On Thu, 2005-09-06 at 15:12 -0700, Jesse Brandeburg wrote:
> On Thu, 9 Jun 2005, Stephen Hemminger wrote:
> > > 313667 4.7884 vmlinux csum_partial
> > > 218870 3.3413 vmlinux _spin_lock
> > > 214302 3.2715 vmlinux __copy_user_intel
> > > 193662 2.9564 vmlinux skb_release_data
> > > 177755 2.7136 vmlinux ipt_do_table
> >
> > You are probably benchmarking iptables/netfilter! How many rules do you
> > have?
>
> I saw that... somehow iptables got compiled into kernel statically. no
> rules are active or installed iptables -L -n shows nothing in any chain.
Contracking is a lot worse of a problem. Just turn off netfilter all
together.
cheers,
jamal
|