A security analyst suspects that a compromised internal workstation is sending large volumes of data to an external host during off-hours. The analyst needs a data source that will show the volume of traffic, source and destination IP addresses, and ports of the conversations without capturing the full packet payloads. Which tool BEST meets this requirement?