A device receives Ethernet based tunnelled Internet Protocol (IP) traffic transmitted from a first network node towards a second network node of an IP communications network. The Ethernet based tunnelled IP traffic comprises an Ethernet based tunnelled IP packet that comprises a header and a payload. The header contains a destination Ethernet address and the payload contains an inner user IP header of an inner user IP packet. An Ethernet Switch modifies the destination Ethernet address contained in the header of the Ethernet based tunnelled IP packet based on the inner user IP header. One PU is selected, from the plurality of PUs, for traffic analysis of a data session comprising the Ethernet based tunnelled IP traffic. The Ethernet based tunnelled IP packet is to be redirected to the selected PU in accordance with the modified destination Ethernet address.