kc9udx So it isn't due to i386. It's due to NetBSD 10. I tried it on a RockPro64, NetBSD 10.1 vs 11.0. 68221 IP addresses in a const table: 5 seconds on 11.0 7 minutes 14 seconds and failed with "Argument list too long" on 10.1
kc9udx I just tried the same thing on i386. I didn't time it but with 10.1 same file was over a half hour on this machine and something less than ten seconds by installing the 11.0 GENERIC kernel, and nothing else changed.
kc9udx smurfd not just that: I forgot to mention, the large file also doesn't work in 10.1 in both cases. "Argument list too long" and the list ends up empty.
f451 If you're looking at a nice blocklist method, look here: https://www.geoghegan.ca/pub/pf-badhost/latest/install/netbsd.txt Not used on NetBSD but have used it many times on FreeBSD and OpenBSD EDIT: ahh this is for pf not npf, sorry
