How can I distinguish a CreateFile is from local or from remote(srv)?

NTFSD
1

In my opinion,this is impossible.
When I meet a CreateFile IRP,I want to know it is just from local,or it is
from srv for a remote CreateFile(UNC).
How can I get it?maybe it’s impossible.In my memo,it’s impossible in a
discussion for this in OSR.

2

> In my opinion,this is impossible.

How can I get it?maybe it’s impossible.In my memo,it’s impossible in a
discussion for this in OSR.

In my memo, it is possible and we have discussed this few times IIRC.
Just search the archives.

L.

3

I’ve seen two different techniques for determining this:

  • Question 59 in the IFS FAQ
  • Examining the token (in create) to see if it was constructed by Lan
    Manager (apparently it uses a unique string to indicate this fact.)

I tend to use the approach in Q59 because it works with other file
servers (besides SRV) but if you JUST want SRV, then the token analysis
method (and Ladislav is right - it is in the archive
(http://www.osronline.com/lists_archive/ntfsd/thread756.html) may work
for you.

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

4

Yes.In yesterday,I have read the FAQ and search the list,I have know this
issue.Thanks for help,tony and Ladislav.

Sorry for my lazy and uncareful,I should read the FAQ and Search the list at
first!sorry~~.
In long long times ago,I have read the FAQ,I read the first sentence in
Q59:“is not possible~~~”,so I record the result in my memo.

“Tony Mason” ???:xxxxx@ntfsd…
I’ve seen two different techniques for determining this:

- Question 59 in the IFS FAQ
- Examining the token (in create) to see if it was constructed by Lan
Manager (apparently it uses a unique string to indicate this fact.)

I tend to use the approach in Q59 because it works with other file
servers (besides SRV) but if you JUST want SRV, then the token analysis
method (and Ladislav is right - it is in the archive
(http://www.osronline.com/lists_archive/ntfsd/thread756.html) may work
for you.

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com