|
阅读：1958回复：5
sfilter过滤中解析文件名的问题
sfilter的SfCreate分发例程中对规则目录下的文件进行文件名解析的时候打印出下面的内容，问一下正常路径后面的一堆是什么啊（就是D:\none\之后的）？谁知道帮帮忙，先谢谢了！！
sfilter!SfCreate: FileName = D:\none\:DocumentSummaryInformation:$DATA sfilter!SfCreate: Entering... SFilter!SfDissectFileName start sfilter!SfCreate: FileName = D:\none\:Docf_DocumentSummaryInformation:$DATA sfilter!SfCreate: Entering... SFilter!SfDissectFileName start sfilter!SfCreate: FileName = D:\none\:DocumentSummaryInformation:$DATA sfilter!SfCreate: Entering... SFilter!SfDissectFileName start sfilter!SfCreate: FileName = D:\none\:Docf_DocumentSummaryInformation:$DATA sfilter!SfCreate: Entering... SFilter!SfDissectFileName start sfilter!SfCreate: FileName = D:\none\:SummaryInformation:$DATA sfilter!SfCreate: Entering... SFilter!SfDissectFileName start sfilter!SfCreate: FileName = D:\none\:Docf_SummaryInformation:$DATA sfilter!SfCreate: Entering... SFilter!SfDissectFileName start sfilter!SfCreate: FileName = D:\none\:SummaryInformation:$DATA sfilter!SfCreate: Entering... SFilter!SfDissectFileName start sfilter!SfCreate: FileName = D:\none\:Docf_SummaryInformation:$DATA sfilter!SfCreate: Entering... SFilter!SfDissectFileName start sfilter!SfCreate: FileName = D:\none\:SummaryInformation:$DATA sfilter!SfCreate: Entering... SFilter!SfDissectFileName start sfilter!SfCreate: FileName = D:\none\:Docf_SummaryInformation:$DATA sfilter!SfCreate: Entering... SFilter!SfDissectFileName start sfilter!SfCreate: FileName = D:\none\:SummaryInformation:$DATA sfilter!SfCreate: Entering... |
|
禁止发言
|
沙发#
发布于：2010-10-21 13:36
用户被禁言,该主题自动屏蔽! |
|
板凳#
发布于：2010-10-21 19:04
元文件是什么东西，怎么过滤，能详细说说吗？谢谢
|
|
|
地板#
发布于：2010-10-22 05:45
$DATA 是 NTFS File 的 default attribute，是个data stream。建议看书 《Windows Internals》5th Edition, Chapter 11：File Systems。
|
|
|
禁止发言
|
地下室#
发布于：2010-10-22 12:20
用户被禁言,该主题自动屏蔽! |
|
5楼#
发布于：2010-10-22 19:33
谢谢各位的回答！
回去看书去，有问题了再来请教大家 |
|