use warnings; use strict; my %ops; my %opType = (W => 'Write', R => 'Read'); while () { next if ($. == 1); chomp; my ($date, $ip, $op, $hits, $file) = split /,\s*/; next if !exists $opType{$op}; $ops{$opType{$op}}{$ip}{$file} += $hits; } report ($_, $ops{$_}) for 'Write', 'Read'; sub report { my ($type, $op) = @_; my @lines; print "\n\n\n"; print "=======\n"; print "${type}Operation \n"; print "=======\n"; for my $ip (keys %$op) { my $files = $op->{$ip}; for my $file (keys %{$files}) { my $hits = $op->{$ip}{$file}; push @lines, ["$ip - $file - $hits\n", $hits]; } } print $_->[0] for sort {$a->[1] <=> $b->[1]} @lines; } __DATA__ Sun Aug 21 12:08:21 2011,172.22.32.28, W, 4964,/export/file1.log Sun Aug 21 12:08:21 2011,172.22.32.28, W, 4964,/export/file2.log Sun Aug 21 12:08:21 2011,172.22.32.28, W, 4963,/export/file2.log Sun Aug 21 12:08:21 2011,172.22.112.141, W, 9292,/export/home/another.file Sun Aug 21 12:08:21 2011,172.22.32.28, W, 4964,/export/file2.log Sun Aug 21 12:08:21 2011,172.22.32.28, W, 2493,/export/file1.log Sun Aug 21 12:08:21 2011,172.22.32.28, W, 2355,/export/another.log Sun Aug 21 12:08:21 2011,172.22.32.28, R, 25,/export/another.log Sun Aug 21 12:08:21 2011,172.20.220.38, W, 3699,/export/file2.log Sun Aug 21 12:08:21 2011,172.20.220.146, W, 1996, Sun Aug 21 12:08:21 2011,172.22.32.28, W, 2776,/export/file1.log Sun Aug 21 12:08:21 2011,172.22.32.28, R, 26,/export/file1.log #### ======= WriteOperation ======= 172.20.220.146 - - 1996 172.22.32.28 - /export/another.log - 2355 172.20.220.38 - /export/file2.log - 3699 172.22.32.28 - /export/file1.log - 5269 172.22.112.141 - /export/home/another.file - 9292 172.22.32.28 - /export/file2.log - 14891 ======= ReadOperation ======= 172.22.32.28 - /export/another.log - 25 172.22.32.28 - /export/file1.log - 26