Is TCP Null Packets only used for port scanning and then for a subsequent attack or it can be a genuine traffic also,if its a genuine traffic what are the critaria it must posses