[nsp] Breaking out components of IP Input process

[rpcbind at speakeasy.net]

I'm doing GRE-in-IPSec on a 3660 and am pegging CPU at around 15mb/s (w/
AIM-VPN/HP). My guess is this is all going to tunnel encapsulation -- is there
good way to verify that? I'd like to squeeze more out of it, and the new
AIM-VPN/HPII is appealing, but not if I'll need to bump CPU to handle the
GRE...

Ideas?

Thanks.