At 07:09 PM 7/8/01 +1000, Daniel Pittman <[EMAIL PROTECTED]> wrote: >Yup. Load comes from running *user* processes, not from the kernel. > >Given that iptables is completely in-kernel, it doesn't generate load no >matter how hard it's working. So, a load average of 0.00 means that >there isn't any software running on the machine.
I've been thinking about that. How, then, DO you tell how hard the firewall rules are pressing a box? Compare RC5 scores with and without the firewall rules or something? "Hmm, I think we're being packeted... yeah, xfractint is jerking like crazy. Oops, no, never mind, that's me. Gotta cut down." -- Asher Densmore-Lynn <[EMAIL PROTECTED]>
