Looking at CPAN there's several modules (Net::Frame::Dump::Offline looking quite promising) which read tcpdump files which would be much more direct than trying to parse the text representation.