https://labs.ripe.net/author/jan_rejchrt/network-anomaly-detection-do-we-know-what-to-detect/