[c-nsp] NPE G1, CEF and ACLs and high CPU

[Mateusz Błaszczyk]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



2008/9/4 Stephen Kratzer :
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIwDMLIvBv0k5esR4RAlzjAJwLMhczm7XSVWQ3KVO3t3EbcRbAFwCfWMis
iiGQ+roqhyVjEmFP54MN8ik=
=910N
-----END PGP SIGNATURE-----


> The 'log' keyword will cause matching packets to not be CEF switched.

nope, log is not present.

> Also, if
> you're denying a lot of traffic from a certain source, you might want to just
> bit-bucket it rather than sending ICMP responses.

you mean - "no ip unreachables"?




-- 
-mat