Nicely done. I notice the author used <i>uthash</i>. I can't say enough good things about that software. When you find yourself in C and missing the keyed lookup data structures of higher level languages, reach for uthash.<p>If you are more interested in the result than the process, <i>aptitude install driftnet</i>.