ewf filter is very large..how can inspect?

  • Thread starter Thread starter Jim Mcduggan
  • Start date Start date
J

Jim Mcduggan

So I have a ram-based ewf filter going that is way above normal on one
device.
normally it shows 12'ish megs of ram with ewfmgr (I have a 15 meg ie temp
cache set on all devices), but on one device where it maxes out memory while
ie is running (I can't even run notepad), ewfmgr shows 95 megs which it
shouldn't. So I am not sure what has taken up all that space and I don't
want to commit it. (I have to reboot the device to make it functional)

So is there any way to see the filenames and sizes of what is just in the
ewf filter?

tx
J
 
Jim,
So I have a ram-based ewf filter going that is way above normal on one
device.
normally it shows 12'ish megs of ram with ewfmgr (I have a 15 meg ie temp
cache set on all devices), but on one device where it maxes out memory
while
ie is running (I can't even run notepad), ewfmgr shows 95 megs which it
shouldn't. So I am not sure what has taken up all that space and I don't
want to commit it. (I have to reboot the device to make it functional)

You may want to follow the tips from the following docs to lower EWF RAM
usage:
http://msdn.microsoft.com/embedded/community/community/tips/xp/ramewf/default.aspx
http://msdn.microsoft.com/library/en-us/xpehelp/html/xeconEWFPerformanceConsiderations.asp
So is there any way to see the filenames and sizes of what is just in the
ewf filter?

EWF is a disk driver upperf filter. It doesn't know anything about FS,
files, etc.

However, if you monitored the app (IE) launch with Filemon you would be able
to see where and what is getting open and growing on the FS.

KM
 
Back
Top