1.. SPDX-License-Identifier: GPL-2.0
  2
  3==================================
  4XFRM proc - /proc/net/xfrm_* files
  5==================================
  6
  7Masahide NAKAMURA <nakam@linux-ipv6.org>
  8
  9
 10Transformation Statistics
 11-------------------------
 12
 13The xfrm_proc code is a set of statistics showing numbers of packets
 14dropped by the transformation code and why.  These counters are defined
 15as part of the linux private MIB.  These counters can be viewed in
 16/proc/net/xfrm_stat.
 17
 18
 19Inbound errors
 20~~~~~~~~~~~~~~
 21
 22XfrmInError:
 23	All errors which is not matched others
 24
 25XfrmInBufferError:
 26	No buffer is left
 27
 28XfrmInHdrError:
 29	Header error
 30
 31XfrmInNoStates:
 32	No state is found
 33	i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
 34
 35XfrmInStateProtoError:
 36	Transformation protocol specific error
 37	e.g. SA key is wrong
 38
 39XfrmInStateModeError:
 40	Transformation mode specific error
 41
 42XfrmInStateSeqError:
 43	Sequence error
 44	i.e. Sequence number is out of window
 45
 46XfrmInStateExpired:
 47	State is expired
 48
 49XfrmInStateMismatch:
 50	State has mismatch option
 51	e.g. UDP encapsulation type is mismatch
 52
 53XfrmInStateInvalid:
 54	State is invalid
 55
 56XfrmInTmplMismatch:
 57	No matching template for states
 58	e.g. Inbound SAs are correct but SP rule is wrong
 59
 60XfrmInNoPols:
 61	No policy is found for states
 62	e.g. Inbound SAs are correct but no SP is found
 63
 64XfrmInPolBlock:
 65	Policy discards
 66
 67XfrmInPolError:
 68	Policy error
 69
 70XfrmAcquireError:
 71	State hasn't been fully acquired before use
 72
 73XfrmFwdHdrError:
 74	Forward routing of a packet is not allowed
 75
 76XfrmInStateDirError:
 77        State direction mismatch (lookup found an output state on the input path, expected input or no direction)
 78
 79Outbound errors
 80~~~~~~~~~~~~~~~
 81XfrmOutError:
 82	All errors which is not matched others
 83
 84XfrmOutBundleGenError:
 85	Bundle generation error
 86
 87XfrmOutBundleCheckError:
 88	Bundle check error
 89
 90XfrmOutNoStates:
 91	No state is found
 92
 93XfrmOutStateProtoError:
 94	Transformation protocol specific error
 95
 96XfrmOutStateModeError:
 97	Transformation mode specific error
 98
 99XfrmOutStateSeqError:
100	Sequence error
101	i.e. Sequence number overflow
102
103XfrmOutStateExpired:
104	State is expired
105
106XfrmOutPolBlock:
107	Policy discards
108
109XfrmOutPolDead:
110	Policy is dead
111
112XfrmOutPolError:
113	Policy error
114
115XfrmOutStateInvalid:
116	State is invalid, perhaps expired
117
118XfrmOutStateDirError:
119        State direction mismatch (lookup found an input state on the output path, expected output or no direction)