* added option -a: doesn't ask user to refine threshold (takes -f or default value of -f)
* uses FQDN instead of subtracting the lowest level domain (<random>.<random>.<www|cdn|..>.domain.com converts to domain.com)
* added option --nowhitelist (maybe useful for huge > 6 million packet pcaps)
* added option -o: write list of IP offenders to file
* added option --lightwhitelist (a concise list of domains like google and facebook)
* perfomance increase - 3M packets pcap processed with full whitelist in ~7min @ Macbook Air i7 1.7Ghz 8Gb