What is a firewalld ipset entry?

From the firewalld documentation, it is totally unclear to me what an entry is. I gather from man ipset(8) that it is somehow connected with options, but the nature of the relationship is unclear. I gather that options can be:

timeout
counters
packets
bytes
comment
skbinfo
skbmark
skbprio
skbqueue
hashsize
maxelem
bucketsize
family inet/inet6 (though firewall-cmd keeps it separately)
nomatch
forceadd
wildcard

So, what can entries be and what do they signify?

1 Like

I’ve come from those pages. They may explain something to someone who is familiar with firewalld, but they explain nothing at all to me. This is why I ask the original question: what is the definition of an entry?