Hi all!
i have some problems hooking on Network writes with a minifilter
driver. For Local everything is working fine, i’m filtering Non-Cached
writes and performing all the processing there. In the case of a
Network file it seems that the Non-Cached writes are disable in any
way because it is reachen a point that they are not triggered. I have
compared both Procmon traces, with and without minifilter, without
minifilter application performs non-cached writes during all
processing and with minifilter there is a moment writes never appear
again.
From the traces i get that with my minifilter there is a point that
the “FASTIO_CHECK_IF_POSSIBLE” operations result in “FAST IO
DISALLOWED”, thus, no flush operation appears again.
I have tried to find some information but there is not too much about
Network writes and this different behaviour doesn’t make any sense to
me since it is working fine except for this.
Could anyone give me some clue about what is happening? I will
appreciate any information.
Thank you
Fran