1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
|
#compdef ipset
local offset=0
local -a args from_to hash cmds listopts
_set_types () {
_values -S \ "Set type" \
'ipmap[up to 65536 IP addresses]' \
'macipmap[up to 65536 IP addresses with MAC]' \
'portmap[up to 65536 ports]' \
'iphash[hash of IP addresses]' \
'nethash[hash of network addresses]' \
'ipporthash[hash of IP address and port pairs]' \
'ipportiphash[hash of IP address,port and IP address triples]' \
'ipportnethash[hash of IP address,port and network address triples]' \
'iptree[tree of IP addresses, optionally with timeout]' \
'iptreemap[tree of IP addresses or networks]' \
'setlist[list of sets]'
}
if [[ $words[2] = (-q|--quiet) ]]; then
offset=1
fi
_ipsets () {
local -a vals
vals=( ${${(M)${(f)"$(_call_program ipsets ipset -nL)"}%Name: *}#Name: } )
_describe -t ipsets "IP sets" vals
}
_sets () {
_ipsets
local -a vals
case $words[offset+2]; in
-X|--destroy)
vals=('\:all\::remove all not referenced sets')
;;
-F|--flush)
vals=('\:all\::flush all sets')
;;
-L|--list|-nL|-sL|-nsL|-snL|-n|-s|-ns|-sn)
vals=('\:all\::list all sets')
;;
-S|--save)
vals=('\:all\::save all sets')
esac
_describe -t special_values "special values" vals
}
from_to=('(--network)--from[from IP or network (with --netmask)]:IP'
'(--network)--to[to IP or network (with --netmask)]:IP'
'(--from --to)--network[network]:IP/mask'
)
hash=( '--hashsize[the initial hash size (default 1024)]:hash size'
'--probes[max number of tries to resolve clashing (default 8)]:probes'
'--resize[ratio of increasing hash size after unsuccessful <probes> number of double-hashing]:percent'
)
case $words[offset+2]; in
-N|--create)
case $words[offset+4]; in
ipmap)
args=( $from_to
'--netmask[store network addresses instead of IP addresses]:CIDR'
)
;;
macipmap)
args=( $from_to
'--matchunset[always match IP addresses which could be stored in the set but are not]'
)
;;
portmap)
args=( '--from[from port]:port:_ports'
'--to[to port]:port:_ports'
)
;;
iphash)
args=( $hash
'--netmask[store network addresses instead of IP addresses]:CIDR'
)
;;
nethash)
args=( $hash )
;;
ipporthash|ipportiphash|ipportnethash)
args=( $from_to $hash )
;;
iptree)
args=( '--timeout[timeout value for the entries in seconds (default 0)]:timeout' )
;;
iptreemap)
args=( '--gc[garbage collection inverval (default 300 seconds)]:timeout' )
;;
setlist)
args=( '--size[size of the new setlist (default 8)]:size' )
;;
esac
;;
-T|--test)
args=( '(-b --binding)'{-b,--binding}'[test whether '$words[offset+4]' points to the specified binding]:::_ipsets' )
;;
-B|--bind)
args=( '(-b --binding)'{-b,--binding}'[value of the binding]:::_ipsets' )
;;
esac
_ips () {
if [[ $CURRENT -eq ((offset+4)) ]]; then
local ips=1 default
local -a vals vals1 vals2 bindings
vals=( ${${${(f)"$(_call_program ipsets ipset -nL $words[offset+3])"}[4,-1]}//\:/\\:} )
for i in $vals; do
if [[ $i = Default\ binding\\:* ]]; then default=${i#Default binding\\: }; continue; fi
if [[ $i = (Header\\:*|Members\\:) ]]; then continue; fi
if [[ $i = 'Bindings\:' ]]; then ips=0; continue; fi
if (( $ips )); then vals1+=$i; else bindings+=${i/ ->/:}; fi
done
case $words[offset+2]; in
-T|--test)
vals2=('\:default\::test default binding of the set for --binding')
;;
-B|--binding)
vals2=('\:default\::set default binding of the set')
;;
-U|--unbind)
vals1=()
vals2=('\:all\::destroy the bindings of all elements of a set')
if [[ -n "$default" ]]; then
vals2+=("\:default\::remove default binding of the set to '$default'")
fi
_describe -t ipb "IPs from $words[offset+3] set with bindings" bindings
;;
esac
_describe -t ips "IPs from $words[offset+3] set" vals1
_describe -t special_values "special values" vals2
fi
}
cmds=(-N -X -F -E -W -S -R -A -D -T -B -U -H --create --destroy --flush --rename --swap --save --restore --add --del --test --bind --unbind --help)
listopts=(-n --numeric -s --sorted -L --list -nL -sL -nsL -snL -ns -sn)
_arguments \
"($cmds $listopts)"{-N,--create}'[create a set]:set name::::_set_types' \
"($cmds $listopts)"{-X,--destroy}'[destroy specified set (or all if none specified)]:set name:_sets' \
"($cmds $listopts)"{-F,--flush}'[flush specified set (or all if none specified)]:set name:_sets' \
"($cmds $listopts)"{-E,--rename}'[rename set]:current set name:_ipsets:new set name:' \
"($cmds $listopts)"{-W,--swap}'[swap two sets]:::_ipsets:::_ipsets' \
"($cmds -L --list -q --quiet -nL -sL -nsL -snL)"{-L,--list}'[list the entries and bindings for the specified set (or all if none specified)]:::_sets' \
"($cmds -L --list -q --quiet -n --numeric -snL -nsL -sL -ns -sn)"-nL'[list the entries and bindings for the specified set (or all if none specified) \- numeric output]:::_sets' \
"($cmds -L --list -q --quiet -s --sorted -snL -nsL -nL -ns -sn)"-sL'[list the entries and bindings for the specified set (or all if none specified) \- sorted output]:::_sets' \
"($cmds $listopts -q --quiet)"{-nsL,-snL}'[list the entries and bindings for the specified set (or all if none specified) \- sorted numeric output]:::_sets' \
"($cmds $listopts)"{-S,--save}'[save the given set (or all if none specified)]:::_sets' \
"($cmds $listopts)"{-R,--restore}'[restore a saved session generated by --save from stdin]' \
"($cmds $listopts)"{-A,--add}'[add an IP to a set]:::_ipsets:IP' \
"($cmds $listopts)"{-D,--del}'[delete an IP from a set]:::_ipsets:::_ips' \
"($cmds $listopts)"{-T,--test}'[test wether an IP is in a set or the IP points to the specified binding]:::_ipsets:::_ips' \
"($cmds $listopts)"{-B,--bind}'[bind the IP in setname to to-setname]:::_ipsets:::_ips' \
"($cmds $listopts)"{-U,--unbind}'[delete the binding belonging to IP in set setname]:::_ipsets:::_ips' \
"($cmds $listopts)"{-H,--help}'[print help and settype specific help if settype specified]:::_set_types' \
"(-q --quiet $listopts)"{-q,--quiet}'[suppress any output to stdout and stderr]' \
"($cmds -s --sorted -q --quiet -sL -nsL -snL -ns -sn)"{-s,--sorted}'[sorted output]' \
"($cmds -n --numeric -q --quiet -nL -nsL -snL -ns -sn)"{-n,--numeric}"[numeric output; don't resolve host names, network names and services]" \
"($cmds -ns -sn -q --quiet -nL -sL -nsL -snL -n --numeric -s --sorted)"{-ns,-sn}'[sorted numeric output]' \
"$args[@]"
|
