1

We register mini file system filter driver with fltmgr i.e filter manager in windows,and we register IRP for callbacks (preoperation and postoperation callbacks) in that.
As if we know its up-to us to for which IRP we want callback from filter manager.

So my question is how I can find out the any third party filter driver handling which IRP and which IRP its not handling?

rpk
  • 70
  • 9

1 Answers1

2

If a third party filter registers for an IRP it can do nothing just pass-thru the IRP, So cannot know it does something with IRP. Again Filter driver should not have dependency on a third party filter driver.

But can check tools like IRP tracker and fltmc

samjeba
  • 136
  • 5
  • I have tried the IRP tracker in that we can see the IRP's of any created device object in filter driver e.x CDO in driver but not of filter driver. In case of fltmc I tried many different things but I think i need to explore more on that. – rpk Feb 28 '15 at 14:02