Mentat

When creating simple reporting filter, putting both IPv4 and IPv6 addresses into Source IP field results in ANDing them together - which is satisfied very very rarely. Set of IPs of the same class is put into IN [a, b, c, ...] operator, and if both classes are present, resulting expression is IP4 IN [a, b, c, ...] AND IP6 IN [d, e, f, ...]. It probably appeared with #7581 - however, this combination is the exception and should be ORed (with higher precedence then other ANDed fields).