<packet>
  <proto name="geninfo" pos="0" showname="General information" size="655">
    <field name="num" pos="0" show="1414" showname="Number" value="586" size="655"/>
    <field name="len" pos="0" show="655" showname="Packet Length" value="28f" size="655"/>
    <field name="caplen" pos="0" show="655" showname="Captured Length" value="28f" size="655"/>
    <field name="timestamp" pos="0" show="Jun 10, 2011 16:10:22.664949000" showname="Captured Time" value="1307715022.664949000" size="655"/>
  </proto>
<proto name="http" showname="Hypertext Transfer Protocol" size="587" pos="68">
    <field name="" show="GET /phpbb3/posting.php?mode=post&amp;f=2 HTTP/1.1\r\n" size="48" pos="68" value="474554202f7068706262332f706f7374696e672e7068703f6d6f64653d706f737426663d3220485454502f312e310d0a">
      <field name="http.request.method" showname="Request Method: GET" size="3" pos="68" show="GET" value="474554"/>
      <field name="http.request.uri" showname="Request URI: /phpbb3/posting.php?mode=post&amp;f=2" size="33" pos="72" show="/phpbb3/posting.php?mode=post&amp;f=2" value="2f7068706262332f706f7374696e672e7068703f6d6f64653d706f737426663d32"/>
      <field name="http.request.version" showname="Request Version: HTTP/1.1" size="8" pos="106" show="HTTP/1.1" value="485454502f312e31"/>
    </field>
    <field name="http.host" showname="Host: 192.168.147.128\r\n" size="23" pos="116" show="192.168.147.128" value="486f73743a203139322e3136382e3134372e3132380d0a"/>
    <field name="http.user_agent" showname="User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3\r\n" size="116" pos="139" show="Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3" value="557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b20553b204c696e757820693638363b20656e2d55533b2072763a312e392e302e3329204765636b6f2f32303038303932353130205562756e74752f382e303420286861726479292046697265666f782f332e302e330d0a"/>
    <field name="http.accept" showname="Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n" size="73" pos="255" show="text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8" value="4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a"/>
    <field name="http.accept_language" showname="Accept-Language: en-us,en;q=0.5\r\n" size="33" pos="328" show="en-us,en;q=0.5" value="4163636570742d4c616e67756167653a20656e2d75732c656e3b713d302e350d0a"/>
    <field name="http.accept_encoding" showname="Accept-Encoding: gzip,deflate\r\n" size="31" pos="361" show="gzip,deflate" value="4163636570742d456e636f64696e673a20677a69702c6465666c6174650d0a"/>
    <field name="" show="Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n" size="48" pos="392" value="4163636570742d436861727365743a2049534f2d383835392d312c7574662d383b713d302e372c2a3b713d302e370d0a"/>
    <field name="" show="Keep-Alive: 300\r\n" size="17" pos="440" value="4b6565702d416c6976653a203330300d0a"/>
    <field name="http.connection" showname="Connection: keep-alive\r\n" size="24" pos="457" show="keep-alive" value="436f6e6e656374696f6e3a206b6565702d616c6976650d0a"/>
    <field name="http.referer" showname="Referer: http://192.168.147.128/phpbb3/viewforum.php?f=2\r\n" size="58" pos="481" show="http://192.168.147.128/phpbb3/viewforum.php?f=2" value="526566657265723a20687474703a2f2f3139322e3136382e3134372e3132382f7068706262332f76696577666f72756d2e7068703f663d320d0a"/>
    <field name="http.cookie" showname="Cookie: phpbb3_ss2cb_u=53; phpbb3_ss2cb_k=; phpbb3_ss2cb_sid=968ca9b4333b2e8ffb1ca72a7bc5aaa2; style_cookie=null\r\n" size="114" pos="539" show="phpbb3_ss2cb_u=53; phpbb3_ss2cb_k=; phpbb3_ss2cb_sid=968ca9b4333b2e8ffb1ca72a7bc5aaa2; style_cookie=null" value="436f6f6b69653a207068706262335f73733263625f753d35333b207068706262335f73733263625f6b3d3b207068706262335f73733263625f7369643d39363863613962343333336232653866666231636137326137626335616161323b207374796c655f636f6f6b69653d6e756c6c0d0a"/>
    <field name="" show="\r\n" size="2" pos="653" value="0d0a"/>
    <field name="http.request" showname="Request: True" hide="yes" size="0" pos="68" show="1"/>
  </proto>
</packet>