Flow 1 risky: icmp 192.168.154.131 -> 192.168.154.132