1XFRM proc - /proc/net/xfrm_* files 2================================== 3Masahide NAKAMURA <nakam@linux-ipv6.org> 4 5 6Transformation Statistics 7------------------------- 8 9The xfrm_proc code is a set of statistics showing numbers of packets 10dropped by the transformation code and why. These counters are defined 11as part of the linux private MIB. These counters can be viewed in 12/proc/net/xfrm_stat. 13 14 15Inbound errors 16~~~~~~~~~~~~~~ 17XfrmInError: 18 All errors which is not matched others 19XfrmInBufferError: 20 No buffer is left 21XfrmInHdrError: 22 Header error 23XfrmInNoStates: 24 No state is found 25 i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong 26XfrmInStateProtoError: 27 Transformation protocol specific error 28 e.g. SA key is wrong 29XfrmInStateModeError: 30 Transformation mode specific error 31XfrmInStateSeqError: 32 Sequence error 33 i.e. Sequence number is out of window 34XfrmInStateExpired: 35 State is expired 36XfrmInStateMismatch: 37 State has mismatch option 38 e.g. UDP encapsulation type is mismatch 39XfrmInStateInvalid: 40 State is invalid 41XfrmInTmplMismatch: 42 No matching template for states 43 e.g. Inbound SAs are correct but SP rule is wrong 44XfrmInNoPols: 45 No policy is found for states 46 e.g. Inbound SAs are correct but no SP is found 47XfrmInPolBlock: 48 Policy discards 49XfrmInPolError: 50 Policy error 51XfrmAcquireError: 52 State hasn't been fully acquired before use 53XfrmFwdHdrError: 54 Forward routing of a packet is not allowed 55 56Outbound errors 57~~~~~~~~~~~~~~~ 58XfrmOutError: 59 All errors which is not matched others 60XfrmOutBundleGenError: 61 Bundle generation error 62XfrmOutBundleCheckError: 63 Bundle check error 64XfrmOutNoStates: 65 No state is found 66XfrmOutStateProtoError: 67 Transformation protocol specific error 68XfrmOutStateModeError: 69 Transformation mode specific error 70XfrmOutStateSeqError: 71 Sequence error 72 i.e. Sequence number overflow 73XfrmOutStateExpired: 74 State is expired 75XfrmOutPolBlock: 76 Policy discards 77XfrmOutPolDead: 78 Policy is dead 79XfrmOutPolError: 80 Policy error 81XfrmOutStateInvalid: 82 State is invalid, perhaps expired 83