深入解析《第4版微软Windows内核技术》

需积分: 10 27 浏览量更新于2024-08-02 收藏 9.6MB PDF 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

资源详情

资源推荐

xvi Table of Contents

File Reference Numbers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 739

File Records. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 740

Filenames . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 742

Resident and Nonresident Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 744

Data Compression and Sparse Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 747

The Change Journal File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 752

Indexing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 753

Object IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 754

Quota Tracking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755

Consolidated Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 756

Reparse Points . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 758

NTFS Recovery Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 758

Evolution of File System Design . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 759

Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 761

Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767

NTFS Bad-Cluster Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 771

Encrypting File System Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 775

Encrypting a File for the First Time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 778

The Decryption Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 783

Backing Up Encrypted Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 784

Conclusion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 785

13 Networking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 787

Windows Networking Architecture. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 787

The OSI Reference Model. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 787

Windows Networking Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 789

Networking APIs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 791

Windows Sockets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 791

Remote Procedure Call . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 798

Web Access APIs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 803

Named Pipes and Mailslots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 804

NetBIOS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 811

Other Networking APIs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 813

Multiple Redirector Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 815

Multiple Provider Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 816

Multiple UNC Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 818

Table of Contents xvii

Name Resolution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 820

Domain Name System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 820

Windows Internet Name Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 820

Protocol Drivers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 821

TCP/IP Extensions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 824

NDIS Drivers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 828

Variations on the NDIS Miniport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 832

Connection-Oriented NDIS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 832

Remote NDIS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 835

QOS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 836

Binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 838

Layered Network Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 839

Remote Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 839

Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 840

Network Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 841

File Replication Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 843

Distributed File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 843

Conclusion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 844

14 Crash Dump Analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 845

Why Does Windows Crash? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 845

The Blue Screen . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 846

Crash Dump Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 849

Crash Dump Generation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 852

Windows Error Reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 853

Online Crash Analysis. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 854

Basic Crash Dump Analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 855

Notmyfault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 855

Basic Crash Dump Analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 856

Verbose Analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 858

Using Crash Troubleshooting Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 860

Buffer Overrun and Special Pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 861

Code Overwrite and System Code Write Protection . . . . . . . . . . . . . . . . . . . . 863

Advanced Crash Dump Analysis. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 864

Stack Trashes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 865

Hung or Unresponsive Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 866

When There Is No Crash Dump . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 869

xx Historical Perspective

We originally thought we could produce the first Windows NT system in a little over two

years. It actually ended up taking us four and a half years for the first release in the summer of

1993, and that release supported the Intel i386, Intel i486, and the MIPS R4000 processors.

Six weeks later, we also introduced support for the Digital Alpha processors.

The first release of Windows NT was larger and slower than expected, so the next major push

was a project called Daytona, named after the speedway in Florida. The main goals for this

release were to reduce the size of the system, increase the speed of the system, and, of course,

to make it more reliable. Six months after the release of Windows NT 3.5 in the fall of 1994,

we released Windows NT 3.51, an updated version containing support for the IBM PowerPC

processor.

The goal for the next version of Windows NT was to update the user interface to be compati-

ble with Windows 95 and to incorporate the Cairo technologies that had been under develop-

ment at Microsoft for a couple of years. This system took two more years to develop and was

introduced in the summer of 1996 as Windows NT 4.0.

The following version of NT saw a name change to Windows 2000 and was the last system for

which the client and server systems were released at the same time. This version was built on

the same Windows NT technology as the previous versions and introduced significant new

features such as Active Directory. Windows 2000 took three and a half years to produce and

was the most tested and tuned version of Windows NT technology produced at the time. Win-

dows 2000 was the culmination of over eleven years of development spanning implementa-

tions on four architectures.

At the end of Windows 2000 development, we embarked on an ambitious plan to implement

new versions of the client and server systems, which would include new enhanced consumer

features and improved server capabilities. As plans developed, it became clear that implemen-

tation of the server features would cause a lag in the implementation of the client features, and

therefore, the releases were split. In August of 2001, Windows XP Professional and Windows

XP Home Edition were released, and a little over a year later, in March of 2003, Microsoft Win-

dows Server 2003 was released. In addition to the Intel x86 architecture, these systems con-

tained support for the Intel IA-64, marking Windows NT’s first move to 64-bit processing.

This book is the definitive work on the internal structures and workings of Windows XP and

Windows Server 2003. In addition, it offers a glimpse into the future of Windows’ move to

64-bit computing by covering AMD's introduction of the x64 architecture (AMD64) in 2003

and Intel's announced support (EM64T) in February 2004. A fully supported x64 client and

server release is planned in the first half of 2005, and this book contains many insights into

the implementation details of the x64 system.

The x64 architecture is the beginning of a new era for Windows NT at a time when the x86

architecture is beginning to show signs of old age. This architecture offers 32-bit x86 compat-

ibility at speed to protect legacy software investments, and provides 64-bit addressing capabil-

ity to address the most ambitious of new applications. This will protect 32-bit software

剩余925页未读，继续阅读

arielchen00

粉丝: 0
资源: 6

深入解析《第4版微软Windows内核技术》

Microsoft - Microsoft Windows Internals Fourth Edition

Microsoft Windows Internals 4th.part2.rar

windows internals 7th part2

windows internals 7th

windows internals: system architecture, processes, threads, memory managemen

windows nt file system internals: a developer’s guide下载

翻译 internals

windows操作系统学习资料

java:[131,43] 找不到符号 符号: 变量 Sm4Utils 位置: 类 com.ctrip.framework.apollo.internals.DefaultConfig是什么原因导致的

ModuleNotFoundError: No module named 'cartopy.internals'

操作系统安全相关参考文献

understanding linux network internals pdf

unix internals pdf

运行wpf窗体后点击button按钮显示"未加载System.ServiceModel.Internals.pdb"是什么原因

chrome://webrtc-internals 怎么打开

module 'nltk' has no attribute 'internals'

chrome://webrtc-internals/是什么

rome://net-internals/#hsts

chrome://net-internals/#hsts

最新资源

java:[131,43] 找不到符号符号: 变量 Sm4Utils 位置: 类 com.ctrip.framework.apollo.internals.DefaultConfig是什么原因导致的