tag:blogger.com,1999:blog-971876119771204189.post7292486817410076000..comments2024-03-12T22:24:25.119-07:00Comments on Of Filesystems And Other Demons: Useful Tools for File System DevelopersAnonymoushttp://www.blogger.com/profile/04456600991354270152noreply@blogger.comBlogger1125tag:blogger.com,1999:blog-971876119771204189.post-77261467392884616302012-04-14T05:31:07.265-07:002012-04-14T05:31:07.265-07:00There is another extremely cool feature in Process...There is another extremely cool feature in Process Monitor.<br />The feature was a John Robbins's proposal, and Mark Russinovich has implemented that.<br />You can read the details here.<br /><br />http://www.wintellect.com/CS/blogs/jrobbins/archive/2010/04/13/see-the-i-o-you-caused-by-getting-your-diagnostic-tracing-into-process-monitor.aspx<br /><br />Filesystem drivers or filter drivers(and User-land apps) can write their log to Process Monitor. And this is much better than logging to DebugView. Because the ProcMon also logs application irps' inputs and results. Now ProcMon prints the Irps logs and your own logs, *synchronously* (I mean, in the correct order).<br /><br />Although John didn't write a library for kernel developers, you can easily write your own library using ZwDeviceIoControl.Jeho Kimhttp://benjaminlog.comnoreply@blogger.com