Method and apparatus for classifying data packets

Abstract

Method for classifying a data packet, comprising the steps of selecting a predetermined first set of data of said data packet, applying at least one first function to said first set, wherein said first function assigns a first result value to said first set.

Description

Technical Field

[0001] This disclosure relates to a method for classifying data groups. This disclosure also relates to an apparatus for classifying data groups. Summary of the Invention

[0002] A preferred embodiment relates to a method for classifying data groups, comprising the steps of: selecting a predeterminable first set of data from the data groups; applying at least one first function to the first set, wherein the first function assigns a first result value to the first set. This allows for particularly flexible predetermining of the first data set to which the first function should be applied.

[0003] In other preferred embodiments, the predetermined first set of data from the data groups can be selected dynamically, i.e., during the operation of the device performing the method according to the described embodiment. Thus, in other preferred embodiments, different first sets of data can be selected from different data groups, and respective first functions should be applied to these first sets.

[0004] In other preferred embodiments, the selection includes: a) selecting a predetermined number of bits of the data packet. In other words, in other preferred embodiments, the predetermined first set can be selected at the bit level, thereby allowing for a particularly precise selection of the data to which the first function should be applied. Further advantageously in these embodiments, a first data set can also be selected that does not coincide with byte boundaries in the corresponding address region of the data packet, for example, in terms of the start and / or end addresses of the first data set. Thus, for example, in other preferred embodiments, the data region of the data packet to be processed, extending from the first bit of the data packet to the twelfth bit of the data packet, can be selected.

[0005] In other preferred embodiments, the selection includes selecting a predetermined number of bytes from the data packets, thus selecting a predetermined first set of data at the byte level.

[0006] In other preferred embodiments, the selection includes selecting consecutive bits and / or bytes of the data packet, particularly any consecutive bits and / or bytes of the data packet (especially the entire data packet). In other words, in these embodiments, a predetermined first set of the data is generated as a continuous data region (especially an arbitrarily selectable data region) of the data packet, characterized, for example, by a start address (e.g., represented by bits and / or bytes) and an end address (e.g., represented by bits and / or bytes) within the address space of the data packet.

[0007] In other preferred embodiments, it is specified that the start and / or end addresses of the data regions that should be selected as a predetermined first set of data groups can be freely chosen.

[0008] In other preferred embodiments, the selection includes selecting at least two non-contiguous bits and / or at least two non-contiguous bytes of the data packet. This provides further advantageous freedom in the combination of a predeterminable first set of data in the data packet, to which the first function should be applied. For example, in other preferred embodiments, the first four bytes of the data packet under consideration, as well as the twelfth and thirteenth bytes of the data packet under consideration, can be selected as the predeterminable first set. In other preferred embodiments, the selected non-contiguous bits and / or bytes forming the predeterminable first set are concatenated, for example, in the sense of concatenation. Thus, in the example mentioned above, the predeterminable first set consists of a total of 6 bytes of data, wherein the first four bytes of the data correspond to the first four bytes of the data packet under consideration, and the fifth and sixth bytes of the data correspond to the twelfth and thirteenth bytes of the data packet under consideration.

[0009] In other preferred embodiments, in addition to the first function, at least one second function is applied to the first set, wherein the at least one second function assigns at least one second result value to the first set. In other preferred embodiments, the at least one second function differs from the first function, thereby obtaining further degrees of freedom regarding the classification of the data groupings. In other preferred embodiments, result values ​​obtained by multiple functions respectively can be fed to different evaluations, such as filtering methods.

[0010] In other preferred embodiments, the method further comprises the steps of: selecting a predeterminable second set of data from the data group, applying at least the first function and / or a second function or the second function, wherein the second function assigns a second result value or the second result value to the second set. In other preferred embodiments, the second set of data from the data group differs from the first set of data. In other words, in other preferred embodiments, different portions or regions of data from the data group can be selected to form the predeterminable first set or the predeterminable second set. In this case, in other preferred embodiments, each of the above variations of data selection (e.g., selecting start and / or end addresses at the bit and / or byte levels for continuous and / or non-contiguous data regions of the data group) can be arbitrarily combined with each other.

[0011] In other preferred embodiments, the method further includes the steps of: determining first data region information characterizing the first set and / or second data region information characterizing the second set or the second set; and selecting the first set and / or the second set based on the first region information and / or the second data region information. In other preferred embodiments, the data region information may, for example, have at least one start address and / or at least one end address. In other preferred embodiments, particularly those that select non-contiguous regions of the data packets to form a predetermined first set and / or second set, the data region information may also have multiple tuples, each tuple including a start address and an end address.

[0012] In other preferred embodiments, the determination of the first data area information and / or the second data area information includes at least one of the following steps: receiving the data area information from another unit, determining the data area information from configuration information that is locally stored or currently available in the device performing the method according to the embodiment, and calculating the data area information from configuration data and / or operating data of the device performing the method according to the embodiment.

[0013] In other preferred embodiments, the first function and / or the second function are specified as hash functions (distribution value functions).

[0014] Other preferred embodiments relate to an apparatus for classifying data groups, wherein the apparatus is configured to perform the steps of: selecting a predeterminable first set of data from the data groups, applying at least one first function to the first set, wherein the first function assigns a first result value to the first set.

[0015] In other preferred embodiments, the device is configured to perform the method according to the embodiment.

[0016] In other preferred embodiments, the device compares the first result value and / or the second result value with at least one predefined reference result value. If the comparison indicates, for example, that the first result value matches the reference result value, it can be concluded that the relevant data packet for which the first result value was determined corresponds to a predefined (classification) criterion associated with the reference result value. In other preferred embodiments, in this case, the device may, for example, forward the considered data packet to further processing (e.g., forwarding it to another unit, a receiver of a communication connection, etc.), refrain from such forwarding if the relevant result value does not match the reference result value, and compare the relevant result value, for example, with another reference result value, or immediately reject the relevant result value.

[0017] Other preferred embodiments relate to the use of methods and / or apparatus according to the embodiments for processing data packets, particularly for filtering data packets, especially Ethernet data packets.

[0018] In other preferred embodiments, the data packets are configured as Ethernet data packets, for example, having a data frame format according to the IEEE 802.3 standard. For example, such an Ethernet data frame may have a MAC (Media Access Control) address as the destination address in the first 6 bytes, followed by another 6 bytes representing the MAC source address, and then another 4 bytes representing the VLAN (Virtual Local Area Network) tag, and so on.

[0019] Advantageously, under the condition of applying the principles according to the described implementation, a first function, for example, that can be used to classify the data packets, can be applied to a flexibly selectable, predefined first data set of such Ethernet data packets, wherein, for example, the first data set is selected as the union of the two high-order bytes of the MAC destination address (6 bytes) and the VLAN TAG (VLAN tag), which corresponds to the first data set being an example of a non-contiguous data region of the Ethernet data packet.

[0020] Other preferred embodiments relate to a control device, particularly for a motor vehicle, wherein the control device is configured to receive data packets from at least one other unit, wherein the control device has at least one device according to the embodiment and processes, in particular filters, at least a portion of the received data packets by means of the device.

[0021] Further features, applications, and advantages of the invention will become apparent from the following description of embodiments of the invention, which are illustrated in the various figures of the accompanying drawings. Herein, all described or shown features, individually or in any combination, form the subject matter of the invention, regardless of their summary in the claims or their references thereto, and regardless of their representation or display in the specification or drawings. Attached Figure Description

[0022] In the attached diagram:

[0023] Figure 1 A simplified flowchart of the method according to a preferred embodiment is shown.

[0024] Figure 2 The diagram schematically illustrates data grouping and data sets according to other preferred embodiments.

[0025] Figure 3 A simplified block diagram according to other preferred embodiments is shown schematically.

[0026] Figure 4 A simplified block diagram according to other preferred embodiments is shown schematically.

[0027] Figure 5 A simplified block diagram according to other preferred embodiments is shown schematically.

[0028] Figure 6 A simplified block diagram illustrating other preferred embodiments is shown schematically.

[0029] Figure 7 A simplified block diagram according to other preferred embodiments is shown schematically. Detailed Implementation

[0030] Figure 1 A simplified flowchart illustrating a method for classifying data groups according to a preferred embodiment is shown schematically. Figure 2 An exemplary data grouping DP according to other preferred embodiments is shown in the figure.

[0031] For example, the data packet DP is constructed as an Ethernet data packet, for example, having a data frame format according to the IEEE 802.3 standard. In other preferred embodiments, any other data packets can also be processed, particularly data packets from FlexRay systems and / or CAN systems and / or CAN FD systems, as well as data packets from other systems and / or standards.

[0032] Figure 2 The exemplary data packet DP shown has a MAC (Media Access Control) address in a first address region A1 as the destination address. In this case, the first address region corresponds to the first 6 bytes of the data packet DP, followed by a second address region A2 with another 6 bytes representing the MAC source address, and then, for example, another 4 bytes representing a VLAN (Virtual Local Area Network) tag, see the third address region A3. Instead of the VLAN tag, in other preferred embodiments, the data packet DP also has an "Ethernet type" field (typically two bytes) in at least some portions of the third address region A3. Other bytes of the data packet DP (particularly, for example, user data (payload)) are... Figure 2 The text is not represented separately, but rather indicated by a dot...

[0033] according to Figure 1 The method has the following steps: selecting a pre-defined first set M1 of 100 data grouped DP data ( Figure 2), where in the current case, the predefined first set M1 exemplarily corresponds to the first eight bytes of the data packet DP, that is, completely including the first address region A1 and including two bytes from the second address region A2. Then, according to Figure 1 The method specifies that at least one first function, particularly a hash function, is applied to a first set M1, wherein the first function assigns a first result value to the first set M1. By selecting according to step 100, the first set M1 of data to which the first function should be applied can be pre-defined with particular flexibility, thereby enabling particularly flexible processing of data groups DP, particularly for forming hash values ​​and / or filtering, under the conditions of applying the principles of the described embodiment.

[0034] Figure 3 A simplified block diagram according to other preferred embodiments is shown schematically. The above references will be used to illustrate this. Figure 1 The described method sends a predefined first set M1 to a first function F1, which determines a first result value E1 based on the first set M1. In other preferred embodiments, the evaluation of the first function F1 may include forming a hash value based on the first set M1.

[0035] Alternatively, according to other preferred embodiments, at least one second function F2 may be applied to the first set M1, resulting in a second value E2.

[0036] In other preferred embodiments, see Figure 1 Following step 102, another optional step 104 is specified, which specifies further processing of the data group DP, specifically based on the first result value E1 ( Figure 2 For example, step 104 may specify comparing the first result value E1 with at least one predefined reference result value. If comparison 104 indicates that the first result value E1 matches the reference result value, it can be concluded that the relevant data packet DP for which the first result value E1 has been determined corresponds to a predefined (classification) criterion associated with the reference result value. In other preferred embodiments, in this case, for example, the data packet DP under consideration may be further processed (e.g., forwarded to another unit, a receiver of a communication connection, etc.), while if the relevant result value E1 does not match the reference result value, for example, such forwarding may not be performed, and the relevant result value E1 may be compared, for example, with another reference result value, or the relevant result value E1 may be rejected immediately.

[0037] In other preferred embodiments, in particular, a predetermined first set M1 of data for data packet DP can be selected dynamically, i.e., during the operation of the device 200 performing the method according to the described embodiment, the device in accordance with Figure 5A simplified block diagram is shown exemplarily. Thus, in other preferred embodiments, for example, different first sets M1 of data can be selected from different data groups DP. Figure 2 ), and their respective first functions F1 should be applied to these first sets. Figure 3 ).

[0038] According to Figure 5 In the illustration, device 200 receives one or more data packets DP from other unit 250, for example, via a communication network or bus system, and according to the principles of the described embodiment (e.g., according to...). Figure 1 ) Process the data groups DP.

[0039] In other preferred embodiments, the selection (see...) Figure 1 Step 100) has at least one of the following elements: a) selecting a predetermined number of bits for the data packet DP. In other words, in other preferred embodiments, a predetermined first set M1 can be selected at the bit level. Figure 2 This allows for a particularly precise and refined selection of the data to which the first function should be applied. In these embodiments, it is further advantageous, in particular, to select a first set M1 of data that does not coincide with byte boundaries, for example, in the corresponding address region of the data packet, in terms of its start and / or end addresses. Thus, for example, in other preferred embodiments, a data region of the data packet to be processed can be selected, the data region extending from the first bit of the data packet to the twelfth bit of the data packet.

[0040] In other preferred embodiments, it is specified that 100 ( Figure 1 This includes a pre-defined number of bytes for selecting data groups DP, thus selecting the first pre-defined set M1 of data at the byte level.

[0041] In other preferred embodiments, it is specified that 100 ( Figure 1 This includes selecting consecutive bits and / or bytes of data packets DP. In other words, in these implementations, a predeterminable first set M1 of data is generated as a consecutive data region of the data packets, characterized, for example, by a start address (e.g., represented by bits and / or bytes) and an end address (e.g., represented by bits and / or bytes) within the address space of the data packets.

[0042] In other preferred embodiments, the start and / or end addresses of the data regions of the data packet DP, which should be selected as a predetermined first set M1, are freely selectable, particularly from the entire data packet DP. Specifically, in other preferred embodiments, the length of the data regions is also arbitrarily selectable, particularly not limited to a value less than the total length of the data packets. This allows for flexible selection of the corresponding data regions of the data packet DP to be delivered for evaluation by the first function F1, enabling flexible classification of the corresponding data regions of the data packet DP.

[0043] In other preferred embodiments, the selection (see...) Figure 1 Step 100) includes selecting at least two non-contiguous bits and / or at least two non-contiguous bytes of the data packet DP. Therefore, the data in the data packet DP should be subject to the application of a first function F1 and / or a second function F2. Figure 3 The combination of a predeterminable first set M1 or a predeterminable second set M2 provides further advantageous degrees of freedom. For example, in other preferred embodiments, the first 4 bytes of the data group DP under consideration ( Figure 2 (See first subset M2a) and the twelfth and thirteenth bytes of the considered data packet DP (see second subset M2b) are selected as a predeterminable second set M2. In other preferred embodiments, the selected non-contiguous bits and / or bytes forming the predeterminable second set M2 are concatenated in a concatenated sense, see [reference to...]. Figure 2 In the example described above, the predefined second set M2 consists of a total of 6 bytes of data, wherein the first 4 bytes of the data correspond to the first 4 bytes of the data group DP under consideration, and the fifth and sixth bytes of the data M2 correspond to the twelfth and thirteenth bytes of the data group DP under consideration. In this way, the non-contiguous data regions of the data group DP can be advantageously used for further processing, such as classification or filtering. (Referring to the above...) Figures 1 to 3 The implementation method described is similar, and the second set M2 can also be fed to the first function F1 ( Figure 3 The second set M2, corresponding to the example described above, contains non-continuous data regions of data group DP, and / or is evaluated by means of the second function F2, etc.

[0044] In other preferred embodiments, as specified above, except for the first function F1 ( Figure 3In addition to the first function F1, at least one second function F2 is applied to the first set M1, wherein the at least one second function F2 assigns at least one second result value E2 to the first set M1. In other preferred embodiments, the at least one second function F2 is different from the first function F1, thereby obtaining further degrees of freedom in the classification of the data group DP. In other preferred embodiments, for example, the result values ​​obtained by multiple functions F1, F2 can be fed to different evaluations, such as filtering methods.

[0045] In other preferred embodiments, the method further includes the step of: selecting 100 ( Figure 1 The data of the data group DP is predefined into a second set M2, which is at least subject to a first function F1 and / or a second function or a second function F2, the second function assigning a second result value or a second result value E2 to the second set M2, see according to Figure 4 A schematic diagram.

[0046] In other preferred embodiments, the second set M2 of the data in the data packet DP is different from the first set M1 of the data in the data packet DP. In other words, in other preferred embodiments, different portions or regions of the data in the data packet DP can be selected to form a predetermined first set M1 or a predetermined second set M2. In this case, in other preferred embodiments, each of the above variations of data selection (e.g., continuous data regions and / or non-contiguous data regions of the data packet DP, selecting start and / or end addresses at the bit and / or byte levels, for example, "bytes 0 to byte 5", corresponding to the first six bytes of the data packet, i.e., corresponding to the first address region A1) can be arbitrarily combined with each other.

[0047] In other preferred embodiments, the method further includes the steps of: determining first data region information characterizing a first set M1 and / or second data region information characterizing a second set or a second set M2. In other preferred embodiments, the determination of this data region information may, for example, be performed in step 100 (…). Figure 1 The process is carried out in the optional steps (not shown) preceding the step. Then, as previously described, the first set M1 and / or the second set M2 can be selected based on the first data area information and / or the second data area information, see step 100.

[0048] In other preferred embodiments, this data area information may include, for example, at least one start address and / or at least one end address. In other preferred embodiments, particularly those that select non-contiguous regions of the data packet DP to form a predefined first set M1 and / or a second set M2, this data area information may also have multiple 2-tuples, each 2-tuple including the start address and end address of the address region of the data packet DP.

[0049] In other preferred embodiments, the determination of the first data area information and / or the second data area information includes at least one of the following steps: from another unit (e.g., according to...) Figure 5 Other units 250) receive the data area information, determine the data area information from the configuration information that is stored locally or currently in the device 200 that performs the method according to the embodiment, and calculate the data area information from the configuration data and / or operating data of the device 200 that performs the method according to the embodiment.

[0050] In other preferred embodiments, the first function F1 and / or the second function F2 are specified as hash functions (distribution value functions). In other preferred embodiments, the formation or evaluation of the hash function may, for example, include forming a checksum, such as CRC (Cyclic Redundancy Check) type 32.

[0051] Other preferred embodiments relate to a method for classifying data groups DP (Data Packet Distribution). Figure 2 ) equipment 200 ( Figure 5 The device 200 is configured to perform the method according to the described embodiment. The device 200 according to the described embodiment can be used, for example, in a communication controller (e.g., an Ethernet MAC) to process, particularly evaluate, and / or filter data packets DP. For example, by applying the principles according to the described embodiment, the device 200 can efficiently classify a large number of input data packets DP, for example, assigning them to different receivers (not shown), and forwarding their respective data packets to these receivers if necessary.

[0052] Particularly advantageous is the ability to effectively and flexibly classify one or more data packets DP under the conditions of applying the principles according to the described implementation, wherein, in particular, arbitrary continuous and / or non-contiguous data regions of the data packets can be evaluated or classified. Particularly advantageous is the freedom to choose the length of the region to be classified, for example by specifying a predetermined number of bits and / or bytes of the data packet DP, and in other preferred embodiments, particularly dynamically, i.e., during the operation of the device 200, the length can be set or changed.

[0053] Other preferred embodiments relate to the use of the method according to the embodiments and / or the device 200 according to the embodiments for processing data packets DP, particularly for filtering data packets, particularly Ethernet data packets.

[0054] Under the conditions of applying the principles according to the described implementation, a first function F1, which can be used, for example, to classify data packets DP, can be advantageously applied to a predeterminable first set M1 of data for flexible selection of data packets DP.

[0055] Figure 6 A simplified block diagram of a device 200a according to other preferred embodiments is shown schematically. For example, Figure 5 Device 200 may have according to Figure 6 Configuration 200a. Device 200a has at least one computing device 202 and at least one storage device 202 allocated to the computing device 202 for at least temporarily storing a computer program PRG, wherein the computer program PRG is specifically configured to control the operation of device 200a, particularly for performing the method according to the described embodiment.

[0056] In other preferred embodiments, the computing device 202 has at least one of the following elements: microprocessor, microcontroller, digital signal processor (DSP), programmable logic device (e.g., FPGA, field programmable gate array), ASIC (application-specific integrated circuit), and hardware circuit.

[0057] In other preferred embodiments, combinations of these may also be considered.

[0058] In other preferred embodiments, the storage device 204 has at least one of the following elements: volatile memory 204a—particularly working memory (RAM), and non-volatile memory 204b—particularly flash EEPROM. Preferably, the computer program PRG is stored in the non-volatile memory 204b.

[0059] Optionally, device 200a has an interface device 206 through which data packets DP can be received, for example. Figure 5 (and / or other information, such as the data area information mentioned above.)

[0060] Other preferred embodiments relate to control device 300, see [link] Figure 7In particular for motor vehicles, wherein the control device 300 is configured to receive data packets DP from at least one other unit (e.g., an additional control device), wherein the control device 300 has at least one device 200, 200' according to the described embodiment and processes, in particular filters, at least a portion of the received data packets DP by means of the device 200, 200'.

[0061] The principles of the described embodiments advantageously enable efficient processing, particularly evaluation, of data packets or flexibly predefined data regions of data packets, thereby allowing, for example, the flexible application of hash functions to arbitrarily selected data regions of the data packets. In other preferred embodiments, multiple functions F1, F2, particularly hash functions, can also be applied to a predefined first set M1 and / or at least one predefined second set M2 of the data of the relevant data packet DP (“multiple classifiers for different byte positions”). In other preferred embodiments, the result values ​​E1, E2 obtained according to the described embodiments can also be used, particularly in parallel, to evaluate multiple filtering algorithms, which in other preferred embodiments can also be applied to different data regions or data sets M1, M2 respectively. Furthermore, by applying the principles according to the described embodiments, multiple hash values ​​(result values ​​E1, E2) can be effectively determined based on different data regions (sets M1, M2) of the data packet DP.

[0062] In other preferred embodiments, the aforementioned data sets M1, M2 are, for example, configurable, and the method is, for example, to send data to device 200 ( Figure 5 It provides configuration data characterizing the data regions or sets M1, M2. It can also handle the detection of data groups DP exceeding, for example, six or eight bytes of data regions particularly efficiently and flexibly.

Claims

1. A method for classifying data groups (DP), comprising the following steps: Select (100) a predefined first set (M1) of the data of the data group (DP), apply (102) at least one first function (F1) to the first set (M1), wherein the first function (F1) assigns a first result value (E1) to the first set (M1), wherein the first set of the data of the data group (DP) is selected dynamically and freely, such that the data group (DP) is flexibly classified; and Select a predefined second set (M2) of data from the data group (DP), apply at least one second function (F2) to the second set (M2), wherein the at least one first function (F1) is different from the at least one second function (F2), wherein the second function (F2) assigns a second result value (E2) to the second set (M2), wherein the second set (M2) includes a subset of the first set (M1) and data from the data group (DP) that does not belong to the first set (M1). The first result value (E1) and the second result value (E2) are used in parallel to evaluate multiple filtering algorithms, which can also be applied to the first set (M1) and the second set (M2) respectively.

2. The method according to claim 1, wherein, The selection (100) includes at least one of the following elements: a) selecting a predetermined number of bits of the data packet (DP), b) selecting a predetermined number of bytes of the data packet (DP).

3. The method according to claim 2, wherein, The selection (100) includes selecting (100) consecutive bits and / or bytes of the data packet (DP).

4. The method according to claim 2 or 3, wherein, The selection (100) includes selecting (100) at least two non-contiguous bits and / or at least two non-contiguous bytes of the data packet (DP).

5. The method according to any one of claims 1 to 3, wherein, In addition to the first function (F1), at least one second function (F2) is applied to the first set (M1), wherein the at least one second function (F2) assigns at least one second result value to the first set (M1).

6. The method according to any one of claims 1 to 3, further comprising: Determine the first data region information representing the first set (M1) and / or the second data region information representing the second set (M2), and select (100) the first set (M1) and / or the second set (M2) based on the first data region information and / or the second data region information.

7. The method according to any one of claims 1 to 3, wherein, The first function (F1) and / or the second function (F2) are hash functions.

8. The method according to claim 1, wherein, The starting and / or ending addresses of the data regions of the data group to be selected as a predefined first set can be freely chosen.

9. The method according to claim 8, wherein, The length of the data area can be freely selected.

10. A device (200; 200') for classifying data packets (DP), wherein the device (200; 200') is configured to perform the following steps: Select (100) a predeterminable first set (M1) of the data of the data group (DP), apply (102) at least one first function (F1) to the first set (M1), wherein the first function (F1) assigns a first result value (E1) to the first set (M1), wherein the first set of the data of the data group (DP) is freely selected during the operation of the device, such that the data group (DP) is flexibly classified; and Select a predefined second set (M2) of data from the data group (DP), apply at least one second function (F2) to the second set (M2), wherein the at least one first function (F1) is different from the at least one second function (F2), wherein the second function (F2) assigns a second result value (E2) to the second set (M2), wherein the second set (M2) includes a subset of the first set (M1) and data from the data group (DP) that does not belong to the first set (M1). The first result value (E1) and the second result value (E2) are used in parallel to evaluate multiple filtering algorithms, which can also be applied to the first set (M1) and the second set (M2) respectively.

11. The device (200; 200') according to claim 10, wherein, The device (200) is configured to perform the method of any one of claims 2 to 9.

12. The method according to any one of claims 1 to 9 and / or the apparatus (200; 200') according to any one of claims 10 to 11 for filtering data packets (DP).

13. The application according to claim 12, wherein, The data packets are Ethernet data packets.

14. A control device (300), wherein, The control device (300) is configured to receive data packets (DP) from at least one other unit (250), wherein the control device (300) has at least one device (200, 200') according to any one of claims 10 to 11, and is configured to filter at least a portion of the received data packets (DP) by means of the device (200; 200').

Images