<packet>
  <proto name="geninfo" pos="0" showname="General information" size="629">
    <field name="num" pos="0" show="9065" showname="Number" value="2369" size="629"/>
    <field name="len" pos="0" show="629" showname="Packet Length" value="275" size="629"/>
    <field name="caplen" pos="0" show="629" showname="Captured Length" value="275" size="629"/>
    <field name="timestamp" pos="0" show="Jun  9, 2011 20:49:24.899312000" showname="Captured Time" value="1307645364.899312000" size="629"/>
  </proto>
<proto name="http" showname="Hypertext Transfer Protocol" size="561" pos="68">
    <field name="" show="GET /phpbb3/download/file.php?id=712 HTTP/1.1\r\n" size="47" pos="68" value="474554202f7068706262332f646f776e6c6f61642f66696c652e7068703f69643d37313220485454502f312e310d0a">
      <field name="http.request.method" showname="Request Method: GET" size="3" pos="68" show="GET" value="474554"/>
      <field name="http.request.uri" showname="Request URI: /phpbb3/download/file.php?id=712" size="32" pos="72" show="/phpbb3/download/file.php?id=712" value="2f7068706262332f646f776e6c6f61642f66696c652e7068703f69643d373132"/>
      <field name="http.request.version" showname="Request Version: HTTP/1.1" size="8" pos="105" show="HTTP/1.1" value="485454502f312e31"/>
    </field>
    <field name="http.host" showname="Host: 192.168.147.128\r\n" size="23" pos="115" show="192.168.147.128" value="486f73743a203139322e3136382e3134372e3132380d0a"/>
    <field name="http.user_agent" showname="User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3\r\n" size="116" pos="138" show="Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3" value="557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b20553b204c696e757820693638363b20656e2d55533b2072763a312e392e302e3329204765636b6f2f32303038303932353130205562756e74752f382e303420286861726479292046697265666f782f332e302e330d0a"/>
    <field name="http.accept" showname="Accept: image/png,image/*;q=0.8,*/*;q=0.5\r\n" size="43" pos="254" show="image/png,image/*;q=0.8,*/*;q=0.5" value="4163636570743a20696d6167652f706e672c696d6167652f2a3b713d302e382c2a2f2a3b713d302e350d0a"/>
    <field name="http.accept_language" showname="Accept-Language: en-us,en;q=0.5\r\n" size="33" pos="297" show="en-us,en;q=0.5" value="4163636570742d4c616e67756167653a20656e2d75732c656e3b713d302e350d0a"/>
    <field name="http.accept_encoding" showname="Accept-Encoding: gzip,deflate\r\n" size="31" pos="330" show="gzip,deflate" value="4163636570742d456e636f64696e673a20677a69702c6465666c6174650d0a"/>
    <field name="" show="Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n" size="48" pos="361" value="4163636570742d436861727365743a2049534f2d383835392d312c7574662d383b713d302e372c2a3b713d302e370d0a"/>
    <field name="" show="Keep-Alive: 300\r\n" size="17" pos="409" value="4b6565702d416c6976653a203330300d0a"/>
    <field name="http.connection" showname="Connection: keep-alive\r\n" size="24" pos="426" show="keep-alive" value="436f6e6e656374696f6e3a206b6565702d616c6976650d0a"/>
    <field name="http.referer" showname="Referer: http://192.168.147.128/phpbb3/viewtopic.php?f=2&amp;t=388\r\n" size="64" pos="450" show="http://192.168.147.128/phpbb3/viewtopic.php?f=2&amp;t=388" value="526566657265723a20687474703a2f2f3139322e3136382e3134372e3132382f7068706262332f76696577746f7069632e7068703f663d3226743d3338380d0a"/>
    <field name="http.cookie" showname="Cookie: phpbb3_ss2cb_u=1; phpbb3_ss2cb_k=; phpbb3_ss2cb_sid=5aba738dc08d0246b0177a21913ab8fc; style_cookie=null\r\n" size="113" pos="514" show="phpbb3_ss2cb_u=1; phpbb3_ss2cb_k=; phpbb3_ss2cb_sid=5aba738dc08d0246b0177a21913ab8fc; style_cookie=null" value="436f6f6b69653a207068706262335f73733263625f753d313b207068706262335f73733263625f6b3d3b207068706262335f73733263625f7369643d35616261373338646330386430323436623031373761323139313361623866633b207374796c655f636f6f6b69653d6e756c6c0d0a"/>
    <field name="" show="\r\n" size="2" pos="627" value="0d0a"/>
    <field name="http.request" showname="Request: True" hide="yes" size="0" pos="68" show="1"/>
  </proto>
</packet>