May be I didn't understand you but I think you are wrong, in 1 Mbit you have: ((1/8)*1024*1024)/1500~=88 packets isn't it?? On Wednesday 11 June 2003 02:35, Esteban Ribicic wrote: > im trying to debug how cpu consuming could be the string match. > is it a lineal function? i mean.. > > 1 Mbit -> 1024/8 Kbytes > > supossaing mtu payload is 1500 bytes, i have in 1 megabit > [(1024/8)*1000]*1500 = 1920000000 packets > > anorther thing..this rule just filter the initial download request..that > would be okay if oyu want filter completely, but if you want to slwo > down (i mean using tc/htb/fwmarks) you wouldnt be matching the hole > download, only the request... > > iptables -t mangle -A PREROUTING -p tcp -m --string "Kazaa" -j DROP > > > any comment, any idea? > > _______________________________________________ > LARTC mailing list / LARTC@xxxxxxxxxxxxxxx > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ -- --------------------------------------------------------------- René Serral Universitat Politècnica de Catalunya rserral@xxxxxxxxx UPC Campus Nord, Ed. D4 Tel: +34 934 017 432 Barcelona 08034 ---------------------------------------------------------------
