Security · 58 tools · nothing uploads

IP range parser

Parse an IPv4/IPv6 range ("start-end" or CIDR) into its address count and the minimal set of CIDR blocks that cover it exactly. Pure arithmetic, no lookup.

Options

live

IP range parser takes a start and end address, or a CIDR block, and reports the exact number of addresses with the CIDR blocks covering them. Blocks are chosen greedily: the largest one aligned to the current address that still fits, then onward from its end. Only the first 256 are listed, though the count stays exact.

Questions

What can I type into it?

Either a start and end pair such as 10.0.0.1-10.0.0.20, or a CIDR block such as 192.168.1.0/24, in IPv4 or IPv6. It prints the range endpoints, the exact address count, and the list of CIDR blocks that cover the range precisely.

How does it choose the CIDR blocks?

Greedily, and exactly. At each step it takes the largest block that is aligned to the current address and still fits inside the range, then continues from the end of it. The result covers your range with no address left out and none added, which is what makes it usable in a firewall or route table.

Why does it say truncated at 256?

Because an awkward range can need thousands of blocks, and printing all of them helps nobody. The total block count is still reported, with a plus sign, and only the first 256 are listed. Align your range to power of two boundaries if you want a shorter list.

What errors can I hit?

Three. Mixing families gives a message naming both endpoints as different address families. A start after the end gives "start address is after end address" with your input. Anything that is neither a range nor a CIDR gives a message asking for "start-end" or "address/prefix".

Is the address count exact for huge ranges?

Yes. The counting and the block splitting both use big integers, so an IPv6 range of astronomical size prints its true count rather than a rounded number in scientific notation. The CIDR list can still be truncated at 256 entries, but the count and the block total above it stay exact.

Related Security tools

·→1Subnet / CIDR calculatorCompute network address, broadcast/last address and host count for an IPv4 or IPv6 CIDR block. Pure arithmetic on the address you give it. No lookup, no network.Takes no file·→1IPv4/IPv6 format convertShow one IP address in every common representation (dotted/expanded, integer, and hex), computed locally.Takes no file·→1IPv6 transition addressesBuild IPv4-mapped/6to4/NAT64 IPv6 forms from an IPv4 address, or decode an IPv6 address back to its embedded IPv4 (and, for Teredo, server/client/port/flags). Reports what pattern was recognised, not whether the address is reachable or in use.Takes no filen→nIPv4 / TCP / UDP header parserDecode an IPv4 header, then its TCP or UDP header if the protocol field says so (checksum verified against the standard Internet checksum, not TCP/UDP's, which need a pseudo-header this tool is not given the source context to build). Give it bytes starting at the IP header, e.g. an Ethernet frame's payload.Runs on each file you dropn→nEthernet frame parserDecode an Ethernet II frame: destination/source MAC, EtherType (unwrapping one 802.1Q VLAN tag if present), and payload length. IEEE 802.3 LLC/SNAP framing is not handled, only Ethernet II.Runs on each file you dropn→nTLS record parserDecode a raw TLS record (RFC 8446 §5.1): content type, version, length, and for a ClientHello/ServerHello, the cipher suites/extensions inside. Give it bytes captured off the wire, not a PEM.Runs on each file you drop·→1MAC address formatterReformat a MAC address between colon, dash, Cisco dot-quad and bare-hex notation, and report the multicast/locally-administered bits.Takes no file·→1MAC / OUI vendor lookupLook up a MAC address's OUI against a small bundled table of 16 well-known prefixes, not the IEEE registry (2.9M+ entries, updated continuously, no offline way to bundle it here). "Not in bundled list" means exactly that, not "no vendor exists."Takes no file