FltEnlistInTransaction is a filter manager function that file system mini-filters can use in Vista+ platforms to subscribe to relevant transaction notifications. It is declared in fltkernel.h as follows

The idea is when a transaction is committed for example, mini-filter transaction callback is called with all event details  and whatever processing is appropriate for the filter is done at that point. Mini-filters register for transaction callbacks just like regular callbacks by calling FltRegisterFilter.

Note that the documentation for FltEnlistInTransaction mentions four flags in NotificationMask parameter – TRANSACTION_NOTIFY_COMMIT, TRANSACTION_NOTIFY_PREPARE, TRANSACTION_NOTIFY_PREPREPARE and TRANSACTION_NOTIFY_ROLLBACK. The fifth flag FLT_MAX_TRANSACTION_NOTIFICATIONS is simply a combination of all of the four flags.

But if you take a look at  WDK header ktmtypes.h where these constants are declared, it is a whole different world. There are 27 TRANSACTION_NOTIFY_XXX constants defined in there with one of them TRANSACTION_NOTIFY_COMMIT_FINALIZE having the following comment next to it –

Note that this flag is not included in the TRANSACTION_NOTIFY_MASK. The reason being that KTM does not understand this flag yet. This flag is strictly for the use of filter manager. In fact we mask it out before enlisting in any transaction.

Share →

Leave a Reply

Your email address will not be published. Required fields are marked *


Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop us a note so we can take care of it!

Visit our friends!

A few highly recommended friends...

Set your Twitter account name in your settings to use the TwitterBar Section.