The present disclosure provide a method for creating a stream forwarding entry includes: receiving, by a data communication device, a packet; making statistics on the received packet to obtain a statistical value of a stream corresponding to the packet; judging whether the statistical value of the stream exceeds a preset threshold value; and if exceeds the preset threshold value, creating, by the data communication device, a stream forwarding entry for the stream corresponding to the packet, and performing stream forwarding for subsequent packets of the stream according to the stream forwarding entry. Through the present disclosure, the number of stream forwarding entries in a stream table is reduced, the required storage space is reduced, and the maintenance of the stream table is simplified; moreover, the data communication device is not vulnerable to attacks of denial of service and is highly secure.