minifilters

Hi,

Mini filters can be developed in kernel mode only . I was told by this
forum .

But as far as architecture is concerned we have layered approach for
drivers.Why cant I make a simple user mode driver ,create its object and
attach it to the FSD object. No kernel mode driver is required.and moreover
I can use C++ COM and ATL approach(which I cant in kernel mode) Will there
be any problem with this approach in manipulating IRPs. May be my Qusetion
will not make any sense to you superb people…but I want to make myself
very clear before starting any development.

Please help me …

Regards,

Ruhina

Well. the real question here is: how much sense is making this question to yourself ?

May be my Qusetion will not make any sense to you superb people…but I want to make myself very clear before starting any development.

Please help me …

Regards,

Ruhina


Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

ruhina,

You need to understand that kernel mode and usermode are completely
different things. They are separate and have different abilitys. If you
want to manipulate IRP’s heading to the filesystem, you going to have to
do that in the KERNEL!

Minifilters are not that hard to write. This is the only way to do
it(well, not true, but the best for your needs)

Before you go and start writing code that will never work, you need to
study a little about the OS architecture and how it works. You need to
understand the difference between kernel land and user land. COM and ALT
will never ever work.

Ruhina, don’t be afraid of a minifilter; it’s not that hard.

matt

ruhina wrote:

Hi,

Mini filters can be developed in kernel mode only . I was told by
this forum .

But as far as architecture is concerned we have layered approach for
drivers.Why cant I make a simple user mode driver ,create its object
and attach it to the FSD object. No kernel mode driver is
required.and moreover I can use C++ COM and ATL approach(which I cant
in kernel mode) Will there be any problem with this approach in
manipulating IRPs. May be my Qusetion will not make any sense to you
superb people…but I want to make myself very clear before starting
any development.

Please help me …

Regards,

Ruhina


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag
argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

There is no support for user-mode FS filters. At all.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “ruhina”
To: “Windows File Systems Devs Interest List”
Sent: Friday, February 17, 2006 1:32 PM
Subject: [ntfsd] minifilters

> Hi,
>
>
>
>
>
>
>
> Mini filters can be developed in kernel mode only . I was told by this
> forum .
>
>
>
> But as far as architecture is concerned we have layered approach for
> drivers.Why cant I make a simple user mode driver ,create its object and
> attach it to the FSD object. No kernel mode driver is required.and moreover
> I can use C++ COM and ATL approach(which I cant in kernel mode) Will there
> be any problem with this approach in manipulating IRPs. May be my Qusetion
> will not make any sense to you superb people…but I want to make myself
> very clear before starting any development.
>
>
>
> Please help me …
>
>
>
> Regards,
>
> Ruhina
>
>
>
>
> —
> Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com