*snip* from=(111.111.111.111:1234) to=(22.22.22.22:80) *snip* ASCII ... from=(111.111.111.111:1234), localport=(80), *data here* *snip* from=(111.111.111.111:1234) to=(my.box.ip.addr:80) *snip* ASCII ... from=(111.111.111.111:1234), localport=(80), *data here* #### $_ = ; m/.*?\(([\d\.\:]*)\).*?\(([\d\.\:]*)\)(.*)/; ( $2 =~ m/:/ ) && ( $mine{$1} = ($2 eq $mybox) ) ; ( $2 =~ m/^\d+$/ ) && $mine{$1} && print $3;