Hello ,
In my MiniFilter post-create callback , i am stroing all the
file names in a list entry. But i can able to see mutilple
IRP_MJ_CREATE is coming for the same file ( Ex: C:\FileSystem\file.doc
is getting IRP_MJ_CREATE more than 1 time).
How can i avoid the multiple file name in the List_Entry? Even it is
possible to check the complete list before adding the file name into
list . Can anyone tell me some smart way for doing this ?
Thanks,
SivaRaja
Use generic tables. See RtlInitializeGenericTable() and associated
routines.
Ken
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of raja raja
Sent: Thursday, July 07, 2005 1:18 AM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] How to avoid multiple file name in post-create ?
Hello ,
In my MiniFilter post-create callback , i am stroing all the
file names in a list entry. But i can able to see mutilple
IRP_MJ_CREATE is coming for the same file ( Ex: C:\FileSystem\file.doc
is getting IRP_MJ_CREATE more than 1 time).
How can i avoid the multiple file name in the List_Entry? Even it is
possible to check the complete list before adding the file name into
list . Can anyone tell me some smart way for doing this ?
Thanks,
SivaRaja
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
Think about not storing the names as well. The Filter
Manager is almost certainly better at storing these.
When you need the name, just ask the FM. It caches
all of that stuff.
One of the benefits of the FM is that all of the
filters don’t store this duplicate information.
— Ken Cross wrote:
> Use generic tables. See RtlInitializeGenericTable()
> and associated
> routines.
>
> Ken
>
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf
> Of raja raja
> Sent: Thursday, July 07, 2005 1:18 AM
> To: Windows File Systems Devs Interest List
> Subject: [ntfsd] How to avoid multiple file name in
> post-create ?
>
> Hello ,
>
> In my MiniFilter post-create callback , i
> am stroing all the
> file names in a list entry. But i can able to see
> mutilple
> IRP_MJ_CREATE is coming for the same file ( Ex:
> C:\FileSystem\file.doc
> is getting IRP_MJ_CREATE more than 1 time).
>
> How can i avoid the multiple file name in the
> List_Entry? Even it is
> possible to check the complete list before adding
> the file name into
> list . Can anyone tell me some smart way for doing
> this ?
>
> Thanks,
> SivaRaja
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: unknown
> lmsubst tag argument: ‘’
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as:
> xxxxx@yahoo.com
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
In addition to the filter manager, you could also maintain your own hash
table of file names. In my filters, I have found that it is just as easy to
query the file system when the name is needed.
Jamey
----- Original Message -----
From: “Randy Cook”
To: “Windows File Systems Devs Interest List”
Sent: Thursday, July 07, 2005 9:18 AM
Subject: RE: [ntfsd] How to avoid multiple file name in post-create ?
Think about not storing the names as well. The Filter
Manager is almost certainly better at storing these.
When you need the name, just ask the FM. It caches
all of that stuff.
One of the benefits of the FM is that all of the
filters don’t store this duplicate information.
— Ken Cross wrote:
> Use generic tables. See RtlInitializeGenericTable()
> and associated
> routines.
>
> Ken
>
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf
> Of raja raja
> Sent: Thursday, July 07, 2005 1:18 AM
> To: Windows File Systems Devs Interest List
> Subject: [ntfsd] How to avoid multiple file name in
> post-create ?
>
> Hello ,
>
> In my MiniFilter post-create callback , i
> am stroing all the
> file names in a list entry. But i can able to see
> mutilple
> IRP_MJ_CREATE is coming for the same file ( Ex:
> C:\FileSystem\file.doc
> is getting IRP_MJ_CREATE more than 1 time).
>
> How can i avoid the multiple file name in the
> List_Entry? Even it is
> possible to check the complete list before adding
> the file name into
> list . Can anyone tell me some smart way for doing
> this ?
>
> Thanks,
> SivaRaja
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: unknown
> lmsubst tag argument: ‘’
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as:
> xxxxx@yahoo.com
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
—
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: xxxxx@rocketdivision.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Thanks Jamey, Randy cook & Ken.
I decided to maintain a hash table in post-create callback.
For getting Driver letter name - I tried with
IoVolumeDeviceToDosName() , but didn’t worked
In memory dump : EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The
instruction at “0x%08lx” referenced memory at “0x%08lx”. The memory
could not be “%s”
The IoVolumeDeviceToDosName() can’t be called at higher level IRQL,
but my post-create funtion can be called at DISPATCH_LEVEL.
How can i get the driver letter name at DISPATCH_LEVEL ?
How can i differentiate the directory and file using the File Object
pointer ? Thanks in advance.
By,
SivaRaja
On 7/7/05, Jamey Kirby wrote:
> In addition to the filter manager, you could also maintain your own hash
> table of file names. In my filters, I have found that it is just as easy to
> query the file system when the name is needed.
>
> Jamey
>
> ----- Original Message -----
> From: “Randy Cook”
> To: “Windows File Systems Devs Interest List”
> Sent: Thursday, July 07, 2005 9:18 AM
> Subject: RE: [ntfsd] How to avoid multiple file name in post-create ?
>
>
> Think about not storing the names as well. The Filter
> Manager is almost certainly better at storing these.
> When you need the name, just ask the FM. It caches
> all of that stuff.
>
> One of the benefits of the FM is that all of the
> filters don’t store this duplicate information.
>
> — Ken Cross wrote:
>
> > Use generic tables. See RtlInitializeGenericTable()
> > and associated
> > routines.
> >
> > Ken
> >
> >
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf
> > Of raja raja
> > Sent: Thursday, July 07, 2005 1:18 AM
> > To: Windows File Systems Devs Interest List
> > Subject: [ntfsd] How to avoid multiple file name in
> > post-create ?
> >
> > Hello ,
> >
> > In my MiniFilter post-create callback , i
> > am stroing all the
> > file names in a list entry. But i can able to see
> > mutilple
> > IRP_MJ_CREATE is coming for the same file ( Ex:
> > C:\FileSystem\file.doc
> > is getting IRP_MJ_CREATE more than 1 time).
> >
> > How can i avoid the multiple file name in the
> > List_Entry? Even it is
> > possible to check the complete list before adding
> > the file name into
> > list . Can anyone tell me some smart way for doing
> > this ?
> >
> > Thanks,
> > SivaRaja
> >
> > —
> > Questions? First check the IFS FAQ at
> > https://www.osronline.com/article.cfm?id=17
> >
> > You are currently subscribed to ntfsd as: unknown
> > lmsubst tag argument: ‘’
> > To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
> >
> > —
> > Questions? First check the IFS FAQ at
> > https://www.osronline.com/article.cfm?id=17
> >
> > You are currently subscribed to ntfsd as:
> > xxxxx@yahoo.com
> > To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@rocketdivision.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
> —
> Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@gmail.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
Back up a bit and tell us what you are trying to do at
a higher level. I think it is likely that there is a
better approach.
— raja raja wrote:
> Thanks Jamey, Randy cook & Ken.
>
> I decided to maintain a hash table in post-create
> callback.
>
> For getting Driver letter name - I tried with
> IoVolumeDeviceToDosName() , but didn’t worked
>
> In memory dump : EXCEPTION_CODE: (NTSTATUS)
> 0xc0000005 - The
> instruction at “0x%08lx” referenced memory at
> “0x%08lx”. The memory
> could not be “%s”
>
> The IoVolumeDeviceToDosName() can’t be called at
> higher level IRQL,
> but my post-create funtion can be called at
> DISPATCH_LEVEL.
>
> How can i get the driver letter name at
> DISPATCH_LEVEL ?
> How can i differentiate the directory and file using
> the File Object
> pointer ? Thanks in advance.
>
> By,
> SivaRaja
>
>
>
>
>
> On 7/7/05, Jamey Kirby
> wrote:
> > In addition to the filter manager, you could also
> maintain your own hash
> > table of file names. In my filters, I have found
> that it is just as easy to
> > query the file system when the name is needed.
> >
> > Jamey
> >
> > ----- Original Message -----
> > From: “Randy Cook”
> > To: “Windows File Systems Devs Interest List”
>
> > Sent: Thursday, July 07, 2005 9:18 AM
> > Subject: RE: [ntfsd] How to avoid multiple file
> name in post-create ?
> >
> >
> > Think about not storing the names as well. The
> Filter
> > Manager is almost certainly better at storing
> these.
> > When you need the name, just ask the FM. It
> caches
> > all of that stuff.
> >
> > One of the benefits of the FM is that all of the
> > filters don’t store this duplicate information.
> >
> > — Ken Cross wrote:
> >
> > > Use generic tables. See
> RtlInitializeGenericTable()
> > > and associated
> > > routines.
> > >
> > > Ken
> > >
> > >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On
> Behalf
> > > Of raja raja
> > > Sent: Thursday, July 07, 2005 1:18 AM
> > > To: Windows File Systems Devs Interest List
> > > Subject: [ntfsd] How to avoid multiple file name
> in
> > > post-create ?
> > >
> > > Hello ,
> > >
> > > In my MiniFilter post-create callback
> , i
> > > am stroing all the
> > > file names in a list entry. But i can able to
> see
> > > mutilple
> > > IRP_MJ_CREATE is coming for the same file ( Ex:
> > > C:\FileSystem\file.doc
> > > is getting IRP_MJ_CREATE more than 1 time).
> > >
> > > How can i avoid the multiple file name in the
> > > List_Entry? Even it is
> > > possible to check the complete list before
> adding
> > > the file name into
> > > list . Can anyone tell me some smart way for
> doing
> > > this ?
> > >
> > > Thanks,
> > > SivaRaja
> > >
> > > —
> > > Questions? First check the IFS FAQ at
> > > https://www.osronline.com/article.cfm?id=17
> > >
> > > You are currently subscribed to ntfsd as:
> unknown
> > > lmsubst tag argument: ‘’
> > > To unsubscribe send a blank email to
> > > xxxxx@lists.osr.com
> > >
> > >
> > > —
> > > Questions? First check the IFS FAQ at
> > > https://www.osronline.com/article.cfm?id=17
> > >
> > > You are currently subscribed to ntfsd as:
> > > xxxxx@yahoo.com
> > > To unsubscribe send a blank email to
> > > xxxxx@lists.osr.com
> > >
> >
> >
> > —
> > Questions? First check the IFS FAQ at
> > https://www.osronline.com/article.cfm?id=17
> >
> > You are currently subscribed to ntfsd as:
> xxxxx@rocketdivision.com
> > To unsubscribe send a blank email to
> xxxxx@lists.osr.com
> >
> >
> > —
> > Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
> >
> > You are currently subscribed to ntfsd as:
> xxxxx@gmail.com
> > To unsubscribe send a blank email to
> xxxxx@lists.osr.com
> >
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: unknown
> lmsubst tag argument: ‘’
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
I would like to track the file names which is going to be modified (
like recovery software does ). So In the IRP_MJ_CREATE post-callback
routine , i am planning to store the file name & file object which has
write access in the hash table.
But post-callback routines are sometimes called in the DISPATCH_LEVEL.
So i couldn’t able to get the volume name using
IoVolumeDeviceToDosName().
Can anyone suggest a better way for doing the same.
Thanks,
SivaRaja
On 7/8/05, Randy Cook wrote:
> Back up a bit and tell us what you are trying to do at
> a higher level. I think it is likely that there is a
> better approach.
>
> — raja raja wrote:
>
> > Thanks Jamey, Randy cook & Ken.
> >
> > I decided to maintain a hash table in post-create
> > callback.
> >
> > For getting Driver letter name - I tried with
> > IoVolumeDeviceToDosName() , but didn’t worked
> >
> > In memory dump : EXCEPTION_CODE: (NTSTATUS)
> > 0xc0000005 - The
> > instruction at “0x%08lx” referenced memory at
> > “0x%08lx”. The memory
> > could not be “%s”
> >
> > The IoVolumeDeviceToDosName() can’t be called at
> > higher level IRQL,
> > but my post-create funtion can be called at
> > DISPATCH_LEVEL.
> >
> > How can i get the driver letter name at
> > DISPATCH_LEVEL ?
> > How can i differentiate the directory and file using
> > the File Object
> > pointer ? Thanks in advance.
> >
> > By,
> > SivaRaja
> >
> >
> >
> >
> >
> > On 7/7/05, Jamey Kirby
> > wrote:
> > > In addition to the filter manager, you could also
> > maintain your own hash
> > > table of file names. In my filters, I have found
> > that it is just as easy to
> > > query the file system when the name is needed.
> > >
> > > Jamey
> > >
> > > ----- Original Message -----
> > > From: “Randy Cook”
> > > To: “Windows File Systems Devs Interest List”
> >
> > > Sent: Thursday, July 07, 2005 9:18 AM
> > > Subject: RE: [ntfsd] How to avoid multiple file
> > name in post-create ?
> > >
> > >
> > > Think about not storing the names as well. The
> > Filter
> > > Manager is almost certainly better at storing
> > these.
> > > When you need the name, just ask the FM. It
> > caches
> > > all of that stuff.
> > >
> > > One of the benefits of the FM is that all of the
> > > filters don’t store this duplicate information.
> > >
> > > — Ken Cross wrote:
> > >
> > > > Use generic tables. See
> > RtlInitializeGenericTable()
> > > > and associated
> > > > routines.
> > > >
> > > > Ken
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: xxxxx@lists.osr.com
> > > > [mailto:xxxxx@lists.osr.com] On
> > Behalf
> > > > Of raja raja
> > > > Sent: Thursday, July 07, 2005 1:18 AM
> > > > To: Windows File Systems Devs Interest List
> > > > Subject: [ntfsd] How to avoid multiple file name
> > in
> > > > post-create ?
> > > >
> > > > Hello ,
> > > >
> > > > In my MiniFilter post-create callback
> > , i
> > > > am stroing all the
> > > > file names in a list entry. But i can able to
> > see
> > > > mutilple
> > > > IRP_MJ_CREATE is coming for the same file ( Ex:
> > > > C:\FileSystem\file.doc
> > > > is getting IRP_MJ_CREATE more than 1 time).
> > > >
> > > > How can i avoid the multiple file name in the
> > > > List_Entry? Even it is
> > > > possible to check the complete list before
> > adding
> > > > the file name into
> > > > list . Can anyone tell me some smart way for
> > doing
> > > > this ?
> > > >
> > > > Thanks,
> > > > SivaRaja
> > > >
> > > > —
> > > > Questions? First check the IFS FAQ at
> > > > https://www.osronline.com/article.cfm?id=17
> > > >
> > > > You are currently subscribed to ntfsd as:
> > unknown
> > > > lmsubst tag argument: ‘’
> > > > To unsubscribe send a blank email to
> > > > xxxxx@lists.osr.com
> > > >
> > > >
> > > > —
> > > > Questions? First check the IFS FAQ at
> > > > https://www.osronline.com/article.cfm?id=17
> > > >
> > > > You are currently subscribed to ntfsd as:
> > > > xxxxx@yahoo.com
> > > > To unsubscribe send a blank email to
> > > > xxxxx@lists.osr.com
> > > >
> > >
> > >
> > > —
> > > Questions? First check the IFS FAQ at
> > > https://www.osronline.com/article.cfm?id=17
> > >
> > > You are currently subscribed to ntfsd as:
> > xxxxx@rocketdivision.com
> > > To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> > >
> > >
> > > —
> > > Questions? First check the IFS FAQ at
> > https://www.osronline.com/article.cfm?id=17
> > >
> > > You are currently subscribed to ntfsd as:
> > xxxxx@gmail.com
> > > To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> > >
> >
> > —
> > Questions? First check the IFS FAQ at
> > https://www.osronline.com/article.cfm?id=17
> >
> > You are currently subscribed to ntfsd as: unknown
> > lmsubst tag argument: ‘’
> > To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
>
>
> —
> Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@gmail.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
The obvious suggestion is: do it in pre-create. If all you want is
filenames, that’s the place to get it.
Ken
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of SivaRaja
Sent: Sunday, July 10, 2005 4:55 AM
To: Windows File Systems Devs Interest List
Subject: Re: [ntfsd] How to avoid multiple file name in post-create ?
I would like to track the file names which is going to be modified (
like recovery software does ). So In the IRP_MJ_CREATE post-callback
routine , i am planning to store the file name & file object which has
write access in the hash table.
But post-callback routines are sometimes called in the DISPATCH_LEVEL.
So i couldn’t able to get the volume name using
IoVolumeDeviceToDosName().
Can anyone suggest a better way for doing the same.
Thanks,
SivaRaja
On 7/8/05, Randy Cook wrote:
> Back up a bit and tell us what you are trying to do at
> a higher level. I think it is likely that there is a
> better approach.
>
> — raja raja wrote:
>
> > Thanks Jamey, Randy cook & Ken.
> >
> > I decided to maintain a hash table in post-create
> > callback.
> >
> > For getting Driver letter name - I tried with
> > IoVolumeDeviceToDosName() , but didn’t worked
> >
> > In memory dump : EXCEPTION_CODE: (NTSTATUS)
> > 0xc0000005 - The
> > instruction at “0x%08lx” referenced memory at
> > “0x%08lx”. The memory
> > could not be “%s”
> >
> > The IoVolumeDeviceToDosName() can’t be called at
> > higher level IRQL,
> > but my post-create funtion can be called at
> > DISPATCH_LEVEL.
> >
> > How can i get the driver letter name at
> > DISPATCH_LEVEL ?
> > How can i differentiate the directory and file using
> > the File Object
> > pointer ? Thanks in advance.
> >
> > By,
> > SivaRaja
> >
> >
> >
> >
> >
> > On 7/7/05, Jamey Kirby
> > wrote:
> > > In addition to the filter manager, you could also
> > maintain your own hash
> > > table of file names. In my filters, I have found
> > that it is just as easy to
> > > query the file system when the name is needed.
> > >
> > > Jamey
> > >
> > > ----- Original Message -----
> > > From: “Randy Cook”
> > > To: “Windows File Systems Devs Interest List”
> >
> > > Sent: Thursday, July 07, 2005 9:18 AM
> > > Subject: RE: [ntfsd] How to avoid multiple file
> > name in post-create ?
> > >
> > >
> > > Think about not storing the names as well. The
> > Filter
> > > Manager is almost certainly better at storing
> > these.
> > > When you need the name, just ask the FM. It
> > caches
> > > all of that stuff.
> > >
> > > One of the benefits of the FM is that all of the
> > > filters don’t store this duplicate information.
> > >
> > > — Ken Cross wrote:
> > >
> > > > Use generic tables. See
> > RtlInitializeGenericTable()
> > > > and associated
> > > > routines.
> > > >
> > > > Ken
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: xxxxx@lists.osr.com
> > > > [mailto:xxxxx@lists.osr.com] On
> > Behalf
> > > > Of raja raja
> > > > Sent: Thursday, July 07, 2005 1:18 AM
> > > > To: Windows File Systems Devs Interest List
> > > > Subject: [ntfsd] How to avoid multiple file name
> > in
> > > > post-create ?
> > > >
> > > > Hello ,
> > > >
> > > > In my MiniFilter post-create callback
> > , i
> > > > am stroing all the
> > > > file names in a list entry. But i can able to
> > see
> > > > mutilple
> > > > IRP_MJ_CREATE is coming for the same file ( Ex:
> > > > C:\FileSystem\file.doc
> > > > is getting IRP_MJ_CREATE more than 1 time).
> > > >
> > > > How can i avoid the multiple file name in the
> > > > List_Entry? Even it is
> > > > possible to check the complete list before
> > adding
> > > > the file name into
> > > > list . Can anyone tell me some smart way for
> > doing
> > > > this ?
> > > >
> > > > Thanks,
> > > > SivaRaja
> > > >
> > > > —
> > > > Questions? First check the IFS FAQ at
> > > > https://www.osronline.com/article.cfm?id=17
> > > >
> > > > You are currently subscribed to ntfsd as:
> > unknown
> > > > lmsubst tag argument: ‘’
> > > > To unsubscribe send a blank email to
> > > > xxxxx@lists.osr.com
> > > >
> > > >
> > > > —
> > > > Questions? First check the IFS FAQ at
> > > > https://www.osronline.com/article.cfm?id=17
> > > >
> > > > You are currently subscribed to ntfsd as:
> > > > xxxxx@yahoo.com
> > > > To unsubscribe send a blank email to
> > > > xxxxx@lists.osr.com
> > > >
> > >
> > >
> > > —
> > > Questions? First check the IFS FAQ at
> > > https://www.osronline.com/article.cfm?id=17
> > >
> > > You are currently subscribed to ntfsd as:
> > xxxxx@rocketdivision.com
> > > To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> > >
> > >
> > > —
> > > Questions? First check the IFS FAQ at
> > https://www.osronline.com/article.cfm?id=17
> > >
> > > You are currently subscribed to ntfsd as:
> > xxxxx@gmail.com
> > > To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> > >
> >
> > —
> > Questions? First check the IFS FAQ at
> > https://www.osronline.com/article.cfm?id=17
> >
> > You are currently subscribed to ntfsd as: unknown
> > lmsubst tag argument: ‘’
> > To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
>
>
> —
> Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@gmail.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
—
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
Since you are using the filter manager, you can use
per stream contexts (the filter manager requires
them). Only store the info you need, like maybe what
the create flags were, or whatever. Don’t store the
file name, use the filter manager apis to ask for it
when you need it.
— SivaRaja wrote:
> I would like to track the file names which is going
> to be modified (
> like recovery software does ). So In the
> IRP_MJ_CREATE post-callback
> routine , i am planning to store the file name &
> file object which has
> write access in the hash table.
> But post-callback routines are sometimes called in
> the DISPATCH_LEVEL.
> So i couldn’t able to get the volume name using
> IoVolumeDeviceToDosName().
>
> Can anyone suggest a better way for doing the same.
>
> Thanks,
> SivaRaja
> Only store the info you need, like maybe what
the create flags were, or whatever.
In pre-create callback, If i store only the file object pointer in the
hash table , Let me know how can i get the file name in pre-write
callback (IRP_MJ_WRITE)?
On 7/11/05, Randy Cook wrote:
> Since you are using the filter manager, you can use
> per stream contexts (the filter manager requires
> them). Only store the info you need, like maybe what
> the create flags were, or whatever. Don’t store the
> file name, use the filter manager apis to ask for it
> when you need it.
>
> — SivaRaja wrote:
>
> > I would like to track the file names which is going
> > to be modified (
> > like recovery software does ). So In the
> > IRP_MJ_CREATE post-callback
> > routine , i am planning to store the file name &
> > file object which has
> > write access in the hash table.
> > But post-callback routines are sometimes called in
> > the DISPATCH_LEVEL.
> > So i couldn’t able to get the volume name using
> > IoVolumeDeviceToDosName().
> >
> > Can anyone suggest a better way for doing the same.
> >
> > Thanks,
> > SivaRaja
>
>
> —
> Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@gmail.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
Use FltGetFileNameInformation()
Ken
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of SivaRaja
Sent: Tuesday, July 12, 2005 2:07 AM
To: Windows File Systems Devs Interest List
Subject: Re: [ntfsd] How to avoid multiple file name in post-create ?
Only store the info you need, like maybe what
the create flags were, or whatever.
In pre-create callback, If i store only the file object pointer in the
hash table , Let me know how can i get the file name in pre-write
callback (IRP_MJ_WRITE)?
On 7/11/05, Randy Cook wrote:
> Since you are using the filter manager, you can use
> per stream contexts (the filter manager requires
> them). Only store the info you need, like maybe what
> the create flags were, or whatever. Don’t store the
> file name, use the filter manager apis to ask for it
> when you need it.
>
> — SivaRaja wrote:
>
> > I would like to track the file names which is going
> > to be modified (
> > like recovery software does ). So In the
> > IRP_MJ_CREATE post-callback
> > routine , i am planning to store the file name &
> > file object which has
> > write access in the hash table.
> > But post-callback routines are sometimes called in
> > the DISPATCH_LEVEL.
> > So i couldn’t able to get the volume name using
> > IoVolumeDeviceToDosName().
> >
> > Can anyone suggest a better way for doing the same.
> >
> > Thanks,
> > SivaRaja
>
>
> —
> Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@gmail.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
—
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
In pre-create determine if this is a “for write” open.
Store this information in the StreamContext.
In pre-write, look at your StreamContext to see if
this was opened “for write”. If you need to know the
name at this point, ask the FM.
You don’t need a hash table to store this stuff, it’s
handed to you as part of the operation.
— SivaRaja wrote:
> > Only store the info you need, like maybe what
> > the create flags were, or whatever.
> In pre-create callback, If i store only the file
> object pointer in the
> hash table , Let me know how can i get the file name
> in pre-write
> callback (IRP_MJ_WRITE)?
>
> On 7/11/05, Randy Cook wrote:
> > Since you are using the filter manager, you can
> use
> > per stream contexts (the filter manager requires
> > them). Only store the info you need, like maybe
> what
> > the create flags were, or whatever. Don’t store
> the
> > file name, use the filter manager apis to ask for
> it
> > when you need it.
> >
> > — SivaRaja wrote:
> >
> > > I would like to track the file names which is
> going
> > > to be modified (
> > > like recovery software does ). So In the
> > > IRP_MJ_CREATE post-callback
> > > routine , i am planning to store the file name &
> > > file object which has
> > > write access in the hash table.
> > > But post-callback routines are sometimes called
> in
> > > the DISPATCH_LEVEL.
> > > So i couldn’t able to get the volume name using
> > > IoVolumeDeviceToDosName().
> > >
> > > Can anyone suggest a better way for doing the
> same.
> > >
> > > Thanks,
> > > SivaRaja
> >
> >
> > —
> > Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
> >
> > You are currently subscribed to ntfsd as:
> xxxxx@gmail.com
> > To unsubscribe send a blank email to
> xxxxx@lists.osr.com
> >
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: unknown
> lmsubst tag argument: ‘’
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>