Driver Problems? Questions? Issues?
Put OSR's experience to work for you! Contact us for assistance with:
  • Creating the right design for your requirements
  • Reviewing your existing driver code
  • Analyzing driver reliability/performance issues
  • Custom training mixed with consulting and focused directly on your specific areas of interest/concern.
Check us out. OSR, the Windows driver experts.

OSR Seminars


Go Back   OSR Online Lists > ntfsd
Welcome, Guest
You must login to post to this list
  Message 1 of 6  
01 Dec 17 20:21
victor mehta
xxxxxx@hotmail.com
Join Date: 28 Jul 2015
Posts To This List: 5
Device Tree (File System Filter Driver)

Can anyone tell me whether if someone were to create a file system filter driver would it show up in device tree under DRV Driver\Disk node ?
  Message 2 of 6  
02 Dec 17 05:32
Fernando Roberto
xxxxxx@driverentry.com.br
Join Date: 14 Jan 2008
Posts To This List: 145
Device Tree (File System Filter Driver)

Hi Victor. A legacy file system filter will show up on the device tree, but minifilters don't. Minifilters are based on Instances. Filter Manager creates it's devices so that minifilters can receive/send IRPs on its behalf. This also makes device stacks smaller. Regards, -- Fernando Roberto da Silva DriverEntry Kernel Development
  Message 3 of 6  
02 Dec 17 14:17
victor mehta
xxxxxx@hotmail.com
Join Date: 28 Jul 2015
Posts To This List: 5
Device Tree (File System Filter Driver)

Thank you for the response. But where does a system filter driver show up in device tree ? Thanks in advance.
  Message 4 of 6  
03 Dec 17 22:13
Scott Noone
xxxxxx@osr.com
Join Date: 10 Jul 2002
Posts To This List: 988
List Moderator
Device Tree (File System Filter Driver)

I'm having a hard time answering your question...Do you mean the OSR utility "Device Tree" or THE device tree in Windows? Why are you asking (so that I can better try to answer your question)? -scott OSR @OSRDrivers
  Message 5 of 6  
13 Dec 17 18:39
victor mehta
xxxxxx@hotmail.com
Join Date: 28 Jul 2015
Posts To This List: 5
Device Tree (File System Filter Driver)

@Scott Noone. I'm trying to understand how device tree the OSR utility works. In particular how a driver that filters the TCP protocol will show up in the list of kernel mode drivers as shown in device tree the utility. Would it branch off an existing node (as I call it) become like a child node or show up as a separate branch by itself like a parent node.
  Message 6 of 6  
13 Dec 17 22:22
Scott Noone
xxxxxx@osr.com
Join Date: 10 Jul 2002
Posts To This List: 988
List Moderator
Device Tree (File System Filter Driver)

Device Tree enumerates every driver in the system. For every driver it then finds every device. For every device is then sends it an IRP_MJ_PNP/IRP_MN_QUERY_DEVICE_RELATIONS request. A TCP protocol filter is much different from a file system filter... Back in the day, people wrote their TCP filters as TDI filters. These would attach to the legacy device objects responsible for the protocols (e.g. \Device\TcpIp, IIRC...). Legacy device objects aren't really in the Windows device tree, show these filters would show up in our utility attached to some device object in the "Driver View". Nowadays TCP filtering is done through WFP. AFAIK these filters don't have device objects and therefore would not show up in Device Tree. -scott OSR @OSRDrivers
Posting Rules  
You may not post new threads
You may not post replies
You may not post attachments
You must login to OSR Online AND be a member of the ntfsd list to be able to post.

All times are GMT -5. The time now is 09:03.


Copyright ©2015, OSR Open Systems Resources, Inc.
Based on vBulletin Copyright ©2000 - 2005, Jelsoft Enterprises Ltd.
Modified under license