[MEDIUM] handle .*%S; if token is an IP, we will skip it entirely

Signed-off-by: etienne basset <etienne.basset@numericable.fr>
[MINOR] stop_skip should be decremented by the number of bytes matched

Signed-off-by: etienne basset <etienne.basset@numericable.fr>
[DOC] update pattern matching notes

Signed-off-by: etienne basset <etienne.basset@numericable.fr>