www.pudn.com > filespy.rar > fspylog.h

/*++ 
 
Copyright (c) 1989-1999  Microsoft Corporation 
 
Module Name: 
 
    log.h 
 
Abstract: 
 
    This module contains the structures and prototypes used by the user 
    program to retrieve and see the log records recorded by filespy.sys. 
 
Environment: 
 
    User mode 
 
 
--*/ 
#ifndef __FSPYLOG_H__ 
#define __FSPYLOG_H__ 
 
#include  
#include "filespy.h" 
 
#define BUFFER_SIZE     8192 
 
typedef struct _LOG_CONTEXT{ 
    HANDLE  Device; 
    BOOLEAN LogToScreen; 
    BOOLEAN LogToFile; 
    ULONG   VerbosityFlags;     //  FS_VF_DUMP_PARAMETERS, etc. 
    FILE   *OutputFile; 
 
    BOOLEAN NextLogToScreen; 
 
    // For synchronizing shutting down of both threads 
    BOOLEAN CleaningUp; 
    HANDLE  ShutDown; 
}LOG_CONTEXT, *PLOG_CONTEXT; 
 
DWORD WINAPI 
RetrieveLogRecords ( 
    LPVOID lpParameter 
    ); 
 
VOID 
IrpFileDump ( 
    ULONG SequenceNumber, 
    PWCHAR Name, 
    ULONG NameLength, 
    PRECORD_IRP RecordIrp, 
    FILE *File, 
    ULONG Verbosity 
    ); 
 
VOID 
IrpScreenDump ( 
    ULONG SequenceNumber, 
    PWCHAR Name, 
    ULONG NameLength, 
    PRECORD_IRP RecordIrp, 
    ULONG Verbosity 
    ); 
 
VOID 
FastIoFileDump ( 
    ULONG SequenceNumber, 
    PWCHAR Name, 
    ULONG NameLength, 
    PRECORD_FASTIO RecordFastIo, 
    FILE *File 
    ); 
 
VOID 
FastIoScreenDump ( 
    ULONG SequenceNumber, 
    PWCHAR Name, 
    ULONG NameLength, 
    PRECORD_FASTIO RecordFastIo 
    ); 
 
#if WINVER >= 0x0501 /* See comment in DriverEntry */ 
 
VOID 
FsFilterOperationFileDump ( 
    ULONG SequenceNumber, 
    PWCHAR Name, 
    ULONG NameLength, 
    PRECORD_FS_FILTER_OPERATION RecordFsFilterOp, 
    FILE *File 
    ); 
 
VOID 
FsFilterOperationScreenDump ( 
    ULONG SequenceNumber, 
    PWCHAR Name, 
    ULONG NameLength, 
    PRECORD_FS_FILTER_OPERATION RecordFsFilterOp 
    ); 
 
#endif 
 
#define IRP_NOCACHE                     0x00000001 
#define IRP_PAGING_IO                   0x00000002 
#define IRP_SYNCHRONOUS_API             0x00000004 
#define IRP_SYNCHRONOUS_PAGING_IO       0x00000040 
 
#if WINVER >= 0x0501 
#define FS_FILTER_ACQUIRE_FOR_SECTION_SYNCHRONIZATION    (UCHAR)-1 
#define FS_FILTER_RELEASE_FOR_SECTION_SYNCHRONIZATION    (UCHAR)-2 
#define FS_FILTER_ACQUIRE_FOR_MOD_WRITE                  (UCHAR)-3 
#define FS_FILTER_RELEASE_FOR_MOD_WRITE                  (UCHAR)-4 
#define FS_FILTER_ACQUIRE_FOR_CC_FLUSH                   (UCHAR)-5 
#define FS_FILTER_RELEASE_FOR_CC_FLUSH                   (UCHAR)-6 
#endif 
 
// 
//  Verbosity flags. 
// 
 
#define FS_VF_DUMP_PARAMETERS           0x00000001 
 
#endif __FSPYLOG_H__