Ip addresses (source, dest)  in match may be null