In my initial testing with netfilter, I found it started dropping packets eventually. But it tries really hard to keep up before that. At around 50% utilization on a 100meg pipe I started seeing packet loss with random syn packets (basically just sending syn requests using random source/destination ports at a firewall with no ruleset). CPU utilization at that point was maxed out. Thank's.It's interesting.Can I give more exactly infomation about harware, kernel options, more thorough statictics of using by linux CPU, memory , I/O , irq and other ?