Ways to test File System Filter Driver

NTFSD
1

Hi,

I have to test my file system filter driver in various ways to see that it is not giving BSOD’s. I know that we can make use of Driver Verifier, Prefast and Static driver verifier. But are there any other tools or frame works that i can make use of testing filter drivers?

Any help is greatly appreciated.

Thanks,
Venu

2

You can also use some file system (filter) tests from Windows Logo Kit.
Device Path Exerciser (Devpathexer.exe) from WDK can be usable too.

Lenka

On Mon, Jun 20, 2011 at 1:58 AM, wrote:
>
> Hi,
>
> I have to test my file system filter driver in various ways to see that it is not giving BSOD’s. ?I know that we can make use of Driver Verifier, Prefast and Static driver verifier. ?But are there any other tools or frame works that i can make use of testing filter drivers?
>
> Any help is greatly appreciated.
>
> Thanks,
> Venu
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>

3

… then rinse and repeat with a series series of third party drivers.

IFSTEST is a good way to find blue screens early, although it has an
annoying habit of “failing” things which are really successes (usually
success is defined as “what NTFS does”). Find it the Logo kit thingy…

4

I have it on good authority that a good way to test the dusty corners of
this area is to try installing the most recent version of office (in
addition to what’s already been said.)

Good luck,

Mm
On Jun 20, 2011 3:03 AM, “Rod Widdowson” wrote:
> … then rinse and repeat with a series series of third party drivers.
>
> IFSTEST is a good way to find blue screens early, although it has an
> annoying habit of “failing” things which are really successes (usually
> success is defined as “what NTFS does”). Find it the Logo kit thingy…
>
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

5

Thank you all for your valuable inputs. does any one tried Driver Test Manager for testing Filter Drivers? I am looking for automation tests that i can run on filter driver.

please let me know.

Thanks very much…
Venu

6

IMHO, the only way to truly know that your file system filter works
CORRECTLY in “ALL” expected & unexpected cases is to write a test suite.
For example, I found it highly impossible to use the filter suite for a
virtualization filter.
Mostly, the IFS tests suit to the A/V realtime file system filters.
So, the real question is what kind of filter driver do you want to test?

Regards,
Ayush Gupta
Software Consultant & Owner,
AI Consulting

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@yahoo.co.in
Sent: Tuesday, June 21, 2011 12:23 AM
To: Windows File Systems Devs Interest List
Subject: RE:[ntfsd] Ways to test File System Filter Driver

Thank you all for your valuable inputs. does any one tried Driver Test
Manager for testing Filter Drivers? I am looking for automation tests that
i can run on filter driver.

please let me know.

Thanks very much…
Venu

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

7

Hi Ayush,

Our driver is a file system filter driver, which intercepts the all the Major IRP’s on file operation.

By the way i am trying to run DevPathExer.exe which is throwing an error saying WTTlog.dll is not found. How can i get rid of this?

Thanks,
Venu

8

Sorry, I cannot help much on why you are seeing that error.
My question was WHAT kind of filter driver is it? Is it a simple monitor
that just watches the IRP and passes it down the stack?

Regards,
Ayush Gupta
Software Consultant & Owner,
AI Consulting

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@yahoo.co.in
Sent: Tuesday, June 21, 2011 1:19 AM
To: Windows File Systems Devs Interest List
Subject: RE:[ntfsd] Ways to test File System Filter Driver

Hi Ayush,

Our driver is a file system filter driver, which intercepts the all the
Major IRP’s on file operation.

By the way i am trying to run DevPathExer.exe which is throwing an error
saying WTTlog.dll is not found. How can i get rid of this?

Thanks,
Venu

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

9

For Wttlog.dll grab it from the bin directory under the WDK and put it
on your test system.

Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr

“xxxxx@yahoo.co.in” wrote in message
news:xxxxx@ntfsd:

> Hi Ayush,
>
> Our driver is a file system filter driver, which intercepts the all the Major IRP’s on file operation.
>
> By the way i am trying to run DevPathExer.exe which is throwing an error saying WTTlog.dll is not found. How can i get rid of this?
>
> Thanks,
> Venu

10

Ayush,

Our filter driver intercepts all the file operations and also processes’s. If a particular process is configured not to run, then that operation will be blocked.

–Venu

11

Just my two cents. This wouldn’t seem like the best idea. Minimally,
whatever you’re providing in the way of security could be undone easily by a
denial of service sort of thing, which gets complicated by the issue of
establishing identity.

mm
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@yahoo.co.in
Sent: Monday, June 20, 2011 4:32 PM
To: Windows File Systems Devs Interest List
Subject: RE:[ntfsd] Ways to test File System Filter Driver

Ayush,

Our filter driver intercepts all the file operations and also processes’s.
If a particular process is configured not to run, then that operation will
be blocked.

–Venu

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

12

By the way… is it a good idea to test file system mini filter drivers with Driver Test Manager?

13

Hello All,

Can i setup Window Logo Kit on Virtual Machines? I have setup using VMWare work stations but facing some problems with the power config. Is there any other way to test the File system filter drier?

–Venu