2007-12-21 12:42:57 +08:00
|
|
|
XFRM proc - /proc/net/xfrm_* files
|
|
|
|
|
==================================
|
|
|
|
|
Masahide NAKAMURA <nakam@linux-ipv6.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Transformation Statistics
|
|
|
|
|
-------------------------
|
|
|
|
|
|
2017-12-22 06:26:18 +08:00
|
|
|
The xfrm_proc code is a set of statistics showing numbers of packets
|
|
|
|
|
dropped by the transformation code and why. These counters are defined
|
|
|
|
|
as part of the linux private MIB. These counters can be viewed in
|
|
|
|
|
/proc/net/xfrm_stat.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Inbound errors
|
|
|
|
|
~~~~~~~~~~~~~~
|
2007-12-21 12:42:57 +08:00
|
|
|
XfrmInError:
|
|
|
|
|
All errors which is not matched others
|
|
|
|
|
XfrmInBufferError:
|
|
|
|
|
No buffer is left
|
|
|
|
|
XfrmInHdrError:
|
|
|
|
|
Header error
|
|
|
|
|
XfrmInNoStates:
|
|
|
|
|
No state is found
|
|
|
|
|
i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
|
|
|
|
|
XfrmInStateProtoError:
|
|
|
|
|
Transformation protocol specific error
|
|
|
|
|
e.g. SA key is wrong
|
|
|
|
|
XfrmInStateModeError:
|
|
|
|
|
Transformation mode specific error
|
2008-02-01 09:14:58 +08:00
|
|
|
XfrmInStateSeqError:
|
|
|
|
|
Sequence error
|
|
|
|
|
i.e. Sequence number is out of window
|
2007-12-21 12:42:57 +08:00
|
|
|
XfrmInStateExpired:
|
|
|
|
|
State is expired
|
|
|
|
|
XfrmInStateMismatch:
|
|
|
|
|
State has mismatch option
|
|
|
|
|
e.g. UDP encapsulation type is mismatch
|
|
|
|
|
XfrmInStateInvalid:
|
|
|
|
|
State is invalid
|
|
|
|
|
XfrmInTmplMismatch:
|
|
|
|
|
No matching template for states
|
|
|
|
|
e.g. Inbound SAs are correct but SP rule is wrong
|
|
|
|
|
XfrmInNoPols:
|
|
|
|
|
No policy is found for states
|
|
|
|
|
e.g. Inbound SAs are correct but no SP is found
|
|
|
|
|
XfrmInPolBlock:
|
|
|
|
|
Policy discards
|
|
|
|
|
XfrmInPolError:
|
|
|
|
|
Policy error
|
2017-12-22 06:26:18 +08:00
|
|
|
XfrmAcquireError:
|
|
|
|
|
State hasn't been fully acquired before use
|
|
|
|
|
XfrmFwdHdrError:
|
|
|
|
|
Forward routing of a packet is not allowed
|
2007-12-21 12:42:57 +08:00
|
|
|
|
|
|
|
|
Outbound errors
|
|
|
|
|
~~~~~~~~~~~~~~~
|
|
|
|
|
XfrmOutError:
|
|
|
|
|
All errors which is not matched others
|
|
|
|
|
XfrmOutBundleGenError:
|
|
|
|
|
Bundle generation error
|
|
|
|
|
XfrmOutBundleCheckError:
|
|
|
|
|
Bundle check error
|
|
|
|
|
XfrmOutNoStates:
|
|
|
|
|
No state is found
|
|
|
|
|
XfrmOutStateProtoError:
|
|
|
|
|
Transformation protocol specific error
|
|
|
|
|
XfrmOutStateModeError:
|
|
|
|
|
Transformation mode specific error
|
2008-02-01 09:14:58 +08:00
|
|
|
XfrmOutStateSeqError:
|
|
|
|
|
Sequence error
|
|
|
|
|
i.e. Sequence number overflow
|
2007-12-21 12:42:57 +08:00
|
|
|
XfrmOutStateExpired:
|
|
|
|
|
State is expired
|
|
|
|
|
XfrmOutPolBlock:
|
|
|
|
|
Policy discards
|
|
|
|
|
XfrmOutPolDead:
|
|
|
|
|
Policy is dead
|
|
|
|
|
XfrmOutPolError:
|
|
|
|
|
Policy error
|
2017-12-22 06:26:18 +08:00
|
|
|
XfrmOutStateInvalid:
|
|
|
|
|
State is invalid, perhaps expired
|
