Re: Hard Disk Activity

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

On Thu, 5 Feb 2009 13:42:16 -0500, "expvb" <nobody@xxxxxxx> wrote:

"Lorin" <lorinm@xxxxxxxxxxx> wrote in message
news:D7418941-9D68-43E2-ABD9-244F444C6CD1@xxxxxxxxxxxxxxxx
I already did all that and do not see what is doing it.
Task Manger does not show the indexing service.
The Process Explorer does not show anything either.

What about filemon? Or using FindFirstChangeNotification?

FileMon is a good recommendation, but I wouldn't count on
FindFirstChangeNotification.

When I was working on my defragger I ran into problems on Win2K
systems where the file system was being changed, causing errors. I
tried to use FFCN to determine the cause of the problem, but it didn't
work reliably.

Apparently, an application needs to explicitly broadcast a message in
order for FFCN to detect the change. If an application modifies the
file system, but neglects to broadcast the message, no changes are
detected.

Please correct me if I'm wrong.

J.
Jeremiah D. Seitz
Omega Techware
http://www.omegatechware.net
.

Relevant Pages

  • Re: Counting file handles on a file
    ... "On Windows NT the heart of FileMon is a file system driver that creates and ... attaches filter device objects to target file system device objects so that ... FileMon will see all IRPs and FastIO requests directed at drives. ... FileMon sees an open, create or close call, it updates an internal hash ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: How can I determine Process / File Usage?
    ... Their approach to the problem is to hook into file subsystem. ... that they only obtain real-time info for file accesses performed after their ... the heart of FileMon is in the virtual device ... installs a file system filter via the VxD service, ...
    (microsoft.public.vb.winapi)
  • Re: Hard Disk Activity
    ... The Process Explorer does not show anything either. ... Or using FindFirstChangeNotification? ... FileMon is a good recommendation, ... However, it explains the process, but one needs to know how to make drivers, ...
    (microsoft.public.vb.general.discussion)
  • Re: How to monitor the file I/O access in Win32 environment
    ... First, off FileMon has never used system-call hooking, it is a file system ... Finally, depending on what the guy wants to do, he doesn't need a kernel ... > The technique used by FileMon is kernel-mode system-call hooking - not> something for the faint of heart. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: IIS6 &ASP.Net Permissions help:-)
    ... Filemon can be downloaded from the Microsoft website: ... (first link is the download, some other articles on using Filemon to troubleshoot things) ... this account needs permissions to files and folders. ... Which part of the file system are you talking about? ...
    (microsoft.public.inetserver.iis.security)