If you are willing to accept some acrobat, ipmask can be used even with variable net masks. | map search="| makeresults |fields - _*
| eval Network = ipmask(\"$Mask$\", $IP$), IP = $IP$, Mask =...
See more...
If you are willing to accept some acrobat, ipmask can be used even with variable net masks. | map search="| makeresults |fields - _*
| eval Network = ipmask(\"$Mask$\", $IP$), IP = $IP$, Mask = $Mask$" Emulated data below should give IP Mask Network 192.168.1.10 255.255.255.0 192.168.1.0 10.54.3.8 255.255.246.0 10.54.2.0 Here is the emulation for you to play with and compare with real data | makeresults format=csv data="IP, Mask
192.168.1.10, 255.255.255.0
10.54.3.8, 255.255.246.0" But again, to say 192.168.1.0 is a network address is (very) classism. The CIDR expressions should be IP Mask Network 192.168.1.10 255.255.255.0 192.168.1.0/24 10.54.3.8 255.255.248.0 10.54.0.0/21 N'est-ce pas? This can be obtained with a bit of bit math, like this: | map search="| makeresults |fields - _*
| eval Mask = split($Mask$, \".\"), Mask = 32 - sum(mvmap(Mask, log(256 - Mask,2))),
Network = ipmask(\"$Mask$\", $IP$) . \"/\" . Mask, IP = $IP$, Mask = $Mask$"
