ipv4_address_in_network

ipv4_address_in_network(ipv4: ipv4 or string, netv4: string) -> bool

Test whether an IPv4 address is in a given subnet.

Given an IPv4 address string in dotted-quad format on the left, and a subnet
slashed-dotted-quad subnet string on the right, test whether the address on the
left belongs to the subnet on the right. Note that this function does not support the
"class" and "private" subnet network addresses on the right.

This function returns a boolean true if the address is considered part of the
subnet, or false if it isn't, or null if either address or subnet is not
properly formatted.

Domain

This is a scalar function (calculates a single output value for a single input row).

Categories

Examples

If the given addrstr is considered to be within the network described by netstr, keep the event, else discard it.

addrstr (input)netstr (input)match (output)comment
11.0.0.110.0.0.1/8falseCIDR mismatch
193.168.48.17193.168.0.0/16trueCIDR match
10.0.0.1/1610.0.0.1/8nullinvalid address
localhost10.0.0.1/8nullinvalid address
213070643210.0.0.1/8nullinvalid address
193.168.48.172130706432nullinvalid network