Iptables is just a program that loads your rules into the kernel. The kernel modules running to support the firewall system is commonly known as 'Netfilter'. These modules run under the networking sub-system in the kernel, so it doesn't need to spawn a kernel process. Kernel processes are the programs with [ ] around them when running ps. I think you can have non-kernel processes with the [], but I don't know when that is the case. -----Original Message----- From: Eric Marchionni [mailto:mailing-lists@xxxxxx] Sent: Monday, October 20, 2003 4:37 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Re: a sort of n00b question here but I'ld like to know. SBlaze wrote: >As I said this is probably a n00bish question but i'm curious. Since iptables >is hooked into the kernel; would it show up as usage in the top or uptime statistics? > i'd like to know that as well ;-D cheers, eric