<packet>
  <proto name="geninfo" pos="0" showname="General information" size="251">
    <field name="num" pos="0" show="1557" showname="Number" value="615" size="251"/>
    <field name="len" pos="0" show="251" showname="Packet Length" value="fb" size="251"/>
    <field name="caplen" pos="0" show="251" showname="Captured Length" value="fb" size="251"/>
    <field name="timestamp" pos="0" show="Jun 10, 2011 15:50:40.484435000" showname="Captured Time" value="1307713840.484435000" size="251"/>
  </proto>
<proto name="http" showname="Hypertext Transfer Protocol" size="183" pos="68">
    <field name="" show="GET /phpbb3/files/botz/botzilla.php HTTP/1.1\r\n" size="46" pos="68" value="474554202f7068706262332f66696c65732f626f747a2f626f747a696c6c612e70687020485454502f312e310d0a">
      <field name="http.request.method" showname="Request Method: GET" size="3" pos="68" show="GET" value="474554"/>
      <field name="http.request.uri" showname="Request URI: /phpbb3/files/botz/botzilla.php" size="31" pos="72" show="/phpbb3/files/botz/botzilla.php" value="2f7068706262332f66696c65732f626f747a2f626f747a696c6c612e706870"/>
      <field name="http.request.version" showname="Request Version: HTTP/1.1" size="8" pos="104" show="HTTP/1.1" value="485454502f312e31"/>
    </field>
    <field name="http.user_agent" showname="User-Agent: curl/7.18.0 (i486-pc-linux-gnu) libcurl/7.18.0 OpenSSL/0.9.8g zlib/1.2.3.3 libidn/1.1\r\n" size="99" pos="114" show="curl/7.18.0 (i486-pc-linux-gnu) libcurl/7.18.0 OpenSSL/0.9.8g zlib/1.2.3.3 libidn/1.1" value="557365722d4167656e743a206375726c2f372e31382e302028693438362d70632d6c696e75782d676e7529206c69626375726c2f372e31382e30204f70656e53534c2f302e392e3867207a6c69622f312e322e332e33206c696269646e2f312e310d0a"/>
    <field name="http.host" showname="Host: 192.168.147.128\r\n" size="23" pos="213" show="192.168.147.128" value="486f73743a203139322e3136382e3134372e3132380d0a"/>
    <field name="http.accept" showname="Accept: */*\r\n" size="13" pos="236" show="*/*" value="4163636570743a202a2f2a0d0a"/>
    <field name="" show="\r\n" size="2" pos="249" value="0d0a"/>
    <field name="http.request" showname="Request: True" hide="yes" size="0" pos="68" show="1"/>
  </proto>
</packet>