Therefore the question is in fact, if the data packet is a first data packet of a connection.) If the data packet is the first data packet of a tunnel, the value of at least one outer header field of the tunneled data packet is matched to a first rule in step 402.