On Wednesday 2010-03-24 17:21, Eric Dumazet wrote: >dsthash_find() takes a lot of cpu, its a sign your hash table params >might be suboptimal. > >Please send us "iptables -nvL" Consider using "iptables-save" instead, because -nvL is just an abridged tabular display. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html