Structure of an .ipsubnetrange file
An .ipsubnetrange file can be imported into, and exported from, various network trending settings. These files have a specific structure and allow subnet designations to be maintained outside of Observer. There is an expectation that such a file be “round tripped” back into Observer after changes are made.
 
Some limitations exist in how many subnets can be explicitly tracked for each network trending type. Explicitly tracked means that additional network trending statistics are measured for each defined subnet as a whole; however, these limitations do not influence how many subnets can be observed by Observer. These maximum tracked subnet ranges also means that your ipsubnetrange file(s) cannot have more entries than a network trending type supports. If you import an ipsubnetrange file having more entries than is supported by the target network trending type, only the first N-number will be successfully imported. These tracking limitations are as follows:
Network trending type
Maximum tracked subnet ranges
Application Performance Analysis
4 subnet ranges
Application Transaction Analysis
4 subnet ranges
IP Trending
128 subnet ranges
Microburst
16 subnet ranges
VoIP and Videoconferencing
16 subnet ranges
Because IP Trending supports the largest number of maximum tracked subnet ranges, its ipsubnetrange file structure is the one you should mimic when maintaining your list of subnet ranges. The file structure of IP Trending’s ipsubnetrange file can be imported into the subnet tracking of any other network trending type. Be aware that if you have a list of 128 subnet ranges in an ipsubnetrange file and import it into a different trending type than IP Trending, only its first four entries will be imported into Application Performance Analysis or Application Transaction Analysis respectively; only its first 16 entries will be imported into Microburst; and only its first 16 entries will be imported into VoIP and Videoconferencing.
This is an example of an ipsubnetrange file exported from the IP trending network trending type. The file extension must always be ipsubnetrange and the spacing between commas is can be space characters or tabs. The use and positions of commas in these examples is important. This is how the file is structured, and multiple examples are shown of the same file to examine different pieces of the whole.
 
 
The version number of the file format is highlighted. Always keep this at version 1.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0
 
 
The number of entries in this file is highlighted. Change it to match your list length.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0
 
 
The “original” type of ipsubnetrange structure is highlighted. Keep as is.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0
 
 
The configurable name of this subnet entry is highlighted. Keep these short.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0
 
 
The IP version type of ipsubnetrange entry is highlighted. 1=IPv4, 2=IPv6.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0
 
 
The scope of the subnet range is highlighted. 0=one subnet, 3=analyze traffic between two subnets.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0
 
 
Network speed in bits per second for this subnet is highlighted. Change accordingly, or set to '0' to use defaults.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0
 
 
The first address of the first subnet range is highlighted.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0
 
 
The last address of the first subnet range is highlighted.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0
 
 
The first address of the second subnet range is highlighted.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0
 
 
The last address of the second subnet range is highlighted.
1,4,4(IP Trending)
subnet 16 1,0,100000000,0,0,0,0, 10.0.16.1, 10.0.16.254, 0.0.0.0, 0.0.0.0
s48 to 64 1,3,100000000,0,0,0,0, 10.0.48.1, 10.0.48.254, 10.0.64.1, 10.0.64.254
subnet 64 1,0,100000000,0,0,0,0, 10.0.64.1, 10.0.64.254, 0.0.0.0, 0.0.0.0
subnet 23 1,0,250000000,0,0,0,0, 10.1.23.1, 10.1.23.254, 0.0.0.0, 0.0.0.0