0001 .. SPDX-License-Identifier: GPL-2.0
0002
0003 ==================================
0004 XFRM proc - /proc/net/xfrm_* files
0005 ==================================
0006
0007 Masahide NAKAMURA <nakam@linux-ipv6.org>
0008
0009
0010 Transformation Statistics
0011 -------------------------
0012
0013 The xfrm_proc code is a set of statistics showing numbers of packets
0014 dropped by the transformation code and why. These counters are defined
0015 as part of the linux private MIB. These counters can be viewed in
0016 /proc/net/xfrm_stat.
0017
0018
0019 Inbound errors
0020 ~~~~~~~~~~~~~~
0021
0022 XfrmInError:
0023 All errors which is not matched others
0024
0025 XfrmInBufferError:
0026 No buffer is left
0027
0028 XfrmInHdrError:
0029 Header error
0030
0031 XfrmInNoStates:
0032 No state is found
0033 i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
0034
0035 XfrmInStateProtoError:
0036 Transformation protocol specific error
0037 e.g. SA key is wrong
0038
0039 XfrmInStateModeError:
0040 Transformation mode specific error
0041
0042 XfrmInStateSeqError:
0043 Sequence error
0044 i.e. Sequence number is out of window
0045
0046 XfrmInStateExpired:
0047 State is expired
0048
0049 XfrmInStateMismatch:
0050 State has mismatch option
0051 e.g. UDP encapsulation type is mismatch
0052
0053 XfrmInStateInvalid:
0054 State is invalid
0055
0056 XfrmInTmplMismatch:
0057 No matching template for states
0058 e.g. Inbound SAs are correct but SP rule is wrong
0059
0060 XfrmInNoPols:
0061 No policy is found for states
0062 e.g. Inbound SAs are correct but no SP is found
0063
0064 XfrmInPolBlock:
0065 Policy discards
0066
0067 XfrmInPolError:
0068 Policy error
0069
0070 XfrmAcquireError:
0071 State hasn't been fully acquired before use
0072
0073 XfrmFwdHdrError:
0074 Forward routing of a packet is not allowed
0075
0076 Outbound errors
0077 ~~~~~~~~~~~~~~~
0078 XfrmOutError:
0079 All errors which is not matched others
0080
0081 XfrmOutBundleGenError:
0082 Bundle generation error
0083
0084 XfrmOutBundleCheckError:
0085 Bundle check error
0086
0087 XfrmOutNoStates:
0088 No state is found
0089
0090 XfrmOutStateProtoError:
0091 Transformation protocol specific error
0092
0093 XfrmOutStateModeError:
0094 Transformation mode specific error
0095
0096 XfrmOutStateSeqError:
0097 Sequence error
0098 i.e. Sequence number overflow
0099
0100 XfrmOutStateExpired:
0101 State is expired
0102
0103 XfrmOutPolBlock:
0104 Policy discards
0105
0106 XfrmOutPolDead:
0107 Policy is dead
0108
0109 XfrmOutPolError:
0110 Policy error
0111
0112 XfrmOutStateInvalid:
0113 State is invalid, perhaps expired
