Click here to Skip to main content
15,891,033 members
Home / Discussions / C / C++ / MFC
   

C / C++ / MFC

 
GeneralRe: .net book Pin
Kevin McFarlane13-May-05 12:09
Kevin McFarlane13-May-05 12:09 
GeneralDebugging IE Addon from VS.NET Pin
haries13-May-05 3:51
haries13-May-05 3:51 
GeneralRe: Debugging IE Addon from VS.NET Pin
jmkhael13-May-05 4:26
jmkhael13-May-05 4:26 
GeneralRe: Debugging IE Addon from VS.NET Pin
Michael Dunn13-May-05 12:18
sitebuilderMichael Dunn13-May-05 12:18 
GeneralUsing Hooks Pin
ashtwin13-May-05 3:40
ashtwin13-May-05 3:40 
GeneralRe: Using Hooks Pin
David Crow13-May-05 5:35
David Crow13-May-05 5:35 
GeneralRe: Using Hooks Pin
jmkhael13-May-05 6:02
jmkhael13-May-05 6:02 
GeneralRe: Using Hooks Pin
David Crow13-May-05 6:13
David Crow13-May-05 6:13 
Papa wrote:
Writing a driver may offer a better solution, with a file system filter IFSMGR_InstallFileSystemApiHook in order to be in the chain of all file system requests. (Windows 9x)
or a file system driver that attach a filter device objects to target file system device objects so that it see all IRPs and FastIO requested from drives.

A hash is necessary to keep track of the correspondance of HANDLE <-> Pathname


Which is how SysInternals' FileMon utility works:

"For the Windows 9x driver, the heart of FileMon is in the virtual device driver, Filevxd.vxd. It is dynamically loaded, and in its initialization it installs a file system filter via the VxD service, IFSMGR_InstallFileSystemApiHook, to insert itself onto the call chain of all file system requests. On Windows NT the heart of FileMon is a file system driver that creates and attaches filter device objects to target file system device objects so that FileMon will see all IRPs and FastIO requests directed at drives. When FileMon sees an open, create or close call, it updates an internal hash table that serves as the mapping between internal file handles and file path names. Whenever it sees calls that are handle based, it looks up the handle in the hash table to obtain the full name for display. If a handle-based access references a file opened before FileMon started, FileMon will fail to find the mapping in its hash table and will simply present the handle's value instead."


"Ideas are a dime a dozen. People who put them into action are priceless." - Unknown


GeneralRe: Using Hooks Pin
jmkhael13-May-05 6:19
jmkhael13-May-05 6:19 
GeneralRe: Using Hooks Pin
Bob Stanneveld13-May-05 7:30
Bob Stanneveld13-May-05 7:30 
GeneralRe: Using Hooks Pin
David Crow13-May-05 7:51
David Crow13-May-05 7:51 
GeneralFinding name of file mapping object Pin
bigfatdoug13-May-05 3:15
bigfatdoug13-May-05 3:15 
GeneralRe: Finding name of file mapping object Pin
jmkhael13-May-05 4:24
jmkhael13-May-05 4:24 
GeneralRe: Finding name of file mapping object Pin
bigfatdoug13-May-05 5:29
bigfatdoug13-May-05 5:29 
GeneralProject help - Database + Excel Pin
J.B.13-May-05 3:06
J.B.13-May-05 3:06 
GeneralRe: Project help - Database + Excel Pin
David Crow13-May-05 3:13
David Crow13-May-05 3:13 
GeneralParsing HTML Pin
Priyank Bolia13-May-05 3:00
Priyank Bolia13-May-05 3:00 
GeneralRe: Parsing HTML Pin
jc0dex13-May-05 10:55
jc0dex13-May-05 10:55 
GeneralRe: Parsing HTML Pin
Priyank Bolia15-May-05 0:06
Priyank Bolia15-May-05 0:06 
GeneralRe: Parsing HTML Pin
Alexander M.,13-May-05 13:45
Alexander M.,13-May-05 13:45 
GeneralSendInput - mouse Pin
mcsherry13-May-05 2:11
mcsherry13-May-05 2:11 
GeneralPlugin Framework for MFC Dialogs Pin
Anonymous13-May-05 2:05
Anonymous13-May-05 2:05 
GeneralDo you know What function mediaplayer call when it open file Pin
multibox13-May-05 1:59
multibox13-May-05 1:59 
GeneralRe: Do you know What function mediaplayer call when it open file Pin
13-May-05 2:16
suss13-May-05 2:16 
GeneralRe: Do you know What function mediaplayer call when it open file Pin
multibox13-May-05 2:36
multibox13-May-05 2:36 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.