1XFRM proc - /proc/net/xfrm_* files
2==================================
3Masahide NAKAMURA <nakam@linux-ipv6.org>
4
5
6Transformation Statistics
7-------------------------
8xfrm_proc is a statistics shown factor dropped by transformation
9for developer.
10It is a counter designed from current transformation source code
11and defined like linux private MIB.
12
13Inbound statistics
14~~~~~~~~~~~~~~~~~~
15XfrmInError:
16	All errors which is not matched others
17XfrmInBufferError:
18	No buffer is left
19XfrmInHdrError:
20	Header error
21XfrmInNoStates:
22	No state is found
23	i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
24XfrmInStateProtoError:
25	Transformation protocol specific error
26	e.g. SA key is wrong
27XfrmInStateModeError:
28	Transformation mode specific error
29XfrmInStateSeqError:
30	Sequence error
31	i.e. Sequence number is out of window
32XfrmInStateExpired:
33	State is expired
34XfrmInStateMismatch:
35	State has mismatch option
36	e.g. UDP encapsulation type is mismatch
37XfrmInStateInvalid:
38	State is invalid
39XfrmInTmplMismatch:
40	No matching template for states
41	e.g. Inbound SAs are correct but SP rule is wrong
42XfrmInNoPols:
43	No policy is found for states
44	e.g. Inbound SAs are correct but no SP is found
45XfrmInPolBlock:
46	Policy discards
47XfrmInPolError:
48	Policy error
49
50Outbound errors
51~~~~~~~~~~~~~~~
52XfrmOutError:
53	All errors which is not matched others
54XfrmOutBundleGenError:
55	Bundle generation error
56XfrmOutBundleCheckError:
57	Bundle check error
58XfrmOutNoStates:
59	No state is found
60XfrmOutStateProtoError:
61	Transformation protocol specific error
62XfrmOutStateModeError:
63	Transformation mode specific error
64XfrmOutStateSeqError:
65	Sequence error
66	i.e. Sequence number overflow
67XfrmOutStateExpired:
68	State is expired
69XfrmOutPolBlock:
70	Policy discards
71XfrmOutPolDead:
72	Policy is dead
73XfrmOutPolError:
74	Policy error
75