$VAR1 = {
          'cmd' => {
                   'parameter' => {
                                  'Additional information about port $port' => {
                                                                               'cycle' => '1300',
                                                                               'command' => [
                                                                                            {
                                                                                              'run' => 'ps -fp $pid',
                                                                                              'text' => '^(\\w+)\\s+\\d+\\s+(\\d+)\\s+\\S+\\s+\\S+\\s+\\S+\\s+\\d+:\\d+:\\d+\\s+(.*)$',
                                                                                              'output' => 'Full command line:$3, Parent PID:$2'
                                                                                            },
                                                                                            {
                                                                                              'run' => 'service iptables status | grep dpt:$port',
                                                                                              'text' => '^(\\d+)\\s+(DROP|ACCEPT)\\s+(udp|tcp|icmp|all)\\s+\\S+\\s+(\\S+)\\s+(\\S+)\\s+(.*)$',
                                                                                              'output' => 'Iptables takes action $2 for port $port'
                                                                                            }
                                                                                          ]
                                                                             },
                                  'Tcp Ports In Listen State' => {
                                                                 'cycle' => '1200',
                                                                 'command' => [
                                                                              {
                                                                                'run' => 'netstat -pant | grep LISTEN',
                                                                                'text' => '^(\\w+)\\s+\\d+\\s+\\d+\\s+[\\d.]+:(\\d+)\\s+[\\d.]+:\\D+\\s+\\S+\\s+(\\d+)/(\\S+)',
                                                                                'data' => ' $protocol = $1 $port = $2 $pid = $3',
                                                                                'output' => ' $1 port $2  was opened by $4 process having pid $3'
                                                                              }
                                                                            ]
                                                               }
                                }
                 }
	}