created arpspoof handler
Ooops. check returned value of create_message.
use an header to hold all common part of the handlers regex
updated ettercap module ref
moved handler check to a separate function
added tcpdump handler