NAME

       ipsetbuild - utility of libcorkipset library

SYNOPSIS

       ipsetbuild [options] <input file>...

DESCRIPTION

       Constructs a binary IP set file from a list of IP addresses and networks.

OPTIONS

              <input file>...

              A  list  of text files that contain the IP addresses and networks to add to the set.  To read from
              stdin, use "-" as the filename.

       --output=<filename>, -o <filename>

       Writes the binary IP set file to <filename>.
              If this option isn't

              given, then the binary set will be written to standard output.

       --loose-cidr, -l

              Be more lenient about the address portion of any CIDR network blocks found in the input file.

       --verbose, -v

              Show summary information about the IP set that's built, as well as progress information about  the
              files  being  read  and  written.  If this option is not given, the only output will be any error,
              alert, or warning messages that occur.

       --quiet, -q

              Show only error message for malformed input. All warnings, alerts, and summary  information  about
              the IP set is suppressed.

       --help

              Display this help and exit.

   Input format:
       Each input file must contain one IP address or network per line.
              Lines

       beginning with a "#" are considered comments and are ignored.
              Each

              IP address must have one of the following formats:

              x.x.x.x                    x.x.x.x/cidr                    xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
              xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/cidr

              The first two are for IPv4 addresses and networks; the second two for IPv6 addresses and networks.
              For IPv6 addresses, you can use the "::" shorthand notation to collapse consecutive "0" portions.

              If  an  address contains a "/cidr" suffix, then the entire CIDR network of addresses will be added
              to the set.  You must ensure that the loworder bits of the address are set to  0;  if  not,  we'll
              raise an error.  (If you pass in the "--loose-cidr" option, we won't perform this sanity check.)

              You can also prefix any input line with an exclamation point ("!").  This causes the given address
              or network to be REMOVED from the output set.  This notation can be useful to define  a  set  that
              contains most of the addresses in a large CIDR block, except for addresses at certain "holes".

              The  order  of  the  addresses  and networks given to ipsetbuild does not matter.  If a particular
              address is added to the set more than once, or removed from the set more than once, whether on its
              own  or  via a CIDR network, then you will get a warning message.  (You can silence these warnings
              with the --quiet option.)  If an address is both added to and  removed  from  the  set,  then  the
              removal takes precedence, regardless of where the relevant lines appear in the input file.