crits/crits — pull request #354 by brlogan (2014-12-18 19:36:25+00:00)
Title: Change field_type of "originating_ip" to "Address - ipv4-addr"

If one clicks the plus button next to the "Originating IP" field in an email, an "Address - ipv4-addr" indicator is created and related, as you would expect. However, the code looks for a String relationship when determining if the plus button should have a circle around it or not. I'm guessing this was a copy/paste error. Changing the field_type of "originating_ip" from "String" to "Address - ipv4-addr" so that the created/related Indicator is recognized.