{"id":115,"date":"2014-04-08T13:14:39","date_gmt":"2014-04-08T18:14:39","guid":{"rendered":"https:\/\/adamkuj.net\/blog\/?p=115"},"modified":"2021-05-11T09:00:34","modified_gmt":"2021-05-11T14:00:34","slug":"a-utility-to-perform-ipv4-ipv6-prefix-aggregation","status":"publish","type":"post","link":"https:\/\/adamkuj.net\/blog\/2014\/04\/08\/a-utility-to-perform-ipv4-ipv6-prefix-aggregation\/","title":{"rendered":"A utility to perform IPv4 & IPv6 prefix aggregation"},"content":{"rendered":"

I’m a fan of the aggregate<\/a> program, which, in its own words, is used to “optimise a list of route prefixes to help make nice short filters”. However, it doesn’t work for IPv6! It was written by Joe Abley back in the 1990’s, and is useful in lots of scripts, but the lack of IPv6 support is starting to be an issue for me.<\/p>\n

Using the IPy python module<\/a>, I’ve created a similar tool that handles both IPv4 and IPv6 prefixes. Like the old tool, it can handle host addresses that don’t have a netmask specified, and can truncate the network portion to match the netmask if they are mismatched. I also added support for pre-1993 classful networking (since IOS and Quagga\/Zebra still seem to leave the mask off such networks, two decades post-CIDR).<\/p>\n

It doesn’t have all the features of the old aggregate command (i.e. –max-opt-lengh, etc), but it has all the features I used, and some that I had always wished for.<\/p>\n

<\/p>\n

[python collapse=”true” title=”aggregate.py” language=”true”]
\n#!\/usr\/bin\/python<\/p>\n

“””
\nALK 2014-04-08
\naggregate.py: IPv4 & IPv6 replacement (in spirit) for Joe Abley’s ‘aggregate’ command
\nnote: not a drop-in replacement for the original ‘aggregate’ command – command line flags are different
\nrequirements: IPy class (debian: python-ipy package)<\/p>\n

input: list of IPv4 and\/or IPv6 addresses and\/or subnets (filename or STDIN)
\noutput: aggregated list if subnets (STDOUT)<\/p>\n

options:
\n–host|-h: convert host addresses w\/o masks to IPv4 \/32 or IPv6 \/128 networks when sending output
\ni.e. 192.0.2.10 becomes 192.0.2.10\/32
\ni.e. 2001:db8:abcd:1234::d00d becomes 2001:db8:abcd:1234::d00d\/128)
\nnote: hosts (w\/o mask specified) are *always* permitted in the input, and will be auto-aggregated
\n–cidr|-c: convert IPv4 classfull networks without netmasks to proper cidr subnets
\ni.e. Class A: 10.0.0.0 becomes 10.0.0.0\/8 (but 10.1.0.0 fails, unless -h is used to make it 10.1.0.0\/32)
\ni.e. Class B: 172.24.0.0 becomes 172.24.0.0\/16 (but 172.24.10.0 fails, unless -h is used to make a \/32)
\ni.e. Class C: 192.0.0.0 becomes 192.0.0.0\/24)
\nif -h and -c are used concurrenty:
\n-c is evaluated first (otherwise anything w\/o a mask would be considered a host prefix)
\n–truncate|-t: prune the network portion to match the netmask
\n(i.e. 1.2.3.4\/24 becomes 1.2.3.0\/24)
\n(i.e. 2001:db8:abcd:1234::dead:beef\/64 becomes 2001:db8:abcd:1234::\/64
\n–ipv4|-4 or –ipv6|-6: display only IPv4 or only IPv6 prefixes
\n–ignore|-i: ignore lines that can’t be parsed (otherwise, program will exit w\/ error)
\n“””<\/p>\n

from IPy import IP, IPSet
\nimport argparse
\nimport fileinput
\nimport sys<\/p>\n

parser = argparse.ArgumentParser(conflict_handler=’resolve’)<\/p>\n

parser.add_argument(‘-t’, ‘–truncate’, action=’store_true’, dest=’truncate’, help=’truncate the network portion of the prefix to match the netmask (i.e. 192.0.2.10\/24 becomes 192.0.2.0\/24)’, default=False)
\nparser.add_argument(‘-h’, ‘–host’, action=’store_true’, dest=’host’, help=’convert host addresses w\/o masks to IPv4 \/32 or IPv6 \/128 networks’, default=None)
\nparser.add_argument(‘-c’, ‘–cidr’, dest=’cidr’, action=’store_true’, help=’add netmasks to classful IPv4 network definitions’)
\nparser.add_argument(‘-i’, ‘–ignore-errors’, dest=’ignore’, action=’store_true’, help=’discard malformed input lines instead of exiting’, default=False)
\nversion = parser.add_mutually_exclusive_group()
\nversion.add_argument(‘-4’, ‘–ipv4′, dest=’ipv6′, action=’store_false’, help=’display only IPv4 prefixes (default: show IPv4 & IPv6)’, default=True)
\nversion.add_argument(‘-6’, ‘–ipv6′, dest=’ipv4′, action=’store_false’, help=’display only IPv6 prefixes (default: show IPv4 & IPv6)’, default=True)
\nparser.add_argument(‘args’, nargs=argparse.REMAINDER, help='<input file> or STDIN’)
\nargs=parser.parse_args()<\/p>\n

s = IPSet() # the set of aggregated addresses<\/p>\n

try:
\nfor line in fileinput.input(args.args):
\ntry:
\nip = IP(line,make_net=args.truncate) # read the line as an IP network; truncate if -t was specified
\nexcept ValueError as err: # exception if the line can’t be parsed as an IP prefix
\nif args.ignore == False:
\nprint(err)
\nprint “exiting…”
\nsys.exit(1)<\/p>\n

# process -c option
\nif args.cidr:
\nif ip in IP(‘0.0.0.0\/1’) and ( ip.int() & 0x00ffffff == 0x00000000 ) and ip.prefixlen() == 32:
\nip=ip.make_net(8)
\nif ip in IP(‘128.0.0.0\/2’) and ( ip.int() & 0x0000ffff == 0x00000000 ) and ip.prefixlen() == 32:
\nip=ip.make_net(16)
\nif ip in IP(‘192.0.0.0\/3’) and ( ip.int() & 0x000000ff == 0x00000000 ) and ip.prefixlen() == 32:
\nip=ip.make_net(24)<\/p>\n

# process -h option
\nif args.host:
\nip.NoPrefixForSingleIp = None<\/p>\n

s.add(ip) # add the IP into the set, automatically aggregating as necessary<\/p>\n

except KeyboardInterrupt: # show usage if user exits w\/ CTRL-C
\nprint
\nparser.print_help()
\nsys.exit(1)<\/p>\n

# send the results to STDOUT
\nfor prefix in s:
\nif args.ipv4 & (prefix.version() == 4):
\nprint (prefix)
\nif args.ipv6 & (prefix.version() == 6):
\nprint (prefix)<\/p>\n

[\/python]<\/p>\n","protected":false},"excerpt":{"rendered":"

I’m a fan of the aggregate program, which, in its own words, is used to “optimise a list of route prefixes to help make nice short filters”. However, it doesn’t work for IPv6! It was written by Joe Abley back in the 1990’s, and is useful in lots of scripts, but the lack of IPv6 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[18,17,19,20,15],"class_list":["post-115","post","type-post","status-publish","format-standard","hentry","category-networking-tools","tag-aggregation","tag-cidr","tag-ipv6","tag-prefix-list","tag-python"],"_links":{"self":[{"href":"https:\/\/adamkuj.net\/blog\/wp-json\/wp\/v2\/posts\/115","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adamkuj.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adamkuj.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adamkuj.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/adamkuj.net\/blog\/wp-json\/wp\/v2\/comments?post=115"}],"version-history":[{"count":22,"href":"https:\/\/adamkuj.net\/blog\/wp-json\/wp\/v2\/posts\/115\/revisions"}],"predecessor-version":[{"id":318,"href":"https:\/\/adamkuj.net\/blog\/wp-json\/wp\/v2\/posts\/115\/revisions\/318"}],"wp:attachment":[{"href":"https:\/\/adamkuj.net\/blog\/wp-json\/wp\/v2\/media?parent=115"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adamkuj.net\/blog\/wp-json\/wp\/v2\/categories?post=115"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adamkuj.net\/blog\/wp-json\/wp\/v2\/tags?post=115"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}