Well this one may seem really obvious, but it confused me for a few minutes.
If when you look at an Incident or Session, you see some Source or Destination addresses in Italic Font, where as the rest are in Normal Font. What does this mean?
Well its dead simple! It means you have already looked at that Particular Source or Destination IP`s Static/Dynamic Info for that particular Session. Like a visited link on a webpage. Doh!!
Try it out, if you haven`t noticed it already.