Search code examples
filesystemsdriverminifiltersysinternalsirp

How to view which IRP's handled by mini filter driver?


We register mini file system filter driver with fltmgr i.e filter manager in windows,and we register IRP for callbacks (preoperation and postoperation callbacks) in that.
As if we know its up-to us to for which IRP we want callback from filter manager.

So my question is how I can find out the any third party filter driver handling which IRP and which IRP its not handling?


Solution

  • If a third party filter registers for an IRP it can do nothing just pass-thru the IRP, So cannot know it does something with IRP. Again Filter driver should not have dependency on a third party filter driver.

    But can check tools like IRP tracker and fltmc