How to capture the ReadFile() data in a filter driver?

Nathan Burns wrote:

By looking at the source is there some other device that I need
to install my filter above.

No, don’t think so. I’m also curious to see what the stack looks like, however if you are the highest upper filter in the stack I don’t see how you could miss any I/O from user mode.

From looking at device tree I noticed that each device is associated
with an unnamed and named device. My filter driver is installed on the
unnamed device instead of the named device. What do I need to do so that
my filter gets installed on the named device?

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@gmail.com
Sent: Thursday, February 19, 2009 4:37 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] How to capture the ReadFile() data in a filter
driver?

Nathan Burns wrote:

By looking at the source is there some other device that I need
to install my filter above.

No, don’t think so. I’m also curious to see what the stack looks like,
however if you are the highest upper filter in the stack I don’t see how
you could miss any I/O from user mode.


NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

Your question is unclear. PDOs have names , FDOs do not. Are you saying that you placed your filter between the PDO and FDO instead of on top of the FDO?

d

Sent from my phone with no t9, all spilling mistakes are not intentional.

-----Original Message-----
From: Nathan Burns
Sent: Monday, February 23, 2009 5:03 AM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] How to capture the ReadFile() data in a filter driver?

From looking at device tree I noticed that each device is associated
with an unnamed and named device. My filter driver is installed on the
unnamed device instead of the named device. What do I need to do so that
my filter gets installed on the named device?

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@gmail.com
Sent: Thursday, February 19, 2009 4:37 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] How to capture the ReadFile() data in a filter
driver?

Nathan Burns wrote:

> By looking at the source is there some other device that I need
> to install my filter above.

No, don’t think so. I’m also curious to see what the stack looks like,
however if you are the highest upper filter in the stack I don’t see how
you could miss any I/O from user mode.


NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer


NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer