My problem is how I compare the values sent from the txt file (now in a hash in the script) with the values from the packets from the PCAP file. For example: in the txt file I write: SourceIP = 10.1.1.1 ------------------ in he script I want to compare that SouceIP value with all SouceIP values from the PCAP file. And, if some packet have that SouceIP, show the header of that packet. Show the header and the information of the packets it's not a problem, the problem is I don't how to compare that fields because I don't now how access to the values in the hash. I hope you understand my question... Thanks a lot, ... Chocolataria