1*03e23b18SBagas Sanjaya.. SPDX-License-Identifier: GPL-2.0 2*03e23b18SBagas Sanjaya 3*03e23b18SBagas Sanjaya================================== 4*03e23b18SBagas SanjayaXFRM proc - /proc/net/xfrm_* files 5*03e23b18SBagas Sanjaya================================== 6*03e23b18SBagas Sanjaya 7*03e23b18SBagas SanjayaMasahide NAKAMURA <nakam@linux-ipv6.org> 8*03e23b18SBagas Sanjaya 9*03e23b18SBagas Sanjaya 10*03e23b18SBagas SanjayaTransformation Statistics 11*03e23b18SBagas Sanjaya------------------------- 12*03e23b18SBagas Sanjaya 13*03e23b18SBagas SanjayaThe xfrm_proc code is a set of statistics showing numbers of packets 14*03e23b18SBagas Sanjayadropped by the transformation code and why. These counters are defined 15*03e23b18SBagas Sanjayaas part of the linux private MIB. These counters can be viewed in 16*03e23b18SBagas Sanjaya/proc/net/xfrm_stat. 17*03e23b18SBagas Sanjaya 18*03e23b18SBagas Sanjaya 19*03e23b18SBagas SanjayaInbound errors 20*03e23b18SBagas Sanjaya~~~~~~~~~~~~~~ 21*03e23b18SBagas Sanjaya 22*03e23b18SBagas SanjayaXfrmInError: 23*03e23b18SBagas Sanjaya All errors which is not matched others 24*03e23b18SBagas Sanjaya 25*03e23b18SBagas SanjayaXfrmInBufferError: 26*03e23b18SBagas Sanjaya No buffer is left 27*03e23b18SBagas Sanjaya 28*03e23b18SBagas SanjayaXfrmInHdrError: 29*03e23b18SBagas Sanjaya Header error 30*03e23b18SBagas Sanjaya 31*03e23b18SBagas SanjayaXfrmInNoStates: 32*03e23b18SBagas Sanjaya No state is found 33*03e23b18SBagas Sanjaya i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong 34*03e23b18SBagas Sanjaya 35*03e23b18SBagas SanjayaXfrmInStateProtoError: 36*03e23b18SBagas Sanjaya Transformation protocol specific error 37*03e23b18SBagas Sanjaya e.g. SA key is wrong 38*03e23b18SBagas Sanjaya 39*03e23b18SBagas SanjayaXfrmInStateModeError: 40*03e23b18SBagas Sanjaya Transformation mode specific error 41*03e23b18SBagas Sanjaya 42*03e23b18SBagas SanjayaXfrmInStateSeqError: 43*03e23b18SBagas Sanjaya Sequence error 44*03e23b18SBagas Sanjaya i.e. Sequence number is out of window 45*03e23b18SBagas Sanjaya 46*03e23b18SBagas SanjayaXfrmInStateExpired: 47*03e23b18SBagas Sanjaya State is expired 48*03e23b18SBagas Sanjaya 49*03e23b18SBagas SanjayaXfrmInStateMismatch: 50*03e23b18SBagas Sanjaya State has mismatch option 51*03e23b18SBagas Sanjaya e.g. UDP encapsulation type is mismatch 52*03e23b18SBagas Sanjaya 53*03e23b18SBagas SanjayaXfrmInStateInvalid: 54*03e23b18SBagas Sanjaya State is invalid 55*03e23b18SBagas Sanjaya 56*03e23b18SBagas SanjayaXfrmInTmplMismatch: 57*03e23b18SBagas Sanjaya No matching template for states 58*03e23b18SBagas Sanjaya e.g. Inbound SAs are correct but SP rule is wrong 59*03e23b18SBagas Sanjaya 60*03e23b18SBagas SanjayaXfrmInNoPols: 61*03e23b18SBagas Sanjaya No policy is found for states 62*03e23b18SBagas Sanjaya e.g. Inbound SAs are correct but no SP is found 63*03e23b18SBagas Sanjaya 64*03e23b18SBagas SanjayaXfrmInPolBlock: 65*03e23b18SBagas Sanjaya Policy discards 66*03e23b18SBagas Sanjaya 67*03e23b18SBagas SanjayaXfrmInPolError: 68*03e23b18SBagas Sanjaya Policy error 69*03e23b18SBagas Sanjaya 70*03e23b18SBagas SanjayaXfrmAcquireError: 71*03e23b18SBagas Sanjaya State hasn't been fully acquired before use 72*03e23b18SBagas Sanjaya 73*03e23b18SBagas SanjayaXfrmFwdHdrError: 74*03e23b18SBagas Sanjaya Forward routing of a packet is not allowed 75*03e23b18SBagas Sanjaya 76*03e23b18SBagas SanjayaXfrmInStateDirError: 77*03e23b18SBagas Sanjaya State direction mismatch (lookup found an output state on the input path, expected input or no direction) 78*03e23b18SBagas Sanjaya 79*03e23b18SBagas SanjayaOutbound errors 80*03e23b18SBagas Sanjaya~~~~~~~~~~~~~~~ 81*03e23b18SBagas SanjayaXfrmOutError: 82*03e23b18SBagas Sanjaya All errors which is not matched others 83*03e23b18SBagas Sanjaya 84*03e23b18SBagas SanjayaXfrmOutBundleGenError: 85*03e23b18SBagas Sanjaya Bundle generation error 86*03e23b18SBagas Sanjaya 87*03e23b18SBagas SanjayaXfrmOutBundleCheckError: 88*03e23b18SBagas Sanjaya Bundle check error 89*03e23b18SBagas Sanjaya 90*03e23b18SBagas SanjayaXfrmOutNoStates: 91*03e23b18SBagas Sanjaya No state is found 92*03e23b18SBagas Sanjaya 93*03e23b18SBagas SanjayaXfrmOutStateProtoError: 94*03e23b18SBagas Sanjaya Transformation protocol specific error 95*03e23b18SBagas Sanjaya 96*03e23b18SBagas SanjayaXfrmOutStateModeError: 97*03e23b18SBagas Sanjaya Transformation mode specific error 98*03e23b18SBagas Sanjaya 99*03e23b18SBagas SanjayaXfrmOutStateSeqError: 100*03e23b18SBagas Sanjaya Sequence error 101*03e23b18SBagas Sanjaya i.e. Sequence number overflow 102*03e23b18SBagas Sanjaya 103*03e23b18SBagas SanjayaXfrmOutStateExpired: 104*03e23b18SBagas Sanjaya State is expired 105*03e23b18SBagas Sanjaya 106*03e23b18SBagas SanjayaXfrmOutPolBlock: 107*03e23b18SBagas Sanjaya Policy discards 108*03e23b18SBagas Sanjaya 109*03e23b18SBagas SanjayaXfrmOutPolDead: 110*03e23b18SBagas Sanjaya Policy is dead 111*03e23b18SBagas Sanjaya 112*03e23b18SBagas SanjayaXfrmOutPolError: 113*03e23b18SBagas Sanjaya Policy error 114*03e23b18SBagas Sanjaya 115*03e23b18SBagas SanjayaXfrmOutStateInvalid: 116*03e23b18SBagas Sanjaya State is invalid, perhaps expired 117*03e23b18SBagas Sanjaya 118*03e23b18SBagas SanjayaXfrmOutStateDirError: 119*03e23b18SBagas Sanjaya State direction mismatch (lookup found an input state on the output path, expected output or no direction) 120