tokenize "from:<ip>" properly. Also tokenize ipv4, ipv6 & email.