help on COPY command from command prompt

NTFSD
1

Dear All,

I am writing a file system filter driver which intecepts all the request.
But to my surprise I do not see any IRP’s being generated when a COPY
command is issued from a command prompt.
Can any one of you tell me what happens when a COPY is command is issued
from command prompt.

Thanx in advance,
Kedar.

2

Usuall stuff, nothing more. A combination of IO through fast IO path and
IRPs. If you see no IRPs at all, nor fast IO, your filter is not designed
corectly.

----- Original Message -----
From:
To: “File Systems Developers”
Sent: Saturday, August 31, 2002 5:16 PM
Subject: [ntfsd] help on COPY command from command prompt

> Dear All,
>
> I am writing a file system filter driver which intecepts all the request.
> But to my surprise I do not see any IRP’s being generated when a COPY
> command is issued from a command prompt.
> Can any one of you tell me what happens when a COPY is command is issued
> from command prompt.
>
> Thanx in advance,
> Kedar.
>
> —
> You are currently subscribed to ntfsd as: xxxxx@rdsor.ro
> To unsubscribe send a blank email to %%email.unsub%%
>

3

>Dear All,

I am writing a file system filter driver which intecepts all the request.
But to my surprise I do not see any IRP’s being generated when a COPY
command is issued from a command prompt.
Can any one of you tell me what happens when a COPY is command is issued
from command prompt.
Possibly, Fast I/O? :slight_smile:

Perepechko Andrew.

4

He must at least see IRP_MJ_CREATE, CLEANUP and CLOSE.

----- Original Message -----
From: “Perepechko Andrew”
To: “File Systems Developers”
Sent: Saturday, August 31, 2002 6:21 PM
Subject: [ntfsd] Re: help on COPY command from command prompt

> >Dear All,
> >
> >I am writing a file system filter driver which intecepts all the request.
> >But to my surprise I do not see any IRP’s being generated when a COPY
> >command is issued from a command prompt.
> >Can any one of you tell me what happens when a COPY is command is issued
> >from command prompt.
> Possibly, Fast I/O? :slight_smile:
>
> Perepechko Andrew.
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@rdsor.ro
> To unsubscribe send a blank email to %%email.unsub%%
>

5

fastio

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@hotmail.com
Sent: Saturday, August 31, 2002 7:17 AM
To: File Systems Developers
Subject: [ntfsd] help on COPY command from command prompt

Dear All,

I am writing a file system filter driver which intecepts all the
request.
But to my surprise I do not see any IRP’s being generated when a COPY
command is issued from a command prompt.
Can any one of you tell me what happens when a COPY is command is issued
from command prompt.

Thanx in advance,
Kedar.

You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
To unsubscribe send a blank email to %%email.unsub%%

6

Hai All,

Thanks for all the information.

When I observed the FastIO I see only FastIoQueryOpen can any body help me
by telling what this does and what will be returned for this request.

Thanx in advance,
Kedar.

7

Hello,

I do see CREATE and CLEANUP but in a lot of cases I am missing the CLOSE!
Is there any logic behind it? I would expect to see a close at some point
in time.

Best regards,

Wim Vervoorn

8

If the underlying FS is NTFS this is quite common - you will see the
closes a lot later.

Wim Vervoorn wrote:

Hello,

I do see CREATE and CLEANUP but in a lot of cases I am missing the CLOSE!
Is there any logic behind it? I would expect to see a close at some point
in time.

–
Kind regards, Dejan M. www.alfasp.com
E-mail: xxxxx@alfasp.com ICQ#: 56570367
Alfa File Monitor - File monitoring library for Win32 developers.
Alfa File Protector - File protection and hiding library for Win32
developers.