From mboxrd@z Thu Jan 1 00:00:00 1970 From: Esteban Ribicic Date: Wed, 11 Jun 2003 00:35:39 +0000 Subject: [LARTC] kazaaa is making me crazy! Message-Id: List-Id: References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org im trying to debug how cpu consuming could be the string match. is it a lineal function? i mean.. 1 Mbit -> 1024/8 Kbytes supossaing mtu payload is 1500 bytes, i have in 1 megabit [(1024/8)*1000]*1500 = 1920000000 packets anorther thing..this rule just filter the initial download request..that would be okay if oyu want filter completely, but if you want to slwo down (i mean using tc/htb/fwmarks) you wouldnt be matching the hole download, only the request... iptables -t mangle -A PREROUTING -p tcp -m --string "Kazaa" -j DROP any comment, any idea? _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/