IRP_MJ_SHUTDOWN never received

Hi all,

I’m working on filter driver and want to do some cleanup when a shutdown
occurred.
After having been able to receive the regular IRP_MJ_CREATE /
IRP_MJ_CLOSE / …
I decided to enable the IRP_MJ_SHUTDOWN pointing to my additional
treatment.
I thought I would get it when the system will be starting the overall
shutdown of the machine,
and before, the file system I’m filtering would be called on it own
shutdown entry point.

But unfortunatly I’m never been call and I never received any shutdown
request as part of my attachement
to the file system I’m filtering. Eventhough the underlying file system
shutdown entry point is properly called .

Any Idea ?

Thank’s for your help,

Xavier

Which file system are you filtering?

If you are filtering a disk, tape, or CD file system you should be
called at shutdown. If you are not, there’s something wrong with your
implementation.

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources Inc
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xavier oriol
Sent: Monday, May 10, 2004 4:26 PM
To: ntfsd redirect
Subject: [ntfsd] IRP_MJ_SHUTDOWN never received

Hi all,

I’m working on filter driver and want to do some cleanup when a shutdown

occurred.
After having been able to receive the regular IRP_MJ_CREATE /
IRP_MJ_CLOSE / …
I decided to enable the IRP_MJ_SHUTDOWN pointing to my additional
treatment.
I thought I would get it when the system will be starting the overall
shutdown of the machine,
and before, the file system I’m filtering would be called on it own
shutdown entry point.

But unfortunatly I’m never been call and I never received any shutdown
request as part of my attachement
to the file system I’m filtering. Eventhough the underlying file system
shutdown entry point is properly called .

Any Idea ?

Thank’s for your help,

Xavier


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

Hi,

I’m filtering all file system activities going to hard disk let’s say a
volume.
The Underlying file system is usually Ntfs or Fastfat.

The attachment is fine since I’m receiving the other operation like read
, write etc…
except for shutdown.
However the system itself seams to have a behavior at shutdown I was not
expected.
The file system shutdown entry point is only call one time during the
overall shutdown procedure,
which means that the system is considering this entry point as a general
shutdown for all disk and volume related to this file system. ?

Or maybe they are something else to do aside the regular IRP_MJ_TABLE
initialization ?

Thank’s for your time

Regards,

Xavier

Tony Mason wrote:

Which file system are you filtering?

If you are filtering a disk, tape, or CD file system you should be
called at shutdown. If you are not, there’s something wrong with your
implementation.

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources Inc
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xavier oriol
Sent: Monday, May 10, 2004 4:26 PM
To: ntfsd redirect
Subject: [ntfsd] IRP_MJ_SHUTDOWN never received

Hi all,

I’m working on filter driver and want to do some cleanup when a shutdown

occurred.
After having been able to receive the regular IRP_MJ_CREATE /
IRP_MJ_CLOSE / …
I decided to enable the IRP_MJ_SHUTDOWN pointing to my additional
treatment.
I thought I would get it when the system will be starting the overall
shutdown of the machine,
and before, the file system I’m filtering would be called on it own
shutdown entry point.

But unfortunatly I’m never been call and I never received any shutdown
request as part of my attachement
to the file system I’m filtering. Eventhough the underlying file system
shutdown entry point is properly called .

Any Idea ?

Thank’s for your help,

Xavier


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@videotron.ca
To unsubscribe send a blank email to xxxxx@lists.osr.com

Hi Xavier,

Shutdown is called for each registered file system device object. So,
if IoRegisterFileSystem was called, and the device object type was
FILE_DEVICE_DISK_FILE_SYSTEM - or TAPE or CDROM - then it will be called
during shutdown time.

For NTFS, for example, there is only one device object so registered.
For FAT there are at most two. RAW registers for all three. So NTFS is
called once, FAT is called twice, and RAW is called three times.

The other calls all go through device objects that represent the
volumes, but those are not registered for IRP_MJ_SHUTDOWN notification.
So if you aren’t attached to \Ntfs or \Fat or \FatCdrom then you won’t
get the IRP_MJ_SHUTDOWN calls.

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources Inc
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xavier oriol
Sent: Monday, May 10, 2004 5:04 PM
To: ntfsd redirect
Subject: Re: [ntfsd] IRP_MJ_SHUTDOWN never received

Hi,

I’m filtering all file system activities going to hard disk let’s say a
volume.
The Underlying file system is usually Ntfs or Fastfat.

The attachment is fine since I’m receiving the other operation like read

, write etc…
except for shutdown.
However the system itself seams to have a behavior at shutdown I was not

expected.
The file system shutdown entry point is only call one time during the
overall shutdown procedure,
which means that the system is considering this entry point as a general

shutdown for all disk and volume related to this file system. ?

Or maybe they are something else to do aside the regular IRP_MJ_TABLE
initialization ?

Thank’s for your time

Regards,

Xavier

Tony Mason wrote:

Which file system are you filtering?

If you are filtering a disk, tape, or CD file system you should be
called at shutdown. If you are not, there’s something wrong with your
implementation.

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources Inc
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xavier oriol
Sent: Monday, May 10, 2004 4:26 PM
To: ntfsd redirect
Subject: [ntfsd] IRP_MJ_SHUTDOWN never received

Hi all,

I’m working on filter driver and want to do some cleanup when a
shutdown

occurred.
After having been able to receive the regular IRP_MJ_CREATE /
IRP_MJ_CLOSE / …
I decided to enable the IRP_MJ_SHUTDOWN pointing to my additional
treatment.
I thought I would get it when the system will be starting the overall
shutdown of the machine,
and before, the file system I’m filtering would be called on it own
shutdown entry point.

But unfortunatly I’m never been call and I never received any shutdown
request as part of my attachement
to the file system I’m filtering. Eventhough the underlying file system

shutdown entry point is properly called .

Any Idea ?

Thank’s for your help,

Xavier


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@videotron.ca
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

Hi Tony,

You answer make sense,
I will reconsider my implementation taking it into account.

Thank’s for your help,

Regards,

Xavier

Tony Mason wrote:

Hi Xavier,

Shutdown is called for each registered file system device object. So,
if IoRegisterFileSystem was called, and the device object type was
FILE_DEVICE_DISK_FILE_SYSTEM - or TAPE or CDROM - then it will be called
during shutdown time.

For NTFS, for example, there is only one device object so registered.
For FAT there are at most two. RAW registers for all three. So NTFS is
called once, FAT is called twice, and RAW is called three times.

The other calls all go through device objects that represent the
volumes, but those are not registered for IRP_MJ_SHUTDOWN notification.
So if you aren’t attached to \Ntfs or \Fat or \FatCdrom then you won’t
get the IRP_MJ_SHUTDOWN calls.

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources Inc
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xavier oriol
Sent: Monday, May 10, 2004 5:04 PM
To: ntfsd redirect
Subject: Re: [ntfsd] IRP_MJ_SHUTDOWN never received

Hi,

I’m filtering all file system activities going to hard disk let’s say a
volume.
The Underlying file system is usually Ntfs or Fastfat.

The attachment is fine since I’m receiving the other operation like read

, write etc…
except for shutdown.
However the system itself seams to have a behavior at shutdown I was not

expected.
The file system shutdown entry point is only call one time during the
overall shutdown procedure,
which means that the system is considering this entry point as a general

shutdown for all disk and volume related to this file system. ?

Or maybe they are something else to do aside the regular IRP_MJ_TABLE
initialization ?

Thank’s for your time

Regards,

Xavier

Tony Mason wrote:

>Which file system are you filtering?
>
>If you are filtering a disk, tape, or CD file system you should be
>called at shutdown. If you are not, there’s something wrong with your
>implementation.
>
>Regards,
>
>Tony
>
>Tony Mason
>Consulting Partner
>OSR Open Systems Resources Inc
>http://www.osr.com
>
>
>-----Original Message-----
>From: xxxxx@lists.osr.com
>[mailto:xxxxx@lists.osr.com] On Behalf Of xavier oriol
>Sent: Monday, May 10, 2004 4:26 PM
>To: ntfsd redirect
>Subject: [ntfsd] IRP_MJ_SHUTDOWN never received
>
>Hi all,
>
>I’m working on filter driver and want to do some cleanup when a
>
>
shutdown

>occurred.
>After having been able to receive the regular IRP_MJ_CREATE /
>IRP_MJ_CLOSE / …
>I decided to enable the IRP_MJ_SHUTDOWN pointing to my additional
>treatment.
>I thought I would get it when the system will be starting the overall
>shutdown of the machine,
>and before, the file system I’m filtering would be called on it own
>shutdown entry point.
>
>But unfortunatly I’m never been call and I never received any shutdown
>request as part of my attachement
>to the file system I’m filtering. Eventhough the underlying file system
>
>

>shutdown entry point is properly called .
>
>Any Idea ?
>
>Thank’s for your help,
>
>Xavier
>
>
>
>
>—
>Questions? First check the IFS FAQ at
>https://www.osronline.com/article.cfm?id=17
>
>You are currently subscribed to ntfsd as: xxxxx@osr.com
>To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
>—
>Questions? First check the IFS FAQ at
>
>
https://www.osronline.com/article.cfm?id=17

>You are currently subscribed to ntfsd as: xxxxx@videotron.ca
>To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
>
>


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@videotron.ca
To unsubscribe send a blank email to xxxxx@lists.osr.com