On Thu, 17 Feb 2005, [EMAIL PROTECTED] wrote: > hi, > > there is many tools that parse /proc/net/ip_conntrack and display > usefull informatom such as : > > grep, ipstate, netstat-nat .... the problem with this is that the if > there is many entires in it cpu usage skyrockets for long time (in my > case for ~1min), which is not suitable for router/shaper ... Do u > know for a more gentle, non cpu intensive way of fetching connection > tracking information...
Well, it gets complicated, really quickly. Before going down that route, does performing a cat of this file produce this same CPU usage issue? If not, it may be possible to greatly optimize the existing programs, or write a much slimmer version with only the subset of functionality you need, and get the benefit you're looking for, without the costs of learning all of the direct kernel interactions you need to get this information via other means. Also, if the issue is more one of prioritization rather than immediacy of return, one could potentially write into the program some delays to provide even more niceness than invoking the command with nice -19. Ed -- [email protected] mailing list
