FltCreateFile and FILE_CREATE_TREE_CONNECTION

NTFSD
1

Hi,

I’m wondering how to know when to use the FILE_CREATE_TREE_CONNECTION in
my minifilter.

Should I simply use that flag always or should I watch out for failures
of FltCreateFile (and friends) when they return
STATUS_DEVICE_NOT_CONNECTED and then retry with the flag? What status
codes should I watch out for in the second case?

From what I understand, the flag causes some kind of overhead in the
processing.

Thanks,

Oliver

2

From my understanding and observations, this is used when performing a
create on a network share. Check out the Microsoft SMB protocol for more
information on tree connections.

Pete

–
Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295

------ Original Message ------
From: “Oliver Schneider”
To: “Windows File Systems Devs Interest List”
Sent: 8/16/2016 5:46:59 AM
Subject: [ntfsd] FltCreateFile and FILE_CREATE_TREE_CONNECTION

>Hi,
>
>I’m wondering how to know when to use the FILE_CREATE_TREE_CONNECTION
>in
>my minifilter.
>
>Should I simply use that flag always or should I watch out for failures
>of FltCreateFile (and friends) when they return
>STATUS_DEVICE_NOT_CONNECTED and then retry with the flag? What status
>codes should I watch out for in the second case?
>
>From what I understand, the flag causes some kind of overhead in the
>processing.
>
>Thanks,
>
>Oliver
>
>—
>NTFSD is sponsored by OSR
>
>
>MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>software drivers!
>Details at http:
>
>To unsubscribe, visit the List Server section of OSR Online at
>http:</http:></http:>