REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Peer-To-Peer Client) Bit Torrent]
"FilterBuffer"=hex:43,00,00,00,01,00,00,00,3b,00,00,00,00,00,1f,00,00,d8,20,00,\
  01,00,00,00,01,00,01,36,00,00,00,01,11,47,45,54,20,2f,64,6f,77,6e,6c,6f,61,\
  64,2e,70,68,70,00,00,01,00,02,37,00,7e,00,01,06,6f,72,72,65,6e,74
"szDescr"="The sending station is attempting to download files using the Bit Torrent client."
"RGBValue"=dword:000080ff
"bFilterBasedAlarm"=dword:00000001
"szFolder"="Peer-To-Peer and Chat Client Filters"

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]