I put this script together but I will have to learn to type faster as other Monks have beaten me to the punch as usual. In particular, ++ to McDarren's sub by_ip and sub ipto32bit which are much neater than my sort. Anyway, better late than never.

use strict;
use warnings;

my $rcSortAll = sub
   {
       my @partsA = split /[.:]/, $a;
       my @partsB = split /[.:]/, $b;
       return
          $partsA[0] <=> $partsB[0] ||
          $partsA[1] <=> $partsB[1] ||
          $partsA[2] <=> $partsB[2] ||
          $partsA[3] <=> $partsB[3] ||
          $partsA[4] <=> $partsB[4] ||
          $partsA[5] <=> $partsB[5] ||
          $partsA[6] <=> $partsB[6] ||
          $partsA[7] <=> $partsB[7] ||
          $partsA[8] <=> $partsB[8];
   };

my $rxIP = qr{((?:\d+\.){3}\d+)};
my $rxExtract = qr{(?x)
   inside\s+
   $rxIP
   .*outside\s+
   $rxIP
   \s+(\d+)};

my $rhLogInfo = {};
while(<DATA>)
{
    next unless /$rxExtract/;
    $rhLogInfo->{join ':', $1, $2, $3} ++;
}

foreach my $key (sort $rcSortAll keys %$rhLogInfo)
{
    (my $spaced = $key) =~ s/:/ /g;
    print "$spaced $rhLogInfo->{$key}\n";
}

__END__
%PIX-4-106023 Deny udp src inside 1.1.1.1 1161 dst outside 3.3.3.3 53 
+by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 1.1.1.1 1637 dst outside 4.4.4.4 80 
+by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 1.1.1.1 2519 dst outside 4.4.4.4 80 
+by access-group inside_access_in
%PIX-4-106023 Deny udp src inside 1.1.1.1 1161 dst outside 7.7.7.7 53 
+by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 1.1.1.1 2519 dst outside 9.9.9.9 80 
+by access-group inside_access_in
%PIX-4-106023 Deny udp src inside 1.1.1.1 1161 dst outside 9.9.9.9 443
+ by access-group inside_access_in
%PIX-4-106023 Deny udp src inside 1.1.1.1 1161 dst outside 9.9.9.9 53 
+by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 2.2.2.2 2605 dst outside 3.3.3.3 80 
+by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 2.2.2.2 3944 dst outside 3.3.3.3 80 
+by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 2.2.2.2 1263 dst outside 4.4.4.4 80 
+by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 2.2.2.2 2605 dst outside 7.7.7.7 80 
+by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 2.2.2.2 3944 dst outside 7.7.7.7 80 
+by access-group inside_access_in
%PIX-4-106023 Deny udp src inside 5.5.5.5 1047 dst outside 3.3.3.3 143
+3 by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 5.5.5.5 1379 dst outside 6.6.6.6 443
+ by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 5.5.5.5 1379 dst outside 6.6.6.6 80 
+by access-group inside_access_in
%PIX-4-106023 Deny udp src inside 5.5.5.5 1047 dst outside 6.6.6.6 161
+ by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 8.8.8.8 1263 dst outside 4.4.4.4 80 
+by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 8.8.8.8 2677 dst outside 6.6.6.6 80 
+by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 10.10.10.10 1637 dst outside 4.4.4.4
+ 80 by access-group inside_access_in
%PIX-4-106023 Deny tcp src inside 10.10.10.10 2677 dst outside 6.6.6.6
+ 80 by access-group inside_access_in

[download]

which produces

1.1.1.1 3.3.3.3 53 1
1.1.1.1 4.4.4.4 80 2
1.1.1.1 7.7.7.7 53 1
1.1.1.1 9.9.9.9 53 1
1.1.1.1 9.9.9.9 80 1
1.1.1.1 9.9.9.9 443 1
2.2.2.2 3.3.3.3 80 2
2.2.2.2 4.4.4.4 80 1
2.2.2.2 7.7.7.7 80 2
5.5.5.5 3.3.3.3 1433 1
5.5.5.5 6.6.6.6 80 1
5.5.5.5 6.6.6.6 161 1
5.5.5.5 6.6.6.6 443 1
8.8.8.8 4.4.4.4 80 1
8.8.8.8 6.6.6.6 80 1
10.10.10.10 4.4.4.4 80 1
10.10.10.10 6.6.6.6 80 1

[download]

Cheers,

JohnGG

In reply to Re: looping through an array by johngg
in thread looping through an array by Secode

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.