my ($src, $tgt, $prt, $r); while(<>){ ($src, $tgt, $prt) = $_ =~ m/\s+(\S+)\s*\d+ dst outside (.*?) (\d+) by access-gr/; die "notgood: $_\n" unless $prt; $r->{$src}->{$tgt}->{$prt}++; } foreach $src (keys %{$r}) { # foreach source ip foreach $tgt (keys %{$r->{$src}}) { # foreach target ip foreach $prt (keys %{$r->{$src}->{$tgt}}) { printf "%-16s %-16s %-6s counted %d times\n", $src, $tgt, $prt, $r->{$src}->{$tgt}->{$prt}; } } }