Added new element, IPClassifier, which will be loved by all example c :: IPClassifier(tcp and dst host 10.0.0.20 and syn and not ack, src 18.26.4.0/24 tcp www, -) This required changes to Classifier to improve its optimizations, which means that Classifier may not be 100% correct, so if you are getting weird behavior, remember that. love, ed