How to get file Id in FS filter driver?

NTDEV
1

Hi,

I have to retrieve file ID (i.e. MFT record number) in the FS filter driver code function (like read or open callback function) for NTFS. I am not getting any structure or information to do the same. There are some ways to retrieve file ID in user space but I want it at kernel level. Please help me to find the required file ID.

Thanks and regards,
Ganesh

2

This should be asked on the ntfsd email list. You can use
FltQueryInformationFile to get the 8-byte id or FltQueryDirectoryFile
to get the FILE_OBJECTID_INFORMATION for a file.

Mark Roddy

On Tue, Nov 2, 2010 at 8:48 AM, wrote:
> Hi,
>
> I have to retrieve file ID (i.e. MFT record number) in the FS filter driver code function (like read or open callback function) for NTFS. I am not getting any structure or information to do the same. There are some ways to retrieve file ID in user space but I want it at kernel level. Please help me to find the required file ID.
>
> Thanks and regards,
> Ganesh
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>

3

Thanks Mark. I will look for FltQueryInformationFile call and if required then post the query to ntfsd list.

Regards,
Ganesh