Documentation/translations/zh_CN/networking/xfrm_proc.rst
Source file repositories/reference/linux-study-clean/Documentation/translations/zh_CN/networking/xfrm_proc.rst
File Facts
- System
- Linux kernel
- Corpus path
Documentation/translations/zh_CN/networking/xfrm_proc.rst- Extension
.rst- Size
- 2288 bytes
- Lines
- 127
- Domain
- Support Tooling And Documentation
- Bucket
- Documentation
- Inferred role
- Support Tooling And Documentation: documentation
- Status
- atlas-only
Why This File Exists
Repository support layer: documentation, build tooling, samples, user-space helper tools, generated initramfs support, licenses, and validation utilities.
- Repository support layer: documentation, build tooling, samples, user-space helper tools, generated initramfs support, licenses, and validation utilities.
Dependency Surface
- No C-style include directives detected by the generator.
Detected Declarations
- No top-level syscall, struct, function, initcall, or export declaration detected by the generator.
Annotated Snippet
.. SPDX-License-Identifier: GPL-2.0
.. include:: ../disclaimer-zh_CN.rst
:Original: Documentation/networking/xfrm_proc.rst
:翻译:
王亚鑫 Wang Yaxin <wang.yaxin@zte.com.cn>
=================================
XFRM proc - /proc/net/xfrm_* 文件
=================================
作者:Masahide NAKAMURA <nakam@linux-ipv6.org>
转换统计信息
------------
`xfrm_proc` 提供一组统计计数器,显示转换过程中丢弃的数据包及其原因。
这些计数器属于Linux私有MIB的一部分,可通过 `/proc/net/xfrm_stat`
查看。
入站错误
~~~~~~~~
XfrmInError:
未匹配其他类别的所有错误
XfrmInBufferError:
缓冲区不足
XfrmInHdrError:
头部错误
XfrmInNoStates:
未找到状态
(入站SPI、地址或SA的IPsec协议不匹配)
XfrmInStateProtoError:
转换协议相关的错误
(如SA密钥错误)
XfrmInStateModeError:
转换模式相关的错误
XfrmInStateSeqError:
序列号错误
序列号超出窗口范围
XfrmInStateExpired:
状态已过期
XfrmInStateMismatch:
状态选项不匹配
(如UDP封装类型不匹配)
XfrmInStateInvalid:
无效状态
XfrmInTmplMismatch:
状态模板不匹配
(如入站SA正确但SP规则错误)
XfrmInNoPols:
未找到状态的对应策略
(如入站SA正确但无SP规则)
XfrmInPolBlock:
Annotation
- Atlas domain: Support Tooling And Documentation / Documentation.
- Implementation status: atlas-only.
Implementation Notes
- This generated page is the file-by-file coverage layer; curated subsystem chapters should link here when they synthesize a multi-file control flow.
- Core OS pages should be promoted from atlas-only to deep-reviewed when they explain data structures, invariants, locking, lifecycle, and C implementation snippets.
- Driver-family pages are intentionally pattern-oriented unless they are part of the selected PCIe/NVMe representative device path.