Your first set named 'test_ips' consisting of 11670 ranges can only be
converted to 15613 networks, i.e. members. Not all ranges can be expressed
with a single network.
I have a suggestion then: Is it possible to include the number of
members registered in the set in the set headers - something like
"Members: xxxxxx"? That way I won't be guessing how much members I have
in a set (particularly if members of said set run into many thousands)
and don't rely (as I did previously) on my text files to do "estimates",
which, as we've seen, could be wrong and misleading and I would be able
to view this with the "-terse" option.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html