Minifilter opened files.

WINDBG
1

Hi! I am trying to debug a minifilter, and I was just wondering if threre is a way to find out the files opened by that minifilter (via FltCreateFile).

I think this information should be somewhere, since the Filter Manager uses it to defer the filter unload process. (Which is my real problem, I can?t get the filter unloaded as I wrote in a previous post)

Thanks a lot in advanced!!

Santi

2

The !fltkd commands are the way in which you extract this information, so if
those aren’t working on XP then that’s an issue…

Have you tried the checked version of FltMgr.sys? That has lots of extra
checks in it and I believe that it will actually print this info on unload.

-scott

–
Scott Noone
Consulting Associate and Chief System Problem Analyst
OSR Open Systems Resources, Inc.
http://www.osronline.com

wrote in message news:xxxxx@windbg…

Hi! I am trying to debug a minifilter, and I was just wondering if threre is
a way to find out the files opened by that minifilter (via FltCreateFile).

I think this information should be somewhere, since the Filter Manager uses
it to defer the filter unload process. (Which is my real problem, I can´t
get the filter unloaded as I wrote in a previous post)

Thanks a lot in advanced!!

Santi