Solved

Log file access

Posted on 1998-07-10
9
127 Views
Last Modified: 2010-04-04
In my app, I need to monitor and log all disk/CD access's for any files written or read. How can I do this without writing Vxd drivers in C++ ?.
0
Comment
Question by:npatel
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 7

Expert Comment

by:BlackMan
ID: 1357652
There is an example here with source (in C i guess). But you can properly find the relevant APIs
http://www.sysinternals.com/ntfilmon.htm
0
 
LVL 3

Expert Comment

by:KE
ID: 1357653
Look at the WIN32API FindFirstChangeNotification, this will however NOT log open/read of files (works on 95/NT).
If you plan to use Windows NT only, you can use a device driver as BlackMan writes, another way would be to use the security functions, and set the file objects to audit changes.

0
 
LVL 3

Expert Comment

by:KE
ID: 1357654
Any comment ?
0
Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

 
LVL 4

Accepted Solution

by:
jeurk earned 30 total points
ID: 1357655
Hi,
I think that this cannot be done without some vxd programming.
A solution would be to get an already written vxd that does the job.
look at the following site : www.ntinternals.com in the 95 or the NT section
for a program called filemon it does the job you ask. it's free and has the sources
in C++.
Should be a good begin.
0
 
LVL 7

Expert Comment

by:BlackMan
ID: 1357656
Hmm, jeurk, apart from your wrong URL (ntinternals was their former address), that's just what I suggested...
0
 

Author Comment

by:npatel
ID: 1357657
Thanks,

The source code from filemon is a good start. The FindFirstChangeNotification will give an indication of file access in the system, but as KC mentioned no file Logging. I do however perfer examples in Delphi, of course.

0
 
LVL 4

Expert Comment

by:jeurk
ID: 1357658
Humm...
How can I say, I did not see your suggestion BlackMan... I'm sorry, really
I'm not that kind of guy. If you want I can ask a question for you to answer ? to give
you back the points. OK ?
0
 
LVL 7

Expert Comment

by:BlackMan
ID: 1357659
No, that's all right, maybe I can steal your suggestion another time :-)
No hard feelings...
0
 
LVL 4

Expert Comment

by:jeurk
ID: 1357660
Ok !
Anyway I apologize again.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Machine not responding during CopyFile() 3 103
Delphi component that can load a DLL in design time? 8 74
How to debug For loops? 3 56
Adoquery sql  left join does not work 25 98
Introduction The parallel port is a very commonly known port, it was widely used to connect a printer to the PC, if you look at the back of your computer, for those who don't have newer computers, there will be a port with 25 pins and a small print…
In my programming career I have only very rarely run into situations where operator overloading would be of any use in my work.  Normally those situations involved math with either overly large numbers (hundreds of thousands of digits or accuracy re…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question