A network engineer is troubleshooting an intermittent connectivity issue on a busy WAN router. Traffic from a single host (10.1.1.50) to a remote server needs to be examined, but running 'debug ip packet detail' floods the console and spikes CPU because of the high traffic volume. The engineer wants to limit the debug output to only packets to/from that one host without impacting other traffic. Which action correctly restricts the debug output?