Follow-up on https://issues.redhat.com/browse/NETOBSERV-697
See also doc/discussion: https://docs.google.com/document/d/14ptPh60WtZavJ2q22BpHENibvhdAD4fLRRjBsHZBVjY/edit

In short, our "Common" filters come with a bunch of drawbacks:

• they lead to quite complexe queries
• as described in the linked doc they fall short in covering some common use cases, which is a cause of frustration

It seems they could be replaced with a checkbox "Include return traffic" (or "Include swapped src/dest") which, when enabled, will duplicate the query by switching all “source” and “destination” fields. See the mentioned document for a list of use cases better covered with this solution.