I'm grabbing the data from our firewall logs. I figure there isn't a way around doing one pass through the logs before I can find process them.
I.e. How many times does IP 10.0.0.10 goto 192.168.0.10?
I still have to figure what the theorotical max of processing all of the data is (i.e. Just read file and do nothing).
I'm starting to think there isn't much room for me to speed my script up.