--- /dev/null
+.. SPDX-License-Identifier: GPL-2.0
+
+==================================
+XFRM proc - /proc/net/xfrm_* files
+==================================
+
+Masahide NAKAMURA <nakam@linux-ipv6.org>
+
+
+Transformation Statistics
+-------------------------
+
+The xfrm_proc code is a set of statistics showing numbers of packets
+dropped by the transformation code and why. These counters are defined
+as part of the linux private MIB. These counters can be viewed in
+/proc/net/xfrm_stat.
+
+
+Inbound errors
+~~~~~~~~~~~~~~
+
+XfrmInError:
+ All errors which is not matched others
+
+XfrmInBufferError:
+ No buffer is left
+
+XfrmInHdrError:
+ Header error
+
+XfrmInNoStates:
+ No state is found
+ i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
+
+XfrmInStateProtoError:
+ Transformation protocol specific error
+ e.g. SA key is wrong
+
+XfrmInStateModeError:
+ Transformation mode specific error
+
+XfrmInStateSeqError:
+ Sequence error
+ i.e. Sequence number is out of window
+
+XfrmInStateExpired:
+ State is expired
+
+XfrmInStateMismatch:
+ State has mismatch option
+ e.g. UDP encapsulation type is mismatch
+
+XfrmInStateInvalid:
+ State is invalid
+
+XfrmInTmplMismatch:
+ No matching template for states
+ e.g. Inbound SAs are correct but SP rule is wrong
+
+XfrmInNoPols:
+ No policy is found for states
+ e.g. Inbound SAs are correct but no SP is found
+
+XfrmInPolBlock:
+ Policy discards
+
+XfrmInPolError:
+ Policy error
+
+XfrmAcquireError:
+ State hasn't been fully acquired before use
+
+XfrmFwdHdrError:
+ Forward routing of a packet is not allowed
+
+Outbound errors
+~~~~~~~~~~~~~~~
+XfrmOutError:
+ All errors which is not matched others
+
+XfrmOutBundleGenError:
+ Bundle generation error
+
+XfrmOutBundleCheckError:
+ Bundle check error
+
+XfrmOutNoStates:
+ No state is found
+
+XfrmOutStateProtoError:
+ Transformation protocol specific error
+
+XfrmOutStateModeError:
+ Transformation mode specific error
+
+XfrmOutStateSeqError:
+ Sequence error
+ i.e. Sequence number overflow
+
+XfrmOutStateExpired:
+ State is expired
+
+XfrmOutPolBlock:
+ Policy discards
+
+XfrmOutPolDead:
+ Policy is dead
+
+XfrmOutPolError:
+ Policy error
+
+XfrmOutStateInvalid:
+ State is invalid, perhaps expired
+++ /dev/null
-XFRM proc - /proc/net/xfrm_* files
-==================================
-Masahide NAKAMURA <nakam@linux-ipv6.org>
-
-
-Transformation Statistics
--------------------------
-
-The xfrm_proc code is a set of statistics showing numbers of packets
-dropped by the transformation code and why. These counters are defined
-as part of the linux private MIB. These counters can be viewed in
-/proc/net/xfrm_stat.
-
-
-Inbound errors
-~~~~~~~~~~~~~~
-XfrmInError:
- All errors which is not matched others
-XfrmInBufferError:
- No buffer is left
-XfrmInHdrError:
- Header error
-XfrmInNoStates:
- No state is found
- i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong
-XfrmInStateProtoError:
- Transformation protocol specific error
- e.g. SA key is wrong
-XfrmInStateModeError:
- Transformation mode specific error
-XfrmInStateSeqError:
- Sequence error
- i.e. Sequence number is out of window
-XfrmInStateExpired:
- State is expired
-XfrmInStateMismatch:
- State has mismatch option
- e.g. UDP encapsulation type is mismatch
-XfrmInStateInvalid:
- State is invalid
-XfrmInTmplMismatch:
- No matching template for states
- e.g. Inbound SAs are correct but SP rule is wrong
-XfrmInNoPols:
- No policy is found for states
- e.g. Inbound SAs are correct but no SP is found
-XfrmInPolBlock:
- Policy discards
-XfrmInPolError:
- Policy error
-XfrmAcquireError:
- State hasn't been fully acquired before use
-XfrmFwdHdrError:
- Forward routing of a packet is not allowed
-
-Outbound errors
-~~~~~~~~~~~~~~~
-XfrmOutError:
- All errors which is not matched others
-XfrmOutBundleGenError:
- Bundle generation error
-XfrmOutBundleCheckError:
- Bundle check error
-XfrmOutNoStates:
- No state is found
-XfrmOutStateProtoError:
- Transformation protocol specific error
-XfrmOutStateModeError:
- Transformation mode specific error
-XfrmOutStateSeqError:
- Sequence error
- i.e. Sequence number overflow
-XfrmOutStateExpired:
- State is expired
-XfrmOutPolBlock:
- Policy discards
-XfrmOutPolDead:
- Policy is dead
-XfrmOutPolError:
- Policy error
-XfrmOutStateInvalid:
- State is invalid, perhaps expired