All,

Thank you for your help. This is the code I decided to go with:

my %hash;
 
while (<FILE>){
 
 next unless /Something/;
 if (/<LONG REGEX>/){
 
   if ($hash{$3}){
     $hash{$3}{count}++;
     next;
   }

   $hash{$3} = {
        sig => $1,
        src => $3,
        proto => $2,
        dst => $4,
        port => $5,
   };
 }
}
[download]

davorg,

I based my code on yours, just changed it a bit. Thanks for the tip on Data::Dumper, I've heard about it before, just never used it. Very cool

McDarren,

Believe it or not, one entry from each source is all I really need. I believe this code will speed things up a bit since it will count the source and go to the next one if we already have it.

fenLisesi,

Thanks, I tend to do that more then I wish to admit.

frodo72,

Thanks for the code and reply. If I need to build the more complex data structure, I'll probably do something similar to what you gave me. I'll just have to brush up on perlreftut first.

-Dru