That would be nice to have ability to see process list with CPU usage for each process, so one could find if a dummy script or firewall eats CPU

disable firewall, or disable dummy script and see if there are any changes.

disable firewall, or disable dummy script and see if there are any changes.

Not quite good recommendation, for example if I disable redirect in NAT, the Web proxy stops serving clients, or if I disable "mangle" then queues also stop working - and how to tell which part was responsible for eating CPU cycles?

Regards,
Andrzej

how many queues you have?

NAT is not eating a lot of CPU, if created correctly