Patch 2/3 (please apply after Patch 1/3) 2) Loop unrolling It seems that with current compilers and CFLAGS, the code from ip_packet_match() is very bad, using lot of mispredicted conditional branches I made some patches and generated code on i386 and x86_64 is much better. Signed-off-by: Eric Dumazet