Hi All,
I would like to make a Filter File system driver which keep track of my changed file or newly created file. In one of my project i required some mechanism which delete all changes which i made during that session. If i creted a doc file and shutdown my PC then it destroy from that location.
I read some of the document and found that i require IFS kit for that. But also i got a information like IFS kit is inside WDK. Now i have WDK 6000 version. So shall i need to buy IFS or WDK is fine for me?
Thanks in advance,
Tejas
You do not have to.
Bala
On 5/22/08, xxxxx@slscorp.com wrote:
>
> Hi All,
> I would like to make a Filter File system driver which keep track of my
> changed file or newly created file. In one of my project i required some
> mechanism which delete all changes which i made during that session. If i
> creted a doc file and shutdown my PC then it destroy from that location.
>
> I read some of the document and found that i require IFS kit for that. But
> also i got a information like IFS kit is inside WDK. Now i have WDK 6000
> version. So shall i need to buy IFS or WDK is fine for me?
>
> Thanks in advance,
> Tejas
>
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule debugging and file system seminars
> (including our new fs mini-filter seminar) visit:
> http://www.osr.com/seminars
>
> You are currently subscribed to ntfsd as: xxxxx@gmail.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
What Bala was trying to say is that the WDK, starting with WDK 6000, contains the IFS kit. Prior to WDK 6000, the IFS kit was only available separately.
So, if you have WDK 6000, you have everything you need.
HTH,
Peter
OSR
IFS kit is now an essential part of WDK
–
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com
wrote in message news:xxxxx@ntfsd…
> Hi All,
> I would like to make a Filter File system driver which keep track of my
changed file or newly created file. In one of my project i required some
mechanism which delete all changes which i made during that session. If i
creted a doc file and shutdown my PC then it destroy from that location.
>
> I read some of the document and found that i require IFS kit for that. But
also i got a information like IFS kit is inside WDK. Now i have WDK 6000
version. So shall i need to buy IFS or WDK is fine for me?
>
> Thanks in advance,
> Tejas
>
>
Does it mean that WDK has whatever sample inside “filesys” folder are samples source of driver?
Is it like that if i buy IFS kit seprately then i’ll get more sample driver!!!
The differences, if any, are due to the IFS kit being about four years old.
I’m guessing that you’ve looked at this page: http://www.microsoft.com/whdc/devtools/ifskit/default.mspx
Toward the bottom, you may have noticed this: ‘OSR is providing this training…’
Earlier, Peter posted this:
So, if you have WDK 6000, you have everything you need.
HTH,
Peter
OSR
His OSR and the OSR that Microsoft references are the same. When Microsoft wants to do things involving the file systems, they ask
OSR how to do it. There is no more definitive answer from a more authoritative source than they one Peter gave you. Fini.
Good luck,
mm
xxxxx@slscorp.com wrote:
Does it mean that WDK has whatever sample inside “filesys” folder are samples source of driver?
Is it like that if i buy IFS kit seprately then i’ll get more sample driver!!!
xxxxx@slscorp.com wrote:
The WDK has the same samples plus extra ones. The code is newer and has
had bugs fixed in the samples
since the last IFS kit was released.
Matt
Does it mean that WDK has whatever sample inside “filesys” folder are samples source of driver?
Is it like that if i buy IFS kit seprately then i’ll get more sample driver!!!
NTFSD is sponsored by OSR
For our schedule debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars
You are currently subscribed to ntfsd as: matt-martin@tx.rr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Hi,MM
Thanks for your answer. Yes, i refered that page.
Ok, now i am more clear about IFS and WDK. I contacted OSR about their kit but it is too high from budget point of view. They are selling FDDK in $29500.
My project needs to develop File system driver which re-direct disk I/O routine to my specified location so when i shut down the PC, its destroy that content and make a PC fresh every time.
Thanks for all your support,
Regards,
Tejas
xxxxx@slscorp.com wrote:
Why reinvent the wheel and spend years developing/learning when there is
already a free solution
that does just this?
Licensing options would be two++ years faster and a heck of a lot
cheaper…
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx
Matt
Hi,MM
Thanks for your answer. Yes, i refered that page.
Ok, now i am more clear about IFS and WDK. I contacted OSR about their kit but it is too high from budget point of view. They are selling FDDK in $29500.
My project needs to develop File system driver which re-direct disk I/O routine to my specified location so when i shut down the PC, its destroy that content and make a PC fresh every time.
Thanks for all your support,
Regards,
Tejas
NTFSD is sponsored by OSR
For our schedule debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars
You are currently subscribed to ntfsd as: matt-martin@tx.rr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Dear MM,
I looked over this software and couple of others too. My Product has some other features also. This is a part of my module. I can use steady state for my desktop PC but i am a developer and want to develop similar kind of feature inside my project.
Do i get a code of Steady State? I hope, i am not making my self dump but i am in rush and want to finish this module in 6 weeks.
Any help would be great for me.
Thanks in advance.
Regards,
Tejas
xxxxx@slscorp.com wrote:
First, Martin O’brian(MM) and myself are different individuals.
Secondly, your company better try it’s best to get MS to release
that code under license, otherwise your in a very bad situation.
There is absolutely ZERO way you’ll finish this in 6 weeks; more like
2-3 years - literally.
Going from usermode to kernel land involves relearning a good portion of
what you already know. It’s like going from
Windows to writing code for the SOL 5000.
Good luck,
Matt
Dear MM,
I looked over this software and couple of others too. My Product has some other features also. This is a part of my module. I can use steady state for my desktop PC but i am a developer and want to develop similar kind of feature inside my project.
Do i get a code of Steady State? I hope, i am not making my self dump but i am in rush and want to finish this module in 6 weeks.
Any help would be great for me.
Thanks in advance.
Regards,
Tejas
NTFSD is sponsored by OSR
For our schedule debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars
You are currently subscribed to ntfsd as: matt-martin@tx.rr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Dear Matt,
Ohh…really it is that much complex!!!
Actually I have driver development experience but i am more used to with PnP (USB) drivers.
As i mentioned i reviewed couple of other software like steady state and shadow surfer. I am doing the same but not up to that much level but base should be same.
Well. thanks for your honest information and awar on time line. I would do more feasibility study on this and then decide what to do??
I think, i am already in trouble with this module. I have only two option, either do or not to do. -
Thanks and regards,
Tejas
xxxxx@slscorp.com wrote:
Tejas,
If you already have driver experience that is a big plus. And yes it is
that complex… If you do
attempt this, I think this honey pot project with the driver would help
you along a lot.
https://projects.honeynet.org/capture-hpc/wiki/Releases
Matt
Dear Matt,
Ohh…really it is that much complex!!!
Actually I have driver development experience but i am more used to with PnP (USB) drivers.
As i mentioned i reviewed couple of other software like steady state and shadow surfer. I am doing the same but not up to that much level but base should be same.
Well. thanks for your honest information and awar on time line. I would do more feasibility study on this and then decide what to do??
I think, i am already in trouble with this module. I have only two option, either do or not to do. -
Thanks and regards,
Tejas
NTFSD is sponsored by OSR
For our schedule debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars
You are currently subscribed to ntfsd as: matt-martin@tx.rr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
At 12:02 26/05/2008, you wrote:
Dear MM,
I looked over this software and couple of others too. My Product has
some other features also. This is a part of my module. I can use
steady state for my desktop PC but i am a developer and want to
develop similar kind of feature inside my project.
Do i get a code of Steady State? I hope, i am not making my self
dump but i am in rush and want to finish this module in 6 weeks.
Thanks for that, I sprayed my monitor with tea from laughing when I read that.
Matt is totally correct that 2-3 years is about the time required to
get it right. Yes, you might ship a more or less working version in
about a year but you’d be spending the next couple of years fixing
“interesting” bugs generated by your customers. Incidentally, when
you add up the cost of struggling to do it by yourself for a couple
of years against the purchase price of the OSR kit, you’ll find
you’re no longer the cheap option.
You said later that you’ve done drivers. File systems really are
that radically different, no one is pulling your leg. The estimates
given are from hard won experience.
Mark.
Don’t rule out the FDDK, unlike the Microsoft samples it has samples that
actually modify the data going to the file system. As others have said,
your project is multiple years of work, depending on the design the FDDK can
reduce that significantly and therefore justify the cost.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply
wrote in message news:xxxxx@ntfsd…
> Hi,MM
> Thanks for your answer. Yes, i refered that page.
> Ok, now i am more clear about IFS and WDK. I contacted OSR about their kit
> but it is too high from budget point of view. They are selling FDDK in
> $29500.
> My project needs to develop File system driver which re-direct disk I/O
> routine to my specified location so when i shut down the PC, its destroy
> that content and make a PC fresh every time.
>
> Thanks for all your support,
> Regards,
> Tejas
>
>
Mark S. Edwards wrote:
Just to reinforce Mark’s point, this is the primary reason why OSR
created two distinctly different list, NTDEV
for drivers of all sorts, and NTFSD specifically for file system issues.
When something requires its own list,
that should tell you a lot about the complexities of the technology.
Matt
You said later that you’ve done drivers. File systems really are that
radically different, no one is pulling your leg.
Mark.
Ohhh…Now i can understand the complexity of File system driver. Well i will make any decision as early as i don’t loss any thing in my project. Thanks for your effort.
If i use FDDK, then what is my turn around time for this module? I have 3 other driver engineers with me so we have total 4 person of team.
I am asking this question just for my next plan of action.
Thanks & Regards,
Tejas
Regards,
Tejas
First, if your goal is to make a system that records the changes on a
volunme and does not committ them until you choose to committ or drop, you
should consider whether a file system or a disk filter is what you want. It
is much easier to record the disk blocks that have changed, than it is to
handle files that have changed.
If you do want files that have changed, you need to ask how much overhead
will you put up with? For instance, the simple but high overhead method is
to catch the IRP_MJ_CREATE and if the file is being opened with write
permission copy it to the modified store, then redirect the create to there.
Of course lots of programs open things with the write flag then never modify
the code. This also does not deal effectively with all the directory opens
some of which will occur before your filter is present, so you will need to
record some data to put things back.
More complex schemes don’t record the file changes until they happen, while
the overhead goes down the complexity goes up. Most of these decisions have
to be made early in the design.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply
wrote in message news:xxxxx@ntfsd…
> Ohhh…Now i can understand the complexity of File system driver. Well i
> will make any decision as early as i don’t loss any thing in my project.
> Thanks for your effort.
> If i use FDDK, then what is my turn around time for this module? I have 3
> other driver engineers with me so we have total 4 person of team.
> I am asking this question just for my next plan of action.
>
> Thanks & Regards,
> Tejas
>
>
> Regards,
> Tejas
>
Dear Don
Yes, i knew that and did some study on that too. I think i am just missing the portion in this project is time.
I had did some engineering on architecture and figure out my end goal. Also i found that disk filter driver is quite simpler than File filter.
If you can see shadow surfer has the same architecture, if i am not wrong…
Is there any hope to make disk filter within this duration??? i can expand it up to 4 week more so total might be 9-10 weeks of time. Anyway i am really very thank full to all of you for giving such a nice feedback. Might be still i need more but will ask when i require and hoping for such warm feedback.
Thanks and regards
Tejas
I would suspect you could with the staffing you are proposing do the disk
filter in this time frame. Just be sure that everyone understands the
limitiations on this versus the file system route. You should be able to
start with either the diskperf sample from the WDK or with a KMDF filter
sample to get there.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply
wrote in message news:xxxxx@ntfsd…
> Dear Don
> Yes, i knew that and did some study on that too. I think i am just missing
> the portion in this project is time.
> I had did some engineering on architecture and figure out my end goal.
> Also i found that disk filter driver is quite simpler than File filter.
> If you can see shadow surfer has the same architecture, if i am not
> wrong…
> Is there any hope to make disk filter within this duration??? i can expand
> it up to 4 week more so total might be 9-10 weeks of time. Anyway i am
> really very thank full to all of you for giving such a nice feedback.
> Might be still i need more but will ask when i require and hoping for such
> warm feedback.
>
> Thanks and regards
> Tejas
>
>