3.5 Specify IP Addresses and Subnets

Your query can include IPv4, IPv6, and MAC addresses.

3.5.1 How Search Stores IP and MAC Addresses

Search stores IPv4, IPv6, and MAC adresses addresses in a format that provides search flexibility and enables you to perform the following actions:

Compare IP addresses for optimum performance

For example, Agent Address > 192.10.11.12.

Specify a range of IP addresses

For example, you can enter the following types of queries:

  • Agent Address in between 192.2.13.1 and 192.2.13.11

  • Source Address greater equal than 192.10.11.12

  • Destination Address less than 192.112.98.33

Use abbreviated input search notation

You can enter the following types of queries:

  • To specify IP addresses in the subnet starting with a particular value:

    Agent Address in subnet 192.*

  • To specify an IPv4 address in a subnet that uses CIDR notation. The first eight bits are the network part of the address, leaving the last 24 bits for specific host addresses.

    Agent Address in subnet 192.0.0.0/8

  • To specify an agent address in a subnet that uses CIDR notation. The first 24 bits are the network part of the address, leaving the last 40 bits for specific host addresses.

    Agent Address in subnet 2001:0db8:0000:0000:0000:ff00:0042:8329/24

Search stores MAC addresses in their original format.

3.5.2 Enter an IP or MAC Address

You can enter IP addreses in the following formats:

  • aa:aa:aa:aa:aa:aa

  • aa-aa-aa-aa-aa-aa

The following table lists the query format and examples for the type of IP address.

Type of address

Format in a query...

Examples

IPv4

a.b.c.d

  • a.*
  • a.b.*
  • a.b.c.*
  • a.b.c.d/8

IPv6

Full form

2001:0db8:0000:0000:0000:ff00:0042:8329

 

Canonical form without leading zeroes in each group

2001:db8:0:0:0:ff00:42:8329

 

Canonical form without consecutive sections of zeroes

2001:db8::ff00:42:8329

IPv6 in a subnet

Include CIDR notation

  • 2001:0db8:0000:0000:0000:ff00:0042:8329
  • 2001:0db8:0000:0000:0000:ff00:0042:8329/24
  • 2001:db8::/32

NOTE:For the 2001:db8::/32 format, you can omit part of the IPv6 address, depending on the subnet that you are querying.

MAC

  • a:b:c:d:e:f
  • a-b-c-d-e-f
  • 94:18:82:6D:63:74
  • 94-18-82-6D-63-74