modifications of ipset to support hash:ip,net type