Filesystem filter driver problem

[PopStevo]

Hello to everybody!
I'm writing this driver which has to filter (monitor) every access to a computer's filesystem. Absolutely *everything* works fine except the part where I have to get the name of the file in the IRP stack location.
I run the driver and everything works. THEN I add a call to IoQueryFileDosDeviceName to the dispatch routine and run the driver again. This time the NTFS driver crashes (a pool was free twice). I simply don't understand what's wrong... PLUS I'm kinda 95% sure it's the IoQueryFileDosDeviceName that's the culprit (because the rest is just your standard code just like WDK recommends it)
Thanks a lot for reading, even more for helping!

[djai]

Check code in ddk\src\filesystem\minispy. Your solution is there.

[akshay_blitz]

Check code in ddk\src\filesystem\minispy. Your solution is there.

I also want to implement a filesystem filter driver on Windows XP.
I have bought the IFS kit.

What code do I need to modify---
1. ddk\src\filesys\filter\filespy

OR

2. ddk\src\filesys\filter\sfilter

It is not very clear


Thanking you
Akshay

[akshay_blitz]

I also want to implement a filesystem filter driver on Windows XP.
I have bought the IFS kit.

What code do I need to modify---
1. ddk\src\filesys\filter\filespy

OR

2. ddk\src\filesys\filter\sfilter

It is not very clear


Thanking you
Akshay

SOLVED !

filespy is the way to go...as it allows one to create a log file.

~peace~

[PopStevo]

thanks alot! i wasn't aware of all the samples the wdk has back then, but now i do: had a fun time looking for the installation directory to find the sources.hehe

[PopStevo]

uhm... but yet another question: why don't they use IoQueryFileDosDeviceName? is it not meant to be used in a file system filter driver?

[wxr9]

hi, i does well in file system filter driver, if you have some problems, please contact me.

msn:
wxr9_966@hotmail.com

email:
wxr9@163.com
ceo@microtimesoft.com

[girishmehtasonu]

i need help on making a driver:-
which interceps the filecreation at kernel level and will make an exact copy in other hardware drive..i am not a driver programmer i am working in c# and find it really difficult for me..can any1 help me how to start it and which driver to modify

your help will be appreciated

Thanks