Kimura-san,
You can only get the file name in the create path before the IRP has been sent down to the lower-level file system. It’s not guaranteed after that. WHat you should do is check the file name before you send the create down, and if it is interesting remember the FSContext field. This will be valid later. Don’t forget the context may get re-0used if the file is closed and another opened.
Andy Champ
(Formerly ICL - now part of Fujitsu!)
Get your free email from http://mymail.altavista.com
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com