Le mercredi 24 mars 2010 à 17:28 +0100, Jan Engelhardt a écrit : > On Wednesday 2010-03-24 17:21, Eric Dumazet wrote: > >dsthash_find() takes a lot of cpu, its a sign your hash table params > >might be suboptimal. > > > >Please send us "iptables -nvL" > > Consider using "iptables-save" instead, because -nvL is just > an abridged tabular display. Yes you are right, but as I was also interested by rules and numbers (packets/bytes) of matches, please Jorrit post : iptables-save iptables -nvL Thanks -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html