> Actually i wanted to know why FltGetTunneledName is not
used in any of the minifilter samples in WDK?
Most probably because they are not active filters, they just
intercept calls and do nothing. File systems use tunnel cache
too, so there must be a special reason to use it in filters
(like being sure about the long name in pre-create)
L.
It is not applicable for minispy because it does not create situations which
change or invalidate the file name such as delete, rename or create hard
links (check the docs).
/Daniel
wrote in message news:xxxxx@ntfsd…
> Take for instance the minispy sample. It calls FltGetFileNameInformation
> in PreCreate to get normalized file name. But does not call
> FltGetTunneledName in PostCreate. Why?
> Am i going wrong somewhere in understanding the use of FltGetTunneledName?
>
> Thank you.
> Tushar.
>
Thank you Daniel and ladislav.
"It is not applicable for minispy because it does not create situations which
change or invalidate the file name "
How does a minifilter/ filter create such a situation?
Can you please explain it in more detail?
I already read the docs and the information on tunneling on msdn site.
Please can you explain it?
Thank you.
Tushar.
"If a minifilter driver retrieves normalized file name information in the
preoperation callback routine (PFLT_PRE_OPERATION_CALLBACK) for a create,
hard-link, or rename operation, it must call FltGetTunneledName from its
postoperation callback routine to retrieve the correct file name information
for the file.
…
The following paired operations can cause the file name name to be tunneled:
delete(name)/create(name)
delete(name)/rename(source, name)
rename(name, newname)/create(name)
rename(name, newname)/rename(source, name) "
Minispy is a read only filter, it does not do any of the above.
/Daniel
wrote in message news:xxxxx@ntfsd…
> Thank you Daniel and ladislav.
>
> "It is not applicable for minispy because it does not create situations
> which
> change or invalidate the file name "
>
> How does a minifilter/ filter create such a situation?
> Can you please explain it in more detail?
>
> I already read the docs and the information on tunneling on msdn site.
> Please can you explain it?
>
> Thank you.
> Tushar.
>
>