months ago.

Bill Wandel

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@yahoo.es
Sent: Tuesday, December 01, 2009 7:25 AM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Filtering Named Pipes operations

Hello,

I have a minifilter that filters the following FS types: NTFS, FAT, CDFS,
UDFS, LANMAN, MUP and EXFAT, and also for DISK, CDROM and NETWORK device
types. Everything works fine, but I cannot see any Create operation for
Named Pipes.
I am also registering for IRP_MJ_CREATE_NAMED_PIPE, but to no avail (I am
testing with the “service” SDK sample and also with an application made by
myself).

Maybe the create operation for a Named Pipe goes first with a device or
volume open? Or maybe I should attach to another FS?
I know Pipes are managed by NPFS, but I can’t find any reference in WDK
docs.

Thanks in advance.
J

—
NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars (including our new fs
mini-filter seminar) visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

—
NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

4

I think Bill is referring to this thread:

http://www.osronline.com/showThread.cfm?link=167722

mm

5

xxxxx@yahoo.es wrote:

Hello,

I have a minifilter that filters the following FS types: NTFS, FAT, CDFS, UDFS, LANMAN, MUP and EXFAT, and also for DISK, CDROM and NETWORK device types. Everything works fine, but I cannot see any Create operation for Named Pipes.
I am also registering for IRP_MJ_CREATE_NAMED_PIPE, but to no avail (I am testing with the “service” SDK sample and also with an application made by myself).

Maybe the create operation for a Named Pipe goes first with a device or volume open? Or maybe I should attach to another FS?
I know Pipes are managed by NPFS, but I can’t find any reference in WDK docs.

Thanks in advance.
J

I spoke at length to Alex C. at the last plugfest about named pipe
filtering. They are considering adding it into the mini-filter model but
not any time soon. If you need to filter NP operations you must
implement a legacy filter and attach to the NPFS device. Be warned the
semantics of named pipe filtering is different than that of file
filtering within the mini-filter model.

Pete

–
Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295

6

Thanks a lot Pete and mm for your responses!