EldoS | Feel safer!

Software components for data protection, secure storage and transfer

Som call back event do not fire

Also by EldoS: RawDisk
Access locked and protected files in Windows, read and write disks and partitions and more.
#8909
Posted: 02/14/2009 02:24:15
by lcp lcp (Basic support level)
Joined: 10/07/2008
Posts: 17

I download the new version of 1.0.13.35
and set callback Rule to:

fltReadCallback or
fltWriteCallback or
fltCreateCallback or
fltRenameCallback or
fltSetSizesCallback or
fltDeleteCallback or
fltSetBasicInfoCallback or
fltEnumerateDirectoryCallback or
fltOpenCallback or
fltCloseCallback

set monitor path to c:\Crypt\*.*

in openfilec event add:
addtolog('OpenFileC');
ProcessRequest:=true;

in postopenfilec event add:
addtolog('PostOpenFileC');

in readfilec event add:
AddToLog('ReadFileC');
ProcessRequest := true

in postreadfilec event add:
addtolog('PostReadFileC');
ProcessRequest:=true;

in writefilec event add:
addtolog('writefilec');
ProcessRequest:=true;

in postwritefilec event add:
addtolog('postwritefilec');
ProcessRequest:=true;

then start the filter ,and open file c:\Crypt\1.txt,change the file conten,and save back.
in the log,
i can see the openfilec ,postopenfilec,writefilec events be fired
but the readfilec,postfilec events do not fired

why?

I attach the test file.Can you help me?


[ Download ]
#8910
Posted: 02/14/2009 06:00:39
by Vladimir Cherniga (EldoS Corp.)

Please specify what is the editor for your c:\crypt\1.txt file.
#8911
Posted: 02/14/2009 20:23:59
by lcp lcp (Basic support level)
Joined: 10/07/2008
Posts: 17

I open the c:\Crypt\1.txt with notepad.exe , ultraEdit.exe or word.exe

the result log is all the same.


openfilec ,postopenfilec,writefilec events be fired

readfilec,postreadfilec and postwritefilec events not be fired
#8928
Posted: 02/17/2009 05:07:26
by Vladimir Cherniga (EldoS Corp.)

I have added a sample based on CBFilter FileMon project and a driver binary. Would you make the same tests with an attached sample.


[ Download ]
#8936
Posted: 02/17/2009 22:05:53
by lcp lcp (Basic support level)
Joined: 10/07/2008
Posts: 17

Yes,use your new sample,i can see the readfilec,postreadfilec and postwritefilec events be fired.It is ok.

I know that the new sample has the new kernel driver version 0.1.4.14.
But if i use the original sample with the new kernel driver,it is not ok.

#9002
Posted: 02/22/2009 14:50:56
by Vladimir Cherniga (EldoS Corp.)

Sorry for the delay with answer. It was an error in VCL code, so it will be fixed in the nearest build (this week i'm sure). Thanks for your help.
Also by EldoS: RawDisk
Access locked and protected files in Windows, read and write disks and partitions and more.

Reply

Statistics

Topic viewed 3540 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!