<packet>
  <proto name="geninfo" pos="0" showname="General information" size="650">
    <field name="num" pos="0" show="19138" showname="Number" value="4ac2" size="650"/>
    <field name="len" pos="0" show="650" showname="Packet Length" value="28a" size="650"/>
    <field name="caplen" pos="0" show="650" showname="Captured Length" value="28a" size="650"/>
    <field name="timestamp" pos="0" show="Jun  9, 2011 20:54:58.011439000" showname="Captured Time" value="1307645698.011439000" size="650"/>
  </proto>
<proto name="http" showname="Hypertext Transfer Protocol" size="582" pos="68">
    <field name="" show="GET /phpbb3/style.php?sid=927110d8b513227843500f85371febcd&amp;id=1&amp;lang=en HTTP/1.1\r\n" size="82" pos="68" value="474554202f7068706262332f7374796c652e7068703f7369643d39323731313064386235313332323738343335303066383533373166656263642669643d31266c616e673d656e20485454502f312e310d0a">
      <field name="http.request.method" showname="Request Method: GET" size="3" pos="68" show="GET" value="474554"/>
      <field name="http.request.uri" showname="Request URI: /phpbb3/style.php?sid=927110d8b513227843500f85371febcd&amp;id=1&amp;lang=en" size="67" pos="72" show="/phpbb3/style.php?sid=927110d8b513227843500f85371febcd&amp;id=1&amp;lang=en" value="2f7068706262332f7374796c652e7068703f7369643d39323731313064386235313332323738343335303066383533373166656263642669643d31266c616e673d656e"/>
      <field name="http.request.version" showname="Request Version: HTTP/1.1" size="8" pos="140" show="HTTP/1.1" value="485454502f312e31"/>
    </field>
    <field name="http.host" showname="Host: 192.168.147.128\r\n" size="23" pos="150" show="192.168.147.128" value="486f73743a203139322e3136382e3134372e3132380d0a"/>
    <field name="http.user_agent" showname="User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3\r\n" size="116" pos="173" show="Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3" value="557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b20553b204c696e757820693638363b20656e2d55533b2072763a312e392e302e3329204765636b6f2f32303038303932353130205562756e74752f382e303420286861726479292046697265666f782f332e302e330d0a"/>
    <field name="http.accept" showname="Accept: text/css,*/*;q=0.1\r\n" size="28" pos="289" show="text/css,*/*;q=0.1" value="4163636570743a20746578742f6373732c2a2f2a3b713d302e310d0a"/>
    <field name="http.accept_language" showname="Accept-Language: en-us,en;q=0.5\r\n" size="33" pos="317" show="en-us,en;q=0.5" value="4163636570742d4c616e67756167653a20656e2d75732c656e3b713d302e350d0a"/>
    <field name="http.accept_encoding" showname="Accept-Encoding: gzip,deflate\r\n" size="31" pos="350" show="gzip,deflate" value="4163636570742d456e636f64696e673a20677a69702c6465666c6174650d0a"/>
    <field name="" show="Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n" size="48" pos="381" value="4163636570742d436861727365743a2049534f2d383835392d312c7574662d383b713d302e372c2a3b713d302e370d0a"/>
    <field name="" show="Keep-Alive: 300\r\n" size="17" pos="429" value="4b6565702d416c6976653a203330300d0a"/>
    <field name="http.connection" showname="Connection: keep-alive\r\n" size="24" pos="446" show="keep-alive" value="436f6e6e656374696f6e3a206b6565702d616c6976650d0a"/>
    <field name="http.referer" showname="Referer: http://192.168.147.128/phpbb3/ucp.php?mode=login\r\n" size="59" pos="470" show="http://192.168.147.128/phpbb3/ucp.php?mode=login" value="526566657265723a20687474703a2f2f3139322e3136382e3134372e3132382f7068706262332f7563702e7068703f6d6f64653d6c6f67696e0d0a"/>
    <field name="http.cookie" showname="Cookie: style_cookie=printonly; phpbb3_ss2cb_u=53; phpbb3_ss2cb_k=; phpbb3_ss2cb_sid=927110d8b513227843500f85371febcd\r\n" size="119" pos="529" show="style_cookie=printonly; phpbb3_ss2cb_u=53; phpbb3_ss2cb_k=; phpbb3_ss2cb_sid=927110d8b513227843500f85371febcd" value="436f6f6b69653a207374796c655f636f6f6b69653d7072696e746f6e6c793b207068706262335f73733263625f753d35333b207068706262335f73733263625f6b3d3b207068706262335f73733263625f7369643d39323731313064386235313332323738343335303066383533373166656263640d0a"/>
    <field name="" show="\r\n" size="2" pos="648" value="0d0a"/>
    <field name="http.request" showname="Request: True" hide="yes" size="0" pos="68" show="1"/>
  </proto>
</packet>