Seeing all IRPs
I'm writing a storage filter. It loads early as a kernel component and lists itself in the service registry for DiskDrives as LowerFilters. From DriverEntry() it attaches to \Device\HarddiskX\PartitionY and watches IRps go by. However, it only sees some
of the IRPs to the hard disk. It sees IRPs generated from a TREE command but not those from DIR or CHKDSK commands. IRPs to the boot volume are only seen during shutdown. It's almost as if there are 2 storage I/O stacks and I'm only attaching to one of them.
I use IoCreateDevice() to make my own device for each on-line partition and then attach to the device stack with
IoAttachDevice().
Any advice would be most useful. My code seems to work with Windows XP but not Windows 7 Ultimate variants.
Thank you.
April 27th, 2011 1:21pm
Hi,
Regarding the programming issue for Windows 7, it is recommended to contact MSDN forum to get more specialized suggestions.
MSDN Forum
http://social.msdn.microsoft.com/Forums/en/winforms/threads
Best Regards,
NikiPlease remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 29th, 2011 9:12am