"Guyon Morée" <guyon.moree at gmail.com> writes: > if (((src_host,src_port, protocol) in dict or (dest_host, dest_port, > protocol) in dict) and starttime < time < endtime): > print "we have a winner" If you have enough memory to do it that way, what's the problem?