Hi,
I have written a disk filter driver based on the diskperf example.
However, I notice that I need to reboot the system before my driver will
start filtering.
Is it possible to filter the disk class without rebooting the system?
How to start the disk filtering service dynamically?
thank you!
cheers,
vincent
Send a fun phone greeting to your friend!
http://www.msn.com.sg/mobile/fungreetings/
> Is it possible to filter the disk class without rebooting the
system?
How to start the disk filtering service dynamically?
No. Installing any disk or FS filters require the reboot. They are
also not unloadable - though can be put to idle pass-through state.
Max
> ----------
From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
Reply To: xxxxx@lists.osr.com
Sent: Friday, June 06, 2003 2:15 PM
To: xxxxx@lists.osr.com
Subject: [ntdev] Re: howto: no reboot for disk filter driver> Is it possible to filter the disk class without rebooting the
system?
> How to start the disk filtering service dynamically?No. Installing any disk or FS filters require the reboot. They are
also not unloadable - though can be put to idle pass-through state.
I don’t know about disk filters but have FS filter which can be installed
without reboot. IIRC FileSpy from IFS kit and System Internals FileMon also
don’t need reboot. All depends on the way how volumes are attached. The same
with unload, it is not recommended for production but perfectly suitable for
debugging. I’m sure you know it so why post misleading answers?
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
Since when were filesystem filters == disk filters? They aren’t, so
recheck your assumptions.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Michal Vodicka
Sent: Friday, June 06, 2003 1:04 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driver> ----------
> From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> Reply To: xxxxx@lists.osr.com
> Sent: Friday, June 06, 2003 2:15 PM
> To: xxxxx@lists.osr.com
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> > Is it possible to filter the disk class without rebooting the
> system?
> > How to start the disk filtering service dynamically?
>
> No. Installing any disk or FS filters require the reboot. They are
> also not unloadable - though can be put to idle pass-through state.
>
I don’t know about disk filters but have FS filter which can
be installed without reboot. IIRC FileSpy from IFS kit and
System Internals FileMon also don’t need reboot. All depends
on the way how volumes are attached. The same with unload, it
is not recommended for production but perfectly suitable for
debugging. I’m sure you know it so why post misleading answers?Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
You are currently subscribed to ntdev as: xxxxx@nryan.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Max wrote “Installing any disk or FS filters require the reboot” and I
commented only FS part of this assertion. Just because it can confuse
somebody who search archives.
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
From: xxxxx@nryan.com[SMTP:xxxxx@nryan.com]
Reply To: xxxxx@lists.osr.com
Sent: Friday, June 06, 2003 11:28 PM
To: xxxxx@lists.osr.com
Subject: [ntdev] Re: howto: no reboot for disk filter driverSince when were filesystem filters == disk filters? They aren’t, so
recheck your assumptions.
- Nick Ryan
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Michal Vodicka
> Sent: Friday, June 06, 2003 1:04 PM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
>
> > ----------
> > From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> > Reply To: xxxxx@lists.osr.com
> > Sent: Friday, June 06, 2003 2:15 PM
> > To: xxxxx@lists.osr.com
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> > > Is it possible to filter the disk class without rebooting the
> > system?
> > > How to start the disk filtering service dynamically?
> >
> > No. Installing any disk or FS filters require the reboot. They are
> > also not unloadable - though can be put to idle pass-through state.
> >
> I don’t know about disk filters but have FS filter which can
> be installed without reboot. IIRC FileSpy from IFS kit and
> System Internals FileMon also don’t need reboot. All depends
> on the way how volumes are attached. The same with unload, it
> is not recommended for production but perfectly suitable for
> debugging. I’m sure you know it so why post misleading answers?
>
> Best regards,
>
> Michal Vodicka
> STMicroelectronics Design and Application s.r.o.
> [michal.vodicka@st.com, http:://www.st.com]
>
>
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@nryan.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
You are currently subscribed to ntdev as: michal.vodicka@st.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Hi,
So does that mean that diskmon from sysinternals is not a disk filter?
But something else?
How did Diskmon filter all writes n reads to the hard disk?
It is able to install its driver and start its driver and start filtering
without reboot.
Thank You!
cheers,
vincent
From: “Maxim S. Shatskih”
>Reply-To: “NT Developers Interest List”
>To: “NT Developers Interest List”
>Subject: [ntdev] Re: howto: no reboot for disk filter driver
>Date: Fri, 6 Jun 2003 16:15:44 +0400
>
> > Is it possible to filter the disk class without rebooting the
>system?
> > How to start the disk filtering service dynamically?
>
>No. Installing any disk or FS filters require the reboot. They are
>also not unloadable - though can be put to idle pass-through state.
>
> Max
>
>
>
>—
>You are currently subscribed to ntdev as: xxxxx@hotmail.com
>To unsubscribe send a blank email to xxxxx@lists.osr.com
_________________________________________________________________
Download Norah Jones, Eminem and more! http://www.msn.com.sg/ringtones/ at
only S$36 including GST
From what I recall, diskmon uses a HIGHLY undocumented and dangerous
hack to do its dirty work (I think it simply replaces all dispatch entry
points for the target driver with its own). If you do this in a
commercial driver we’ll have to beat you with an ugly stick. 
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of vincent gambit
Sent: Friday, June 06, 2003 9:04 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driverHi,
So does that mean that diskmon from sysinternals is not a
disk filter? But something else? How did Diskmon filter all
writes n reads to the hard disk? It is able to install its
driver and start its driver and start filtering
without reboot.Thank You!
cheers,
vincent>From: “Maxim S. Shatskih”
> >Reply-To: “NT Developers Interest List”
> >To: “NT Developers Interest List”
> >Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >Date: Fri, 6 Jun 2003 16:15:44 +0400
> >
> > > Is it possible to filter the disk class without rebooting the
> >system?
> > > How to start the disk filtering service dynamically?
> >
> >No. Installing any disk or FS filters require the reboot.
> They are also
> >not unloadable - though can be put to idle pass-through state.
> >
> > Max
> >
> >
> >
> >—
> >You are currently subscribed to ntdev as: xxxxx@hotmail.com To
> >unsubscribe send a blank email to xxxxx@lists.osr.com
>
> _________________________________________________________________
> Download Norah Jones, Eminem and more!
> http://www.msn.com.sg/ringtones/ at
> only S$36 including GST
>
>
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@nryan.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
> I don’t know about disk filters but have FS filter which can be
installed
without reboot. IIRC FileSpy from IFS kit and System Internals
FileMon also
don’t need reboot. All depends on the way how volumes are attached.
The same
with unload, it is not recommended for production but perfectly
suitable for
debugging. I’m sure you know it so why post misleading answers?
FileMon is not a 100% stable way of writing FS filters, only SFILTER
is. And SFILTER can be loaded on boot only.
Anyway you will need to load at boot to filter SystemRoot volume.
Max
> ----------
From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
Reply To: xxxxx@lists.osr.com
Sent: Saturday, June 07, 2003 9:16 AM
To: xxxxx@lists.osr.com
Subject: [ntdev] Re: howto: no reboot for disk filter driver> I don’t know about disk filters but have FS filter which can be
installed
> without reboot. IIRC FileSpy from IFS kit and System Internals
FileMon also
> don’t need reboot. All depends on the way how volumes are attached.
The same
> with unload, it is not recommended for production but perfectly
suitable for
> debugging. I’m sure you know it so why post misleading answers?FileMon is not a 100% stable way of writing FS filters, only SFILTER
is. And SFILTER can be loaded on boot only.
Anyway you will need to load at boot to filter SystemRoot volume.
You’re right when need to filter volumes since mount. There are cases when
it isn’t necessary and then dynamic attach is possible and filter can be
loaded/installed whenever. FileSpy from XP IFS kit shows the way.
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
There is no reliable or safe way to do this.
Jamey
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Michal Vodicka
Sent: Monday, June 09, 2003 11:28 AM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driver
From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
Reply To: xxxxx@lists.osr.com
Sent: Saturday, June 07, 2003 9:16 AM
To: xxxxx@lists.osr.com
Subject: [ntdev] Re: howto: no reboot for disk filter driver> I don’t know about disk filters but have FS filter which can be
installed
> without reboot. IIRC FileSpy from IFS kit and System Internals
FileMon also
> don’t need reboot. All depends on the way how volumes are attached.
The same
> with unload, it is not recommended for production but perfectly
suitable for
> debugging. I’m sure you know it so why post misleading answers?FileMon is not a 100% stable way of writing FS filters, only SFILTER
is. And SFILTER can be loaded on boot only.
Anyway you will need to load at boot to filter SystemRoot volume.
You’re right when need to filter volumes since mount. There are cases
when
it isn’t necessary and then dynamic attach is possible and filter can be
loaded/installed whenever. FileSpy from XP IFS kit shows the way.
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
You are currently subscribed to ntdev as: xxxxx@storagecraft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Do you mean IoAttachDeviceToDeviceStackSafe is unrealiable and/or unsafe?
Well, I’m probably missing something obvious. Can you elaborate? XP and
above, please, I’d agree about w2k.
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
Reply To: xxxxx@lists.osr.com
Sent: Monday, June 09, 2003 10:38 PM
To: xxxxx@lists.osr.com
Subject: [ntdev] Re: howto: no reboot for disk filter driverThere is no reliable or safe way to do this.
Jamey
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Michal Vodicka
Sent: Monday, June 09, 2003 11:28 AM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driver> ----------
> From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> Reply To: xxxxx@lists.osr.com
> Sent: Saturday, June 07, 2003 9:16 AM
> To: xxxxx@lists.osr.com
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> > I don’t know about disk filters but have FS filter which can be
> installed
> > without reboot. IIRC FileSpy from IFS kit and System Internals
> FileMon also
> > don’t need reboot. All depends on the way how volumes are attached.
> The same
> > with unload, it is not recommended for production but perfectly
> suitable for
> > debugging. I’m sure you know it so why post misleading answers?
>
> FileMon is not a 100% stable way of writing FS filters, only SFILTER
> is. And SFILTER can be loaded on boot only.
> Anyway you will need to load at boot to filter SystemRoot volume.
>
You’re right when need to filter volumes since mount. There are cases
when
it isn’t necessary and then dynamic attach is possible and filter can be
loaded/installed whenever. FileSpy from XP IFS kit shows the way.Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
You are currently subscribed to ntdev as: xxxxx@storagecraft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
You are currently subscribed to ntdev as: michal.vodicka@st.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
I wouldn’t say it’s not safe or reliable to load an FS filter after
boot, there are just limitations that one needs to be aware of when
doing it (such as IoRegisterFsRegistrationChange not enumerating
currently-loaded filesystems pre-XP).
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
Sent: Monday, June 09, 2003 1:39 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driverThere is no reliable or safe way to do this.
Jamey
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Michal Vodicka
Sent: Monday, June 09, 2003 11:28 AM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driver> ----------
> From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> Reply To: xxxxx@lists.osr.com
> Sent: Saturday, June 07, 2003 9:16 AM
> To: xxxxx@lists.osr.com
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> > I don’t know about disk filters but have FS filter which can be
> installed
> > without reboot. IIRC FileSpy from IFS kit and System Internals
> FileMon also
> > don’t need reboot. All depends on the way how volumes are
attached.
> The same
> > with unload, it is not recommended for production but perfectly
> suitable for
> > debugging. I’m sure you know it so why post misleading answers?
>
> FileMon is not a 100% stable way of writing FS filters,
only SFILTER
> is. And SFILTER can be loaded on boot only. Anyway you will need to
> load at boot to filter SystemRoot volume.
>
You’re right when need to filter volumes since mount. There
are cases when it isn’t necessary and then dynamic attach is
possible and filter can be loaded/installed whenever. FileSpy
from XP IFS kit shows the way.Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
You are currently subscribed to ntdev as:
xxxxx@storagecraft.com To unsubscribe send a blank email to
xxxxx@lists.osr.com
You are currently subscribed to ntdev as: xxxxx@nryan.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
How about an IO request that is pending and have not completed? How can
you track these; since your filter is not loaded? Reverse is true for
unloading.
Although it is possible and will work 99.99999% of the time, it is not
safe and completely unreliable for production code. Follow Microsoft’s
advice on this one and require the reboot.
Jamey
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
Sent: Monday, June 09, 2003 2:19 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driver
I wouldn’t say it’s not safe or reliable to load an FS filter after
boot, there are just limitations that one needs to be aware of when
doing it (such as IoRegisterFsRegistrationChange not enumerating
currently-loaded filesystems pre-XP).
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
Sent: Monday, June 09, 2003 1:39 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driverThere is no reliable or safe way to do this.
Jamey
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Michal Vodicka
Sent: Monday, June 09, 2003 11:28 AM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driver> ----------
> From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> Reply To: xxxxx@lists.osr.com
> Sent: Saturday, June 07, 2003 9:16 AM
> To: xxxxx@lists.osr.com
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> > I don’t know about disk filters but have FS filter which can be
> installed
> > without reboot. IIRC FileSpy from IFS kit and System Internals
> FileMon also
> > don’t need reboot. All depends on the way how volumes are
attached.
> The same
> > with unload, it is not recommended for production but perfectly
> suitable for
> > debugging. I’m sure you know it so why post misleading answers?
>
> FileMon is not a 100% stable way of writing FS filters,
only SFILTER
> is. And SFILTER can be loaded on boot only. Anyway you will need to
> load at boot to filter SystemRoot volume.
>
You’re right when need to filter volumes since mount. There
are cases when it isn’t necessary and then dynamic attach is
possible and filter can be loaded/installed whenever. FileSpy
from XP IFS kit shows the way.Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
You are currently subscribed to ntdev as:
xxxxx@storagecraft.com To unsubscribe send a blank email to
xxxxx@lists.osr.com
You are currently subscribed to ntdev as: xxxxx@nryan.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
You are currently subscribed to ntdev as: xxxxx@storagecraft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
I’ll have to continue to disagree. Depending on what your application
is, your filter may not care about files that are currently open and I/O
that is currently in progress, and that’s fine as long as it treats
those requests as opaque. If my filter sees a read or write for an FCB
that it’s never seen before, it’s going to behave like a good boy and
pass down the request untouched.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
Sent: Monday, June 09, 2003 2:28 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driverHow about an IO request that is pending and have not
completed? How can you track these; since your filter is not
loaded? Reverse is true for unloading.Although it is possible and will work 99.99999% of the time,
it is not safe and completely unreliable for production code.
Follow Microsoft’s advice on this one and require the reboot.Jamey
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
Sent: Monday, June 09, 2003 2:19 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driverI wouldn’t say it’s not safe or reliable to load an FS filter
after boot, there are just limitations that one needs to be
aware of when doing it (such as
IoRegisterFsRegistrationChange not enumerating
currently-loaded filesystems pre-XP).
- Nick Ryan
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> Sent: Monday, June 09, 2003 1:39 PM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
>
> There is no reliable or safe way to do this.
>
> Jamey
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Michal Vodicka
> Sent: Monday, June 09, 2003 11:28 AM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> > ----------
> > From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> > Reply To: xxxxx@lists.osr.com
> > Sent: Saturday, June 07, 2003 9:16 AM
> > To: xxxxx@lists.osr.com
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> > > I don’t know about disk filters but have FS filter which can be
> > installed
> > > without reboot. IIRC FileSpy from IFS kit and System Internals
> > FileMon also
> > > don’t need reboot. All depends on the way how volumes are
> attached.
> > The same
> > > with unload, it is not recommended for production but perfectly
> > suitable for
> > > debugging. I’m sure you know it so why post misleading answers?
> >
> > FileMon is not a 100% stable way of writing FS filters,
> only SFILTER
> > is. And SFILTER can be loaded on boot only. Anyway you
will need to
> > load at boot to filter SystemRoot volume.
> >
> You’re right when need to filter volumes since mount. There
> are cases when it isn’t necessary and then dynamic attach is
> possible and filter can be loaded/installed whenever. FileSpy
> from XP IFS kit shows the way.
>
> Best regards,
>
> Michal Vodicka
> STMicroelectronics Design and Application s.r.o.
> [michal.vodicka@st.com, http:://www.st.com]
>
>
>
> —
> You are currently subscribed to ntdev as:
> xxxxx@storagecraft.com To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@nryan.com
> To unsubscribe send a blank email to
xxxxx@lists.osr.com
>
You are currently subscribed to ntdev as:
xxxxx@storagecraft.com To unsubscribe send a blank email to
xxxxx@lists.osr.com
You are currently subscribed to ntdev as: xxxxx@nryan.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
JUST SAY NO!
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
Sent: Monday, June 09, 2003 2:47 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driver
I’ll have to continue to disagree. Depending on what your application
is, your filter may not care about files that are currently open and I/O
that is currently in progress, and that’s fine as long as it treats
those requests as opaque. If my filter sees a read or write for an FCB
that it’s never seen before, it’s going to behave like a good boy and
pass down the request untouched.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
Sent: Monday, June 09, 2003 2:28 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driverHow about an IO request that is pending and have not
completed? How can you track these; since your filter is not
loaded? Reverse is true for unloading.Although it is possible and will work 99.99999% of the time,
it is not safe and completely unreliable for production code.
Follow Microsoft’s advice on this one and require the reboot.Jamey
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
Sent: Monday, June 09, 2003 2:19 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driverI wouldn’t say it’s not safe or reliable to load an FS filter
after boot, there are just limitations that one needs to be
aware of when doing it (such as
IoRegisterFsRegistrationChange not enumerating
currently-loaded filesystems pre-XP).
- Nick Ryan
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> Sent: Monday, June 09, 2003 1:39 PM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
>
> There is no reliable or safe way to do this.
>
> Jamey
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Michal Vodicka
> Sent: Monday, June 09, 2003 11:28 AM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> > ----------
> > From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> > Reply To: xxxxx@lists.osr.com
> > Sent: Saturday, June 07, 2003 9:16 AM
> > To: xxxxx@lists.osr.com
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> > > I don’t know about disk filters but have FS filter which can be
> > installed
> > > without reboot. IIRC FileSpy from IFS kit and System Internals
> > FileMon also
> > > don’t need reboot. All depends on the way how volumes are
> attached.
> > The same
> > > with unload, it is not recommended for production but perfectly
> > suitable for
> > > debugging. I’m sure you know it so why post misleading answers?
> >
> > FileMon is not a 100% stable way of writing FS filters,
> only SFILTER
> > is. And SFILTER can be loaded on boot only. Anyway you
will need to
> > load at boot to filter SystemRoot volume.
> >
> You’re right when need to filter volumes since mount. There
> are cases when it isn’t necessary and then dynamic attach is
> possible and filter can be loaded/installed whenever. FileSpy
> from XP IFS kit shows the way.
>
> Best regards,
>
> Michal Vodicka
> STMicroelectronics Design and Application s.r.o.
> [michal.vodicka@st.com, http:://www.st.com]
>
>
>
> —
> You are currently subscribed to ntdev as:
> xxxxx@storagecraft.com To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@nryan.com
> To unsubscribe send a blank email to
xxxxx@lists.osr.com
>
You are currently subscribed to ntdev as:
xxxxx@storagecraft.com To unsubscribe send a blank email to
xxxxx@lists.osr.com
You are currently subscribed to ntdev as: xxxxx@nryan.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
You are currently subscribed to ntdev as: xxxxx@storagecraft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
how do you ensure that you aren’t letting your driver get unloaded while
the OS is still in your dispatch routine? For example, you might think
you could unload once you aren’t associated with any file objects.
However nothing stops the OS, on behalf of an app, from issuing a create
to your volume while you’re in the middle of trying to detach from the
stack.
it’s not safe. it might be good enough for your purposes, but that’s
really not good enough to sell.
-p
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
Sent: Monday, June 09, 2003 2:47 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driverI’ll have to continue to disagree. Depending on what your
application is, your filter may not care about files that are
currently open and I/O that is currently in progress, and
that’s fine as long as it treats those requests as opaque. If
my filter sees a read or write for an FCB that it’s never
seen before, it’s going to behave like a good boy and pass
down the request untouched.
- Nick Ryan
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> Sent: Monday, June 09, 2003 2:28 PM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
>
> How about an IO request that is pending and have not completed? How
> can you track these; since your filter is not loaded?
Reverse is true
> for unloading.
>
> Although it is possible and will work 99.99999% of the
time, it is not
> safe and completely unreliable for production code.
> Follow Microsoft’s advice on this one and require the reboot.
>
> Jamey
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> Sent: Monday, June 09, 2003 2:19 PM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> I wouldn’t say it’s not safe or reliable to load an FS filter after
> boot, there are just limitations that one needs to be aware of when
> doing it (such as IoRegisterFsRegistrationChange not enumerating
> currently-loaded filesystems pre-XP).
>
> - Nick Ryan
>
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> > Sent: Monday, June 09, 2003 1:39 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> >
> > There is no reliable or safe way to do this.
> >
> > Jamey
> >
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of
Michal Vodicka
> > Sent: Monday, June 09, 2003 11:28 AM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> > > ----------
> > > From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> > > Reply To: xxxxx@lists.osr.com
> > > Sent: Saturday, June 07, 2003 9:16 AM
> > > To: xxxxx@lists.osr.com
> > > Subject: [ntdev] Re: howto: no reboot for disk
filter driver
> > >
> > > > I don’t know about disk filters but have FS filter
which can be
> > > installed
> > > > without reboot. IIRC FileSpy from IFS kit and System Internals
> > > FileMon also
> > > > don’t need reboot. All depends on the way how volumes are
> > attached.
> > > The same
> > > > with unload, it is not recommended for production but
perfectly
> > > suitable for
> > > > debugging. I’m sure you know it so why post
misleading answers?
> > >
> > > FileMon is not a 100% stable way of writing FS filters,
> > only SFILTER
> > > is. And SFILTER can be loaded on boot only. Anyway you
> will need to
> > > load at boot to filter SystemRoot volume.
> > >
> > You’re right when need to filter volumes since mount. There are
> > cases when it isn’t necessary and then dynamic attach is possible
> > and filter can be loaded/installed whenever. FileSpy from
XP IFS kit
> > shows the way.
> >
> > Best regards,
> >
> > Michal Vodicka
> > STMicroelectronics Design and Application s.r.o.
> > [michal.vodicka@st.com, http:://www.st.com]
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as:
> > xxxxx@storagecraft.com To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > unsubscribe send a blank email to
> xxxxx@lists.osr.com
> >
>
>
>
> —
> You are currently subscribed to ntdev as:
> xxxxx@storagecraft.com To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@nryan.com To
> unsubscribe send a blank email to xxxxx@lists.osr.com
>
You are currently subscribed to ntdev as:
xxxxx@microsoft.com To unsubscribe send a blank email to
xxxxx@lists.osr.com
I agree completely that unloading an FS filter is unsafe. I think Jamey
was arguing that LOADING an FS filter after boot is unsafe - on that I
do not agree.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Peter Wieland
Sent: Monday, June 09, 2003 3:11 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driverhow do you ensure that you aren’t letting your driver get
unloaded while the OS is still in your dispatch routine? For
example, you might think you could unload once you aren’t
associated with any file objects. However nothing stops the
OS, on behalf of an app, from issuing a create to your volume
while you’re in the middle of trying to detach from the stack.it’s not safe. it might be good enough for your purposes,
but that’s really not good enough to sell.-p
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> Sent: Monday, June 09, 2003 2:47 PM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> I’ll have to continue to disagree. Depending on what your
> application is, your filter may not care about files that are
> currently open and I/O that is currently in progress, and
> that’s fine as long as it treats those requests as opaque. If
> my filter sees a read or write for an FCB that it’s never
> seen before, it’s going to behave like a good boy and pass
> down the request untouched.
>
> - Nick Ryan
>
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> > Sent: Monday, June 09, 2003 2:28 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> >
> > How about an IO request that is pending and have not
completed? How
> > can you track these; since your filter is not loaded?
> Reverse is true
> > for unloading.
> >
> > Although it is possible and will work 99.99999% of the
> time, it is not
> > safe and completely unreliable for production code.
> > Follow Microsoft’s advice on this one and require the reboot.
> >
> > Jamey
> >
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> > Sent: Monday, June 09, 2003 2:19 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> > I wouldn’t say it’s not safe or reliable to load an FS
filter after
> > boot, there are just limitations that one needs to be
aware of when
> > doing it (such as IoRegisterFsRegistrationChange not enumerating
> > currently-loaded filesystems pre-XP).
> >
> > - Nick Ryan
> >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of
Jamey Kirby
> > > Sent: Monday, June 09, 2003 1:39 PM
> > > To: NT Developers Interest List
> > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > >
> > >
> > > There is no reliable or safe way to do this.
> > >
> > > Jamey
> > >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of
> Michal Vodicka
> > > Sent: Monday, June 09, 2003 11:28 AM
> > > To: NT Developers Interest List
> > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > >
> > > > ----------
> > > > From:
xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> > > > Reply To: xxxxx@lists.osr.com
> > > > Sent: Saturday, June 07, 2003 9:16 AM
> > > > To: xxxxx@lists.osr.com
> > > > Subject: [ntdev] Re: howto: no reboot for disk
> filter driver
> > > >
> > > > > I don’t know about disk filters but have FS filter
> which can be
> > > > installed
> > > > > without reboot. IIRC FileSpy from IFS kit and
System Internals
> > > > FileMon also
> > > > > don’t need reboot. All depends on the way how volumes are
> > > attached.
> > > > The same
> > > > > with unload, it is not recommended for production but
> perfectly
> > > > suitable for
> > > > > debugging. I’m sure you know it so why post
> misleading answers?
> > > >
> > > > FileMon is not a 100% stable way of writing FS filters,
> > > only SFILTER
> > > > is. And SFILTER can be loaded on boot only. Anyway you
> > will need to
> > > > load at boot to filter SystemRoot volume.
> > > >
> > > You’re right when need to filter volumes since mount. There are
> > > cases when it isn’t necessary and then dynamic attach
is possible
> > > and filter can be loaded/installed whenever. FileSpy from
> XP IFS kit
> > > shows the way.
> > >
> > > Best regards,
> > >
> > > Michal Vodicka
> > > STMicroelectronics Design and Application s.r.o.
> > > [michal.vodicka@st.com, http:://www.st.com]
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as:
xxxxx@storagecraft.com
> > > To unsubscribe send a blank email to
> > > xxxxx@lists.osr.com
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > > unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> > >
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as:
> > xxxxx@storagecraft.com To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > unsubscribe send a blank email to xxxxx@lists.osr.com
> >
>
>
>
> —
> You are currently subscribed to ntdev as:
> xxxxx@microsoft.com To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
You are currently subscribed to ntdev as: xxxxx@nryan.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Lets speak about loading, not unloading. I guess nobody said unloading is
100% safe; it is (very) good for debugging only.
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
From:
xxxxx@windows.microsoft.com[SMTP:xxxxx@windows.microsoft.com]
Reply To: xxxxx@lists.osr.com
Sent: Tuesday, June 10, 2003 12:11 AM
To: xxxxx@lists.osr.com
Subject: [ntdev] Re: howto: no reboot for disk filter driverhow do you ensure that you aren’t letting your driver get unloaded while
the OS is still in your dispatch routine? For example, you might think
you could unload once you aren’t associated with any file objects.
However nothing stops the OS, on behalf of an app, from issuing a create
to your volume while you’re in the middle of trying to detach from the
stack.it’s not safe. it might be good enough for your purposes, but that’s
really not good enough to sell.-p
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> Sent: Monday, June 09, 2003 2:47 PM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> I’ll have to continue to disagree. Depending on what your
> application is, your filter may not care about files that are
> currently open and I/O that is currently in progress, and
> that’s fine as long as it treats those requests as opaque. If
> my filter sees a read or write for an FCB that it’s never
> seen before, it’s going to behave like a good boy and pass
> down the request untouched.
>
> - Nick Ryan
>
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> > Sent: Monday, June 09, 2003 2:28 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> >
> > How about an IO request that is pending and have not completed? How
> > can you track these; since your filter is not loaded?
> Reverse is true
> > for unloading.
> >
> > Although it is possible and will work 99.99999% of the
> time, it is not
> > safe and completely unreliable for production code.
> > Follow Microsoft’s advice on this one and require the reboot.
> >
> > Jamey
> >
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> > Sent: Monday, June 09, 2003 2:19 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> > I wouldn’t say it’s not safe or reliable to load an FS filter after
> > boot, there are just limitations that one needs to be aware of when
> > doing it (such as IoRegisterFsRegistrationChange not enumerating
> > currently-loaded filesystems pre-XP).
> >
> > - Nick Ryan
> >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> > > Sent: Monday, June 09, 2003 1:39 PM
> > > To: NT Developers Interest List
> > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > >
> > >
> > > There is no reliable or safe way to do this.
> > >
> > > Jamey
> > >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of
> Michal Vodicka
> > > Sent: Monday, June 09, 2003 11:28 AM
> > > To: NT Developers Interest List
> > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > >
> > > > ----------
> > > > From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> > > > Reply To: xxxxx@lists.osr.com
> > > > Sent: Saturday, June 07, 2003 9:16 AM
> > > > To: xxxxx@lists.osr.com
> > > > Subject: [ntdev] Re: howto: no reboot for disk
> filter driver
> > > >
> > > > > I don’t know about disk filters but have FS filter
> which can be
> > > > installed
> > > > > without reboot. IIRC FileSpy from IFS kit and System Internals
> > > > FileMon also
> > > > > don’t need reboot. All depends on the way how volumes are
> > > attached.
> > > > The same
> > > > > with unload, it is not recommended for production but
> perfectly
> > > > suitable for
> > > > > debugging. I’m sure you know it so why post
> misleading answers?
> > > >
> > > > FileMon is not a 100% stable way of writing FS filters,
> > > only SFILTER
> > > > is. And SFILTER can be loaded on boot only. Anyway you
> > will need to
> > > > load at boot to filter SystemRoot volume.
> > > >
> > > You’re right when need to filter volumes since mount. There are
> > > cases when it isn’t necessary and then dynamic attach is possible
> > > and filter can be loaded/installed whenever. FileSpy from
> XP IFS kit
> > > shows the way.
> > >
> > > Best regards,
> > >
> > > Michal Vodicka
> > > STMicroelectronics Design and Application s.r.o.
> > > [michal.vodicka@st.com, http:://www.st.com]
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as:
> > > xxxxx@storagecraft.com To unsubscribe send a blank email to
> > > xxxxx@lists.osr.com
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > > unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> > >
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as:
> > xxxxx@storagecraft.com To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > unsubscribe send a blank email to xxxxx@lists.osr.com
> >
>
>
>
> —
> You are currently subscribed to ntdev as:
> xxxxx@microsoft.com To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
You are currently subscribed to ntdev as: michal.vodicka@st.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
And how do you prevent the demand-loaded FSD from unloading?
Jamey
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
Sent: Monday, June 09, 2003 3:25 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driver
I agree completely that unloading an FS filter is unsafe. I think Jamey
was arguing that LOADING an FS filter after boot is unsafe - on that I
do not agree.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Peter Wieland
Sent: Monday, June 09, 2003 3:11 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driverhow do you ensure that you aren’t letting your driver get
unloaded while the OS is still in your dispatch routine? For
example, you might think you could unload once you aren’t
associated with any file objects. However nothing stops the
OS, on behalf of an app, from issuing a create to your volume
while you’re in the middle of trying to detach from the stack.it’s not safe. it might be good enough for your purposes,
but that’s really not good enough to sell.-p
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> Sent: Monday, June 09, 2003 2:47 PM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> I’ll have to continue to disagree. Depending on what your
> application is, your filter may not care about files that are
> currently open and I/O that is currently in progress, and
> that’s fine as long as it treats those requests as opaque. If
> my filter sees a read or write for an FCB that it’s never
> seen before, it’s going to behave like a good boy and pass
> down the request untouched.
>
> - Nick Ryan
>
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> > Sent: Monday, June 09, 2003 2:28 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> >
> > How about an IO request that is pending and have not
completed? How
> > can you track these; since your filter is not loaded?
> Reverse is true
> > for unloading.
> >
> > Although it is possible and will work 99.99999% of the
> time, it is not
> > safe and completely unreliable for production code.
> > Follow Microsoft’s advice on this one and require the reboot.
> >
> > Jamey
> >
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> > Sent: Monday, June 09, 2003 2:19 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> > I wouldn’t say it’s not safe or reliable to load an FS
filter after
> > boot, there are just limitations that one needs to be
aware of when
> > doing it (such as IoRegisterFsRegistrationChange not enumerating
> > currently-loaded filesystems pre-XP).
> >
> > - Nick Ryan
> >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of
Jamey Kirby
> > > Sent: Monday, June 09, 2003 1:39 PM
> > > To: NT Developers Interest List
> > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > >
> > >
> > > There is no reliable or safe way to do this.
> > >
> > > Jamey
> > >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of
> Michal Vodicka
> > > Sent: Monday, June 09, 2003 11:28 AM
> > > To: NT Developers Interest List
> > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > >
> > > > ----------
> > > > From:
xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> > > > Reply To: xxxxx@lists.osr.com
> > > > Sent: Saturday, June 07, 2003 9:16 AM
> > > > To: xxxxx@lists.osr.com
> > > > Subject: [ntdev] Re: howto: no reboot for disk
> filter driver
> > > >
> > > > > I don’t know about disk filters but have FS filter
> which can be
> > > > installed
> > > > > without reboot. IIRC FileSpy from IFS kit and
System Internals
> > > > FileMon also
> > > > > don’t need reboot. All depends on the way how volumes are
> > > attached.
> > > > The same
> > > > > with unload, it is not recommended for production but
> perfectly
> > > > suitable for
> > > > > debugging. I’m sure you know it so why post
> misleading answers?
> > > >
> > > > FileMon is not a 100% stable way of writing FS filters,
> > > only SFILTER
> > > > is. And SFILTER can be loaded on boot only. Anyway you
> > will need to
> > > > load at boot to filter SystemRoot volume.
> > > >
> > > You’re right when need to filter volumes since mount. There are
> > > cases when it isn’t necessary and then dynamic attach
is possible
> > > and filter can be loaded/installed whenever. FileSpy from
> XP IFS kit
> > > shows the way.
> > >
> > > Best regards,
> > >
> > > Michal Vodicka
> > > STMicroelectronics Design and Application s.r.o.
> > > [michal.vodicka@st.com, http:://www.st.com]
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as:
xxxxx@storagecraft.com
> > > To unsubscribe send a blank email to
> > > xxxxx@lists.osr.com
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > > unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> > >
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as:
> > xxxxx@storagecraft.com To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > unsubscribe send a blank email to xxxxx@lists.osr.com
> >
>
>
>
> —
> You are currently subscribed to ntdev as:
> xxxxx@microsoft.com To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
You are currently subscribed to ntdev as: xxxxx@nryan.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
You are currently subscribed to ntdev as: xxxxx@storagecraft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
With one comes the potential for the other. If it is loadable, someone
will surly try to unload it.
Jamey
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Michal Vodicka
Sent: Monday, June 09, 2003 3:26 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driver
Lets speak about loading, not unloading. I guess nobody said unloading
is
100% safe; it is (very) good for debugging only.
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
From:
xxxxx@windows.microsoft.com[SMTP:xxxxx@windows.microsoft.com]
Reply To: xxxxx@lists.osr.com
Sent: Tuesday, June 10, 2003 12:11 AM
To: xxxxx@lists.osr.com
Subject: [ntdev] Re: howto: no reboot for disk filter driverhow do you ensure that you aren’t letting your driver get unloaded
while
the OS is still in your dispatch routine? For example, you might
think
you could unload once you aren’t associated with any file objects.
However nothing stops the OS, on behalf of an app, from issuing a
create
to your volume while you’re in the middle of trying to detach from the
stack.it’s not safe. it might be good enough for your purposes, but that’s
really not good enough to sell.-p
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> Sent: Monday, June 09, 2003 2:47 PM
> To: NT Developers Interest List
> Subject: [ntdev] Re: howto: no reboot for disk filter driver
>
> I’ll have to continue to disagree. Depending on what your
> application is, your filter may not care about files that are
> currently open and I/O that is currently in progress, and
> that’s fine as long as it treats those requests as opaque. If
> my filter sees a read or write for an FCB that it’s never
> seen before, it’s going to behave like a good boy and pass
> down the request untouched.
>
> - Nick Ryan
>
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> > Sent: Monday, June 09, 2003 2:28 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> >
> > How about an IO request that is pending and have not completed?
How
> > can you track these; since your filter is not loaded?
> Reverse is true
> > for unloading.
> >
> > Although it is possible and will work 99.99999% of the
> time, it is not
> > safe and completely unreliable for production code.
> > Follow Microsoft’s advice on this one and require the reboot.
> >
> > Jamey
> >
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> > Sent: Monday, June 09, 2003 2:19 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> > I wouldn’t say it’s not safe or reliable to load an FS filter
after
> > boot, there are just limitations that one needs to be aware of
when
> > doing it (such as IoRegisterFsRegistrationChange not enumerating
> > currently-loaded filesystems pre-XP).
> >
> > - Nick Ryan
> >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey
Kirby
> > > Sent: Monday, June 09, 2003 1:39 PM
> > > To: NT Developers Interest List
> > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > >
> > >
> > > There is no reliable or safe way to do this.
> > >
> > > Jamey
> > >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of
> Michal Vodicka
> > > Sent: Monday, June 09, 2003 11:28 AM
> > > To: NT Developers Interest List
> > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > >
> > > > ----------
> > > > From:
xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> > > > Reply To: xxxxx@lists.osr.com
> > > > Sent: Saturday, June 07, 2003 9:16 AM
> > > > To: xxxxx@lists.osr.com
> > > > Subject: [ntdev] Re: howto: no reboot for disk
> filter driver
> > > >
> > > > > I don’t know about disk filters but have FS filter
> which can be
> > > > installed
> > > > > without reboot. IIRC FileSpy from IFS kit and System
Internals
> > > > FileMon also
> > > > > don’t need reboot. All depends on the way how volumes are
> > > attached.
> > > > The same
> > > > > with unload, it is not recommended for production but
> perfectly
> > > > suitable for
> > > > > debugging. I’m sure you know it so why post
> misleading answers?
> > > >
> > > > FileMon is not a 100% stable way of writing FS filters,
> > > only SFILTER
> > > > is. And SFILTER can be loaded on boot only. Anyway you
> > will need to
> > > > load at boot to filter SystemRoot volume.
> > > >
> > > You’re right when need to filter volumes since mount. There are
> > > cases when it isn’t necessary and then dynamic attach is
possible
> > > and filter can be loaded/installed whenever. FileSpy from
> XP IFS kit
> > > shows the way.
> > >
> > > Best regards,
> > >
> > > Michal Vodicka
> > > STMicroelectronics Design and Application s.r.o.
> > > [michal.vodicka@st.com, http:://www.st.com]
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as:
> > > xxxxx@storagecraft.com To unsubscribe send a blank email to
> > > xxxxx@lists.osr.com
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > > unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> > >
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as:
> > xxxxx@storagecraft.com To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > unsubscribe send a blank email to xxxxx@lists.osr.com
> >
>
>
>
> —
> You are currently subscribed to ntdev as:
> xxxxx@microsoft.com To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
You are currently subscribed to ntdev as: michal.vodicka@st.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
You are currently subscribed to ntdev as: xxxxx@storagecraft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com