Shape · Text

IP Parse

Splits IPv4 or IPv6 addresses and network ranges into host, family, netmask, network and broadcast address. Handy for grouping traffic by subnet.

Also known as: CIDR, subnet

How it works

Pick the IP address column; the Output prefix defaults to the column name plus an underscore. Five columns are appended: host, family (4 or 6), netmask, network and broadcast. A plain address is read as a /32 or /128; a CIDR value such as 10.0.0.5/24 gives the host and its network. A value that is not an address gives null in every part and the node reports the count. Parsing uses Python's ipaddress module, so it works offline, and runs once per distinct value.

Inputs and outputs

Settings

{
  column: string
  prefix?: string
}

Example

A firewall log has a client column and you want hits per subnet. Parse client and aggregate by client_network.

More in Text

• Text Operations — Cleans text columns: change case, trim spaces, find and replace, pad, cut, add a prefix or suffix, or take the length. One node can clean several columns.
• Regex Extract — Pulls pieces out of text with a regular expression, one new column per capture group, such as a postcode from an address.
• Tokenize — Finds every match of a regular expression in a text column, such as each number in 'a12 b34'. It spreads the matches across columns, gives each its own row, or turns each match's capture groups into columns.
• URL Parse — Splits a web address into its parts: scheme, host, port, path, query and fragment. For example, pull the domain out of referrer links.
• Slug — Turns text into a web-friendly form: lower case, no accents, hyphens between words. 'Hello, World! 2026' becomes 'hello-world-2026'.
• Base64 — Encodes a column to base64 text, or decodes base64 back to text or raw bytes.