XFRM proc - /proc/net/xfrm_* files ================================== Masahide NAKAMURA <nakam@linux-ipv6.org> Transformation Statistics ------------------------- xfrm_proc is a statistics shown factor dropped by transformation for developer. It is a counter designed from current transformation source code and defined like linux private MIB. Inbound statistics ~~~~~~~~~~~~~~~~~~ XfrmInError: All errors which is not matched others XfrmInBufferError: No buffer is left XfrmInHdrError: Header error XfrmInNoStates: No state is found i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong XfrmInStateProtoError: Transformation protocol specific error e.g. SA key is wrong XfrmInStateModeError: Transformation mode specific error XfrmInStateSeqError: Sequence error i.e. Sequence number is out of window XfrmInStateExpired: State is expired XfrmInStateMismatch: State has mismatch option e.g. UDP encapsulation type is mismatch XfrmInStateInvalid: State is invalid XfrmInTmplMismatch: No matching template for states e.g. Inbound SAs are correct but SP rule is wrong XfrmInNoPols: No policy is found for states e.g. Inbound SAs are correct but no SP is found XfrmInPolBlock: Policy discards XfrmInPolError: Policy error Outbound errors ~~~~~~~~~~~~~~~ XfrmOutError: All errors which is not matched others XfrmOutBundleGenError: Bundle generation error XfrmOutBundleCheckError: Bundle check error XfrmOutNoStates: No state is found XfrmOutStateProtoError: Transformation protocol specific error XfrmOutStateModeError: Transformation mode specific error XfrmOutStateSeqError: Sequence error i.e. Sequence number overflow XfrmOutStateExpired: State is expired XfrmOutPolBlock: Policy discards XfrmOutPolDead: Policy is dead XfrmOutPolError: Policy error