Why use FltReadFile in miniFilter will cause system slowly?

Forum for discussion about kernel-mode development.

Why use FltReadFile in miniFilter will cause system slowly?

Postby ithurricane » Thu Feb 09, 2017 5:22 am

Hi there,

I use FltReadFile in miniFilter at PostCreate, sometime cause system very slowly.

status = FltReadFile( Instance,
FileObject,
&offset,
length,
buffer,
FLTFL_IO_OPERATION_NON_CACHED |
FLTFL_IO_OPERATION_DO_NOT_UPDATE_BYTE_OFFSET,
&bytesRead,
NULL,
NULL );

as same as Windows-driver-samples\filesys\miniFilter\scanner

Any ideas?
ithurricane
 
Posts: 17
Joined: Thu Mar 25, 2010 1:00 am
Reputation point: 0

Re: Why use FltReadFile in miniFilter will cause system slow

Postby ithurricane » Thu Feb 16, 2017 2:53 am

I found the reason,
It seems FLTFL_IO_OPERATION_NON_CACHED affects performance.
ithurricane
 
Posts: 17
Joined: Thu Mar 25, 2010 1:00 am
Reputation point: 0


Return to Kernel-Mode Development

Who is online

Users browsing this forum: No registered users and 5 guests