I have not used it myself - and it's not Perl - but it might be what you're looking for, even so.
In reply to Re: Snort by mrbbking in thread Snort output; report changes only? by satanklawz