Driver Problems? Questions? Issues?
Put OSR's experience to work for you! Contact us for assistance with:
  • Creating the right design for your requirements
  • Reviewing your existing driver code
  • Analyzing driver reliability/performance issues
  • Custom training mixed with consulting and focused directly on your specific areas of interest/concern.
Check us out. OSR, the Windows driver experts.

Upcoming OSR Seminars:

Windows Internals & Software Driver Development, Dulles, VA 27-31 March, 2017
Writing WDF Drivers I: Core Concepts, Nashua, NH 15-19 May, 2017
Writing WDF Drivers II: Advanced Implementation Tech., Nashua, NH 23-26 May, 2017
Kernel Debugging and Crash Analysis, Dulles, VA 26-30 June, 2017
Windows Internals & Software Driver Development, Nashua, NH 24-28 July, 2017


Go Back   OSR Online Lists > ntfsd
Welcome, Guest
You must login to post to this list
  Message 1 of 8  
05 Jan 17 01:39
J=c3=b6rg Wittig
xxxxxx@gmail.com
Join Date: 05 Jan 2017
Posts To This List: 4
problem with minifilter driver , failover environment, IRP_MJ_SET_INFORMATION, share access with smb3 feature high availability

Hallo, i use a minifilter driver to collect file activities (like the minispy example). Now i have a problem in a special environment use case. Testenvironment: 3 node failover cluster (MS 2012 R2), role "file server", set share access with high availability feature (Default) (smb3 transparent failover); The test is a simple rename of a file. In case of check IRP_MJ_SET_INFORMATION in pre and post callback the client side initiator application explorer freeze or if i use powershell or command console the action is not allowed. If i disable the driver the test run. Shares without this HA-Feature and running minifilter driver also runs. Any idea what is wrong. Thanks
  Message 2 of 8  
06 Jan 17 10:21
Scott Noone
xxxxxx@osr.com
Join Date: 10 Jul 2002
Posts To This List: 842
List Moderator
problem with minifilter driver , failover environment, IRP_MJ_SET_INFORMATION, share access with smb3 feature high availability

Does this happen with a stock version of minispy? Have you looked at Process Monitor and/or WireShark traces from the working and non-working cases? -scott OSR @OSRDrivers "Jörg Wittig" wrote in message news:102060@ntfsd... Hallo, i use a minifilter driver to collect file activities (like the minispy example). Now i have a problem in a special environment use case. Testenvironment: 3 node failover cluster (MS 2012 R2), role "file server", set share access with high availability feature (Default) (smb3 transparent failover); The test is a simple rename of a file. In case of check IRP_MJ_SET_INFORMATION in pre and post callback the client side initiator application explorer freeze or if i use powershell or command console the action is not allowed. If i disable the driver the test run. Shares without this HA-Feature and running minifilter driver also runs. Any idea what is wrong. Thanks
  Message 3 of 8  
15 Jan 17 03:26
J=c3=b6rg Wittig
xxxxxx@gmail.com
Join Date: 05 Jan 2017
Posts To This List: 4
problem with minifilter driver , failover environment, IRP_MJ_SET_INFORMATION, share access with smb3 feature high availability

Am 06.01.17 um 16:20 schrieb Scott Noone: > Does this happen with a stock version of minispy? > > Have you looked at Process Monitor and/or WireShark traces from the > working and non-working cases? > > -scott > OSR > @OSRDrivers > > "Jörg Wittig" wrote in message news:102060@ntfsd... <...excess quoted lines suppressed...> hallo scott, after additional tests (different stock versions) i did not found another causes. Only with the smb3 feature high availability did i have trouble. All other situations works fine. If i have interaction with filter manager wait for callback and leave the callback the initial function is not executed. I had forgot to say the filter runs on server side. Best regards Jörg
  Message 4 of 8  
17 Jan 17 15:00
Scott Noone
xxxxxx@osr.com
Join Date: 10 Jul 2002
Posts To This List: 842
List Moderator
problem with minifilter driver , failover environment, IRP_MJ_SET_INFORMATION, share access with smb3 feature high availability

I'm not sure you answered my question...Does this some failure happen if you use the minispy sample and HA? Or just with your filter and HA? -scott OSR @OSRDrivers "Jörg Wittig" wrote in message news:102103@ntfsd... Am 06.01.17 um 16:20 schrieb Scott Noone: > Does this happen with a stock version of minispy? > > Have you looked at Process Monitor and/or WireShark traces from the > working and non-working cases? > > -scott > OSR > @OSRDrivers > > "Jörg Wittig" wrote in message news:102060@ntfsd... <...excess quoted lines suppressed...> hallo scott, after additional tests (different stock versions) i did not found another causes. Only with the smb3 feature high availability did i have trouble. All other situations works fine. If i have interaction with filter manager wait for callback and leave the callback the initial function is not executed. I had forgot to say the filter runs on server side. Best regards Jörg
  Message 5 of 8  
18 Jan 17 02:14
J=c3=b6rg Wittig
xxxxxx@gmail.com
Join Date: 05 Jan 2017
Posts To This List: 4
problem with minifilter driver , failover environment, IRP_MJ_SET_INFORMATION, share access with smb3 feature high availability

Hi Scoot , the problem occurs with my filter and HA. The minispy sample implementation served as a base model (concept). my filter on -> share with HA -> problem if rename triggered, other file actions are not affected my filter off -> share with HA -> no problem my filter on -> same share HA off -> no problem greetings and thanks for the support jörg Am 17.01.2017 um 20:59 schrieb Scott Noone: > I'm not sure you answered my question...Does this some failure happen if > you use the minispy sample and HA? Or just with your filter and HA? > > -scott > OSR > @OSRDrivers > > "Jörg Wittig" wrote in message news:102103@ntfsd... > > Am 06.01.17 um 16:20 schrieb Scott Noone: <...excess quoted lines suppressed...>
  Message 6 of 8  
18 Jan 17 12:28
Scott Noone
xxxxxx@osr.com
Join Date: 10 Jul 2002
Posts To This List: 842
List Moderator
problem with minifilter driver , failover environment, IRP_MJ_SET_INFORMATION, share access with smb3 feature high availability

What I've been asking is if you take the minispy sample *as is* and install it on the server, do you get the same behavior? If not, then there is something in your processing that is different and causing the issue. At least you would have a working and non-working case to compare. Other than that, there is not enough detail here to provide any additional insight. -scott OSR @OSRDrivers "Jörg Wittig" wrote in message news:102124@ntfsd... Hi Scoot , the problem occurs with my filter and HA. The minispy sample implementation served as a base model (concept). my filter on -> share with HA -> problem if rename triggered, other file actions are not affected my filter off -> share with HA -> no problem my filter on -> same share HA off -> no problem greetings and thanks for the support jörg Am 17.01.2017 um 20:59 schrieb Scott Noone: > I'm not sure you answered my question...Does this some failure happen if > you use the minispy sample and HA? Or just with your filter and HA? > > -scott > OSR > @OSRDrivers > > "Jörg Wittig" wrote in message news:102103@ntfsd... > > Am 06.01.17 um 16:20 schrieb Scott Noone: <...excess quoted lines suppressed...>
  Message 7 of 8  
19 Jan 17 00:42
J=c3=b6rg Wittig
xxxxxx@gmail.com
Join Date: 05 Jan 2017
Posts To This List: 4
problem with minifilter driver , failover environment, IRP_MJ_SET_INFORMATION, share access with smb3 feature high availability

Hi, ok, the test with the original is a possibility. i hope to find the time (certainly on weekend) for the test. My first thought was: Why run all other situations (copy, ACL change, create,... ) without trouble and only rename failed. I'll get back after the test. thanks Am 18.01.2017 um 18:28 schrieb Scott Noone: > What I've been asking is if you take the minispy sample *as is* and > install it on the server, do you get the same behavior? If not, then > there is something in your processing that is different and causing the > issue. At least you would have a working and non-working case to compare. > > Other than that, there is not enough detail here to provide any > additional insight. > > -scott > OSR <...excess quoted lines suppressed...>
  Message 8 of 8  
19 Jan 17 08:49
Scott Noone
xxxxxx@osr.com
Join Date: 10 Jul 2002
Posts To This List: 842
List Moderator
problem with minifilter driver , failover environment, IRP_MJ_SET_INFORMATION, share access with smb3 feature high availability

<QUOTE> My first thought was: Why run all other situations (copy, ACL change, create,... ) without trouble and only rename failed. </QUOTE> No way to tell without data...You need traces and some experiments. As I mentioned previously, WireShark data from the working and non-working cases might be useful as well as ProcMon traces (on the server and/or client). -scott OSR @OSRDrivers "Jörg Wittig" wrote in message news:102132@ntfsd... Hi, ok, the test with the original is a possibility. i hope to find the time (certainly on weekend) for the test. My first thought was: Why run all other situations (copy, ACL change, create,... ) without trouble and only rename failed. I'll get back after the test. thanks Am 18.01.2017 um 18:28 schrieb Scott Noone: > What I've been asking is if you take the minispy sample *as is* and > install it on the server, do you get the same behavior? If not, then > there is something in your processing that is different and causing the > issue. At least you would have a working and non-working case to compare. > > Other than that, there is not enough detail here to provide any > additional insight. > > -scott > OSR <...excess quoted lines suppressed...>
Posting Rules  
You may not post new threads
You may not post replies
You may not post attachments
You must login to OSR Online AND be a member of the ntfsd list to be able to post.

All times are GMT -5. The time now is 20:37.


Copyright ©2015, OSR Open Systems Resources, Inc.
Based on vBulletin Copyright ©2000 - 2005, Jelsoft Enterprises Ltd.
Modified under license