Comment by Jolter

At least some enterprise IDS /AFW could presumably have a signature configured for this traffic scenario.