collecting information

The given output is the result of tcpdump -i p3p1 -s 0 -A 'tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x47455420' command
so i want to group the requests counts in a table in every 5 seconds like for top 5 of each criteria


SourceIP      Count      
Host  Count    
referrer  Count    
User-Agent    Count    
Connection    Count    
Accept-Language   Count



does it possible with perl


14:17:38.097031 IP 178.233.203.80.51628 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 3793533019:3793533614, ack 604897930, win 256, length 595
E..{t)@.t..l...P.       .....P...[$...P...E...GET /rigoplay/TkFDUGNJU0d2MVdYWXFrTjM3MDZJRzB0MDNvLytJaTl6enNRQXZ6dHh5TDliQ1MzN1FoVkhMKzM1QT09.mp4 HTTP/1.1
Host: nigerporno.com
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/seksi-kizi-kucakta-hoplatiyor/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _ga=GA1.2.1847286141.1440587555; _gat=1


14:17:40.168594 IP 85.105.116.102.static.ttnet.com.tr.aspen-services > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1479456580:1479457139, ack 1785045072, win 65535, length 559
E..W7J@.u...Uitf.       .....PX..Dje.PP.......GET /sarisin-guzelin-ilk-porno-macerasi/ HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/hd/sarisin-porno/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587366.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1


14:17:42.945894 IP 85.105.116.102.static.ttnet.com.tr.swiftnet > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 733892042:733892662, ack 1012005353, win 65535, length 620
E...8.@.u...Uitf.       .....P+.M.<Q..P...4...GET /wp-content/uploads/2015/08/ozel-is-yerinde-yapilan-grup-sex-tapesi-300x225.jpg HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587366.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1


14:17:42.959832 IP 85.105.116.102.static.ttnet.com.tr.cnhrp > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1306123810:1306124419, ack 2770193382, win 65535, length 609
E...8.@.u...Uitf.       .....PM.."....P...I...GET /wp-content/uploads/2015/08/genc-kiz-artik-sikis-istiyor-300x225.jpg HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587366.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1


14:17:42.971715 IP 85.105.116.102.static.ttnet.com.tr.spss-lm > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2599788077:2599788864, ack 321466762, win 65535, length 787
E..;8.@.u..MUitf.       .....P...-.)1.P....B..GET /rigoplay/R1FFTEJ1Wk0wMVZRc1JWNXR2RWZrMFQ5L1d2MlgzVlNyaXdqM2ROUllZWU1WcC93TFpiVUVZVmpUdTQ9.mp4 HTTP/1.1
Accept: image/gif, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml+xml, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1


14:17:42.987886 IP 85.105.116.102.static.ttnet.com.tr.predatar-comms > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 3173685011:3173685627, ack 1210353894, win 65535, length 616
E...8.@.u...Uitf.       .....P.*..H$..P...D...GET /wp-content/uploads/2015/08/musluk-tamircisi-fena-sikis-yapiyor-300x225.jpg HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587366.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1


14:17:42.998979 IP 85.105.116.102.static.ttnet.com.tr.ms-streaming > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2404484425:2404485035, ack 917218193, win 65535, length 610
E...8.@.u...Uitf.       .....P.Q.I6...P.......GET /wp-content/uploads/2015/08/sekreterimin-koltuk-fantezisi-300x225.jpg HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587366.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1


14:17:46.132177 IP 85.105.116.102.static.ttnet.com.tr.swiftnet > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 620:1198, ack 15604, win 65535, length 578
E..j;f@.u...Uitf.       .....P+.P6<R6.P....}..GET /musluk-tamircisi-fena-sikis-yapiyor/ HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587876.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1


14:17:48.751625 IP 95.8.95.188.dynamic.ttnet.com.tr.49768 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1313634133:1313634744, ack 978698487, win 260, length 611
E.....@.v..$_._..       ...h.PNLwU:U..P.......GET /hd/sisman-porno/ HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/seksi-zenci-kadin-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587868.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:48.820553 IP 85.105.116.102.static.ttnet.com.tr.vaultbase > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 751768586:751769374, ack 689734009, win 65535, length 788
E..<<.@.u..^Uitf.       .....P,..
)..yP.......GET /rigoplay/dXdEbGFmT1J3Rlh2VkdUWnZiZTg1cmUvUUEwT3UxUk9UaE1adjFaZFVlbk9VN3lUWk9TVHRnQ1BZdTg9.mp4 HTTP/1.1
Accept: image/gif, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml+xml, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.nigerporno.com/musluk-tamircisi-fena-sikis-yapiyor/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1


14:17:48.976801 IP 95.8.95.188.dynamic.ttnet.com.tr.49769 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2903031182:2903031763, ack 835195631, win 260, length 581
E..m..@.v..._._..       ...i.P....1...P...x...GET /wp-content/uploads/2015/08/sisman-kiz-zenci-adama-karsi-sert-sikis-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587868.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:48.984120 IP 95.8.95.188.dynamic.ttnet.com.tr.49770 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 793428220:793428801, ack 1067757066, win 260, length 581
E..m..@.v..._._..       ...j.P/J..?..
..GET /wp-content/uploads/2015/08/dovmeli-sisman-kizin-hasin-oral-pornosu-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587868.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:48.989994 IP 95.8.95.188.dynamic.ttnet.com.tr.49772 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2553224732:2553225306, ack 2572550192, win 260, length 574
E..f..@.v..     _._..   ...l.P./...V.0P...V...GET /wp-content/uploads/2015/08/sisman-porno-yapan-cilgin-cifler-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587868.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:48.999222 IP 95.8.95.188.dynamic.ttnet.com.tr.49771 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2522947796:2522948388, ack 308939922, win 260, length 592
E..x..@.v..._._..       ...k.P.a ..j..P...v...GET /wp-content/uploads/2015/08/sisman-sarisinin-sert-sikici-zenci-sevgilisi-porno-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587868.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.005124 IP 95.8.95.188.dynamic.ttnet.com.tr.49773 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 3270294931:3270295517, ack 2768873384, win 260, length 586
E..r..@.v..._._..       ...m.P.....     ..P....+..GET /wp-content/uploads/2015/08/sisman-hatun-icimden-cikarma-diye-yalvariyor-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587868.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.012549 IP 95.8.95.188.dynamic.ttnet.com.tr.49774 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1965076747:1965077332, ack 2432390140, win 260, length 585
E..q..@.v..._._..       ...n.Pu ....S.P...mg..GET /wp-content/uploads/2015/08/sisman-sarisin-ses-sanatcisi-olmak-isterken-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587868.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.132933 IP 95.8.95.188.dynamic.ttnet.com.tr.49769 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 581:1157, ack 14222, win 257, length 576
E..h.7@.v..._._..       ...i.P....1.J|P.......GET /wp-content/uploads/2015/08/sisman-kadin-cok-buyuk-zevk-aliyor-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; _ga=GA1.2.1895953481.1440143222; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1


14:17:49.154074 IP 95.8.95.188.dynamic.ttnet.com.tr.49770 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 581:1166, ack 12817, win 260, length 585
E..q.>@.v..._._..       ...j.P/J.A?...P....7..GET /wp-content/uploads/2015/08/sisman-kadin-jigolo-siparisi-verdi-bekliyor-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; _ga=GA1.2.1895953481.1440143222; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1


14:17:49.162295 IP 95.8.95.188.dynamic.ttnet.com.tr.49774 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 585:1149, ack 9159, win 260, length 564
E..\.A@.v..._._..       ...n.Pu .T..w.P....z..GET /wp-content/uploads/2015/08/seksi-sisman-kiz-porno-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; _ga=GA1.2.1895953481.1440143222; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1


14:17:49.169891 IP 95.8.95.188.dynamic.ttnet.com.tr.49773 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 586:1170, ack 15614, win 260, length 584
E..p.B@.v..._._..       ...m.P.....     ..P...Z...GET /wp-content/uploads/2015/08/sisman-kadin-zevkten-adeta-kendinden-gecti-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; _ga=GA1.2.1895953481.1440143222; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1


14:17:49.179723 IP 95.8.95.188.dynamic.ttnet.com.tr.49771 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 592:1158, ack 18577, win 260, length 566
E..^.D@.v..._._..       ...k.P.a#$.jU"P.......GET /wp-content/uploads/2015/08/sisman-kizin-fantezileri-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; _ga=GA1.2.1895953481.1440143222; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1


14:17:49.185714 IP 95.8.95.188.dynamic.ttnet.com.tr.49772 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 574:1152, ack 20764, win 260, length 578
E..j.E@.v..._._..       ...l.P./ Z.VQKP...M...GET /wp-content/uploads/2015/08/seksi-sisman-pornosu-izledinizmi-hic-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; _ga=GA1.2.1895953481.1440143222; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1


14:17:49.262289 IP 95.8.95.188.dynamic.ttnet.com.tr.49769 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1157:1728, ack 28102, win 258, length 571
E..c.[@.v..._._..       ...i.P....1...P...7r..GET /wp-content/uploads/2015/08/sisman-azgin-kizlarin-pornosu-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.323522 IP 95.8.95.188.dynamic.ttnet.com.tr.49770 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1166:1749, ack 33461, win 260, length 583
E..o.l@.v..._._..       ...j.P/J..?.0.P...:@..GET /wp-content/uploads/2015/08/dusta-sisman-karisiyla-sikisen-abaza-adam-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.327920 IP 95.8.95.188.dynamic.ttnet.com.tr.49774 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1149:1735, ack 21632, win 260, length 586
E..r.m@.v..._._..       ...n.Pu .....{P.......GET /wp-content/uploads/2015/08/sisman-kadin-yakisikli-adami-yalayip-yutuyor-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.337257 IP 95.8.95.188.dynamic.ttnet.com.tr.49773 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1170:1748, ack 36907, win 260, length 578
E..j.p@.v..._._..       ...m.P...%.
7.P...:l..GET /wp-content/uploads/2015/08/sisman-porno-sevenlere-ozel-bir-film-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.389594 IP 95.8.95.188.dynamic.ttnet.com.tr.49771 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1158:1721, ack 37441, win 260, length 563
E..[.|@.v..._._..       ...k.P.a%Z.j..P.......GET /wp-content/uploads/2015/08/sisman-hardcore-porno-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.395499 IP 95.8.95.188.dynamic.ttnet.com.tr.49772 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1152:1734, ack 39816, win 260, length 582
E..n.}@.v..._._..       ...l.P./"..V..P....2..GET /wp-content/uploads/2015/08/sisman-kizin-goguslerini-arasina-veriyor-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.433000 IP 95.8.95.188.dynamic.ttnet.com.tr.49769 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1728:2310, ack 48120, win 257, length 582
E..n..@.v..._._..       ...i.P...N1...P...0...GET /wp-content/uploads/2015/08/sisman-kizin-agzina-veriyor-abaza-doktor-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.487714 IP 95.8.95.188.dynamic.ttnet.com.tr.49770 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1749:2303, ack 46165, win 260, length 554
E..R..@.v..._._..       ...j.P/J..?.b^P.......GET /wp-content/uploads/2015/08/sisman-porno-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.494680 IP 95.8.95.188.dynamic.ttnet.com.tr.49773 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1748:2314, ack 54295, win 256, length 566
E..^..@.v..._._..       ...m.P...g.
{.P.......GET /wp-content/uploads/2015/08/kirmizi-basli-sisman-kiz-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.503338 IP 95.8.95.188.dynamic.ttnet.com.tr.49771 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1721:2310, ack 53726, win 260, length 589
E..u..@.v..r_._..       ...k.P.a'..j.oP.......GET /wp-content/uploads/2015/08/sisman-kadina-kokluyor-kadin-biraz-daha-istiyor-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.509381 IP 95.8.95.188.dynamic.ttnet.com.tr.49774 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1735:2303, ack 35741, win 258, length 568
E..`..@.v..._._..       ...n.Pu ......P...tV..GET /wp-content/uploads/2015/08/fetis-sex-seven-sisman-kiz-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.522995 IP 95.8.95.188.dynamic.ttnet.com.tr.49772 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1734:2339, ack 58859, win 260, length 605
E.....@.v..[_._..       ...l.P./$..V..P.......GET /wp-content/uploads/2015/08/sisman-sarisina-once-masaj-yapiyor-sonrasinda-inleterek-sikiyor-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.531764 IP 95.8.95.188.dynamic.ttnet.com.tr.49769 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2310:2884, ack 62363, win 257, length 574
E..f..@.v..y_._..       ...i.P....1...P...g...GET /wp-content/uploads/2015/08/siska-adamin-sisman-azgin-karisi-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.652051 IP 95.8.95.188.dynamic.ttnet.com.tr.49770 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2303:2904, ack 60935, win 255, length 601
E.....@.v..?_._..       ...j.P/J..?...P...m...GET /wp-content/uploads/2015/08/sisman-kiz-iki-azgin-erkekle-gures-yapar-gibi-sikis-yapiyor-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.687447 IP 95.8.95.188.dynamic.ttnet.com.tr.49771 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2310:2887, ack 68989, win 260, length 577
E..i..@.v..Q_._..       ...k.P.a)..k..P...ho..GET /wp-content/uploads/2015/08/sisman-kadini-sikerek-bosaltan-adam-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.694180 IP 95.8.95.188.dynamic.ttnet.com.tr.49773 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2314:2896, ack 71049, win 259, length 582
E..n..@.v..K_._..       ...m.P.....
.0P.......GET /wp-content/uploads/2015/08/sisman-gozluklu-kiza-bu-penis-az-geliyor-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222


14:17:49.702073 IP 95.8.95.188.dynamic.ttnet.com.tr.49772 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2339:2936, ack 72195, win 260, length 597
E..}..@.v..;_._..       ...l.P./'?.W.2P...$v..GET /wp-content/uploads/2015/08/sisman-pornosu-meraklilari-ekran-basina-kitleneceksiniz-300x225.jpg HTTP/1.1
Host: www.nigerporno.com
Connection: keep-alive
Accept: image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/hd/sisman-porno/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _gat=1; sc_is_visitor_unique=rx10586602.1440587892.16F4A976BFCB4FD706B809EEE69C1B88.1.1.1.1.1.1.1.1.1; _ga=GA1.2.1895953481.1440143222

Open in new window

FireBallITAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ozoCommented:
#do you mean like this?
my %r=(
SourceIP => qr/\s+IP\s+(\S+)/,
Host => qr/^Host:\s*(\S+)/m,
referrer => qr/^Referer:\s*(\S+)/m,
'User-Agent' => qr/^User-Agent:\s*(.+)/m,
Connection => qr/^Connection:\s*(\S+)/m,
'Accept-Language' => qr/^Accept-Language:\s*(\S+)/m,
);
my %count;
sub p{
    for my $r ( keys %r ){
      my $c=$count{$r};
      my $t=5;
      for( sort{$c->{$b}<=>$c->{$a}}keys %$c ){
          print "$r $_ $c->{$_}\n";
          last unless --$t;
        }
      print "\n";
    }
    %count=();
}
my $s0;
$/="";
while( <DATA> ){
    my $s=($1*60+$2)*60+$3 if /(\d\d):(\d\d):(\d\d\.\d*)/;
    $s0||=$s+5;
    p(),$s0=$s+5 if $s>$s0;
    my $l=$_;
    ++$count{$_}{($l=~/$r{$_}/)[0]} for keys %r;
}
p();
__DATA__
14:17:38.097031 IP 178.233.203.80.51628 > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 3793533019:3793533614, ack 604897930, win 256, length 595
E..{t)@.t..l...P.       .....P...[$...P...E...GET /rigoplay/TkFDUGNJU0d2MVdYWXFrTjM3MDZJRzB0MDNvLytJaTl6enNRQXZ6dHh5TDliQ1MzN1FoVkhMKzM1QT09.mp4 HTTP/1.1
Host: nigerporno.com
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Referer: http://www.nigerporno.com/seksi-kizi-kucakta-hoplatiyor/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: _ga=GA1.2.1847286141.1440587555; _gat=1


14:17:40.168594 IP 85.105.116.102.static.ttnet.com.tr.aspen-services > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1479456580:1479457139, ack 1785045072, win 65535, length 559
E..W7J@.u...Uitf.       .....PX..Dje.PP.......GET /sarisin-guzelin-ilk-porno-macerasi/ HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/hd/sarisin-porno/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587366.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1


14:17:42.945894 IP 85.105.116.102.static.ttnet.com.tr.swiftnet > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 733892042:733892662, ack 1012005353, win 65535, length 620
E...8.@.u...Uitf.       .....P+.M.<Q..P...4...GET /wp-content/uploads/2015/08/ozel-is-yerinde-yapilan-grup-sex-tapesi-300x225.jpg HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587366.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1


14:17:42.959832 IP 85.105.116.102.static.ttnet.com.tr.cnhrp > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 1306123810:1306124419, ack 2770193382, win 65535, length 609
E...8.@.u...Uitf.       .....PM.."....P...I...GET /wp-content/uploads/2015/08/genc-kiz-artik-sikis-istiyor-300x225.jpg HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587366.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1


14:17:42.971715 IP 85.105.116.102.static.ttnet.com.tr.spss-lm > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2599788077:2599788864, ack 321466762, win 65535, length 787
E..;8.@.u..MUitf.       .....P...-.)1.P....B..GET /rigoplay/R1FFTEJ1Wk0wMVZRc1JWNXR2RWZrMFQ5L1d2MlgzVlNyaXdqM2ROUllZWU1WcC93TFpiVUVZVmpUdTQ9.mp4 HTTP/1.1
Accept: image/gif, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml+xml, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1


14:17:42.987886 IP 85.105.116.102.static.ttnet.com.tr.predatar-comms > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 3173685011:3173685627, ack 1210353894, win 65535, length 616
E...8.@.u...Uitf.       .....P.*..H$..P...D...GET /wp-content/uploads/2015/08/musluk-tamircisi-fena-sikis-yapiyor-300x225.jpg HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587366.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1


14:17:42.998979 IP 85.105.116.102.static.ttnet.com.tr.ms-streaming > 163.158.9.185.salay.com.tr.http: Flags [P.], seq 2404484425:2404485035, ack 917218193, win 65535, length 610
E...8.@.u...Uitf.       .....P.Q.I6...P.......GET /wp-content/uploads/2015/08/sekreterimin-koltuk-fantezisi-300x225.jpg HTTP/1.1
Accept: */*
Referer: http://www.nigerporno.com/sarisin-guzelin-ilk-porno-macerasi/
Accept-Language: tr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; InfoPath.2; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.nigerporno.com
Connection: Keep-Alive
Cookie: _ga=GA1.2.1307169718.1440586714; _gat=1; sc_is_visitor_unique=rx10586602.1440587366.BCF1F020712F4FD2F048C5ABA3E80AAA.1.1.1.1.1.1.1.1.1
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
FireBallITAuthor Commented:
Than you so much
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Perl

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.