How to get partition from filter?

NTFSD
1

I am writing a filter driver that passes information on FS activity into
user space.

I want to be able to identify a file by disk, volume, and name, e.g.
\computer\share\file.txt or c:\dir\file.txt, given information passed to
the filter driver during major ops. The basic idea is to be able to reopen
and read the file from user space, after the filter is done with it.

I have noticed that I can get directory and file information, e.g.,
\dir\subdir\file.txt, during major operations. I don’t know how to resolve
the drive [letter], i.e. partition / volume information.

How can I do this?

2

A post on this list told me this one:
RtlVolumeDeviceToDosName/IoVolumeDeviceToDosName. But I failed to call it
successfully.

Regards,
Ray Yang
xxxxx@ybwork.com
----- Original Message -----
From:
To: “File Systems Developers”
Sent: Sunday, November 17, 2002 9:40 AM
Subject: [ntfsd] How to get partition from filter?

> I am writing a filter driver that passes information on FS activity into
> user space.
>
> I want to be able to identify a file by disk, volume, and name, e.g.
> \computer\share\file.txt or c:\dir\file.txt, given information passed to
> the filter driver during major ops. The basic idea is to be able to reopen
> and read the file from user space, after the filter is done with it.
>
> I have noticed that I can get directory and file information, e.g.,
> \dir\subdir\file.txt, during major operations. I don’t know how to resolve
> the drive [letter], i.e. partition / volume information.
>
> How can I do this?
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@ybwork.com
> To unsubscribe send a blank email to %%email.unsub%%
>