1 XFRM proc - /proc/net/xfrm_* files
2 ==================================
3 Masahide NAKAMURA <nakam@linux-ipv6.org>
6 Transformation Statistics
7 -------------------------
8 xfrm_proc is a statistics shown factor dropped by transformation
10 It is a counter designed from current transformation source code
11 and defined like linux private MIB.
16 All errors which is not matched others
23 i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
24 XfrmInStateProtoError:
25 Transformation protocol specific error
28 Transformation mode specific error
31 i.e. Sequence number is out of window
35 State has mismatch option
36 e.g. UDP encapsulation type is mismatch
40 No matching template for states
41 e.g. Inbound SAs are correct but SP rule is wrong
43 No policy is found for states
44 e.g. Inbound SAs are correct but no SP is found
53 All errors which is not matched others
54 XfrmOutBundleGenError:
55 Bundle generation error
56 XfrmOutBundleCheckError:
60 XfrmOutStateProtoError:
61 Transformation protocol specific error
62 XfrmOutStateModeError:
63 Transformation mode specific error
66 i.e. Sequence number overflow