It finally happened to me! Someone tried to access my Win2k server running
my own FSD from a NT4 workstation. When they did it, they tried to copy a
file from their local C: drive to the drive my FSD implements on win2k
server. It works on win2k to win2k, but it fails on nt4 to win2k. NT4
pops up a box that asks if it is okay to replace the current directory name
with the file he wants to copy…
Can anyone give me some clues as to where to figure out the differences
between these two versions of the OS when it involves IRP_MJ_CREATE (open)
processing?
I have a filemon trace of the two scenarios, and they are very different.
What gives?
Thanks ahead of time…
Greg
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
What do you mean that they are very different. We need more information.
Jamey
xxxxx@storagecraft.com
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@filetek.com
Sent: Wednesday, September 26, 2001 2:31 PM
To: File Systems Developers
Subject: [ntfsd] IRP_MJ_CREATE differences on win2k and NT4
It finally happened to me! Someone tried to access my Win2k server
running
my own FSD from a NT4 workstation. When they did it, they tried to copy
a
file from their local C: drive to the drive my FSD implements on win2k
server. It works on win2k to win2k, but it fails on nt4 to win2k. NT4
pops up a box that asks if it is okay to replace the current directory
name
with the file he wants to copy…
Can anyone give me some clues as to where to figure out the differences
between these two versions of the OS when it involves IRP_MJ_CREATE
(open)
processing?
I have a filemon trace of the two scenarios, and they are very
different.
What gives?
Thanks ahead of time…
Greg
You are currently subscribed to ntfsd as: xxxxx@storagecraft.com To
unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Sorry it took so long to reply - I’ve been incognito for a couple of days
I have a filemon trace for the same operation, one for NT4 Workstation
client talking to win2k server, and one for Win2k Pro client talking to
same win2k server. Here’s the first few IRPs I get from NT4 client:
Note: My driver implements dos device V:, which is a user-mode server that
is a virtual (RAM) disk.
1 9:25:47 AM System:8 IRP_MJ_CREATE V:\ SUCCESS Attributes: Any Options:
Open Directory
2 9:25:47 AM System:8 IRP_MJ_CREATE V:\000 SUCCESS Attributes: Any Options:
Open
3 9:25:47 AM RFS.exe:1192 IOCTL: 0x93392 V: SUCCESS
4 9:25:47 AM RFS.exe:1192 IOCTL: 0x93396 V: SUCCESS
5 9:25:47
AM System:8 IRP_MJ_QUERY_INFORMATION V:\000 SUCCESS FileNetworkOpenInformation
6 9:25:47 AM System:8 IRP_MJ_CLEANUP V:\000 SUCCESS
7 9:25:47 AM System:8 IRP_MJ_CLOSE V:\000 SUCCESS
8 9:25:47 AM System:8 IRP_MJ_CREATE V:\ SUCCESS Attributes: Any Options:
Open
9 9:25:47
AM System:8 IRP_MJ_DIRECTORY_CONTROL V:\ SUCCESS FileBothDirectoryInformation:
000
10 9:25:47 AM RFS.exe:1192 IOCTL: 0x93392 V: SUCCESS
11 9:25:47 AM RFS.exe:1192 IOCTL: 0x93396 V: SUCCESS
12 9:25:47 AM System:8 IRP_MJ_DIRECTORY_CONTROL V:\ NO MORE
FILES FileBothDirectoryInformation
13 9:25:47 AM RFS.exe:1192 IOCTL: 0x93392 V: SUCCESS
14 9:25:47 AM RFS.exe:1192 IOCTL: 0x93396 V: NO MORE FILES
15 9:25:47 AM System:8 IRP_MJ_CLEANUP V:\ SUCCESS
16 9:25:47 AM System:8 IRP_MJ_CLOSE V:\ SUCCESS
Now here’s the opening sequence for Win2k client -
1 9:27:14 AM System:8 IRP_MJ_CREATE V:\ SUCCESS Attributes: Any Options:
Open
2 9:27:14
AM System:8 IRP_MJ_DIRECTORY_CONTROL V:\ SUCCESS FileBothDirectoryInformation:
000
3 9:27:14 AM RFS.exe:1192 IOCTL: 0x93392 V: SUCCESS
4 9:27:14 AM RFS.exe:1192 IOCTL: 0x93396 V: SUCCESS
5 9:27:14 AM System:8 IRP_MJ_DIRECTORY_CONTROL V:\ NO MORE
FILES FileBothDirectoryInformation
6 9:27:14 AM RFS.exe:1192 IOCTL: 0x93392 V: SUCCESS
7 9:27:14 AM RFS.exe:1192 IOCTL: 0x93396 V: NO MORE FILES
8 9:27:14 AM System:8 IRP_MJ_CLEANUP V:\ SUCCESS
9 9:27:14 AM System:8 IRP_MJ_CLOSE V:\ SUCCESS
10 9:27:14 AM System:8 IRP_MJ_CREATE V:\000\desktop.ini FILE NOT
FOUND Attributes: Any Options: Open
11 9:27:14 AM RFS.exe:1192 IOCTL: 0x93396 V: FILE NOT FOUND
12 9:27:14 AM RFS.exe:1192 IOCTL: 0x93392 V: SUCCESS
13 9:27:14 AM System:8 IRP_MJ_CREATE V:\000\desktop.ini FILE NOT
FOUND Attributes: Any Options: Open
14 9:27:14 AM RFS.exe:1192 IOCTL: 0x93396 V: FILE NOT FOUND
15 9:27:14 AM RFS.exe:1192 IOCTL: 0x93392 V: SUCCESS
16 9:27:15 AM System:8 IRP_MJ_CREATE V:\000 SUCCESS Attributes: Any
Options: Open
17 9:27:15 AM RFS.exe:1192 IOCTL: 0x93392 V: SUCCESS
18 9:27:15 AM RFS.exe:1192 IOCTL: 0x93396 V: SUCCESS
19 9:27:15
AM System:8 IRP_MJ_QUERY_INFORMATION V:\000 SUCCESS FileBasicInformation
20 9:27:15 AM System:8 IRP_MJ_CLEANUP V:\000 SUCCESS
21 9:27:15 AM System:8 IRP_MJ_CLOSE V:\000 SUCCESS
As you can see, they are quite different…
Anyone have any comments on this?
Thanks - Greg
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com