【摘要】 基于Windows NT(5.0以上)操作系统,通过多种方式(应用层、内核层)实现Windows NT下对物理磁盘的读写操作性能的监测,用以实现对传统机械磁盘以及SSD性能的改进研究。介绍了ETW(Windows事件追踪)机制的基本架构、原理,及ETW技术在物理磁盘读写操作性能监测方面的具体实现;讨论了WMI在磁盘性能监测方面的应用;在Windows NT下对数据读写从应用层到驱动层的路径进行分析,介绍了内核中驱动HOOK技术的原理及其特点;提出驱动层HOOK技术在物理磁盘读写操作性能监测方面的具体实现。最后介绍了驱动方式实现物理磁盘读写操作性能监测的应用前景。更多还原

【Abstract】 Based on Windows NT(5.0) OS,it can monitor the Read-and-write performance of disk under Windows NT in different ways(application layer,kernel layer) so as to improve traditional mechanical drives as well as the perfor-mance of SSD.The article introduces the basic framework of ETW mechanism(Event Tracing for Windows);the implement principle of ETW technology;the application of ETW technology in monitoring the Read-and-write performance of physical disk;It also does analyze to the path of reading and writing data from application layer to driver layer under Windows NT,introduces the realization and distinguishing feature of driver HOOK technology in kernel;put forward the concrete implementation in monitoring Read-and-write performance of physical disk of driver HOOK technology;compares the merits and demerits of the two ways.In the end,the article will introduce the application prospect of the realization of Read-and-write performance of physical disk of driving mode.更多还原