legacy fsf dynamic loading

NTFSD
1

Minifilters can be loaded/unloaded dynamically but can a legacy fsf
be *loaded* dynamically. this is to avoid a reboot after installation.
i think filemon and filespy do the same.

2

It depends. If your filter needs to avoid data being in the cache
without his knowledge, you must reboot (data modification filters
mainly).

Both Filemon and Filespy just log the names, so no need to reboot.
Although Filespy may give you better results if you load the driver at boot
(there will be more file names saved in fspy’s cache, so you’ll see less
“-= Not In Cache =-” file names.

L.

3

You can also set your “start” parameter in registry to 4 (manual) and then
you can load the filter manually using “sc start filtername” and stop it
using “sc stop filtername”.
Before stopping it you have to close all communications with userspace.

Regards,
Urban

On 2/28/06, Ladislav Zezula wrote:
>
> It depends. If your filter needs to avoid data being in the cache
> without his knowledge, you must reboot (data modification filters
> mainly).
>
> Both Filemon and Filespy just log the names, so no need to reboot.
> Although Filespy may give you better results if you load the driver at
> boot
> (there will be more file names saved in fspy’s cache, so you’ll see less
> “-= Not In Cache =-” file names.
>
> L.
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@gmail.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>

4

Hello!

You can also set your “start” parameter in registry to 4 (manual) and then

you can load the filter manually using “sc start filtername” and stop it
using “sc stop filtername”.

The parameter value must be 3 not 4 (sorry).

Regards,
Urban

5

Certainly yes.
FSD’s filters can be loaded dynamicaly, but can’t be unloaded until OS
unmounts all FSD’s device objects to which it attaches its device objects.

“Mani” wrote in message news:xxxxx@ntfsd…
> Minifilters can be loaded/unloaded dynamically but can a legacy fsf
> be loaded dynamically. this is to avoid a reboot after installation.
> i think filemon and filespy do the same.
>
>
>