1 .. SPDX-License-Identifier: GPL-2.0 2 3 ================================== 4 XFRM proc - /proc/net/xfrm_* files 5 ================================== 6 7 Masahide NAKAMURA <nakam@linux-ipv6.org> 8 9 10 Transformation Statistics 11 ------------------------- 12 13 The xfrm_proc code is a set of statistics showing numbers of packets 14 dropped by the transformation code and why. These counters are defined 15 as part of the linux private MIB. These counters can be viewed in 16 /proc/net/xfrm_stat. 17 18 19 Inbound errors 20 ~~~~~~~~~~~~~~ 21 22 XfrmInError: 23 All errors which is not matched others 24 25 XfrmInBufferError: 26 No buffer is left 27 28 XfrmInHdrError: 29 Header error 30 31 XfrmInNoStates: 32 No state is found 33 i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong 34 35 XfrmInStateProtoError: 36 Transformation protocol specific error 37 e.g. SA key is wrong 38 39 XfrmInStateModeError: 40 Transformation mode specific error 41 42 XfrmInStateSeqError: 43 Sequence error 44 i.e. Sequence number is out of window 45 46 XfrmInStateExpired: 47 State is expired 48 49 XfrmInStateMismatch: 50 State has mismatch option 51 e.g. UDP encapsulation type is mismatch 52 53 XfrmInStateInvalid: 54 State is invalid 55 56 XfrmInTmplMismatch: 57 No matching template for states 58 e.g. Inbound SAs are correct but SP rule is wrong 59 60 XfrmInNoPols: 61 No policy is found for states 62 e.g. Inbound SAs are correct but no SP is found 63 64 XfrmInPolBlock: 65 Policy discards 66 67 XfrmInPolError: 68 Policy error 69 70 XfrmAcquireError: 71 State hasn't been fully acquired before use 72 73 XfrmFwdHdrError: 74 Forward routing of a packet is not allowed 75 76 XfrmInStateDirError: 77 State direction mismatch (lookup found an output state on the input path, expected input or no direction) 78 79 Outbound errors 80 ~~~~~~~~~~~~~~~ 81 XfrmOutError: 82 All errors which is not matched others 83 84 XfrmOutBundleGenError: 85 Bundle generation error 86 87 XfrmOutBundleCheckError: 88 Bundle check error 89 90 XfrmOutNoStates: 91 No state is found 92 93 XfrmOutStateProtoError: 94 Transformation protocol specific error 95 96 XfrmOutStateModeError: 97 Transformation mode specific error 98 99 XfrmOutStateSeqError: 100 Sequence error 101 i.e. Sequence number overflow 102 103 XfrmOutStateExpired: 104 State is expired 105 106 XfrmOutPolBlock: 107 Policy discards 108 109 XfrmOutPolDead: 110 Policy is dead 111 112 XfrmOutPolError: 113 Policy error 114 115 XfrmOutStateInvalid: 116 State is invalid, perhaps expired 117 118 XfrmOutStateDirError: 119 State direction mismatch (lookup found an input state on the output path, expected output or no direction)
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.