To provide a packet filter device which eliminates the need to provide a matching detecting circuit for each information kind of a received packet.
When a network I/F 101 receives a packet, a parameter extraction portion 102 extracts a parameter by referring to header information. Then a parameter fixed-length division portion 103 divides the extracted parameter to a predetermined length (fixed length), reads reference data for comparison out of a comparison data reference table portion 104 to makes a matching comparison of a divided parameter of the packet and a matching code output portion 106 outputs and holds a code corresponding to a matching entry (index information). A filtering rule decision portion 108 retrieves a matching filtering rule from a filtering rule reference table portion 107 based upon a set of codes corresponding to respective held parameters. When the reference data for comparison matches the parameter, a matching comparison result is output.
SUZUKI HIROYOSHI
INOSHITA AKIHITO
Tomoyasu Sakaguchi
Hiroki Naito
Next Patent: BASE STATION, MOBILE STATION, AND COMMUNICATION SYSTEM USING THE SAME