=Ssphinx.addnodesdocument)}( rawsourcechildren]( translations LanguagesNode)}(hhh](h pending_xref)}(hhh]docutils.nodesTextChinese (Simplified)}parenthsba attributes}(ids]classes]names]dupnames]backrefs] refdomainstdreftypedoc reftarget(/translations/zh_CN/networking/xfrm_procmodnameN classnameN refexplicitutagnamehhh ubh)}(hhh]hChinese (Traditional)}hh2sbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget(/translations/zh_TW/networking/xfrm_procmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hItalian}hhFsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget(/translations/it_IT/networking/xfrm_procmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hJapanese}hhZsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget(/translations/ja_JP/networking/xfrm_procmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hKorean}hhnsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget(/translations/ko_KR/networking/xfrm_procmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hSpanish}hhsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget(/translations/sp_SP/networking/xfrm_procmodnameN classnameN refexplicituh1hhh ubeh}(h]h ]h"]h$]h&]current_languageEnglishuh1h hh _documenthsourceNlineNubhcomment)}(h SPDX-License-Identifier: GPL-2.0h]h SPDX-License-Identifier: GPL-2.0}hhsbah}(h]h ]h"]h$]h&] xml:spacepreserveuh1hhhhhhB/var/lib/git/docbuild/linux/Documentation/networking/xfrm_proc.rsthKubhsection)}(hhh](htitle)}(h"XFRM proc - /proc/net/xfrm_* filesh]h"XFRM proc - /proc/net/xfrm_* files}(hhhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhhhhhKubh paragraph)}(h(Masahide NAKAMURA h](hMasahide NAKAMURA <}(hhhhhNhNubh reference)}(hnakam@linux-ipv6.orgh]hnakam@linux-ipv6.org}(hhhhhNhNubah}(h]h ]h"]h$]h&]refurimailto:nakam@linux-ipv6.orguh1hhhubh>}(hhhhhNhNubeh}(h]h ]h"]h$]h&]uh1hhhhKhhhhubh)}(hhh](h)}(hTransformation Statisticsh]hTransformation Statistics}(hhhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhhhhhK ubh)}(hThe xfrm_proc code is a set of statistics showing numbers of packets dropped by the transformation code and why. These counters are defined as part of the linux private MIB. These counters can be viewed in /proc/net/xfrm_stat.h]hThe xfrm_proc code is a set of statistics showing numbers of packets dropped by the transformation code and why. These counters are defined as part of the linux private MIB. These counters can be viewed in /proc/net/xfrm_stat.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK hhhhubh)}(hhh](h)}(hInbound errorsh]hInbound errors}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhjhhhhhKubhdefinition_list)}(hhh](hdefinition_list_item)}(h4XfrmInError: All errors which is not matched others h](hterm)}(h XfrmInError:h]h XfrmInError:}(hj,hhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhKhj&ubh definition)}(hhh]h)}(h&All errors which is not matched othersh]h&All errors which is not matched others}(hj?hhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj<ubah}(h]h ]h"]h$]h&]uh1j:hj&ubeh}(h]h ]h"]h$]h&]uh1j$hhhKhj!ubj%)}(h%XfrmInBufferError: No buffer is left h](j+)}(hXfrmInBufferError:h]hXfrmInBufferError:}(hj]hhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhKhjYubj;)}(hhh]h)}(hNo buffer is lefth]hNo buffer is left}(hjnhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhjkubah}(h]h ]h"]h$]h&]uh1j:hjYubeh}(h]h ]h"]h$]h&]uh1j$hhhKhj!hhubj%)}(hXfrmInHdrError: Header error h](j+)}(hXfrmInHdrError:h]hXfrmInHdrError:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhKhjubj;)}(hhh]h)}(h Header errorh]h Header error}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhjubah}(h]h ]h"]h$]h&]uh1j:hjubeh}(h]h ]h"]h$]h&]uh1j$hhhKhj!hhubj%)}(heXfrmInNoStates: No state is found i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong h](j+)}(hXfrmInNoStates:h]hXfrmInNoStates:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhK!hjubj;)}(hhh]h)}(hTNo state is found i.e. Either inbound SPI, address, or IPsec protocol at SA is wrongh]hTNo state is found i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK hjubah}(h]h ]h"]h$]h&]uh1j:hjubeh}(h]h ]h"]h$]h&]uh1j$hhhK!hj!hhubj%)}(hSXfrmInStateProtoError: Transformation protocol specific error e.g. SA key is wrong h](j+)}(hXfrmInStateProtoError:h]hXfrmInStateProtoError:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhK%hjubj;)}(hhh]h)}(h;Transformation protocol specific error e.g. SA key is wrongh]h;Transformation protocol specific error e.g. SA key is wrong}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK$hjubah}(h]h ]h"]h$]h&]uh1j:hjubeh}(h]h ]h"]h$]h&]uh1j$hhhK%hj!hhubj%)}(h9XfrmInStateModeError: Transformation mode specific error h](j+)}(hXfrmInStateModeError:h]hXfrmInStateModeError:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhK(hjubj;)}(hhh]h)}(h"Transformation mode specific errorh]h"Transformation mode specific error}(hj*hhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK(hj'ubah}(h]h ]h"]h$]h&]uh1j:hjubeh}(h]h ]h"]h$]h&]uh1j$hhhK(hj!hhubj%)}(hJXfrmInStateSeqError: Sequence error i.e. Sequence number is out of window h](j+)}(hXfrmInStateSeqError:h]hXfrmInStateSeqError:}(hjHhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhK,hjDubj;)}(hhh]h)}(h4Sequence error i.e. Sequence number is out of windowh]h4Sequence error i.e. Sequence number is out of window}(hjYhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK+hjVubah}(h]h ]h"]h$]h&]uh1j:hjDubeh}(h]h ]h"]h$]h&]uh1j$hhhK,hj!hhubj%)}(h%XfrmInStateExpired: State is expired h](j+)}(hXfrmInStateExpired:h]hXfrmInStateExpired:}(hjwhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhK/hjsubj;)}(hhh]h)}(hState is expiredh]hState is expired}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK/hjubah}(h]h ]h"]h$]h&]uh1j:hjsubeh}(h]h ]h"]h$]h&]uh1j$hhhK/hj!hhubj%)}(hWXfrmInStateMismatch: State has mismatch option e.g. UDP encapsulation type is mismatch h](j+)}(hXfrmInStateMismatch:h]hXfrmInStateMismatch:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhK3hjubj;)}(hhh]h)}(hAState has mismatch option e.g. UDP encapsulation type is mismatchh]hAState has mismatch option e.g. UDP encapsulation type is mismatch}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK2hjubah}(h]h ]h"]h$]h&]uh1j:hjubeh}(h]h ]h"]h$]h&]uh1j$hhhK3hj!hhubj%)}(h%XfrmInStateInvalid: State is invalid h](j+)}(hXfrmInStateInvalid:h]hXfrmInStateInvalid:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhK6hjubj;)}(hhh]h)}(hState is invalidh]hState is invalid}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK6hjubah}(h]h ]h"]h$]h&]uh1j:hjubeh}(h]h ]h"]h$]h&]uh1j$hhhK6hj!hhubj%)}(hfXfrmInTmplMismatch: No matching template for states e.g. Inbound SAs are correct but SP rule is wrong h](j+)}(hXfrmInTmplMismatch:h]hXfrmInTmplMismatch:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhK:hjubj;)}(hhh]h)}(hQNo matching template for states e.g. Inbound SAs are correct but SP rule is wrongh]hQNo matching template for states e.g. Inbound SAs are correct but SP rule is wrong}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK9hjubah}(h]h ]h"]h$]h&]uh1j:hjubeh}(h]h ]h"]h$]h&]uh1j$hhhK:hj!hhubj%)}(h\XfrmInNoPols: No policy is found for states e.g. Inbound SAs are correct but no SP is found h](j+)}(h XfrmInNoPols:h]h XfrmInNoPols:}(hj3hhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhK>hj/ubj;)}(hhh]h)}(hMNo policy is found for states e.g. Inbound SAs are correct but no SP is foundh]hMNo policy is found for states e.g. Inbound SAs are correct but no SP is found}(hjDhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK=hjAubah}(h]h ]h"]h$]h&]uh1j:hj/ubeh}(h]h ]h"]h$]h&]uh1j$hhhK>hj!hhubj%)}(h XfrmInPolBlock: Policy discards h](j+)}(hXfrmInPolBlock:h]hXfrmInPolBlock:}(hjbhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhKAhj^ubj;)}(hhh]h)}(hPolicy discardsh]hPolicy discards}(hjshhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKAhjpubah}(h]h ]h"]h$]h&]uh1j:hj^ubeh}(h]h ]h"]h$]h&]uh1j$hhhKAhj!hhubj%)}(hXfrmInPolError: Policy error h](j+)}(hXfrmInPolError:h]hXfrmInPolError:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhKDhjubj;)}(hhh]h)}(h Policy errorh]h Policy error}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKDhjubah}(h]h ]h"]h$]h&]uh1j:hjubeh}(h]h ]h"]h$]h&]uh1j$hhhKDhj!hhubj%)}(h>XfrmAcquireError: State hasn't been fully acquired before use h](j+)}(hXfrmAcquireError:h]hXfrmAcquireError:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1j*hhhKGhjubj;)}(hhh]h)}(h+State hasn't been fully acquired before useh]h-State hasn’t been fully acquired before use}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKGhjubah}(h]h ]h"]h$]h&]uh1j:hjubeh}(h]h ]h"]h$]h&]uh1j$hhhKGhj!hhubj%)}(h