Solved

Notification on disk access

Posted on 1998-06-16
11
724 Views
Last Modified: 2012-05-04
Hy!

I'd like my software to get a notification each time the system
accesses (reads or writes) a hard disk or network drive.
DeviceIoControl / IOCTL_DISK_PERFORMANCE seems to be a way to
poll that information, but I can't open a handle to a disk drive
under Win95. It just doesn't work.
0
Comment
Question by:holz
  • 3
  • 3
  • 2
  • +3
11 Comments
 
LVL 2

Expert Comment

by:kinkajou
ID: 1166016
How to get a handle to a Win95 disk drive (example for the A: drive):

In Win95 you need to open the handle not to the logical device, but instead to a VXD. Therefore, you need to specify "\\\\.\\vwin32" in a call to CreateFile(), to specify the system vxd, VWIN32.VXD, which supports the input and output control (IOCTL) functions originally provided by MS-DOS Interrupt 21h. At that point you can either call DeviceIOControl or call int21 directly.

The article http://support.microsoft.com/support/kb/articles/q163/9/20.asp gives an example of how to open the floppy and query its device characteristics under Win95.

HANDLE pFile;

     pFile = CreateFile("\\\\.\\vwin32",
                                GENERIC_READ | GENERIC_WRITE,
                                FILE_SHARE_READ | FILE_SHARE_WRITE,
                                NULL,
                                OPEN_EXISTING,
                                0,
                                NULL );

Use this example for the floppy for any disk drive device under windows 95.
0
 
LVL 11

Expert Comment

by:alexo
ID: 1166017
Don't forget that when you use DeviceIoControl in that matter, you're communicating with VWIN32.VXD, not with the drive!  You are simulating int 21h and therefore, arguments must be different then the documented ones.

For more documentation and sample code see:
  http://www.dejanews.com/getdoc.xp?AN=207816158
  http://www.dejanews.com/getdoc.xp?AN=211688212
  http://www.microsoft.com/kb/articles/q168/1/80.htm
  http://www.microsoft.com/kb/articles/q163/9/20.htm
0
 

Author Comment

by:holz
ID: 1166018
Thanks, but this still leaves questions open:
1. When I open the driver instead of the HD, how do I tell the system which drive I want
    to have information about? IOCTL_DISK_PERFORMANCE doesn't acceppt ANY
    input variables.
2. Some article from the KB suggested that IOCTL_* functions are not available under
    Windows 95. Sorry, I can't find that article any more. But: Is it true and is there
    another way to query how many bytes were read from a certain drive until now?
0
 
LVL 11

Expert Comment

by:alexo
ID: 1166019
Nonono!!!!
You do *not* use IOCTL_DISK_PERFORMANCE.  You simulate the int 21h IOCTL function with the correct parameters.  See the first two URLs I provided for samples (by Raymond Chen from MS).

0
 

Author Comment

by:holz
ID: 1166020
"You simulate the int 21h IOCTL function with the correct parameters." sounds nice, but I can't find an interrupt doing the same work as IOCTL_DISK_PERFORMANCE would. Are you sure it does exist?
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 2

Expert Comment

by:sprinkmeier
ID: 1166021
There is a set of functions under the WIN32 API that can notify you when disk stuff hapens. Look up:
FindFirstChangeNotification
I'm not sure it's exactly what you want, but it might help.
(I got a simple demo program, lemme know if you want it)
0
 
LVL 2

Expert Comment

by:sprinkmeier
ID: 1166022
There is a set of functions under the WIN32 API that can notify you when disk stuff hapens. Look up:
FindFirstChangeNotification
I'm not sure it's exactly what you want, but it might help.
(I got a simple demo program, lemme know if you want it)
0
 
LVL 11

Expert Comment

by:alexo
ID: 1166023
OK, holz, the bad news:
1. IOCTL_DISK_PERFORMANCE is supported only under NT.
2. There is *absolutely* no VWIN32 or INT 21h equivalent (according to Ralf Brown's interrupt list, MSDN and other sources of information).

You could get the Win95 DDK and check if a custom VxD could do it but I doubt it.

FindFirstChangeNotification() will let you monitor file/directory changes in a subtree but not more than that.

I guess that the answer is, regretfully, that it cannot be done [at least without a custom VxD].
0
 
LVL 2

Accepted Solution

by:
lucidity earned 200 total points
ID: 1166024
This should do the trick
http://www.sysinternals.com/
look under Source for Win95, FileMon

Its VERY handy and does exactly what you want, just give me a good grade.
0
 

Author Comment

by:holz
ID: 1166025
Thanks, I'd already given up.
0
 

Expert Comment

by:JonathanJames
ID: 1166026
sprinkmeier, I would like to obtain your demoprogram if that's ok.. My Email is Jonathan.James@home.se

Thankyou
Regards
Jonathan James
"advanced VB programmer, converting to C++" :D
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Introduction This article is the first in a series of articles about the C/C++ Visual Studio Express debugger.  It provides a quick start guide in using the debugger. Part 2 focuses on additional topics in breakpoints.  Lastly, Part 3 focuses on th…
  Included as part of the C++ Standard Template Library (STL) is a collection of generic containers. Each of these containers serves a different purpose and has different pros and cons. It is often difficult to decide which container to use and …
The viewer will learn how to pass data into a function in C++. This is one step further in using functions. Instead of only printing text onto the console, the function will be able to perform calculations with argumentents given by the user.
The viewer will learn how to user default arguments when defining functions. This method of defining functions will be contrasted with the non-default-argument of defining functions.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now