Seeing all IRPs
I'm writing a storage filter. It loads early as a kernel component and lists itself in the service registry for DiskDrives as LowerFilters. From DriverEntry() it attaches to \Device\HarddiskX\PartitionY and watches IRps go by. However, it only sees some of the IRPs to the hard disk. It sees IRPs generated from a TREE command but not those from DIR or CHKDSK commands. IRPs to the boot volume are only seen during shutdown. It's almost as if there are 2 storage I/O stacks and I'm only attaching to one of them. I use IoCreateDevice() to make my own device for each on-line partition and then attach to the device stack with IoAttachDevice(). Any advice would be most useful. My code seems to work with Windows XP but not Windows 7 Ultimate variants. Thank you.
April 27th, 2011 1:21pm

Hi, Regarding the programming issue for Windows 7, it is recommended to contact MSDN forum to get more specialized suggestions. MSDN Forum http://social.msdn.microsoft.com/Forums/en/winforms/threads Best Regards, NikiPlease remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 29th, 2011 9:12am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics