6.9. Packet Statistics
The MACsec statistic counters are implemented according to the MACsec 802.1AE-2018 specification. These counters are accessible through the Management Interface. Each counter is 64 bits wide and each port has one set of statistic counters as listed in the table below. The counter values roll over when they overflow.
Upon reset deassertion, all counters are reset to 0. As the port becomes active with MACsec traffic entering the MACsec IP for processing, these counters start counting. During a rekeying process, for example, SW switch from 1 Tx SA to another Tx SA, the old Tx SA is invalidated (SA_EN_TRN CSR bit = 0) and the equivalent statistic counters for the particular port are reset by SW. Traffic using the new Tx SA triggers all the counters to start counting from zero.
|InPktsNoTag||The number of received packets without a SecTAG discarded because VALIDATEFRAMES was 'strict'||SA Lookup|
|InPktsBadTag||The number of received packets discarded with an invalid SecTAG, zero value PN, or invalid ICV||SA Lookup|
|InPktsNoSA||The number of received packets with an unknown SCI or for an unused SA||SA Lookup|
|InPktsNoSAError||The number of packets discarded because the received SCI is unknown or the SA is not in use.||SA Lookup|
|InPktsOverrun||The number of packets discarded because they exceeded cryptographic performance capabilities||SA Lookup|
|InPktsOK||The number of packets received for this SC is successfully validated and within the replay window.||SA Lookup|
|InPktsUnchecked||The number of packets received for this SC, while VALIDATEFRAMES is 'disabled'.||SA Lookup|
|InPktsInvalid||The number of packets, for this SC, that fails validation but can be received because VALIDATEFRAMES is 'check' and the data is not encrypted (so the original frame can be recovered).||SA Lookup|
|InPktsNotValid||The number of packets discarded, for this SC, because validation fails and VALIDATEFRAMES is 'strict' or the data is encrypted (so the original frame can not be recovered).||SA Lookup|
|InPktsDelayed||The number of received packets, for this SC, with PN lower than the lowest acceptable PN and REPLAYPROTECT false.||SA Lookup|
|InPktsLate||The number of packets discarded, for this SC, because the received PN is lower than the lowest acceptable PN and REPLAYPROTECT is true.||SA Lookup|
|InOctetsValidated||The number of plaintext octets recovered from packets that are integrity protected but not encrypted.||Framer/Deframer|
|InOctetsDecrypted||The number of plaintext octets recovered from packets that are integrity protected and encrypted.||Framer/Deframer|
|OutPktsUntagged||The number of packets transmitted without a SecTAG because SECY_PROTECT_FRAMES_ENABLE is configured false.||Framer/Deframer|
|OutPktsTooLong||The number of transmit packets discarded because their length is greater than the ifMtu of the Common port.||Framer/Deframer|
|OutPktsProtected||The number of packets transmitted with integrity protected but not encrypted in transmitted frames.||Framer/Deframer|
|OutPktsEncrypted||The number of packets transmitted with integrity protected and encrypted in transmitted frames.||Framer/Deframer|
|OutOctetsProtected||The number of plain text octets integrity protected but not encrypted in transmitted frames.||Framer/Deframer|
|OutOctetsEncrypted||The number of plain text octets integrity protected and encrypted in transmitted frames.||Framer/Deframer|
Did you find the information on this page useful?