<packet>
  <proto name="geninfo" pos="0" showname="General information" size="639">
    <field name="num" pos="0" show="202" showname="Number" value="ca" size="639"/>
    <field name="len" pos="0" show="639" showname="Packet Length" value="27f" size="639"/>
    <field name="caplen" pos="0" show="639" showname="Captured Length" value="27f" size="639"/>
    <field name="timestamp" pos="0" show="Jun  9, 2011 21:33:01.331563000" showname="Captured Time" value="1307647981.331563000" size="639"/>
  </proto>
<proto name="http" showname="Hypertext Transfer Protocol" size="571" pos="68">
    <field name="" show="GET /phpbb3/images/smilies/icon_exclaim.gif HTTP/1.1\r\n" size="54" pos="68" value="474554202f7068706262332f696d616765732f736d696c6965732f69636f6e5f6578636c61696d2e67696620485454502f312e310d0a">
      <field name="http.request.method" showname="Request Method: GET" size="3" pos="68" show="GET" value="474554"/>
      <field name="http.request.uri" showname="Request URI: /phpbb3/images/smilies/icon_exclaim.gif" size="39" pos="72" show="/phpbb3/images/smilies/icon_exclaim.gif" value="2f7068706262332f696d616765732f736d696c6965732f69636f6e5f6578636c61696d2e676966"/>
      <field name="http.request.version" showname="Request Version: HTTP/1.1" size="8" pos="112" show="HTTP/1.1" value="485454502f312e31"/>
    </field>
    <field name="http.host" showname="Host: 192.168.147.128\r\n" size="23" pos="122" show="192.168.147.128" value="486f73743a203139322e3136382e3134372e3132380d0a"/>
    <field name="http.user_agent" showname="User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3\r\n" size="116" pos="145" show="Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3" value="557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b20553b204c696e757820693638363b20656e2d55533b2072763a312e392e302e3329204765636b6f2f32303038303932353130205562756e74752f382e303420286861726479292046697265666f782f332e302e330d0a"/>
    <field name="http.accept" showname="Accept: image/png,image/*;q=0.8,*/*;q=0.5\r\n" size="43" pos="261" show="image/png,image/*;q=0.8,*/*;q=0.5" value="4163636570743a20696d6167652f706e672c696d6167652f2a3b713d302e382c2a2f2a3b713d302e350d0a"/>
    <field name="http.accept_language" showname="Accept-Language: en-us,en;q=0.5\r\n" size="33" pos="304" show="en-us,en;q=0.5" value="4163636570742d4c616e67756167653a20656e2d75732c656e3b713d302e350d0a"/>
    <field name="http.accept_encoding" showname="Accept-Encoding: gzip,deflate\r\n" size="31" pos="337" show="gzip,deflate" value="4163636570742d456e636f64696e673a20677a69702c6465666c6174650d0a"/>
    <field name="" show="Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n" size="48" pos="368" value="4163636570742d436861727365743a2049534f2d383835392d312c7574662d383b713d302e372c2a3b713d302e370d0a"/>
    <field name="" show="Keep-Alive: 300\r\n" size="17" pos="416" value="4b6565702d416c6976653a203330300d0a"/>
    <field name="http.connection" showname="Connection: keep-alive\r\n" size="24" pos="433" show="keep-alive" value="436f6e6e656374696f6e3a206b6565702d616c6976650d0a"/>
    <field name="http.referer" showname="Referer: http://192.168.147.128/phpbb3/posting.php?mode=post&amp;f=2\r\n" size="66" pos="457" show="http://192.168.147.128/phpbb3/posting.php?mode=post&amp;f=2" value="526566657265723a20687474703a2f2f3139322e3136382e3134372e3132382f7068706262332f706f7374696e672e7068703f6d6f64653d706f737426663d320d0a"/>
    <field name="http.cookie" showname="Cookie: phpbb3_ss2cb_u=53; phpbb3_ss2cb_k=; phpbb3_ss2cb_sid=1a5ba8e7113ab3b2c9d6061a823ea995; style_cookie=null\r\n" size="114" pos="523" show="phpbb3_ss2cb_u=53; phpbb3_ss2cb_k=; phpbb3_ss2cb_sid=1a5ba8e7113ab3b2c9d6061a823ea995; style_cookie=null" value="436f6f6b69653a207068706262335f73733263625f753d35333b207068706262335f73733263625f6b3d3b207068706262335f73733263625f7369643d31613562613865373131336162336232633964363036316138323365613939353b207374796c655f636f6f6b69653d6e756c6c0d0a"/>
    <field name="" show="\r\n" size="2" pos="637" value="0d0a"/>
    <field name="http.request" showname="Request: True" hide="yes" size="0" pos="68" show="1"/>
  </proto>
</packet>