Re: LNK2001 error.. plz help!

From: Don Burn (burn_at_stopspam.acm.org)
Date: 09/08/04 

Date: Wed, 8 Sep 2004 15:16:35 -0400

NO, portmon has a driver, and a user space component. The driver is the one
doing the IoAttachDevice. 

-- 
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply
"Robby Tanner" <rtanner@lightsource.ca> wrote in message
news:uPsmjbdlEHA.1656@TK2MSFTNGP09.phx.gbl...
> PortMon:
>
> http://www.sysinternals.com/ntw2k/freeware/portmon.shtml
>
> I'm not exactly clear on how it works.  Is it being called by PortMon or
the
> driver PortMon is conencting to?  Is PortMon not acting as a filter
driver?
>
> Cheers,
> Rob
>
> "Don Burn" <burn@stopspam.acm.org> wrote in message
> news:10jul931menolc4@corp.supernews.com...
> > And what systinternals user space application, do you believe links
this?
> >
> >
>
>

Relevant Pages

  • Re: LNK2001 error.. plz help!
    ... According to the registry, the image path is ... The driver is embedded in with the .EXE is it? ... Rob ... > NO, portmon has a driver, and a user space component. ...
    (microsoft.public.development.device.drivers)
  • Re: LNK2001 error.. plz help!
    ... Rob ... > NO, portmon has a driver, and a user space component. ...
    (microsoft.public.development.device.drivers)
  • Re: How to verify a user space pointer passed to kernel driver?
    ... ProbeForRead/Write does not protect the driver, it just causes crashes since 99% of the users do not understand that, the second after you probe the user can free the memory. ... Don Burn (MVP, Windows DDK) ...
    (microsoft.public.development.device.drivers)
  • Re: controlling a filter driver
    ... Don Burn (MVP, Windows DDK) ... Windows 2k/XP/2k3 Filesystem and Driver Consulting ... interested IRPs and let the rest of the IRPs slip down to the stack. ...
    (microsoft.public.development.device.drivers)
  • Re: Can kernel mode call Win32 API ?
    ... very similar to the Win32 functions. ... Don Burn (MVP, Windows DDK) ... Windows 2k/XP/2k3 Filesystem and Driver Consulting ...
    (microsoft.public.development.device.drivers)