This is the same test, repeated, sans firewall rules - all iptables rules cleared. I get about 220MB/sec without oprofile running, and 208 with it running. (vs about 190MB with the iptables rules in the previous run) As noted earlier this is with netperf running on the router itself, with web10g patched in. Web10g supplies some interesting statistics (attached), and I have a tcptrace/xplot.org screenshots of the previous run here: http://huchra.bufferbloat.net/~d/rc6-smoke-captures/ that is also interesting. There is a knee at 30 seconds and other somewhat odd looking behavior when you zoom in. I further note that the laptop driving this test (via a gige pcmcia card) has a default txqueuelen of 1000 and I don't presently know the length of the dma tx ring, and is running the std ubuntu 11.4 kernel ( 2.6.38-11-generic), with ecn,sack,dsack enabled. And the best performance I've got from the laptop to a pentium 4 box was 290Mbit. I note that I'm pretty happy with 220Mbit OK! I wanted to have a baseline value before I started fiddling with vlan and dscp stuff.... CPU: MIPS 24K, speed 0 MHz (estimated) Counted INSTRUCTIONS events (Instructions completed) with a unit mask of 0x00 (No unit mask) count 100000 samples % app name symbol name ------------------------------------------------------------------------------- 17141 14.8045 vmlinux csum_partial 17141 100.000 vmlinux csum_partial [self] ------------------------------------------------------------------------------- 17024 14.7035 vmlinux __copy_user 17024 100.000 vmlinux __copy_user [self] ------------------------------------------------------------------------------- 8888 7.6765 nf_conntrack /nf_conntrack 8888 100.000 nf_conntrack /nf_conntrack [self] ------------------------------------------------------------------------------- 4139 3.5748 vmlinux __do_softirq 4139 100.000 vmlinux __do_softirq [self] ------------------------------------------------------------------------------- 4055 3.5023 ip_tables /ip_tables 4055 100.000 ip_tables /ip_tables [self] -- Dave Täht SKYPE: davetaht US Tel: 1-239-829-5608 http://the-edge.blogspot.com