Great thanks. I hadn’t realised you could construct the “where” statement that way around (all examples I had seen were “where dst-address in x.x.x.x/y”).
Is there any documentation about how to construct these “where” clauses? I know regex is permitted using ~, but can’t see where it’s documented.