skipstat(1M)

NAME
skipstat - display SKIP information

SYNOPSIS
/usr/sbin/skipstat [-amCkKh] [-c version]

DESCRIPTION
skipstat displays statistical information about the use of SKIP on the local system.

OPTIONS

-a  Display all information available.

-C  Display cryptographic algorithms supported by the local system. Each algorithm is listed with its module identifier and name.

-c version
    Display cryptographic algorithm statistics for SKIP version.

-m  Display MAC algorithms statistics.

-k  Display SKIP key statistics.

-K  Display local key information.

-h  Display SKIP header statistics.

DESCRIPTION
The following is a breakdown of skipstat output for each of the main options:

skipstat -m
    MAC algorithm statistics (SKIP)
    MAC Module Name:    MD5
    in_mac: # of received MAC calculation
    in_mac_errs: # of failed received MAC calculation
    out_mac: # of successful sent MAC calculation
    out_mac_errs: # of failed sent MAC calculation

skipstat -c 1
    Cryptographic algorithm stats (SKIP version 1)
    Crypto Module Name:    DES-CBC
    encrypts: # of successful encryptions
    encrypterrs: # of failed decryptions
    decrypts: # of successful decryptions
    decrypterrs: # of failed decryptions

skipstat -c 2
    Cryptographic algorithm stats (SKIP)
    Crypto Module Name:    DES-EDE-K3-CBC
    encrypts: # of successful encryptions
    encrypterrs: # of failed decryptions
    decrypts: # of successful decryptions
    decrypterrs: # of failed decryptions

skipstat -k 	(key statistics and parameters)
    skip_key_max_idle: unused key timeout
    skip_key_max_bytes: maximum bytes to encrypt
    skip_encrypt_keys_active: encrypt keys in cache
    skip_decrypt_keys_active: decrypt keys in cache
    skip_key_lookups: key cache lookups
    skip_keymgr_requests: key cache misses
    skip_key_reclaims: cache entries reclaimed
    skip_hash_collisions: hash table collisions

skipstat -K 	(local key information)
    List of local keys currently available.

skipstat -h	(header statistics)
    In the description below, V1 refers to SKIP's SunScreen(tm) SPF-100 and SPF-100G compatibility mode (based on an earlier version of the SKIP protocol). skip_hdr_encodes: number of SKIP V1 headers encoded
    skip_hdr_decodes: number of SKIP V1 headers decoded
    skip_ipsp_encodes: number of SKIP V2 headers encoded
    skip_ipsp_decodes: number of SKIP V2 headers decoded
    Header decode error statistics:
    skip_hdr_bad_versions: invalid protocol version
    skip_hdr_short_ekps: short eKp fields
    skip_hdr_short_mids: short MID fields
    skip_hdr_bad_kp_algs: unknown traffic encryption algs
    skip_hdr_bad_kij_algs: unknown key encryption alg
    skip_hdr_runts: short SKIP V1 packets
    skip_hdr_short_nodeids: short SKIP V1 node ids
    skip_hdr_bad_nsid: bad V2 name space id
    skip_hdr_bad_mac_algs: bad MAC algorithm
    skip_hdr_bad_skip_algs: bad SKIP algorithm
    skip_hdr_bad_mac_size: bad MAC data size
    skip_hdr_bad_mac_val: bad MAC value
    skip_hdr_bad_next: bad V2 next protocol field
    skip_hdr_bad_esp_spi: bad V2 encryption SPI field
    skip_hdr_bad_ah_spi: bad V2 MAC SPI field
    skip_hdr_bad_iv: bad V2 initialization vector
    skip_hdr_short_r_mkeyid: short V2 receiver key id
    skip_hdr_short_s_mkeyid: short V2 sender key id
    skip_hdr_bad_r_mkeyid: bad V2 receiver key id
    skip_ah_nat_in: # MD5-NAT packets received
    skip_ah_nat_out: # MD5-NAT packets sent
A graphical display of key status and statistical information is available using skiptool(1M).

SEE ALSO
skiptool(1M), skiphost(1M)

FILES
/dev/skip_key