From mboxrd@z Thu Jan  1 00:00:00 1970
From: Paul <xerox@foonet.net>
Date: Fri, 04 Jun 2004 23:07:09 +0000
Subject: [LARTC] iptables/cpu utilization
Message-Id: <1086390429.11341.24.camel@localhost.localdomain>
List-Id: <lartc.vger.kernel.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: lartc@vger.kernel.org

What in the WORLD is using so much CPU.. we are getting a denial of
service attack about 100,000 packets per second and the router is 100%
cpu, then when I do iptables -t mangle -I PREROUTING ..etc.. -j DROP to
match the packets and drop them the CPU drops to like 15% ... so my
question is 
#1. What in the world uses all that cpu simple routing packets in one
interface and out the other?
#2. What in the world uses 15% cpu simply blocking packets in the
prerouting chain? I'm using NAPI and e1000 so i don't see how it could
even possibly use 15% 

Any ideas on how to debug or find out what's causing this?

Thanks

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/