RWSETMEMBER(1)

NAME
rwsetmember - Determine whether IP address(es) are members of an IPset

SYNOPSIS
  rwsetmember [--count] [--quiet] PATTERN INPUT_SET...

  rwsetmember --help

  rwsetmember --version

DESCRIPTION
rwsetmember finds an IP address or pattern in one or more IPset files, printing the name of the IPsets that contain the IP, and optionally counting the number of matches in each file. PATTERN can be a single IP address, a CIDR block, or any IP range expressed in the same form as accepted by rwsetbuild(1).

If an INPUT_SET is not given on the command line, rwsetmember will attempt to read an IPset from the standard input.

OPTIONS
Option names may be abbreviated if the abbreviation is unique or is an exact match for an option. A parameter to an option may be specified as --arg=param or --arg param, though the first form is required for options that take optional parameters.

--count
    Follow each set filename by a colon character and the number of pattern matches in the IPset. Files that do not match will still be printed, but with a zero match count.

--quiet
    Produce no standard output. The exit status of the program (see below) should be checked to determine whether any files matched.

--help
    Print the available options and exit.

--version
    Print the version number and information about how SiLK was configured, then exit the application.

EXAMPLES
To quickly check whether a single set file contains an address (check the exit status):

  $ rwsetmember -q 192.168.1.1 file.set

To display which of several set files (if any) match a given IP address:

  $ rwsetmember 192.168.1.1 *.set

To display the same, but with counts from each file:

  $ rwsetmember -c 192.168.1.1 *.set

To find all sets that contain addresses in the 10.0.0.0/8 subnet:

  $ rwsetmember 10.0.0.0/8 *.set

To find files containing any IP address that ends with a number between 1 and 10 (this will use a lot of memory):

  $ rwsetmember x.x.x.1-10 *.set

EXIT STATUS
rwsetmember exits with status code 0 if any file matched the pattern, or 1 if there were no matches or if there was an error with the input.

SEE ALSO
rwset(1), rwsetbuild(1), rwsetcat(1)