Optional ip address and ports on a monitored
interface. The 'locality' attribute is a string
that indicates the relative location of the ip
address within the network mapping, such as whether
the address falls within the address range of a
protected network. The optional 'proxy' attribute
is 'true' if the sensor has reason to suspect that
the address given is not the address of the true
attacker. This could be a the result of address
spoofing or because the host has been compromised
and is acting as a 'zombie'. The 'proxy' attribute
may be omitted if and only if its value is false.