| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071 |
- XFRM proc - /proc/net/xfrm_* files
- ==================================
- Masahide NAKAMURA <nakam@linux-ipv6.org>
- Transformation Statistics
- -------------------------
- xfrm_proc is a statistics shown factor dropped by transformation
- for developer.
- It is a counter designed from current transformation source code
- and defined like linux private MIB.
- Inbound statistics
- ~~~~~~~~~~~~~~~~~~
- XfrmInError:
- All errors which is not matched others
- XfrmInBufferError:
- No buffer is left
- XfrmInHdrError:
- Header error
- XfrmInNoStates:
- No state is found
- i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
- XfrmInStateProtoError:
- Transformation protocol specific error
- e.g. SA key is wrong
- XfrmInStateModeError:
- Transformation mode specific error
- XfrmInSeqOutOfWindow:
- Sequence out of window
- XfrmInStateExpired:
- State is expired
- XfrmInStateMismatch:
- State has mismatch option
- e.g. UDP encapsulation type is mismatch
- XfrmInStateInvalid:
- State is invalid
- XfrmInTmplMismatch:
- No matching template for states
- e.g. Inbound SAs are correct but SP rule is wrong
- XfrmInNoPols:
- No policy is found for states
- e.g. Inbound SAs are correct but no SP is found
- XfrmInPolBlock:
- Policy discards
- XfrmInPolError:
- Policy error
- Outbound errors
- ~~~~~~~~~~~~~~~
- XfrmOutError:
- All errors which is not matched others
- XfrmOutBundleGenError:
- Bundle generation error
- XfrmOutBundleCheckError:
- Bundle check error
- XfrmOutNoStates:
- No state is found
- XfrmOutStateProtoError:
- Transformation protocol specific error
- XfrmOutStateModeError:
- Transformation mode specific error
- e.g. Outer header space is not enough
- XfrmOutStateExpired:
- State is expired
- XfrmOutPolBlock:
- Policy discards
- XfrmOutPolDead:
- Policy is dead
- XfrmOutPolError:
- Policy error
|
