Edit

FILTER_FULL_INFORMATION structure (fltuserstructures.h)

  • Article

The FILTER_FULL_INFORMATION structure contains full information for a minifilter driver.

Syntax

typedef struct _FILTER_FULL_INFORMATION {
  ULONG  NextEntryOffset;
  ULONG  FrameID;
  ULONG  NumberOfInstances;
  USHORT FilterNameLength;
  WCHAR  FilterNameBuffer[1];
} FILTER_FULL_INFORMATION, *PFILTER_FULL_INFORMATION;

Members

NextEntryOffset

Byte offset of the next FILTER_FULL_INFORMATION entry, if multiple entries are present in a buffer. This member is zero if no other entries follow this one.

FrameID

Zero-based index of the current frame.

NumberOfInstances

Number of instances that currently exist for this minifilter.

FilterNameLength

Length, in bytes, of the minifilter name.

FilterNameBuffer[1]

Specifies the first character of the filter name string. This character is followed in memory by the remainder of the string. The length of the string is specified by the FilterNameLength member. The string is Unicode and is not NULL-terminated.

Remarks

The FILTER_FULL_INFORMATION structure is passed as a parameter to routines such as FilterFindFirst, FilterFindNext, FilterGetInformation, FltEnumerateFilterInformation, and FltGetFilterInformation.

This structure must be aligned on a LONGLONG (8-byte) boundary. If a buffer contains two or more of these structures, the NextEntryOffset value in each entry, except the last, falls on an 8-byte boundary.

Requirements

Requirement Value
Header fltuserstructures.h (include FltUser.h, FltKernel.h)

See also

FILTER_AGGREGATE_BASIC_INFORMATION

FILTER_AGGREGATE_STANDARD_INFORMATION

FilterFindClose

FilterFindFirst

FilterFindNext

FilterGetInformation

FltEnumerateFilterInformation

FltGetFilterInformation