Hi,
I am using Traceview Version 2.0 Beta. I modified my existing driver for WPP
software tracing. When I run traceview application on XP with my XP driver I
can see trace messages. When I run traceview application on 2k with my 2k
driver I get the following error.
“Failed to Enable trace for Control guid.
8BC80A30-5C6C-4240-B777-A78A0F006CDE Enable trace returned 4317”. Can
anybody tell me what this error means
Ashish
-----Original Message-----
From: Gerg [mailto:xxxxx@hotmail.com]
Sent: Monday, June 09, 2003 4:44 PM
To: NT Developers Interest List
Subject: [ntdev] Re: howto: no reboot for disk filter driver
What is the difference between the
StringCchXxxx and StringCbXxxx functions?
----- Original Message -----
From: “Nick Ryan”
To: “NT Developers Interest List”
Sent: Monday, June 09, 2003 4:21 PM
Subject: [ntdev] Re: howto: no reboot for disk filter driver
> I’ve never had any trouble loading a FS filter this way. IIRC all of
> the major anti-virus software packages load their filters this way as
> well (not that I think highly of the reliability or architecture of
> most of these packages, but I think install failures of this sort
> would be the first thing their QA teams would catch out in the open).
>
> - Nick Ryan
>
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> > Sent: Monday, June 09, 2003 4:08 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> >
> > It has been my experience that this is not 100% reliable. The
> > service control manager can get confused.
> >
> > I may be 100% wrong, because I have not spent much time doing
> > things Microsoft says to not do. I assume the core OS group
> > knows what they are talking about, so I am not going to swim
> > that ocean.
> >
> > Does anyone on this list have an FS filter that does a
> > dyna-load and has zero bug reports on their code? Even if the
> > bug reports appear to have nothing to do with the issue we
> > are discussing?
> >
> > I am always willing to learn something new.
> >
> > Jamey
> >
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> > Sent: Monday, June 09, 2003 3:50 PM
> > To: NT Developers Interest List
> > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> >
> > driverObject->DriverUnload = NULL;
> >
> > - Nick Ryan
> >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of Jamey Kirby
> > > Sent: Monday, June 09, 2003 3:36 PM
> > > To: NT Developers Interest List
> > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > >
> > >
> > > And how do you prevent the demand-loaded FSD from unloading?
> > >
> > > Jamey
> > >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> > > Sent: Monday, June 09, 2003 3:25 PM
> > > To: NT Developers Interest List
> > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > >
> > > I agree completely that unloading an FS filter is unsafe. I think
> > > Jamey was arguing that LOADING an FS filter after boot is unsafe -
> > > on that I do not agree.
> > >
> > > - Nick Ryan
> > >
> > > > -----Original Message-----
> > > > From: xxxxx@lists.osr.com
> > > > [mailto:xxxxx@lists.osr.com] On Behalf Of
> > Peter Wieland
> > > > Sent: Monday, June 09, 2003 3:11 PM
> > > > To: NT Developers Interest List
> > > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > > >
> > > >
> > > > how do you ensure that you aren’t letting your driver get
> > unloaded
> > > > while the OS is still in your dispatch routine? For example,
> > > > you
> > > > might think you could unload once you aren’t associated with any
> > > > file objects. However nothing stops the OS, on behalf of an app,
> > > > from issuing a create to your volume while you’re in the
> > middle of
> > > > trying to detach from the stack.
> > > >
> > > > it’s not safe. it might be good enough for your purposes, but
> > > > that’s really not good enough to sell.
> > > >
> > > > -p
> > > >
> > > > > -----Original Message-----
> > > > > From: xxxxx@lists.osr.com
> > > > > [mailto:xxxxx@lists.osr.com] On Behalf Of Nick
> > > > > Ryan
> > > > > Sent: Monday, June 09, 2003 2:47 PM
> > > > > To: NT Developers Interest List
> > > > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > > > >
> > > > > I’ll have to continue to disagree. Depending on what your
> > > > > application is, your filter may not care about files that are
> > > > > currently open and I/O that is currently in progress,
> > and that’s
> > > > > fine as long as it treats those requests as opaque. If
> > my filter
> > > > > sees a read or write for an FCB that it’s never seen
> > before, it’s
> > > > > going to behave like a good boy and pass down the request
> > > untouched.
> > > > >
> > > > > - Nick Ryan
> > > > >
> > > > > > -----Original Message-----
> > > > > > From: xxxxx@lists.osr.com
> > > > > > [mailto:xxxxx@lists.osr.com] On Behalf Of
> > > Jamey Kirby
> > > > > > Sent: Monday, June 09, 2003 2:28 PM
> > > > > > To: NT Developers Interest List
> > > > > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > > > > >
> > > > > >
> > > > > > How about an IO request that is pending and have not
> > > > completed? How
> > > > > > can you track these; since your filter is not loaded?
> > > > > Reverse is true
> > > > > > for unloading.
> > > > > >
> > > > > > Although it is possible and will work 99.99999% of the
> > > > > time, it is not
> > > > > > safe and completely unreliable for production code. Follow
> > > > > > Microsoft’s advice on this one and require the reboot.
> > > > > >
> > > > > > Jamey
> > > > > >
> > > > > > -----Original Message-----
> > > > > > From: xxxxx@lists.osr.com
> > > > > > [mailto:xxxxx@lists.osr.com] On Behalf Of Nick Ryan
> > > > > > Sent: Monday, June 09, 2003 2:19 PM
> > > > > > To: NT Developers Interest List
> > > > > > Subject: [ntdev] Re: howto: no reboot for disk filter driver
> > > > > >
> > > > > > I wouldn’t say it’s not safe or reliable to load an FS
> > > > filter after
> > > > > > boot, there are just limitations that one needs to be
> > > > aware of when
> > > > > > doing it (such as IoRegisterFsRegistrationChange not
> > enumerating
> > > > > > currently-loaded filesystems pre-XP).
> > > > > >
> > > > > > - Nick Ryan
> > > > > >
> > > > > > > -----Original Message-----
> > > > > > > From: xxxxx@lists.osr.com
> > > > > > > [mailto:xxxxx@lists.osr.com] On Behalf Of
> > > > Jamey Kirby
> > > > > > > Sent: Monday, June 09, 2003 1:39 PM
> > > > > > > To: NT Developers Interest List
> > > > > > > Subject: [ntdev] Re: howto: no reboot for disk filter
> > > > > > > driver
> > > > > > >
> > > > > > >
> > > > > > > There is no reliable or safe way to do this.
> > > > > > >
> > > > > > > Jamey
> > > > > > >
> > > > > > > -----Original Message-----
> > > > > > > From: xxxxx@lists.osr.com
> > > > > > > [mailto:xxxxx@lists.osr.com] On Behalf Of
> > > > > Michal Vodicka
> > > > > > > Sent: Monday, June 09, 2003 11:28 AM
> > > > > > > To: NT Developers Interest List
> > > > > > > Subject: [ntdev] Re: howto: no reboot for disk filter
> > > > > > > driver
> > > > > > >
> > > > > > > > ----------
> > > > > > > > From:
> > > > xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> > > > > > > > Reply To: xxxxx@lists.osr.com
> > > > > > > > Sent: Saturday, June 07, 2003 9:16 AM
> > > > > > > > To: xxxxx@lists.osr.com
> > > > > > > > Subject: [ntdev] Re: howto: no reboot for disk
> > > > > filter driver
> > > > > > > >
> > > > > > > > > I don’t know about disk filters but have FS filter
> > > > > which can be
> > > > > > > > installed
> > > > > > > > > without reboot. IIRC FileSpy from IFS kit and
> > > > System Internals
> > > > > > > > FileMon also
> > > > > > > > > don’t need reboot. All depends on the way how
> > volumes are
> > > > > > > attached.
> > > > > > > > The same
> > > > > > > > > with unload, it is not recommended for production but
> > > > > perfectly
> > > > > > > > suitable for
> > > > > > > > > debugging. I’m sure you know it so why post
> > > > > misleading answers?
> > > > > > > >
> > > > > > > > FileMon is not a 100% stable way of writing FS filters,
> > > > > > > only SFILTER
> > > > > > > > is. And SFILTER can be loaded on boot only. Anyway you
> > > > > > will need to
> > > > > > > > load at boot to filter SystemRoot volume.
> > > > > > > >
> > > > > > > You’re right when need to filter volumes since mount.
> > > There are
> > > > > > > cases when it isn’t necessary and then dynamic attach
> > > > is possible
> > > > > > > and filter can be loaded/installed whenever. FileSpy from
> > > > > XP IFS kit
> > > > > > > shows the way.
> > > > > > >
> > > > > > > Best regards,
> > > > > > >
> > > > > > > Michal Vodicka
> > > > > > > STMicroelectronics Design and Application s.r.o.
> > > > > > > [michal.vodicka@st.com, http:://www.st.com]
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > —
> > > > > > > You are currently subscribed to ntdev as:
> > > > xxxxx@storagecraft.com
> > > > > > > To unsubscribe send a blank email to
> > > > > > > xxxxx@lists.osr.com
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > —
> > > > > > > You are currently subscribed to ntdev as: xxxxx@nryan.com
> > > > > > > To unsubscribe send a blank email to
> > > > > > xxxxx@lists.osr.com
> > > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > —
> > > > > > You are currently subscribed to ntdev as:
> > > xxxxx@storagecraft.com
> > > > > > To unsubscribe send a blank email to
> > > > > > xxxxx@lists.osr.com
> > > > > >
> > > > > >
> > > > > >
> > > > > > —
> > > > > > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > > > > > unsubscribe send a blank email to
> > > xxxxx@lists.osr.com
> > > > > >
> > > > >
> > > > >
> > > > >
> > > > > —
> > > > > You are currently subscribed to ntdev as:
> > > xxxxx@microsoft.com To
> > > > > unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> > > > >
> > > > >
> > > >
> > > >
> > > > —
> > > > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > > > unsubscribe send a blank email to
> > > xxxxx@lists.osr.com
> > > >
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > To unsubscribe send a blank email to
> > > xxxxx@lists.osr.com
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > > unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> > >
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as:
> > xxxxx@storagecraft.com To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@nryan.com To
> > unsubscribe send a blank email to xxxxx@lists.osr.com
> >
>
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@hotmail.com To
> unsubscribe send a blank email to xxxxx@lists.osr.com
>
—
You are currently subscribed to ntdev as: xxxxx@itronix.com
To unsubscribe send a blank email to xxxxx@lists.osr.com