[smartmontools-support] [Smartmontools-database] TOSHIBA-MQ04UBF100 on Windows - Resume.

Christian Franke Christian.Franke at t-online.de
Tue Aug 25 11:18:34 CEST 2020


Arioch The wrote:
> ...
>> Normally this device name is translated by Windows to '\Device\Harddisk1\DR1' for internal use.
> But who exactly was doing this translation for Smartctl ?

This is done by some Windows component between Win32 API function 
kernel32.dll:CreateFileA() (called by smartctl) and NT-Kernel function 
ntdll.dll:NtCreateFile() (called internally by CreateFileA).


> ...
>
>> Win32 path  '\\.\PhysicalDrive1'
> The log does not show it though.
> The log sometimes shows 'e:\' or other times '\Device\Harddisk1\DR1' -
> but not that PhysicalDrive alias.

Tools like sysinternals procmon use some internal Windows Layer and 
therefore do NOT necessarily log the actual system calls done by the 
program.

Example: 'smartctl ... /dev/sdb' calls Win32 API function:

    CreateFileA("\\\\.\\PhysicalDrive1", ...);

Procmon logs:

    ... CreateFile    \Device\Harddisk1\DR1  ...

or with "Filter -> Enable Advanced Output":

   ... IRP_MJ_CREATE    \Device\Harddisk3\DR3    ...


Regards,
Christian



More information about the Smartmontools-support mailing list