suggestion.

[Paul]

Netgraph is one way that we can add some network functions 
to kernel without changing the source code of kernel.
Indeed, netgraph is counterintuitive. Is there another way 
to do the same things? In this case, Linux is more smart. 

On a ppp gateway(ADSL or PPTP), a few sessions is 
normal. But bt(p2p) or worm virus will cause dozens 
thousand sessions, even more, most packet is small. 
PPP will be very very busy.

Could you give me more detail about "ppp echos"?

    	    	    	    	    	Paul.