diff --git a/doc/redis-datastruct.dot b/doc/redis-datastruct.dot
new file mode 100644
index 0000000..e9b641f
--- /dev/null
+++ b/doc/redis-datastruct.dot
@@ -0,0 +1,21 @@
+digraph g{
+  a -> b
+  a [label="processed",shape=box,fillcolor="white",style="filled"];
+  b [label="{Malware MD5, Malware MD5, ...}",shape=box,fillcolor="palegreen",style="filled,rounded"];
+
+  c -> d
+  c [label="type",shape=box,fillcolor="white",style="filled"];
+  d [label="{http.user_agent, http.server, ...}",shape=box,fillcolor="palegreen",style="filled,rounded"];
+  d -> g [dir=none];
+  g [label="e:http.user_agent", shape=box];
+  g -> h 
+  h [label="{Mozilla...., Mozilla/4.0..., Wget...,... }",shape=box,fillcolor="palegreen",style="filled,rounded"];
+  h -> e [dir=none];
+  e -> f
+  e [label="v:MD5('Mozilla....')",shape=box,fillcolor="white",style="filled"];
+  f [label="{Malware MD5, Malware MD5, ...}",shape=box,fillcolor="palegreen",style="filled,rounded"];
+  
+  z [label="key", shape=box];
+  y [label="set", shape=box, fillcolor="palegreen",style="filled,rounded"];
+
+}
diff --git a/doc/redis-datastruct.png b/doc/redis-datastruct.png
new file mode 100644
index 0000000..9280085
Binary files /dev/null and b/doc/redis-datastruct.png differ