Anomaly Detection and Attack Classification for Train Real-time Ethernet