Wow - all excellent suggestions. Rather than roll my own, I'm leaning toward using Net::Netmask. I had seen it, but didn't realize it could do quite exactly that.

Thanks, all.