1*4882a593Smuzhiyun.. SPDX-License-Identifier: GPL-2.0 2*4882a593Smuzhiyun 3*4882a593Smuzhiyun================================== 4*4882a593SmuzhiyunXFRM proc - /proc/net/xfrm_* files 5*4882a593Smuzhiyun================================== 6*4882a593Smuzhiyun 7*4882a593SmuzhiyunMasahide NAKAMURA <nakam@linux-ipv6.org> 8*4882a593Smuzhiyun 9*4882a593Smuzhiyun 10*4882a593SmuzhiyunTransformation Statistics 11*4882a593Smuzhiyun------------------------- 12*4882a593Smuzhiyun 13*4882a593SmuzhiyunThe xfrm_proc code is a set of statistics showing numbers of packets 14*4882a593Smuzhiyundropped by the transformation code and why. These counters are defined 15*4882a593Smuzhiyunas part of the linux private MIB. These counters can be viewed in 16*4882a593Smuzhiyun/proc/net/xfrm_stat. 17*4882a593Smuzhiyun 18*4882a593Smuzhiyun 19*4882a593SmuzhiyunInbound errors 20*4882a593Smuzhiyun~~~~~~~~~~~~~~ 21*4882a593Smuzhiyun 22*4882a593SmuzhiyunXfrmInError: 23*4882a593Smuzhiyun All errors which is not matched others 24*4882a593Smuzhiyun 25*4882a593SmuzhiyunXfrmInBufferError: 26*4882a593Smuzhiyun No buffer is left 27*4882a593Smuzhiyun 28*4882a593SmuzhiyunXfrmInHdrError: 29*4882a593Smuzhiyun Header error 30*4882a593Smuzhiyun 31*4882a593SmuzhiyunXfrmInNoStates: 32*4882a593Smuzhiyun No state is found 33*4882a593Smuzhiyun i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong 34*4882a593Smuzhiyun 35*4882a593SmuzhiyunXfrmInStateProtoError: 36*4882a593Smuzhiyun Transformation protocol specific error 37*4882a593Smuzhiyun e.g. SA key is wrong 38*4882a593Smuzhiyun 39*4882a593SmuzhiyunXfrmInStateModeError: 40*4882a593Smuzhiyun Transformation mode specific error 41*4882a593Smuzhiyun 42*4882a593SmuzhiyunXfrmInStateSeqError: 43*4882a593Smuzhiyun Sequence error 44*4882a593Smuzhiyun i.e. Sequence number is out of window 45*4882a593Smuzhiyun 46*4882a593SmuzhiyunXfrmInStateExpired: 47*4882a593Smuzhiyun State is expired 48*4882a593Smuzhiyun 49*4882a593SmuzhiyunXfrmInStateMismatch: 50*4882a593Smuzhiyun State has mismatch option 51*4882a593Smuzhiyun e.g. UDP encapsulation type is mismatch 52*4882a593Smuzhiyun 53*4882a593SmuzhiyunXfrmInStateInvalid: 54*4882a593Smuzhiyun State is invalid 55*4882a593Smuzhiyun 56*4882a593SmuzhiyunXfrmInTmplMismatch: 57*4882a593Smuzhiyun No matching template for states 58*4882a593Smuzhiyun e.g. Inbound SAs are correct but SP rule is wrong 59*4882a593Smuzhiyun 60*4882a593SmuzhiyunXfrmInNoPols: 61*4882a593Smuzhiyun No policy is found for states 62*4882a593Smuzhiyun e.g. Inbound SAs are correct but no SP is found 63*4882a593Smuzhiyun 64*4882a593SmuzhiyunXfrmInPolBlock: 65*4882a593Smuzhiyun Policy discards 66*4882a593Smuzhiyun 67*4882a593SmuzhiyunXfrmInPolError: 68*4882a593Smuzhiyun Policy error 69*4882a593Smuzhiyun 70*4882a593SmuzhiyunXfrmAcquireError: 71*4882a593Smuzhiyun State hasn't been fully acquired before use 72*4882a593Smuzhiyun 73*4882a593SmuzhiyunXfrmFwdHdrError: 74*4882a593Smuzhiyun Forward routing of a packet is not allowed 75*4882a593Smuzhiyun 76*4882a593SmuzhiyunOutbound errors 77*4882a593Smuzhiyun~~~~~~~~~~~~~~~ 78*4882a593SmuzhiyunXfrmOutError: 79*4882a593Smuzhiyun All errors which is not matched others 80*4882a593Smuzhiyun 81*4882a593SmuzhiyunXfrmOutBundleGenError: 82*4882a593Smuzhiyun Bundle generation error 83*4882a593Smuzhiyun 84*4882a593SmuzhiyunXfrmOutBundleCheckError: 85*4882a593Smuzhiyun Bundle check error 86*4882a593Smuzhiyun 87*4882a593SmuzhiyunXfrmOutNoStates: 88*4882a593Smuzhiyun No state is found 89*4882a593Smuzhiyun 90*4882a593SmuzhiyunXfrmOutStateProtoError: 91*4882a593Smuzhiyun Transformation protocol specific error 92*4882a593Smuzhiyun 93*4882a593SmuzhiyunXfrmOutStateModeError: 94*4882a593Smuzhiyun Transformation mode specific error 95*4882a593Smuzhiyun 96*4882a593SmuzhiyunXfrmOutStateSeqError: 97*4882a593Smuzhiyun Sequence error 98*4882a593Smuzhiyun i.e. Sequence number overflow 99*4882a593Smuzhiyun 100*4882a593SmuzhiyunXfrmOutStateExpired: 101*4882a593Smuzhiyun State is expired 102*4882a593Smuzhiyun 103*4882a593SmuzhiyunXfrmOutPolBlock: 104*4882a593Smuzhiyun Policy discards 105*4882a593Smuzhiyun 106*4882a593SmuzhiyunXfrmOutPolDead: 107*4882a593Smuzhiyun Policy is dead 108*4882a593Smuzhiyun 109*4882a593SmuzhiyunXfrmOutPolError: 110*4882a593Smuzhiyun Policy error 111*4882a593Smuzhiyun 112*4882a593SmuzhiyunXfrmOutStateInvalid: 113*4882a593Smuzhiyun State is invalid, perhaps expired 114