forked from Qortal/Brooklyn
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
113 lines
2.1 KiB
113 lines
2.1 KiB
.. SPDX-License-Identifier: GPL-2.0 |
|
|
|
================================== |
|
XFRM proc - /proc/net/xfrm_* files |
|
================================== |
|
|
|
Masahide NAKAMURA <[email protected]> |
|
|
|
|
|
Transformation Statistics |
|
------------------------- |
|
|
|
The xfrm_proc code is a set of statistics showing numbers of packets |
|
dropped by the transformation code and why. These counters are defined |
|
as part of the linux private MIB. These counters can be viewed in |
|
/proc/net/xfrm_stat. |
|
|
|
|
|
Inbound errors |
|
~~~~~~~~~~~~~~ |
|
|
|
XfrmInError: |
|
All errors which is not matched others |
|
|
|
XfrmInBufferError: |
|
No buffer is left |
|
|
|
XfrmInHdrError: |
|
Header error |
|
|
|
XfrmInNoStates: |
|
No state is found |
|
i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong |
|
|
|
XfrmInStateProtoError: |
|
Transformation protocol specific error |
|
e.g. SA key is wrong |
|
|
|
XfrmInStateModeError: |
|
Transformation mode specific error |
|
|
|
XfrmInStateSeqError: |
|
Sequence error |
|
i.e. Sequence number is out of window |
|
|
|
XfrmInStateExpired: |
|
State is expired |
|
|
|
XfrmInStateMismatch: |
|
State has mismatch option |
|
e.g. UDP encapsulation type is mismatch |
|
|
|
XfrmInStateInvalid: |
|
State is invalid |
|
|
|
XfrmInTmplMismatch: |
|
No matching template for states |
|
e.g. Inbound SAs are correct but SP rule is wrong |
|
|
|
XfrmInNoPols: |
|
No policy is found for states |
|
e.g. Inbound SAs are correct but no SP is found |
|
|
|
XfrmInPolBlock: |
|
Policy discards |
|
|
|
XfrmInPolError: |
|
Policy error |
|
|
|
XfrmAcquireError: |
|
State hasn't been fully acquired before use |
|
|
|
XfrmFwdHdrError: |
|
Forward routing of a packet is not allowed |
|
|
|
Outbound errors |
|
~~~~~~~~~~~~~~~ |
|
XfrmOutError: |
|
All errors which is not matched others |
|
|
|
XfrmOutBundleGenError: |
|
Bundle generation error |
|
|
|
XfrmOutBundleCheckError: |
|
Bundle check error |
|
|
|
XfrmOutNoStates: |
|
No state is found |
|
|
|
XfrmOutStateProtoError: |
|
Transformation protocol specific error |
|
|
|
XfrmOutStateModeError: |
|
Transformation mode specific error |
|
|
|
XfrmOutStateSeqError: |
|
Sequence error |
|
i.e. Sequence number overflow |
|
|
|
XfrmOutStateExpired: |
|
State is expired |
|
|
|
XfrmOutPolBlock: |
|
Policy discards |
|
|
|
XfrmOutPolDead: |
|
Policy is dead |
|
|
|
XfrmOutPolError: |
|
Policy error |
|
|
|
XfrmOutStateInvalid: |
|
State is invalid, perhaps expired
|
|
|