NAME

       iprange - manage IP ranges

SYNOPSIS

       iprange [options] file1 file2 file3 ...

DESCRIPTION

       iprange manages IP ranges

OPTIONS

       multiple options are aliases

   CIDR output modes:
       --optimize

       --combine

       --merge

       --union

       -J

              > MERGE mode (the default)

              Returns all IPs found on all files.  The resulting set is sorted.

       --common

       --intersect

              > COMMON mode

              Intersect all files to find their common IPs.  The resulting set is sorted.

       --except

       --exclude-next

              > EXCEPT mode

              Here  is  how  it  works:  (1) merge all files before this parameter (ipset A); (2)
              remove all IPs found in the files after this parameter, from ipset A and print what
              remains.  The resulting set is sorted.

       --diff

       --diff-next

              > DIFF mode

              Here  is  how  it  works:  (1) merge all files before this parameter (ipset A); (2)
              merge all files after this parameter (ipset B); (3) print all differences between A
              and  B, i.e IPs found is either A or B, but not both.  The resulting set is sorted.
              When there are differences between A and B, iprange exits with 1, with 0 otherwise.

       --ipset-reduce PERCENT

       --reduce-factor PERCENT

              > IPSET REDUCE mode

              Merge all files and print the merged set, but try to reduce the number of  prefixes
              (subnets)  found, while allowing some increase in entries.  The PERCENT is how much
              percent to allow increase on the number of entries in order to reduce the  prefixes
              (subnets)  (the  internal  default  PERCENT  is 20).  Use -v to see exactly what it
              does.  The resulting set is sorted.

       --ipset-reduce-entries ENTRIES

       --reduce-entries ENTRIES

              > IPSET REDUCE mode

              Allow increasing the entries above PERCENT, if they are below ENTRIES (the internal
              default ENTRIES is 16384).

   CSV output modes:
       --compare

              > COMPARE ALL mode

              Compare all files with all other files.  Add --header to get the CSV header too.

       --compare-first

              > COMPARE FIRST mode

              Compare  the  first  file with all other files.  Add --header to get the CSV header
              too.

       --compare-next

              > COMPARE NEXT mode

              Compare all the files that appear before this parameter, to all files  that  appear
              after this parameter.  Add --header to get the CSV header too.

       --count-unique

       -C

              > COUNT UNIQUE mode

              Merge all files and print its counts.  Add --header to get the CSV header too.

       --count-unique-all

              > COUNT UNIQUE ALL mode

              Print counts for each file.  Add --header to get the CSV header too.

   Controlling input:
       --dont-fix-network

              By  default, the network address of all CIDRs is used (i.e., 1.1.1.17/24 is read as
              1.1.1.0/24): this option disables  this  feature  (i.e.,  1.1.1.17/24  is  read  as
              1.1.1.17-1.1.1.255).

       --default-prefix PREFIX

       -p PREFIX

              Set the default prefix for all IPs without mask (the default is 32).

   Controlling CIDR output:
       --min-prefix N

              Do  not  generate  prefixes larger than N, i.e., if N is 24 then /24 to /32 entries
              will be generated (a /16 network will be generated using  multiple  /24  networks).
              This  is  useful  to optimize netfilter/iptables ipsets where each different prefix
              increases the lookup time for each packet whereas the  number  of  entries  in  the
              ipset  do  not  affect  its  performance.   With  this setting more entries will be
              produced to accomplish the same match.   WARNING:  misuse  of  this  parameter  can
              create a large number of entries in the generated set.

       --prefixes N,N,N, ...

              Enable  only  the given prefixes to express all CIDRs; prefix 32 is always enabled.
              WARNING: misuse of this parameter can create a  large  number  of  entries  in  the
              generated set.

       --print-ranges

       -j

              Print  IP ranges (A.A.A.A-B.B.B.B) (the default is to print CIDRs (A.A.A.A/B)).  It
              only applies when the output is not CSV.

       --print-single-ips

       -1

              Print single IPs; this can produce large output (the  default  is  to  print  CIDRs
              (A.A.A.A/B)).  It only applies when the output is not CSV.

       --print-binary

              Print  binary data: this is the fastest way to print a large ipset.  The result can
              be read by iprange on the same architecture (no conversion of endianness).

       --print-prefix STRING

              Print STRING before each IP, range or CIDR.  This sets both --print-prefix-ips  and
              --print-prefix-nets .

       --print-prefix-ips STRING

              Print  STRING  before each single IP: useful for entering single IPs to a different
              ipset than the networks.

       --print-prefix-nets STRING

              Print STRING before each range or CIDR: useful for entering sunbets to a  different
              ipset than single IPs.

       --print-suffix STRING

              Print  STRING  after each IP, range or CIDR.  This sets both --print-suffix-ips and
              --print-suffix-nets .

       --print-suffix-ips STRING

              Print STRING after each single IP: useful for giving  single  IPs  different  ipset
              options.

       --print-suffix-nets STRING

              Print  STRING  after  each range or CIDR: useful for giving subnets different ipset
              options.

       --quiet

              Do not print the actual ipset.  Can only be used in DIFF mode.

   Controlling CSV output:
       --header

              When the output is CSV, print the header line (the default  is  to  not  print  the
              header line).

   Controlling DNS resolution:
       --dns-threads NUMBER

              The  number  of  parallel  DNS  queries  to  execute  when  the input files contain
              hostnames (the default is 5).

       --dns-silent

              Do not print DNS resolution errors  (the  default  is  to  print  all  DNS  related
              errors).

       --dns-progress

              Print DNS resolution progress bar.

   Other options:
       --has-compare

       --has-reduce

              Exits  with  0,  other  versions  of  iprange will exit with 1.  Use this option in
              scripts to find if this version of iprange is present in a system.

       -v

              Be verbose on stderr.

   Getting help:
       --version

              Print version and exit.

       --help

       -h

              Print this message and exit.

FILES

   Input files:
              > fileN

              A filename or - for stdin.  Each filename can be followed by [as  NAME]  to  change
              its name in the CSV output.  If no filename is given, stdin is assumed.

              Files  may  contain  any or all of the following: (1) comments starting with hashes
              (#) or semicolons (;); (2) one IP per line (without mask);  (3)  a  CIDR  per  line
              (A.A.A.A/B);  (4)  an  IP  range per line (A.A.A.A - B.B.B.B); (5) a CIDR range per
              line (A.A.A.A/B - C.C.C.C/D); the range is calculated as  the  network  address  of
              A.A.A.A/B   to   the   broadcast   address   of  C.C.C.C/D  (this  is  affected  by
              --dont-fix-network); (6) CIDRs can be given in either prefix or netmask  format  in
              all  cases  (including  ranges); (7) one hostname per line, to be resolved with DNS
              (if the IP resolves to multiple IPs, all of  them  will  be  added  to  the  ipset)
              hostnames cannot be given as ranges; (8) spaces and empty lines are ignored.

              Any number of files can be given.

COPYRIGHT

       Copyright © 2015-2017 Costa Tsaousis for FireHOL (Refactored and extended)
       Copyright © 2004 Paul Townsend (Adapted)
       Copyright © 2003 Gabriel L. Somlo (Original)

       License:  GPLv2+:  GNU  GPL  version 2 or later <http://gnu.org/licenses/gpl2.html>.  This
       program comes with ABSOLUTELY NO WARRANTY; This is free software, and you are  welcome  to
       redistribute  it  under  certain  conditions;  See  COPYING  distributed in the source for
       details.