OSR's ntfsd List: FltCreateSectionForDataScan and Network redirector

Driver Problems? Questions? Issues?
Put OSR's experience to work for you! Contact us for assistance with:

Creating the right design for your requirements
Reviewing your existing driver code
Analyzing driver reliability/performance issues
Custom training mixed with consulting and focused directly on your specific areas of interest/concern.

Check us out. OSR, the Windows driver experts.

Monthly Seminars at OSR Headquarters

East Coast USA
Windows Internals and SW Drivers, Dulles (Sterling) VA, 9 April 2018

Writing WDF Drivers I: Core Concepts, Manchester, NH, 7 May 2018

Kernel Debugging & Crash Analysis for Windows, Manchester, NH, 21 May 2018

		OSR Online Lists > ntfsd
FltCreateSectionForDataScan and Network redirector

Welcome, Guest
You must login to post to this list

Message 1 of 3

03 Apr 18 09:40

Anand Choubey

xxxxxx@yahoo.com

Join Date: 03 Sep 2012

Posts To This List: 1

FltCreateSectionForDataScan and Network redirector

Hi, I am working on minifilter driver, my driver scans files at IRP_MJ_CLEANUP and it blocks IRP_MJ_CLEANUP until scan is not completed. To scan file, FltCreateSectionForDataScan is being used to open memory mapped section in driver and userland app can open memory mapping using MapViewOfFile, and scan the file content. Things work fine on local NTFS system. But problem is with share folder, driver can open section handle using FltCreateSectionForDataScan and userland app can read file content using MapViewOfFile for remote files. BUT 'sometimes' complete data is not saved at remote machine. Suppose, I create a file using notepad or any app on share folder, this share folder has all access rights, type few lines and close the app, app tries to save the data at remote location before closing the file. FltGetFileSize method returns correct file size but my memory mapped file does not show complete contents and complete contents are not saved into remote file. I open file again some part of file is not saved earlier therefore complete file content is not shown in editor. I do not understand where to start looking the issue, is this issue related with oplock? Please suggest me, what should I go forward? Thanks Anand

Message 2 of 3

08 Apr 18 13:32

NtDev Geek

xxxxxx@gmail.com

Join Date: 09 Aug 2013

Posts To This List: 38

FltCreateSectionForDataScan and Network redirector

put a check for remote access only and use MmFlushXXX routine hope it may help.u don't own the re-directors cache.

Message 3 of 3

10 Apr 18 08:11

Scott Noone

xxxxxx@osr.com

Join Date: 10 Jul 2002

Posts To This List: 982

List Moderator

FltCreateSectionForDataScan and Network redirector

We've used this API several times, but I don't think we've ever used it on the network. Which version of Windows are you running? Also, what's the SMB version of the connection (you can use Get-SmbConnection in PowerShell to get this information)? Last data point: do you see this behavior if you use the AvScan minifilter sample? -scott OSR @OSRDrivers

Posting Rules
You may not post new threads You may not post replies You may not post attachments	You must login to OSR Online AND be a member of the ntfsd list to be able to post.

All times are GMT -5. The time now is 08:30.

Contact Us - Osr Online Homepage - Top