IRP_MJ_CLEANUP question

Hi,

I have a filter driver that is interested in detection of closing files. So,
it filters IRP_MJ_CLEANUPs. This works ok for local processes. But for
processes that close files over the network (remote/file sharing), sometimes
IRP_MJ_CLEANUPs won’t happen. I could see this behaviour with filemon, too.

Pehaps my idea, to filter IRP_MJ_CLEANUPs, is wrong. Has anybody an idea why
IRP_MJ_CLEANUPs (sometimes) won’t happen for remote processes.

Thanks in advance
Frank Friemel


You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com