From: Denys Fedoryschenko <denys@visp.net.lb>
To: netdev@vger.kernel.org, netfilter-devel@vger.kernel.org
Subject: ipt_MASQUERADE weirdness (consuming CPU cycles while not used)
Date: Mon, 18 May 2009 22:19:30 +0300 [thread overview]
Message-ID: <200905182219.30216.denys@visp.net.lb> (raw)
I have loaded pppoe (1700 users). I test one rule for short time with -j
MASQUERADE, then removed it and reset conntrack (conntrack -F). But still i
can see it is consuming CPU even when it is not used in any rule. Even i
reboot server and just load rules that dont have MASQUERADE, and just load
module - it will start consuming CPU immediately.
Here is details:
Chain PREROUTING (policy ACCEPT 8232K packets, 473M bytes)
pkts bytes target prot opt in out source
destination
299K 32M ACCEPT all -- * * 0.0.0.0/0
192.168.0.0/16
161K 14M ACCEPT all -- * * 0.0.0.0/0
194.146.152.0/22
8396 811K ACCEPT all -- * * 0.0.0.0/0 10.0.0.0/8
445K 126M ACCEPT all -- * * 0.0.0.0/0
172.16.0.0/16
268K 17M ACCEPT all -- * * 0.0.0.0/0 2.0.0.0/8
914K 47M DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:80 to:192.168.254.2-192.168.254.7:8080
40206 2579K DNAT udp -- * * 0.0.0.0/0 !1.2.3.4
udp dpt:53 to:1.2.3.4:53
Chain POSTROUTING (policy ACCEPT 534K packets, 159M bytes)
pkts bytes target prot opt in out source
destination
68011 7381K ACCEPT all -- * * 0.0.0.0/0
194.146.XXX.XXX/22
268K 18M ACCEPT all -- * * 0.0.0.0/0 2.2.2.0/24
1845K 119M SNAT all -- * eth0 172.16.0.0/16 0.0.0.0/0
to:194.146.XXX.XXX
Chain OUTPUT (policy ACCEPT 97383 packets, 37M bytes)
pkts bytes target prot opt in out source
destination
defaulthost ~ # lsmod|grep MASQ
ipt_MASQUERADE 2348 0
Oprofile:
samples % image name app name symbol
name
163475 9.5182 libc-2.9.so
libc-2.9.so /lib/libc-2.9.so
65095 3.7901 vmlinux vmlinux
memory_open
64811 3.7735 ipt_MASQUERADE ipt_MASQUERADE device_cmp
57111 3.3252 e1000 e1000 e1000_intr
55725 3.2445 e1000 e1000
e1000_clean
next reply other threads:[~2009-05-18 19:19 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-05-18 19:19 Denys Fedoryschenko [this message]
2009-05-21 18:00 ` ipt_MASQUERADE weirdness (consuming CPU cycles while not used) Pablo Neira Ayuso
2009-05-21 20:10 ` Denys Fedoryschenko
2009-05-25 15:35 ` Patrick McHardy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200905182219.30216.denys@visp.net.lb \
--to=denys@visp.net.lb \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).