netfilter load sharing

Hi List,

i have two questions.

first: how i can see how many cpu load ist generate by netfilter (iptables)

second: on my linux box i have seen 20-30% of one cpu is using by system. it is possible that netfilter can share the load over any cores (multicore cpu)

best thanks
Thomas

I believe that on incoming packets, the CPU handling the network card interurpt will also serve the iptables and routing logic, and on output, the processor the program runs on that sent a packet. Not sure, though. CC/FWD to nf-dev, maybe they know.

Jan