2Iptables can trace the processing of each packet and this is time-consumming.