Fan Du 4c4d41f200 xfrm: add LINUX_MIB_XFRMACQUIREERROR statistic counter ... When host ping its peer, ICMP echo request packet triggers IPsec policy, then host negotiates SA secret with its peer. After IKE installed SA for OUT direction, but before SA for IN direction installed, host get ICMP echo reply from its peer. At the time being, the SA state for IN direction could be XFRM_STATE_ACQ, then the received packet will be dropped after adding LINUX_MIB_XFRMINSTATEINVALID statistic. Adding a LINUX_MIB_XFRMACQUIREERROR statistic counter for such scenario when SA in larval state is much clearer for user than LINUX_MIB_XFRMINSTATEINVALID which indicates the SA is totally bad. Signed-off-by: Fan Du <fan.du@windriver.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>		2013-06-06 06:45:55 +02:00
..
Kconfig	net/xfrm: remove depends on CONFIG_EXPERIMENTAL	2013-01-11 11:40:03 -08:00
Makefile	xfrm: make xfrm_algo.c a module	2012-05-15 13:13:34 -04:00
xfrm_algo.c	xfrm: add rfc4494 AES-CMAC-96 support	2013-04-25 21:01:48 +08:00
xfrm_hash.c	net: allow GFP_HIGHMEM in __vmalloc()	2010-11-21 10:04:04 -08:00
xfrm_hash.h	net: cleanup unsigned to unsigned int	2012-04-15 12:44:40 -04:00
xfrm_input.c	xfrm: add LINUX_MIB_XFRMACQUIREERROR statistic counter	2013-06-06 06:45:55 +02:00
xfrm_ipcomp.c	net: xfrm: use __this_cpu_read per-cpu helper	2012-11-13 14:38:52 +01:00
xfrm_output.c	xfrm: properly handle invalid states as an error	2013-05-23 01:20:07 -07:00
xfrm_policy.c	net: pass info struct via netdevice notifier	2013-05-28 13:11:01 -07:00
xfrm_proc.c	xfrm: add LINUX_MIB_XFRMACQUIREERROR statistic counter	2013-06-06 06:45:55 +02:00
xfrm_replay.c	xfrm: Fix esn sequence number diff calculation in xfrm_replay_notify_esn()	2013-03-25 07:25:50 +01:00
xfrm_state.c	xfrm: allow to avoid copying DSCP during encapsulation	2013-03-06 07:02:45 +01:00
xfrm_sysctl.c	net: Don't export sysctls to unprivileged users	2012-11-18 20:30:55 -05:00
xfrm_user.c	xfrm_user: constify netlink dispatch table	2013-03-06 07:02:46 +01:00