my @to_match = qw ( IP ICMP TCP UDP EVENTS DROP );
my $pat = join ',', map { $_ . '=(\d+)' } @to_match;
my ( $date, @total_counts );
while ( <DATA> ) {
   if ( /^(\d{4})(\w{3})(\d{2})/ ) {
      # print OUTFILE join ( ',', "$date", @total_counts ), "\n" if $date;
      print join ( ',', "$date", @total_counts ), "\n" if $date;
      $date = "$2 $3 $1";
      @total_counts = ();
   }
   elsif ( /^EVENT1:\s+\[\w+\]\s+/ ) {
      if ( my @counts = /$pat/ ) {
         $total_counts[$_] += $counts[$_] for 0 .. $#counts;
      }
      else {
         print STDERR "Possible corrupt data line $.:\n  $_",
            "Line ignored!\n";
      }
   }
}
# print OUTFILE join ( ',', "$date", @total_counts ) if $date;
print join ( ',', "$date", @total_counts ) if $date;

__DATA__
2003Aug01/
EVENT1: [HEARTBEAT] (IP=1260953,ICMP=898,TCP=1236959,UDP=22477,EVENTS=950,DROP=0,VER=6.0.1)
EVENT1: [HEARTBEAT] (IP=1217149,ICMP=874,TCP=1193416,UDP=22133,EVENTS=811,DROP=0,VER=6.0.1)
2003Aug02/
EVENT1: [HEARTBEAT] (IP=640626,ICMP=855,TCP=620893,UDP=18614,EVENTS=71<oops!>
Connection down!
Reconnecting.......
EVENT1: [HEARTBEAT] (IP=640626,ICMP=855,TCP=620893,UDP=18614,EVENTS=714,DROP=0,VER=6.0.1)
EVENT1: [HEARTBEAT] (IP=652513,ICMP=830,TCP=631758,UDP=19671,EVENTS=722,DROP=0,VER=6.0.1)