Just curious. tcpdump has the handy "host blah" syntax, where it implies src or dst.
Some of my rules could be simplified with a "from or to" sort of syntax. If it doesn't exist, I'll put it on my "to code some day" list. -- "Curiousity killed the cat, but for a while I was a suspect" -- Steven Wright Security Guru for Hire http://www.lightconsulting.com/~travis/ -><- GPG fingerprint: 9D3F 395A DAC5 5CCC 9066 151D 0A6B 4098 0C55 1484