FLTFL_REGISTRATION_SUPPORT_NPFS_MSFS

NTFSD
1

Hi all
I have a problem where I am seeing a PostRead on a SMB pipe (servername\PIPE\srvsvc) in my minifilter driver. Does anybody know why I am receiving pipe callbacks when I never set the FLTFL_REGISTRATION_SUPPORT_NPFS_MSFS flag in the FLT_REGISTRATION struct? (I have confirmed that the FO_NAMED_PIPE bit is set in the File Object but don’t want to rely on this since I would prefer to filter from PreCreate if possible.

Regards

Mark

2

Thinks I’ve just answered my own question. Presumably this flag only applies to named pipes on the local machine and over SMB there is no way to differentiate between a pipe and normal file.

3

These links might help anyway:

http://www.osronline.com/showThread.cfm?link=217431 and
http://ww.osronline.com/ShowThread.cfm?link=218925

Thanks,
Alex.

On Mar 12, 2013, at 5:32 AM, xxxxx@gmail.com wrote:

Thinks I’ve just answered my own question. Presumably this flag only applies to named pipes on the local machine and over SMB there is no way to differentiate between a pipe and normal file.

NTFSD is sponsored by OSR

OSR is hiring!! Info at http://www.osr.com/careers

For our schedule of debugging and file system seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

4

> I have a problem where I am seeing a PostRead on a SMB pipe (servername\PIPE\srvsvc)

Is this on SMB client or server?

NPFS is only used on server. On a client, the usual SMB redir is used.

–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com