Commit | Line | Data |
---|---|---|
da62baad MCC |
1 | .. SPDX-License-Identifier: GPL-2.0 |
2 | ||
3 | ================================== | |
558f82ef MN |
4 | XFRM proc - /proc/net/xfrm_* files |
5 | ================================== | |
da62baad | 6 | |
558f82ef MN |
7 | Masahide NAKAMURA <nakam@linux-ipv6.org> |
8 | ||
9 | ||
10 | Transformation Statistics | |
11 | ------------------------- | |
558f82ef | 12 | |
1a4bb1d1 SN |
13 | The xfrm_proc code is a set of statistics showing numbers of packets |
14 | dropped by the transformation code and why. These counters are defined | |
15 | as part of the linux private MIB. These counters can be viewed in | |
16 | /proc/net/xfrm_stat. | |
17 | ||
18 | ||
19 | Inbound errors | |
20 | ~~~~~~~~~~~~~~ | |
da62baad | 21 | |
558f82ef MN |
22 | XfrmInError: |
23 | All errors which is not matched others | |
da62baad | 24 | |
558f82ef MN |
25 | XfrmInBufferError: |
26 | No buffer is left | |
da62baad | 27 | |
558f82ef MN |
28 | XfrmInHdrError: |
29 | Header error | |
da62baad | 30 | |
558f82ef MN |
31 | XfrmInNoStates: |
32 | No state is found | |
33 | i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong | |
da62baad | 34 | |
558f82ef MN |
35 | XfrmInStateProtoError: |
36 | Transformation protocol specific error | |
37 | e.g. SA key is wrong | |
da62baad | 38 | |
558f82ef MN |
39 | XfrmInStateModeError: |
40 | Transformation mode specific error | |
da62baad | 41 | |
9472c9ef MN |
42 | XfrmInStateSeqError: |
43 | Sequence error | |
44 | i.e. Sequence number is out of window | |
da62baad | 45 | |
558f82ef MN |
46 | XfrmInStateExpired: |
47 | State is expired | |
da62baad | 48 | |
558f82ef MN |
49 | XfrmInStateMismatch: |
50 | State has mismatch option | |
51 | e.g. UDP encapsulation type is mismatch | |
da62baad | 52 | |
558f82ef MN |
53 | XfrmInStateInvalid: |
54 | State is invalid | |
da62baad | 55 | |
558f82ef MN |
56 | XfrmInTmplMismatch: |
57 | No matching template for states | |
58 | e.g. Inbound SAs are correct but SP rule is wrong | |
da62baad | 59 | |
558f82ef MN |
60 | XfrmInNoPols: |
61 | No policy is found for states | |
62 | e.g. Inbound SAs are correct but no SP is found | |
da62baad | 63 | |
558f82ef MN |
64 | XfrmInPolBlock: |
65 | Policy discards | |
da62baad | 66 | |
558f82ef MN |
67 | XfrmInPolError: |
68 | Policy error | |
da62baad | 69 | |
1a4bb1d1 SN |
70 | XfrmAcquireError: |
71 | State hasn't been fully acquired before use | |
da62baad | 72 | |
1a4bb1d1 SN |
73 | XfrmFwdHdrError: |
74 | Forward routing of a packet is not allowed | |
558f82ef MN |
75 | |
76 | Outbound errors | |
77 | ~~~~~~~~~~~~~~~ | |
78 | XfrmOutError: | |
79 | All errors which is not matched others | |
da62baad | 80 | |
558f82ef MN |
81 | XfrmOutBundleGenError: |
82 | Bundle generation error | |
da62baad | 83 | |
558f82ef MN |
84 | XfrmOutBundleCheckError: |
85 | Bundle check error | |
da62baad | 86 | |
558f82ef MN |
87 | XfrmOutNoStates: |
88 | No state is found | |
da62baad | 89 | |
558f82ef MN |
90 | XfrmOutStateProtoError: |
91 | Transformation protocol specific error | |
da62baad | 92 | |
558f82ef MN |
93 | XfrmOutStateModeError: |
94 | Transformation mode specific error | |
da62baad | 95 | |
9472c9ef MN |
96 | XfrmOutStateSeqError: |
97 | Sequence error | |
98 | i.e. Sequence number overflow | |
da62baad | 99 | |
558f82ef MN |
100 | XfrmOutStateExpired: |
101 | State is expired | |
da62baad | 102 | |
558f82ef MN |
103 | XfrmOutPolBlock: |
104 | Policy discards | |
da62baad | 105 | |
558f82ef MN |
106 | XfrmOutPolDead: |
107 | Policy is dead | |
da62baad | 108 | |
558f82ef MN |
109 | XfrmOutPolError: |
110 | Policy error | |
da62baad | 111 | |
1a4bb1d1 SN |
112 | XfrmOutStateInvalid: |
113 | State is invalid, perhaps expired |