使用Flag为0,注册的 IRP_MJ_READ IRP_MJ_WRITE,会有FastIO但不是我感兴趣的请问在Minifilter中如何截获所有的FastIO读写?就是在IRP_MJ_READ IRP_MJ_WRITE中处理?
回复(3) 2008-03-10 13:51 来自版块 - 文件系统(过滤)驱动程序开发
表情
eleqi谢谢 clarence和 devia的回复,明白了!(2008-03-10 16:22)
devia默认情况下你会接收到FASTIO的,可以在接收后用FLT_IS_FASTIO_OPERATION进行判断是否是FASTIO。(2008-03-10 15:32)
clarenceFLT_OPERATION_REGISTRATION The FLT_OPERATION_REGISTRATION structure is used to register operation callback routines. typedef struct _FLT_O...(2008-03-10 15:07)

返回顶部