Skip to content

Commit fec17cc

Browse files
0x7f454c46NipaLocal
authored andcommitted
Documentation/tcp-ao: Add a few lines on tracepoints
Signed-off-by: Dmitry Safonov <[email protected]> Signed-off-by: NipaLocal <nipa@local>
1 parent afe1357 commit fec17cc

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

Documentation/networking/tcp_ao.rst

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -337,6 +337,15 @@ TCP-AO per-socket counters are also duplicated with per-netns counters,
337337
exposed with SNMP. Those are ``TCPAOGood``, ``TCPAOBad``, ``TCPAOKeyNotFound``,
338338
``TCPAORequired`` and ``TCPAODroppedIcmps``.
339339

340+
For monitoring purposes, there are following TCP-AO trace events:
341+
``tcp_hash_bad_header``, ``tcp_hash_ao_required``, ``tcp_ao_handshake_failure``,
342+
``tcp_ao_wrong_maclen``, ``tcp_ao_wrong_maclen``, ``tcp_ao_key_not_found``,
343+
``tcp_ao_rnext_request``, ``tcp_ao_synack_no_key``, ``tcp_ao_snd_sne_update``,
344+
``tcp_ao_rcv_sne_update``. It's possible to separately enable any of them and
345+
one can filter them by net-namespace, 4-tuple, family, L3 index, and TCP header
346+
flags. If a segment has a TCP-AO header, the filters may also include
347+
keyid, rnext, and maclen. SNE updates include the rolled-over numbers.
348+
340349
RFC 5925 very permissively specifies how TCP port matching can be done for
341350
MKTs::
342351

0 commit comments

Comments
 (0)