> > is there a way to check on running system how much CPU time is used to > > perform firewalling/traffic manager - be it pf or ipfw? > > Sure, compare ping times / traffic throughput with firewall turned off > and on? this will not measure CPU load but delays. delays are unnoticable and doesn't look like a problem.