RAW fs sys file

NTFSD
1

In which sys file is the Raw FS implemented?

2

RAW is in Ntoskrnl.exe.

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

Looking forward to seeing you at the next OSR File Systems class in
Boston, MA April 24-27, 2006.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Mani
Sent: Monday, January 09, 2006 4:45 AM
To: ntfsd redirect
Subject: [ntfsd] RAW fs sys file

In which sys file is the Raw FS implemented?

Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

3

In the kernel itself. It is mounted only on opens with target the DASD disk
itself like \.\d:, and only does read (stupid passthru down), write (stupid
passthru down), and MJ_QUERY_VOLUME_INFORMATION (returns the disk size).

Its main purpose is to support GetDiskFreeSpace(Ex) aka
NtQueryVolumeInformationFile on volumes which contain no sane filesystem
structure.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “Mani”
Newsgroups: ntfsd
To: “Windows File Systems Devs Interest List”
Sent: Monday, January 09, 2006 12:44 PM
Subject: [ntfsd] RAW fs sys file

> In which sys file is the Raw FS implemented?
>
>
>
> —
> Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com

4

Using device tree I found that there are different devices that the raw fs
creates. can i read data through these devices directly by bypassing the fs
drivers above?

I am asking this, because symantec doesn’t attach itself to these devices,
does it mean that no erad/write operation is possible?

5

No need in this. RAW just passed all reads and writes down.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “amitr0”
To: “Windows File Systems Devs Interest List”
Sent: Thursday, January 19, 2006 1:10 PM
Subject: Re: [ntfsd] RAW fs sys file

Using device tree I found that there are different devices that the raw fs
creates. can i read data through these devices directly by bypassing the fs
drivers above?

I am asking this, because symantec doesn’t attach itself to these devices,
does it mean that no erad/write operation is possible?

—
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

6

>No need in this. RAW just passed all reads and writes down.

Also, CDwriters usually bypass the FS, so does it mean that AV products
cannot scan a CD/DVD write operation. I know that to write files they must
firs be fetched from the FS, and they can be scaned there…but I need to
clarify this point.

7

>Also, CDwriters usually bypass the FS,

Nero uses IOCTL_SCSI_PASS_THROUGH_DIRECT. Other products like Alcohol or ones
based on GEAR toolkit (like Norton Ghost) use special drivers.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

8

Gear’s box product uses ASPI drivers (I’m using the 64-bit ASPI drivers
with Gear 7.0 Pro and Mastering and they both use aspi.)

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Maxim S. Shatskih
Sent: Thursday, January 19, 2006 10:41 AM
To: ntfsd redirect
Subject: Re: [ntfsd] RAW fs sys file

Also, CDwriters usually bypass the FS,

Nero uses IOCTL_SCSI_PASS_THROUGH_DIRECT. Other products like Alcohol or
ones
based on GEAR toolkit (like Norton Ghost) use special drivers.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com