From your numbers below it is clear all ipsec benchmarks have maxed out your
CPU, but aes/sha1 still has some hits in default_idle. Is this an SMP
system?
No, it is not running SMP kernel. (The system is SMP).
About little time being sent in default_idle, I think,it was because I was little late in
performing dump. I redid the test and the CPU was maxed out even in aes/sha1 case.
http://www.certconf.org/presentations/2004/Tuesday/TS2.pdf - the concept is
called 'the scatterlist'.
http://lwn.net/Articles/14010/?format=printable is also nice.
Thanks, for the pointers. I will see, if I can isolate the problem.
Shekhar