blob: 0a771c5a7399b558be69a7e1ae3c95e7547864f4 [file] [log] [blame]
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +02001.. SPDX-License-Identifier: GPL-2.0
2
3==================================
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -08004XFRM proc - /proc/net/xfrm_* files
5==================================
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +02006
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -08007Masahide NAKAMURA <nakam@linux-ipv6.org>
8
9
10Transformation Statistics
11-------------------------
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080012
Shannon Nelson1a4bb1d2017-12-21 14:26:18 -080013The xfrm_proc code is a set of statistics showing numbers of packets
14dropped by the transformation code and why. These counters are defined
15as part of the linux private MIB. These counters can be viewed in
16/proc/net/xfrm_stat.
17
18
19Inbound errors
20~~~~~~~~~~~~~~
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020021
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080022XfrmInError:
23 All errors which is not matched others
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020024
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080025XfrmInBufferError:
26 No buffer is left
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020027
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080028XfrmInHdrError:
29 Header error
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020030
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080031XfrmInNoStates:
32 No state is found
33 i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020034
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080035XfrmInStateProtoError:
36 Transformation protocol specific error
37 e.g. SA key is wrong
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020038
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080039XfrmInStateModeError:
40 Transformation mode specific error
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020041
Masahide NAKAMURA9472c9e2008-01-31 17:14:58 -080042XfrmInStateSeqError:
43 Sequence error
44 i.e. Sequence number is out of window
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020045
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080046XfrmInStateExpired:
47 State is expired
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020048
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080049XfrmInStateMismatch:
50 State has mismatch option
51 e.g. UDP encapsulation type is mismatch
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020052
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080053XfrmInStateInvalid:
54 State is invalid
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020055
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080056XfrmInTmplMismatch:
57 No matching template for states
58 e.g. Inbound SAs are correct but SP rule is wrong
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020059
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080060XfrmInNoPols:
61 No policy is found for states
62 e.g. Inbound SAs are correct but no SP is found
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020063
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080064XfrmInPolBlock:
65 Policy discards
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020066
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080067XfrmInPolError:
68 Policy error
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020069
Shannon Nelson1a4bb1d2017-12-21 14:26:18 -080070XfrmAcquireError:
71 State hasn't been fully acquired before use
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020072
Shannon Nelson1a4bb1d2017-12-21 14:26:18 -080073XfrmFwdHdrError:
74 Forward routing of a packet is not allowed
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080075
76Outbound errors
77~~~~~~~~~~~~~~~
78XfrmOutError:
79 All errors which is not matched others
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020080
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080081XfrmOutBundleGenError:
82 Bundle generation error
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020083
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080084XfrmOutBundleCheckError:
85 Bundle check error
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020086
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080087XfrmOutNoStates:
88 No state is found
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020089
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080090XfrmOutStateProtoError:
91 Transformation protocol specific error
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020092
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -080093XfrmOutStateModeError:
94 Transformation mode specific error
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020095
Masahide NAKAMURA9472c9e2008-01-31 17:14:58 -080096XfrmOutStateSeqError:
97 Sequence error
98 i.e. Sequence number overflow
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +020099
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -0800100XfrmOutStateExpired:
101 State is expired
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +0200102
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -0800103XfrmOutPolBlock:
104 Policy discards
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +0200105
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -0800106XfrmOutPolDead:
107 Policy is dead
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +0200108
Masahide NAKAMURA558f82e2007-12-20 20:42:57 -0800109XfrmOutPolError:
110 Policy error
Mauro Carvalho Chehabda62baa2020-05-01 16:44:30 +0200111
Shannon Nelson1a4bb1d2017-12-21 14:26:18 -0800112XfrmOutStateInvalid:
113 State is invalid, perhaps expired