Since you want to pipe the text output through your program, the following fragement might help: 
#!/usr/bin/perl
use strict;

while (<>) {
    if ( /IP\s+(\d+\.\d+\.\d+\.\d+)(\.(\d+))?\s+>\s+(\d+\.\d+\.\d+\.\d
++)(\.(\d+))?\:\s+(\w+)/ ) {
         my ($srcip, $srcport, $dstip, $dstport, $proto) = 
            ($1,     $3,       $4,     $6,       $7);
         # icmp: port := 0 (should be n/a)
         printf "%16s [%5d] --> %16s [%5d] (%s)\n",
                 $srcip, $srcport, $dstip, $dstport, lc($proto);

    }
}
__END__

Piping your example through it yields (works with: tcpdump -nlq):
  192.168.11.128 [ 3415] -->      66.249.93.9 [   53] (udp)
    66.102.9.104 [   80] -->   192.168.11.100 [40323] (tcp)
  192.168.11.100 [40323] -->     66.102.9.104 [   80] (tcp)
    192.168.11.6 [   22] -->   192.168.11.128 [59921] (tcp)
  192.168.11.128 [59921] -->     192.168.11.6 [   22] (tcp)
   72.21.192.209 [   53] -->   192.168.11.128 [49172] (udp)
  192.168.11.128 [    0] -->    72.21.192.209 [    0] (icmp)

[download]

In reply to Re: Read output from tcpdump by Perlbotics
in thread Read output from tcpdump by h3x

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.