question about developing a filter that can filter the data from/to network

The way is similar with the lagecy filter for local disk. To attach the device object to the network volum stack. But how to get the network redirector volume device object.
And when a new network volume device object will be create? When access a network share? Or at the initial of the network redirector drivers? I assume it is the former way. So it must detect a new network volume device object create in order to attach my device object to it. How to detect a new network volume device create?