I need a user-mode filesystem filter (not virtual filesystem). One of such frameworks is http://eldos.com/cbflt/, but it has some bugs and I need an alternative.
Suggest similar frameworks.
views:
164answers:
3
A:
There is no such thing as a user-mode FS filter.
You could write a minifilter driver that delegates the computing (of the I/O operation verdict) to a user mode component through a port and reports back the result.
You can check out /src/filesystem/miniFilter/scanner sample in the WinDDK.
clyfe
2010-06-27 07:40:43
Check this out: https://eldos.com/cbflt/I need similar technologies.
skevar7
2010-06-27 07:52:08
@skevar7: clyfe is right. what you link to is a plain trickery using windows hooks. and it can be sometimes bypassed. google for "windows hooks" for more.
Dummy00001
2010-06-27 08:22:28
hooks????? what hooks have to do with this framework?
skevar7
2010-06-27 08:40:53
@skevar the software in your link uses a filter driver like i described, check technical specifications under "driver" section
clyfe
2010-06-27 08:52:04
@clyfe you should read question more carefully. This framework does exactly what I need. I just need similar frameworks to choose the best.
skevar7
2010-06-27 09:31:02
+1, this answer is accurate. Use Google for shopping.
Hans Passant
2010-06-27 11:43:47
Why don't you just don't write anything, if you don't have an answer?
skevar7
2010-06-27 16:44:51
You're attitude towards people trying to help is questionable. I get the feeling you are trying to advertise that worthless software $$$. What do you gain by using that? It installs a driver anyway, there is nothing "user-mode" in it!
clyfe
2010-06-28 10:27:09
Yeah I have to agree with the previous posters. Your attidude stinks! Also, everytime I see someone write "plz" I have to throw up. -1 for you.
humbagumba
2010-06-28 11:44:43
+1
A:
Not going to happen, you are going to have to write a minifilter driver.
Any solution attempting to do this is going to fail in a very bad way.
Many callbacks in the minifilter frameowrk can be called at dispatch level and cannot be delegated to userland. Not to mention netowrk share access would be all messed up. Marshalling access tokens from kernel->user on the write path would be a bluescreen factory.
Karl Strings
2010-07-23 06:10:41
You are wrong too, there are such tools. FUSE, Dokan, etc. I just need a tool which suits my needs.
skevar7
2010-07-24 08:39:48
Karl Strings
2010-07-24 15:37:10
+2
A:
CallbackFilter is the only filter driver solution available. You mention dokan and fuse, but they are not filters, they are file system drivers (like Callback File System). This is a very different thing.
If you have problems with CallbackFilter, please report them to tech.support and we will address the issues ASAP.
Eugene Mayevski 'EldoS Corp
2010-08-22 08:48:12
You are welcome to contact tech.support with issues. Yes, CallbackFilter has things to be improved, and we are working on them all the time, so your feedback will help a lot. And discounts are provided as well.
Eugene Mayevski 'EldoS Corp
2010-08-25 11:48:54