The invention is directed to counting data packets marked according to tri-color marking techniques. Packets of a packet flow that are marked according to a three color (or tri-color) marking scheme are counted using a counter implemented on a ternary content addressable memory (TCAM). Advantages of some embodiments of the invention are to enable the use of generic and cost-efficient TCAMs to quickly obtain the counts of all three colors of packets in such a packet flow. These counts can be used to provide detailed statistics on characteristics of the packet flow, which can be useful for debugging and accounting purposes.