https://5dok.net/document/z3do5o57-flow-based-detection-ipv-specific-network-layer-attacks.html