Hi all and congratulations for this site that helps anyone who wants to write a driver for the undocumented world of windows. About my story… i’m trying to write a file system filter driver in legacy style and i can’t decide which irps and fast I/O i must handle. For example is PreAcquireForCcFlush or PreAcquireForModifiedPageWriter critical for my driver? What about the other callbacks or IRPs like IRP_MJ_SET_EA. If anyone has the time please answer me. Thanks in advance.
Oh excuse me this filter drivers is for antivirus usage and i forgot to mention it before.Sorry for double post
There by hangs the issue with filesystem development (certainly in the two
operating systems that I have played with). You basically have to know
everything before you can make a judgement about anything. You then need to
know what your requirements are. Then you have to marry them togetehr and
try to produce something which fits the need (which may require compromise).
So nobody is going to say “you need IRP_MJ_FOO and IRP_MJ_BAR but only when
specified with IRP_MN_WIDGET”.
They will recommend some reading and good course. OSR’s course is excellent
(and, trust me, you can get benefit from attending more than once). Nagar
is the canonical text book. Then there are the FAT sources…
Expect a huge learning cliff. But a thoroughly enjoyable one (if you
enjoying that sort of thing). After about 6 months you will be in a
position to make some sensible design calls, although you’ll certainly
revisit them later.
Rod
wrote in message news:xxxxx@ntfsd…
> Hi all and congratulations for this site that helps anyone who wants to
> write a driver for the undocumented world of windows. About my story…
> i’m trying to write a file system filter driver in legacy style and i
> can’t decide which irps and fast I/O i must handle. For example is
> PreAcquireForCcFlush or PreAcquireForModifiedPageWriter critical for my
> driver? What about the other callbacks or IRPs like IRP_MJ_SET_EA. If
> anyone has the time please answer me. Thanks in advance.
>
xxxxx@yahoo.gr wrote:
i’m trying to write a file system filter driver in legacy style and i can’t decide which irps and fast I/O i must handle.
Quick answer, you must handle ALL of them. You can let them pass-thro,
or take action but every single one needs to supported in
some way.
Matt
We highly recommend that you write file system filters as mini-filters. Is
there any reason in particular that you need to use a legacy filter?
–Andrew Thomson
–Microsoft
On 11/8/08 5:12 AM, in article xxxxx@ntfsd, “Matt”
wrote:
> xxxxx@yahoo.gr wrote:
>> i’m trying to write a file system filter driver in legacy style and i can’t
>> decide which irps and fast I/O i must handle.
> Quick answer, you must handle ALL of them. You can let them pass-thro,
> or take action but every single one needs to supported in
> some way.
>
> Matt
>
thank you for your time.