| 摘要 |
The present invention enables packet data to be filtered without distinguishing between non-fragmented packets and fragmented packets. This invention is characterized in that: when received packet data is a fragmented packet but is not a lead fragmented packet, header information of the lead fragmented packet, which has the same fragmented packet identification information as that of the packet data, is given to the packet data as a pseudo-header; the header information of the packet data is used as a key and a filter table is searched in which a filter condition about the header information corresponds to a process implemented when the filter condition is satisfied; the process corresponding to the filter condition satisfied by the header information of the packet data is determined as a process performed for the packet data; and the determined process is performed on the packet data. |
