Decoding a given NotifyFilter in tsmjbbd.ini with journal based backups

Answer

The following is a list of the specific notification types and their filter values in hexadecimal and binary format:

Notification Type Filter Value (hex) Filter Value (binary)

File name changes,
including create,
delete and rename 0x00000001 0000 0001

Dir name changes,
including create,
delete, and rename 0x00000002 0000 0010

Attribute changes 0x00000004 0000 0100

Size changes,
notification is deferred
until cache is flushed 0x00000008 0000 1000

Last written time
changes, notification
is deferred until
cache is flushed 0x00000010 0001 0000

Last access
time changes 0x00000020 0010 0000

Creation time
changes 0x00000040 0100 0000

Security changes 0x00000100 1 0000 0000


The best way of decoding a given NotifyFilter is to convert the hexadecimal value of the NotifyFilter to binary:

0x0000003B (hex) => 0011 1011 (binary)

Check for binary values of both the given NotifyFilter and the filter specific values.
If the bit (one) is set for both the given NotifyFilter and the filter specific value, the filter is active (bit masking).

0011 1011 => complete NotifyFilter
---------
0000 0001 => File name changes
0000 0010 => Dir name changes
0000 1000 => Size changes
0001 0000 => Last written time changes
0010 0000 => Last access time changes

There is also a tool available called qfilter.exe to determine these values:



The following syntax is used :