if( exists $total{"$source$dport"}{'from'} ) {