Since IPTABLES is a software based firewall, I am wondering if it is possible to log the exact load it is causing, cpu cycles, etc.
On a small system I am sure it is trivial. But how about with thousands of rules?
Looking in TOP and PS, this seems to elude me, so it must be a kernel level component?
Can it be isolated and monitored/logged?
eta: for clarity, on modern linux, iptables is not a visible process or daemon so it cannot be seen for example with
ps aux and I am at a loss for how to isolate it from the kernel otherwise