I have an upper filter driver to my function driver. I need to insert a
filter driver between the funtion driver and the upper filter driver. So,
the driver I’ll sneak in should be a lower filter driver to the upper filter
driver. The hierarchy will look like this
upper filter driver
|
new filter driver
|
function driver
upper filter driver is already loaded. I’ll write the new filter driver to
monitor some stuff between function driver and upper filter driver. Is it
possible without touching inf of function and upper filter drivers? If so
could anybody give some hints on how to proceed for inf and loading utility?
Is the upper filter driver a class filter driver? Is your new driver
also a class filter driver or just device filter driver?
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Hakim
Sent: Thursday, November 04, 2004 9:58 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] inserting filter driver
Hello,
I have an upper filter driver to my function driver. I need to insert a
filter driver between the funtion driver and the upper filter driver.
So,
the driver I’ll sneak in should be a lower filter driver to the upper
filter
driver. The hierarchy will look like this
upper filter driver
|
new filter driver
|
function driver
upper filter driver is already loaded. I’ll write the new filter driver
to
monitor some stuff between function driver and upper filter driver. Is
it
possible without touching inf of function and upper filter drivers? If
so
could anybody give some hints on how to proceed for inf and loading
utility?
> Is the upper filter driver a class filter driver?
It is class filter driver.
Is your new driver
also a class filter driver or just device filter driver?
The new filter driver will be device filter driver that will monitor the
function driver specially the IRP sent by upper filter driver(class).
Hakim
“Doron Holan” wrote in message news:xxxxx@ntdev… Is the upper filter driver a class filter driver? Is your new driver also a class filter driver or just device filter driver?
d
-----Original Message----- From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Hakim Sent: Thursday, November 04, 2004 9:58 AM To: Windows System Software Devs Interest List Subject: [ntdev] inserting filter driver
Hello,
I have an upper filter driver to my function driver. I need to insert a filter driver between the funtion driver and the upper filter driver. So, the driver I’ll sneak in should be a lower filter driver to the upper filter driver. The hierarchy will look like this
upper filter driver | new filter driver | function driver
upper filter driver is already loaded. I’ll write the new filter driver to monitor some stuff between function driver and upper filter driver. Is it possible without touching inf of function and upper filter drivers? If so could anybody give some hints on how to proceed for inf and loading utility?
You would have to write an INF that installs your filter as a device
upper filter and install the current FDO as the service for the device.
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Hakim
Sent: Thursday, November 04, 2004 10:38 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] inserting filter driver
Is the upper filter driver a class filter driver?
It is class filter driver.
Is your new driver
also a class filter driver or just device filter driver?
The new filter driver will be device filter driver that will monitor the
function driver specially the IRP sent by upper filter driver(class).
Hakim
“Doron Holan” wrote in message news:xxxxx@ntdev… Is the upper filter driver a class filter driver? Is your new driver also a class filter driver or just device filter driver?
d
-----Original Message----- From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Hakim Sent: Thursday, November 04, 2004 9:58 AM To: Windows System Software Devs Interest List Subject: [ntdev] inserting filter driver
Hello,
I have an upper filter driver to my function driver. I need to insert a filter driver between the funtion driver and the upper filter driver. So, the driver I’ll sneak in should be a lower filter driver to the upper filter driver. The hierarchy will look like this
upper filter driver | new filter driver | function driver
upper filter driver is already loaded. I’ll write the new filter driver to monitor some stuff between function driver and upper filter driver. Is it possible without touching inf of function and upper filter drivers? If so could anybody give some hints on how to proceed for inf and loading utility?
> monitor some stuff between function driver and upper filter driver. Is it
possible without touching inf of function and upper filter drivers?
Yes, it is possible by patching the UpperFilters registry value, specify one
UpperFilter after another. UpperFilters is a MULTI_SZ value.
The order of filters in Upper/LowerFilters value is - from PDO up. For
instance, if you have LowerFilters like this:
MyFilter Imapi
for a CD writer, then MyFilter will be attached below Imapi and just above
the storage port driver (which will allow to filter the Imapi’s traffic). Same
order is for UpperFilters.
Thanks Max.
I had this in mind but was not sure whether it would work. Now, I got your
confirmation.
Hakim
“Maxim S. Shatskih” wrote in message news:xxxxx@ntdev… >> monitor some stuff between function driver and upper filter driver. Is it >> possible without touching inf of function and upper filter drivers? > > Yes, it is possible by patching the UpperFilters registry value, specify > one > UpperFilter after another. UpperFilters is a MULTI_SZ value. > > The order of filters in Upper/LowerFilters value is - from PDO up. For > instance, if you have LowerFilters like this: > > MyFilter Imapi > > - for a CD writer, then MyFilter will be attached below Imapi and just > above > the storage port driver (which will allow to filter the Imapi’s traffic). > Same > order is for UpperFilters. > > Maxim Shatskih, Windows DDK MVP > StorageCraft Corporation > xxxxx@storagecraft.com > http://www.storagecraft.com > >