REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Peer-To-Peer Client) Kazaa]
"FilterBuffer"=hex:3a,00,00,00,01,00,00,00,32,00,00,00,00,00,1f,00,00,47,12,00,\
  01,00,01,00,06,00,01,00,00,00,00,01,03,47,45,54,01,00,06,00,02,00,00,2c,01,\
  00,0b,4b,61,7a,61,61,43,6c,69,65,6e,74
"szDescr"="The sending station has connected to the Kazaa network and is attempting to download"
"RGBValue"=dword:000080ff
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]