On May 14 2007 12:43, Thomas Fragstein wrote: > > Hi List, > > i have two questions. > > first: how i can see how many cpu load ist generate by netfilter (iptables) > > second: on my linux box i have seen 20-30% of one cpu is using by system. it is > possible that netfilter can share the load over any cores (multicore cpu) I believe that on incoming packets, the CPU handling the network card interurpt will also serve the iptables and routing logic, and on output, the processor the program runs on that sent a packet. Not sure, though. CC/FWD to nf-dev, maybe they know. Jan --