cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

xfrm_proc.rst (2120B)

      1.. SPDX-License-Identifier: GPL-2.0
      2
      3==================================
      4XFRM proc - /proc/net/xfrm_* files
      5==================================
      6
      7Masahide NAKAMURA <nakam@linux-ipv6.org>
      8
      9
     10Transformation Statistics
     11-------------------------
     12
     13The xfrm_proc code is a set of statistics showing numbers of packets
     14dropped by the transformation code and why.  These counters are defined
     15as part of the linux private MIB.  These counters can be viewed in
     16/proc/net/xfrm_stat.
     17
     18
     19Inbound errors
     20~~~~~~~~~~~~~~
     21
     22XfrmInError:
     23	All errors which is not matched others
     24
     25XfrmInBufferError:
     26	No buffer is left
     27
     28XfrmInHdrError:
     29	Header error
     30
     31XfrmInNoStates:
     32	No state is found
     33	i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
     34
     35XfrmInStateProtoError:
     36	Transformation protocol specific error
     37	e.g. SA key is wrong
     38
     39XfrmInStateModeError:
     40	Transformation mode specific error
     41
     42XfrmInStateSeqError:
     43	Sequence error
     44	i.e. Sequence number is out of window
     45
     46XfrmInStateExpired:
     47	State is expired
     48
     49XfrmInStateMismatch:
     50	State has mismatch option
     51	e.g. UDP encapsulation type is mismatch
     52
     53XfrmInStateInvalid:
     54	State is invalid
     55
     56XfrmInTmplMismatch:
     57	No matching template for states
     58	e.g. Inbound SAs are correct but SP rule is wrong
     59
     60XfrmInNoPols:
     61	No policy is found for states
     62	e.g. Inbound SAs are correct but no SP is found
     63
     64XfrmInPolBlock:
     65	Policy discards
     66
     67XfrmInPolError:
     68	Policy error
     69
     70XfrmAcquireError:
     71	State hasn't been fully acquired before use
     72
     73XfrmFwdHdrError:
     74	Forward routing of a packet is not allowed
     75
     76Outbound errors
     77~~~~~~~~~~~~~~~
     78XfrmOutError:
     79	All errors which is not matched others
     80
     81XfrmOutBundleGenError:
     82	Bundle generation error
     83
     84XfrmOutBundleCheckError:
     85	Bundle check error
     86
     87XfrmOutNoStates:
     88	No state is found
     89
     90XfrmOutStateProtoError:
     91	Transformation protocol specific error
     92
     93XfrmOutStateModeError:
     94	Transformation mode specific error
     95
     96XfrmOutStateSeqError:
     97	Sequence error
     98	i.e. Sequence number overflow
     99
    100XfrmOutStateExpired:
    101	State is expired
    102
    103XfrmOutPolBlock:
    104	Policy discards
    105
    106XfrmOutPolDead:
    107	Policy is dead
    108
    109XfrmOutPolError:
    110	Policy error
    111
    112XfrmOutStateInvalid:
    113	State is invalid, perhaps expired