Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 1 | .. SPDX-License-Identifier: GPL-2.0 |
| 2 | |
| 3 | ================================== |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 4 | XFRM proc - /proc/net/xfrm_* files |
| 5 | ================================== |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 6 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 7 | Masahide NAKAMURA <nakam@linux-ipv6.org> |
| 8 | |
| 9 | |
| 10 | Transformation Statistics |
| 11 | ------------------------- |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 12 | |
Shannon Nelson | 1a4bb1d | 2017-12-21 14:26:18 -0800 | [diff] [blame] | 13 | The xfrm_proc code is a set of statistics showing numbers of packets |
| 14 | dropped by the transformation code and why. These counters are defined |
| 15 | as part of the linux private MIB. These counters can be viewed in |
| 16 | /proc/net/xfrm_stat. |
| 17 | |
| 18 | |
| 19 | Inbound errors |
| 20 | ~~~~~~~~~~~~~~ |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 21 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 22 | XfrmInError: |
| 23 | All errors which is not matched others |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 24 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 25 | XfrmInBufferError: |
| 26 | No buffer is left |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 27 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 28 | XfrmInHdrError: |
| 29 | Header error |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 30 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 31 | XfrmInNoStates: |
| 32 | No state is found |
| 33 | i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 34 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 35 | XfrmInStateProtoError: |
| 36 | Transformation protocol specific error |
| 37 | e.g. SA key is wrong |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 38 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 39 | XfrmInStateModeError: |
| 40 | Transformation mode specific error |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 41 | |
Masahide NAKAMURA | 9472c9e | 2008-01-31 17:14:58 -0800 | [diff] [blame] | 42 | XfrmInStateSeqError: |
| 43 | Sequence error |
| 44 | i.e. Sequence number is out of window |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 45 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 46 | XfrmInStateExpired: |
| 47 | State is expired |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 48 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 49 | XfrmInStateMismatch: |
| 50 | State has mismatch option |
| 51 | e.g. UDP encapsulation type is mismatch |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 52 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 53 | XfrmInStateInvalid: |
| 54 | State is invalid |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 55 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 56 | XfrmInTmplMismatch: |
| 57 | No matching template for states |
| 58 | e.g. Inbound SAs are correct but SP rule is wrong |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 59 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 60 | XfrmInNoPols: |
| 61 | No policy is found for states |
| 62 | e.g. Inbound SAs are correct but no SP is found |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 63 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 64 | XfrmInPolBlock: |
| 65 | Policy discards |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 66 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 67 | XfrmInPolError: |
| 68 | Policy error |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 69 | |
Shannon Nelson | 1a4bb1d | 2017-12-21 14:26:18 -0800 | [diff] [blame] | 70 | XfrmAcquireError: |
| 71 | State hasn't been fully acquired before use |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 72 | |
Shannon Nelson | 1a4bb1d | 2017-12-21 14:26:18 -0800 | [diff] [blame] | 73 | XfrmFwdHdrError: |
| 74 | Forward routing of a packet is not allowed |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 75 | |
| 76 | Outbound errors |
| 77 | ~~~~~~~~~~~~~~~ |
| 78 | XfrmOutError: |
| 79 | All errors which is not matched others |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 80 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 81 | XfrmOutBundleGenError: |
| 82 | Bundle generation error |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 83 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 84 | XfrmOutBundleCheckError: |
| 85 | Bundle check error |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 86 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 87 | XfrmOutNoStates: |
| 88 | No state is found |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 89 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 90 | XfrmOutStateProtoError: |
| 91 | Transformation protocol specific error |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 92 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 93 | XfrmOutStateModeError: |
| 94 | Transformation mode specific error |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 95 | |
Masahide NAKAMURA | 9472c9e | 2008-01-31 17:14:58 -0800 | [diff] [blame] | 96 | XfrmOutStateSeqError: |
| 97 | Sequence error |
| 98 | i.e. Sequence number overflow |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 99 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 100 | XfrmOutStateExpired: |
| 101 | State is expired |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 102 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 103 | XfrmOutPolBlock: |
| 104 | Policy discards |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 105 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 106 | XfrmOutPolDead: |
| 107 | Policy is dead |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 108 | |
Masahide NAKAMURA | 558f82e | 2007-12-20 20:42:57 -0800 | [diff] [blame] | 109 | XfrmOutPolError: |
| 110 | Policy error |
Mauro Carvalho Chehab | da62baa | 2020-05-01 16:44:30 +0200 | [diff] [blame] | 111 | |
Shannon Nelson | 1a4bb1d | 2017-12-21 14:26:18 -0800 | [diff] [blame] | 112 | XfrmOutStateInvalid: |
| 113 | State is invalid, perhaps expired |