120 lines · plain
1.. SPDX-License-Identifier: GPL-2.02 3==================================4XFRM proc - /proc/net/xfrm_* files5==================================6 7Masahide NAKAMURA <nakam@linux-ipv6.org>8 9 10Transformation Statistics11-------------------------12 13The xfrm_proc code is a set of statistics showing numbers of packets14dropped by the transformation code and why. These counters are defined15as part of the linux private MIB. These counters can be viewed in16/proc/net/xfrm_stat.17 18 19Inbound errors20~~~~~~~~~~~~~~21 22XfrmInError:23 All errors which is not matched others24 25XfrmInBufferError:26 No buffer is left27 28XfrmInHdrError:29 Header error30 31XfrmInNoStates:32 No state is found33 i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong34 35XfrmInStateProtoError:36 Transformation protocol specific error37 e.g. SA key is wrong38 39XfrmInStateModeError:40 Transformation mode specific error41 42XfrmInStateSeqError:43 Sequence error44 i.e. Sequence number is out of window45 46XfrmInStateExpired:47 State is expired48 49XfrmInStateMismatch:50 State has mismatch option51 e.g. UDP encapsulation type is mismatch52 53XfrmInStateInvalid:54 State is invalid55 56XfrmInTmplMismatch:57 No matching template for states58 e.g. Inbound SAs are correct but SP rule is wrong59 60XfrmInNoPols:61 No policy is found for states62 e.g. Inbound SAs are correct but no SP is found63 64XfrmInPolBlock:65 Policy discards66 67XfrmInPolError:68 Policy error69 70XfrmAcquireError:71 State hasn't been fully acquired before use72 73XfrmFwdHdrError:74 Forward routing of a packet is not allowed75 76XfrmInStateDirError:77 State direction mismatch (lookup found an output state on the input path, expected input or no direction)78 79Outbound errors80~~~~~~~~~~~~~~~81XfrmOutError:82 All errors which is not matched others83 84XfrmOutBundleGenError:85 Bundle generation error86 87XfrmOutBundleCheckError:88 Bundle check error89 90XfrmOutNoStates:91 No state is found92 93XfrmOutStateProtoError:94 Transformation protocol specific error95 96XfrmOutStateModeError:97 Transformation mode specific error98 99XfrmOutStateSeqError:100 Sequence error101 i.e. Sequence number overflow102 103XfrmOutStateExpired:104 State is expired105 106XfrmOutPolBlock:107 Policy discards108 109XfrmOutPolDead:110 Policy is dead111 112XfrmOutPolError:113 Policy error114 115XfrmOutStateInvalid:116 State is invalid, perhaps expired117 118XfrmOutStateDirError:119 State direction mismatch (lookup found an input state on the output path, expected output or no direction)120