ipset modifications to support hash:ip,net type