application mapping and ip addresses

Pretty sure i've discussed this with support before, but I can't find the response.

I'm wondering why if I create an App using a large range of ports and map it to a specific ip address. the tool still displays traffic that doesn't include that ip address

For example, exchange, uses a lot of ports. I want to categorize anything to that IP address as exchange traffic. What get though is that App i created contains flows that are not sourced or destined to the IP i specified. Why is this? it seems to be to break the intentions of why yr even able to associate an app with an IP(s)

thanks

tony
app definition
1 to 64000 TCP 10.40.0.159 excls1
results from app check on interface

Source IP Destination IP Application Port Protocol Traffic(457.41 MB) % of Traffic
10.40.0.159 172.18.34.159 excls1 1 - 64000 TCP 132.49 MB 29%
10.40.0.159 172.18.34.148 excls1 1 - 64000 TCP 104.01 MB 23%
10.40.0.159 172.18.35.164 excls1 1 - 64000 TCP 12.99 MB 3%
10.60.0.126 172.18.33.170 excls1 1 - 64000 TCP 9.9 MB 2%
10.40.0.159 172.18.35.29 excls1 1 - 64000 TCP 6.04 MB 1%
10.40.0.159 172.18.35.33 excls1 1 - 64000 TCP 5.99 MB 1%
10.40.0.56 172.18.34.159 excls1 1 - 64000 TCP 5.57 MB 1%
10.40.0.56 172.18.33.84 excls1 1 - 64000 TCP 5.09 MB 1%