Hi,
Is there a way to read a file’s header information? FltReadFile
and zwReadFile reads only the data portion. I tried forcing the starting
offset to zero. Is there an API to read a file including its header? I
could not identify one after searching through MSDN site.
I am looking to modify the scanner.c (the sample IFS kit code) to read a
file including its header rather than just the data.
Thanks,
Sri.
DISCLAIMER:
This email (including any attachments) is intended for the sole use of the intended recipient/s and may contain material that is CONFIDENTIAL AND PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or distribution or forwarding of any or all of the contents in this message is STRICTLY PROHIBITED. If you are not the intended recipient, please contact the sender by email and delete all copies; your cooperation in this regard is appreciated.
Please define “header” 
“Srivathsan_Srinivasagopalan” wrote
in message news:xxxxx@ntfsd…
Hi,
Is there a way to read a file’s header information? FltReadFile and
zwReadFile reads only the data portion. I tried forcing the starting offset
to zero. Is there an API to read a file including its header? I could not
identify one after searching through MSDN site.
I am looking to modify the scanner.c (the sample IFS kit code) to read a
file including its header rather than just the data.
Thanks,
Sri.
DISCLAIMER:
This email (including any attachments) is intended for the sole use of the
intended recipient/s and may contain material that is CONFIDENTIAL AND
PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or
distribution or forwarding of any or all of the contents in this message is
STRICTLY PROHIBITED. If you are not the intended recipient, please contact
the sender by email and delete all copies; your cooperation in this regard
is appreciated…
For example, a Microsoft Word doc has a header portion and a data
portion (and maybe more, I am unsure). If I view a normal word doc in
binary mode using visual-studio, I see some characters before the
beginning of the data portion of that file. I am talking about those
“characters”. I want to know if they are read properly and what kind of
information they have when being read.
Thanks much,
Sri.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Lyndon J. Clarke
Sent: Wednesday, March 29, 2006 1:44 PM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] reading a file’s header portion
Please define “header” 
“Srivathsan_Srinivasagopalan”
wrote
in message news:xxxxx@ntfsd…
Hi,
Is there a way to read a file’s header information? FltReadFile
and
zwReadFile reads only the data portion. I tried forcing the starting
offset
to zero. Is there an API to read a file including its header? I could
not
identify one after searching through MSDN site.
I am looking to modify the scanner.c (the sample IFS kit code) to read a
file including its header rather than just the data.
Thanks,
Sri.
DISCLAIMER:
This email (including any attachments) is intended for the sole use of
the
intended recipient/s and may contain material that is CONFIDENTIAL AND
PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying
or
distribution or forwarding of any or all of the contents in this message
is
STRICTLY PROHIBITED. If you are not the intended recipient, please
contact
the sender by email and delete all copies; your cooperation in this
regard
is appreciated…
—
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as:
xxxxx@satyam.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
DISCLAIMER:
This email (including any attachments) is intended for the sole use of the intended recipient/s and may contain material that is CONFIDENTIAL AND PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or distribution or forwarding of any or all of the contents in this message is STRICTLY PROHIBITED. If you are not the intended recipient, please contact the sender by email and delete all copies; your cooperation in this regard is appreciated.
Just to make it clearer: I am not talking about headers and footers
of a typical word document. I am talking about the metadata present in a
word doc which would provide a lot of information about the doc itself.
Thanks,
Sri.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Lyndon J. Clarke
Sent: Wednesday, March 29, 2006 1:44 PM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] reading a file’s header portion
Please define “header” 
“Srivathsan_Srinivasagopalan”
wrote
in message news:xxxxx@ntfsd…
Hi,
Is there a way to read a file’s header information? FltReadFile
and
zwReadFile reads only the data portion. I tried forcing the starting
offset
to zero. Is there an API to read a file including its header? I could
not
identify one after searching through MSDN site.
I am looking to modify the scanner.c (the sample IFS kit code) to read a
file including its header rather than just the data.
Thanks,
Sri.
DISCLAIMER:
This email (including any attachments) is intended for the sole use of
the
intended recipient/s and may contain material that is CONFIDENTIAL AND
PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying
or
distribution or forwarding of any or all of the contents in this message
is
STRICTLY PROHIBITED. If you are not the intended recipient, please
contact
the sender by email and delete all copies; your cooperation in this
regard
is appreciated…
—
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as:
xxxxx@satyam.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
DISCLAIMER:
This email (including any attachments) is intended for the sole use of the intended recipient/s and may contain material that is CONFIDENTIAL AND PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or distribution or forwarding of any or all of the contents in this message is STRICTLY PROHIBITED. If you are not the intended recipient, please contact the sender by email and delete all copies; your cooperation in this regard is appreciated.
From the file system perspective there is no such thing as this header
portion and this data portion; all is just file data which is just a stream
of bytes. For sure FltReadFile, ZwReadFile, will just read the file data
which is just a stream of bytes.
“Srivathsan_Srinivasagopalan” wrote
in message news:xxxxx@ntfsd…
For example, a Microsoft Word doc has a header portion and a data
portion (and maybe more, I am unsure). If I view a normal word doc in
binary mode using visual-studio, I see some characters before the
beginning of the data portion of that file. I am talking about those
“characters”. I want to know if they are read properly and what kind of
information they have when being read.
Thanks much,
Sri.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Lyndon J. Clarke
Sent: Wednesday, March 29, 2006 1:44 PM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] reading a file’s header portion
Please define “header” 
“Srivathsan_Srinivasagopalan”
wrote
in message news:xxxxx@ntfsd…
Hi,
Is there a way to read a file’s header information? FltReadFile
and
zwReadFile reads only the data portion. I tried forcing the starting
offset
to zero. Is there an API to read a file including its header? I could
not
identify one after searching through MSDN site.
I am looking to modify the scanner.c (the sample IFS kit code) to read a
file including its header rather than just the data.
Thanks,
Sri.
DISCLAIMER:
This email (including any attachments) is intended for the sole use of
the
intended recipient/s and may contain material that is CONFIDENTIAL AND
PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying
or
distribution or forwarding of any or all of the contents in this message
is
STRICTLY PROHIBITED. If you are not the intended recipient, please
contact
the sender by email and delete all copies; your cooperation in this
regard
is appreciated…
—
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as:
xxxxx@satyam.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
DISCLAIMER:
This email (including any attachments) is intended for the sole use of the
intended recipient/s and may contain material that is CONFIDENTIAL AND
PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or
distribution or forwarding of any or all of the contents in this message is
STRICTLY PROHIBITED. If you are not the intended recipient, please contact
the sender by email and delete all copies; your cooperation in this regard
is appreciated.
> I am talking about the metadata present in a
word doc which would provide a lot of information about the doc itself.
You should not even bother about this at filter driver level.
There’s no guarantee about any application-defined file structure.
From the point of view of filter driver, content of a file is a binary
“garbage”,
regardless of whether you can read it in notepad or not, regardless of
whether the file is .TXT, .EXE or .WHATEVER.
This, of course, does not apply to the case when the filter defines
the structure, like DMK from OSR or encryption filter adding a header/tail.
L.
>For example, a Microsoft Word doc has a header portion and a data
portion (and maybe more, I am unsure).
This is not the universal notion, and has no OS support. Neither in Windows nor
in any UNIXen. For the OS itself, any file is just a sequence of bytes.
You can handle this Word’s header in the FS filter, but the filter will be Word
specific, and more so - will be Word-version-specific.
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com