Lets say I have a linux machine that has an infinite number of packages entering a single interface. I opened a raw socket and installed a bpf filter that none of the packets pass through.
Now for each packet received by the kernel, it runs the bpf bytecode and filters out the data.
How can I see the CPU usage accepted by the kernel? Is this calculated as the time of my process? Or somewhere else? Would I see this with top?
thank
source
share