I made minifilter with pre and post read callbackes
when i open file i don see any call with my file name (i clean the cash before i opened the file so i’ts can’t be becoase of this) , but when i save something in the file i see the file name (in pre read and post read callback).
i add this dbg print that will make my question clearer:
this is ALL the cals from the moment i double click on "new_check_buffer.txt: file till it’s opened and i can read it:
[-]SwapPreReadBuffers \Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
[-info-] Name:\Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
ParentDir:\Windows\winsxs\FileMaps\
Stream:(null)
FinalComponent:$$_system32_21f9a9c4a2f8b514.cdf-ms
[-]SwapPreReadBuffers \Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
[-info-] Name:\Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
ParentDir:\Windows\winsxs\FileMaps\
Stream:(null)
FinalComponent:$$_system32_21f9a9c4a2f8b514.cdf-ms
[-]SwapPreReadBuffers \Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
[-info-] Name:\Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
ParentDir:\Windows\winsxs\FileMaps\
Stream:(null)
FinalComponent:$$_system32_21f9a9c4a2f8b514.cdf-ms
[-]SwapPreReadBuffers \Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
[-info-] Name:\Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
ParentDir:\Windows\winsxs\FileMaps\
Stream:(null)
FinalComponent:$$_system32_21f9a9c4a2f8b514.cdf-ms
[-]SwapPreReadBuffers \Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
[-info-] Name:\Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
ParentDir:\Windows\winsxs\FileMaps\
Stream:(null)
FinalComponent:$$_system32_21f9a9c4a2f8b514.cdf-ms
[-]SwapPreReadBuffers \Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
[-info-] Name:\Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
ParentDir:\Windows\winsxs\FileMaps\
Stream:(null)
FinalComponent:$$_system32_21f9a9c4a2f8b514.cdf-ms
[-]SwapPreReadBuffers \Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
[-info-] Name:\Device\HarddiskVolume1\Windows\winsxs\FileMaps$$_system32_21f9a9c4a2f8b514.cdf-ms
ParentDir:\Windows\winsxs\FileMaps\
Stream:(null)
FinalComponent:$$_system32_21f9a9c4a2f8b514.cdf-ms
[-]SwapPreReadBuffers \Device\HarddiskVolume1\Users\pit\Desktop\desktop.ini
[-info-] Name:\Device\HarddiskVolume1\Users\pit\Desktop\desktop.ini
ParentDir:\Users\pit\Desktop\
Stream:(null)
FinalComponent:desktop.ini
[-]SwapPreReadBuffers \Device\HarddiskVolume1\Windows\Fonts\StaticCache.dat
[-info-] Name:\Device\HarddiskVolume1\Windows\Fonts\StaticCache.dat
ParentDir:\Windows\Fonts\
Stream:(null)
FinalComponent:StaticCache.dat
this is the calls when i hit ctrl + s:
[+] SwapPreReadBuffers file name \Device\HarddiskVolume1\Users\pit\Desktop\new_check_buffer.txt
[+] postRead file name \Device\HarddiskVolume1\Users\pit\Desktop\new_check_buffer.txt
[*] SwapPostReadBuffersWhenSafe
now i don’t get it , it’s have to be that there is SOME read call for the ability to open and read txt file so how come i don’t see it?
and why i do see read callback dbg printing on save operation???
Thank you
pit