blob: ec9045b5c34a96c67dc8431dd4a2357893823150 [file] [log] [blame]
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -08001XFRM proc - /proc/net/xfrm_* files
2==================================
3Masahide NAKAMURA <nakam@linux-ipv6.org>
4
5
6Transformation Statistics
7-------------------------
8xfrm_proc is a statistics shown factor dropped by transformation
9for developer.
10It is a counter designed from current transformation source code
11and defined like linux private MIB.
12
13Inbound statistics
14~~~~~~~~~~~~~~~~~~
15XfrmInError:
16 All errors which is not matched others
17XfrmInBufferError:
18 No buffer is left
19XfrmInHdrError:
20 Header error
21XfrmInNoStates:
22 No state is found
23 i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
24XfrmInStateProtoError:
25 Transformation protocol specific error
26 e.g. SA key is wrong
27XfrmInStateModeError:
28 Transformation mode specific error
29XfrmInSeqOutOfWindow:
30 Sequence out of window
31XfrmInStateExpired:
32 State is expired
33XfrmInStateMismatch:
34 State has mismatch option
35 e.g. UDP encapsulation type is mismatch
36XfrmInStateInvalid:
37 State is invalid
38XfrmInTmplMismatch:
39 No matching template for states
40 e.g. Inbound SAs are correct but SP rule is wrong
41XfrmInNoPols:
42 No policy is found for states
43 e.g. Inbound SAs are correct but no SP is found
44XfrmInPolBlock:
45 Policy discards
46XfrmInPolError:
47 Policy error
48
49Outbound errors
50~~~~~~~~~~~~~~~
51XfrmOutError:
52 All errors which is not matched others
53XfrmOutBundleGenError:
54 Bundle generation error
55XfrmOutBundleCheckError:
56 Bundle check error
57XfrmOutNoStates:
58 No state is found
59XfrmOutStateProtoError:
60 Transformation protocol specific error
61XfrmOutStateModeError:
62 Transformation mode specific error
63 e.g. Outer header space is not enough
64XfrmOutStateExpired:
65 State is expired
66XfrmOutPolBlock:
67 Policy discards
68XfrmOutPolDead:
69 Policy is dead
70XfrmOutPolError:
71 Policy error