skipstat(1M)

NAME
skipstat - display SKIP information

SYNOPSYS
skipstat [-amCIkKh] [-c version] [ -i interface ]

DESCRIPTION
skipstat displays statistical information about the use of SKIP on the local system.

OPTIONS

-a  Display all information available.

-C  Display cryptographic algorithms supported by the local system. Each algorithm is listed with its module identifier and name.

-c version
    Display cryptographic algorithm statistics for SKIP version.

-m  Display MAC algorithms statistics.

-I  Display SKIP interface statistics.

-k  Display SKIP key statistics.

-K  Display local key information.

-h  Display SKIP header statistics.

-i  interface
    Display statistics for the specified network interface. By default, skipstat displays statistics for the system's principal network interface.

DESCRIPTION
The following is a breakdown of skipstat output for each of the main options:

skipstat -m
    MAC algorithm statistics (SKIP)
    MAC Module Name:    MD5
    in_mac: # of received MAC calculation
    in_mac_errs: # of failed received MAC calculation
    out_mac: # of successful sent MAC calculation
    out_mac_errs: # of failed sent MAC calculation

skipstat -c 1
    Cryptographic algorithm stats (SKIP version 1)
    Crypto Module Name:    DES-CBC
    encrypts: # of successful encryptions
    encrypterrs: # of failed decryptions
    decrypts: # of successful decryptions
    decrypterrs: # of failed decryptions

skipstat -c 2
    Cryptographic algorithm stats (SKIP)
    Crypto Module Name:    DES-EDE-K3-CBC
    encrypts: # of successful encryptions
    encrypterrs: # of failed decryptions
    decrypts: # of successful decryptions
    decrypterrs: # of failed decryptions

skipstat -I	(interface statistics)
    SKIP interface (le0) statistics:
    skip_if_ipkts: # of packets received by interface
    skip_if_opkts: # of packets sent by interface
    skip_if_encrypts: # of packets encrypted
    skip_if_decrypts: # of packets decrypted
    skip_if_drops: # of packets dropped
    skip_if_notv4: # of non-IPV4 packets
    skip_if_bypasses: # of certificate packets
    skip_if_raw_in: # of raw packets received
    skip_if_raw_out: # of raw packets sent

skipstat -k 	(key statistics and parameters)
    skip_key_max_idle: unused key timeout
    skip_key_max_bytes: maximum bytes to encrypt
    skip_encrypt_keys_active: encrypt keys in cache
    skip_decrypt_keys_active: decrypt keys in cache
    skip_key_lookups: key cache lookups
    skip_keymgr_requests: key cache misses
    skip_key_reclaims: cache entries reclaimed
    skip_hash_collisions: hash table collisions

skipstat -K 	(local key information)
    List of local keys currently available.

skipstat -h	(header statistics)
    In the description below, V1 refers to SKIP's SunScreen(tm) SPF-100 and SPF-100G compatibility mode (based on an earlier version of the SKIP protocol). skip_hdr_encodes: number of SKIP V1 headers encoded
    skip_hdr_decodes: number of SKIP V1 headers decoded
    skip_ipsp_encodes: number of SKIP V2 headers encoded
    skip_ipsp_decodes: number of SKIP V2 headers decoded
    Header decode error statistics:
    skip_hdr_bad_versions: invalid protocol version
    skip_hdr_short_ekps: short eKp fields
    skip_hdr_short_mids: short MID fields
    skip_hdr_bad_kp_algs: unknown crypto algs
    skip_hdr_runts: short SKIP V1 packets
    skip_hdr_short_nodeids: short SKIP V1 node ids
    skip_hdr_bad_nsid: bad V2 name space id
    skip_hdr_bad_mac_alg: bad MAC algorithm
    skip_hdr_bad_mac_size: bad MAC data size
    skip_hdr_bad_mac_val: bad MAC value
    skip_hdr_bad_next: bad V2 next protocol field
    skip_hdr_bad_esp_spi: bad V2 encryption SPI field
    skip_hdr_bad_ah_spi: bad V2 MAC SPI field
    skip_hdr_bad_iv: bad V2 initializtion vector
    skip_hdr_short_r_mkeyid: short V2 receiver key id
    skip_hdr_short_s_mkeyid: short V2 sender key id
    skip_hdr_bad_r_mkeyid: bad V2 receiver key id
A graphical display of key status and statistical information is available using skiptool(1M).

SEE ALSO
skiptool(1M), skiphost(1M)

FILES
/dev/skip_key