Specify IP Addresses and Subnets

Your query can include IPv4, IPv6, and MAC addresses. Search stores IPv4, IPv6, and MAC addresses in a format that provides search flexibility and enables you to perform the following actions:

Compare IP addresses for optimum performance

For example, Agent Address > 192.10.11.12.

Specify a range of IP addresses

For example, you can enter the following types of queries:

  • Agent Address in between 192.2.13.1 and 192.2.13.11

  • Source Address greater equal than 192.10.11.12

  • Destination Address less than 192.112.98.33

Specify a range of IP addresses

For example, you can enter the following types of queries:

  • Agent Address in between 192.2.13.1 and 192.2.13.11

  • Source Address greater equal than 192.10.11.12

  • Destination Address less than 192.112.98.33

Use abbreviated input search notation

You can enter the following types of queries:

  • To specify IP addresses in the subnet starting with a particular value:
    Agent Address in subnet 192.*

  • To specify an IPv4 address in a subnet that uses CIDR notation. The first eight bits are the network part of the address, leaving the last 24 bits for specific host addresses.
    Agent Address in subnet 192.0.0.0/8

  • To specify an agent address in a subnet that uses CIDR notation. The first 24 bits are the network part of the address, leaving the last 40 bits for specific host addresses.
    Agent Address in subnet 2001:0db8:0000:0000:0000:ff00:0042:8329/24

Search stores MAC addresses in their original format.

To enter an IP or MAC address in a search query:

Enter the MAC addresses in the following formats:

The following table lists the query format and examples for the type of IP address.

Type of address

Format in a query...

Examples

IPv4

a.b.c.d

a.*

a.b.*

a.b.c.*

a.b.c.d/8

IPv6

Full form

2001:0db8:0000:0000:0000:ff00:0042:8329

 

Canonical form without leading zeroes in each group

2001:db8:0:0:0:ff00:42:8329

 

Canonical form without consecutive sections of zeroes

2001:db8::ff00:42:8329

IPv6 in a subnet

Include CIDR notation

2001:0db8:0000:0000:0000:ff00:0042:8329

2001:0db8:0000:0000:0000:ff00:0042:8329/24

2001:db8::/32

NOTE: For the 2001:db8::/32 format, you can omit part of the IPv6 address, depending on the subnet that you are querying.

MAC

a:b:c:d:e:f

a-b-c-d-e-f

94:18:82:6D:63:74

94-18-82-6D-63-74