Driver Problems? Questions? Issues?
Put OSR's experience to work for you! Contact us for assistance with:
  • Creating the right design for your requirements
  • Reviewing your existing driver code
  • Analyzing driver reliability/performance issues
  • Custom training mixed with consulting and focused directly on your specific areas of interest/concern.
Check us out. OSR, the Windows driver experts.

OSR Seminars


Go Back   OSR Online Lists > ntfsd
Welcome, Guest
You must login to post to this list
  Message 1 of 3  
11 Jul 18 03:20
vidhya
xxxxxx@yahoo.co.in
Join Date: 05 Jan 2018
Posts To This List: 10
File system Mini filter Driver

I am planning to port a legacy file system filter driver to mini filter driver. In my mini filter driver I need to check on Mount Request(IRP_MN_MOUNT_VOLUME) and do house keeping operation. I need to get hold of the first write or read to the volume. so I sniff for IRP_MN_MOUNT_VOLUME. I already have a minifilter driver for other purpose in FSFilter Activity Monitor group. My question is can I add my current functionality to check on Mount Request(IRP_MN_MOUNT_VOLUME) to the same mini filter driver or should I write a new mini filter driver for my new functionality. Doc says FSFilter Activity Monitor group observes and reports the file I/O, I don't think checking for IRP_MN_MOUNT_VOLUME is a file I/O operation. FSFilter Activity Monitor : This group includes filter drivers that observe and report on file I/O In which load order group my driver should be if I write a new mini filter driver Thanks in advance Vidhya
  Message 2 of 3  
11 Jul 18 03:24
vidhya
xxxxxx@yahoo.co.in
Join Date: 05 Jan 2018
Posts To This List: 10
File system Mini filter Driver

I thought my driver should be under FSFilter System Recovery is the group. Let me know ur thoughts.
  Message 3 of 3  
18 Jul 18 05:16
vidhya
xxxxxx@yahoo.co.in
Join Date: 05 Jan 2018
Posts To This List: 10
File system Mini filter Driver

I am planning to port a legacy file system filter driver to mini filter driver. In my mini filter driver I need to check on Mount Request(IRP_MN_MOUNT_VOLUME) and do house keeping operation. I need to get hold of the first write or read to the volume. so I sniff for IRP_MN_MOUNT_VOLUME. I already have a minifilter driver for other purpose in FSFilter Activity Monitor group. My question is can I add my current functionality to check on Mount Request(IRP_MN_MOUNT_VOLUME) to the same mini filter driver or should I write a new mini filter driver for my new functionality. Doc says FSFilter Activity Monitor group observes and reports the file I/O, I don't think checking for IRP_MN_MOUNT_VOLUME is a file I/O operation. FSFilter Activity Monitor : This group includes filter drivers that observe and report on file I/O In which load order group my driver should be if I write a new mini filter driver
Posting Rules  
You may not post new threads
You may not post replies
You may not post attachments
You must login to OSR Online AND be a member of the ntfsd list to be able to post.

All times are GMT -5. The time now is 19:28.


Copyright ©2015, OSR Open Systems Resources, Inc.
Based on vBulletin Copyright ©2000 - 2005, Jelsoft Enterprises Ltd.
Modified under license