[netsa-tools-discuss] SiLK check-struct and license issues

Mark Thomas mthomas at cert.org
Mon May 18 15:27:08 EDT 2015


Regarding the technical questions, my reply is inline:

On Fri, 15 May 2015 23:34:29 -0500, B. Galliart wrote:

> It looks like at some point the ski_extrwrec_t template in
> libflowsource/skipfix.c was extended to include
> flowStartNanoseconds and flowEndNanoseconds.  However,
> skiCheckDataStructure() does not seem to have been updated
> accordingly.  The result is that all entries past
> flowEndMicroseconds report as "hole" when running check-struct.
> Adding the two entries after flowEndMicroseconds for the check
> data structure function seems to address this.

Yes, you are correct, and good job discovering the issue.  I failed
to update the testing code when I added nanosecond support to SiLK
3.10.0; I noticed this recently when I extended the Gauntlet of Time
for additional information elements.

> Is it safe to assume that the holes stated in an unmodified SiLK
> v3.10.1 check-struct can be ignored?

Yes.

> Also, can the alignment errors for mplsLabels and pad also be
> ignored?

Yes.  The check to see whether a field is properly aligned is
simplistic and it does not account for fields that are accessed as
an octet array.  Since that code is for use during development, I
have not felt the need to make it smarter.

Thank you for your email.

-Mark


More information about the netsa-tools-discuss mailing list