#!/usr/bin/perl -w
use strict;

my %data;
my ($src, $dest, $dst_port);

while (<DATA>) {
    chomp;
    my ($src, $dest, $dst_port) = (split, $_)[5,9,10];
    $data{$src}{$dest}{$dst_port}++;
}

for $src (sort by_ip keys %data) {
    for $dest (sort by_ip keys %{$data{$src}}) {
        for $dst_port (sort keys %{$data{$src}{$dest}}) {
            print "$src $dest $dst_port $data{$src}{$dest}{$dst_port}\n";
        }
    }
}

sub ipto32bit {
    my ($ip, $c, $d, $e, $f);
    $ip = shift;
    ($c,$d,$e,$f) = split(/\./,$ip);
    return ($c << 24) + ($d << 16) + ($e << 8) + $f;
}

sub by_ip {
    ipto32bit($a) <=> ipto32bit($b);
}

__DATA__
%PIX-4-106023 Deny udp src inside 1.1.1.1 1161 dst outside 3.3.3.3 53 by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 1.1.1.1 1637 dst outside 4.4.4.4 80 by access-group inside_access_in
# etc... rest omitted for brevity