use multi-thread, constuct a more suiltable file architecture
can capture packet, set simple rule
add eth,ip,arp structure defination
new file catalog architecture