RE: Re: [ntfsd] File Id vs File Name in minifilter

Never trust intuition when it comes to performance. With that said, the call to obtain the file ID is all in memory already at that point. It doesn’t introduce I/O. Grabbing values from memory isn’t likely to be your bottleneck. Doing extra I/O IS likely to be your bottleneck.

As for which one to use, it depends upon what you are trying to accomplish. I like FIDs because they are fixed size and easy to communicate to a UM service (where the name can then be extracted) but as Alex points out it depends upon what you’re doing. If people are renaming those files and you no longer wish to track them, you’d have extra complexity with that.

Tony
OSR