https://www.sans.org/reading-room/whitepapers/detection/portknockout-data-exfiltration-port-knocking-udp-37307