In XP and later you can call IoGetRealDeviceObject. Look at the IFSKit samples they show you to use this API.
Neal Christiansen
Microsoft File System Filter Group Lead
This posting is provided “AS IS” with no warranties, and confers no rights
-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Tony Mason
Sent: Monday, November 08, 2004 2:41 AM
To: Windows File Systems Devs Interest List
Subject: RE: [ntfsd] why the fileSysDevice->vpb is NULL in filemon
File systems do not normally fill in this field, since THEY do not need this additional information and linkage. You must find another way to locate the underlying device.
Regards,
Tony
Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com
-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of yansheng jushan
Sent: Monday, November 08, 2004 2:34 AM
To: ntfsd redirect
Subject: [ntfsd] why the fileSysDevice->vpb is NULL in filemon
in filemon’s HookDriver function
it first create the file for example the path “C:”
after this it obtain the fileobject throw the file handle
then use
fileSysDevice = IoGetRelatedDeviceObject( fileObject );
I want to obtain the fileSysDevice->vpb->RealDevice to see the
RealDevice->characteristic;
but it failed because the vpb get from the fileSysDevice is NULL;
why fileSysDevice->vpb is NULL.
thanks.
享用世界上最大的电子邮件系统— MSN Hotmail。 http://www.hotmail.com
Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: xxxxx@osr.com To unsubscribe send a blank email to xxxxx@lists.osr.com
Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com