ewf filter is very large..how can inspect?



Jim Mcduggan
07-09-2005, 09:25 PM
So I have a ram-based ewf filter going that is way above normal on one
device.
normally it shows 12'ish megs of ram with ewfmgr (I have a 15 meg ie temp
cache set on all devices), but on one device where it maxes out memory while
ie is running (I can't even run notepad), ewfmgr shows 95 megs which it
shouldn't. So I am not sure what has taken up all that space and I don't
want to commit it. (I have to reboot the device to make it functional)

So is there any way to see the filenames and sizes of what is just in the
ewf filter?

tx
J

KM
07-09-2005, 09:25 PM
Jim,

> So I have a ram-based ewf filter going that is way above normal on one
> device.
> normally it shows 12'ish megs of ram with ewfmgr (I have a 15 meg ie temp
> cache set on all devices), but on one device where it maxes out memory
> while
> ie is running (I can't even run notepad), ewfmgr shows 95 megs which it
> shouldn't. So I am not sure what has taken up all that space and I don't
> want to commit it. (I have to reboot the device to make it functional)

You may want to follow the tips from the following docs to lower EWF RAM
usage:
http://msdn.microsoft.com/embedded/community/community/tips/xp/ramewf/default.aspx
http://msdn.microsoft.com/library/en-us/xpehelp/html/xeconEWFPerformanceConsiderations.asp

> So is there any way to see the filenames and sizes of what is just in the
> ewf filter?

EWF is a disk driver upperf filter. It doesn't know anything about FS,
files, etc.

However, if you monitored the app (IE) launch with Filemon you would be able
to see where and what is getting open and growing on the FS.

KM


ewf filter is very large..how can inspect?