Sniffing images in 350 lines of C

Nicely done. I notice the author used uthash. I can't say enough good things about that software. When you find yourself in C and missing the keyed lookup data structures of higher level languages, reach for uthash.

If you are more interested in the result than the process, aptitude install driftnet.