REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Peer-To-Peer Client) Limewire]
"FilterBuffer"=hex:35,00,00,00,01,00,00,00,2d,00,00,00,00,00,1f,00,00,63,00,00,\
  00,00,01,00,06,00,02,00,00,96,00,01,14,55,73,65,72,2d,41,67,65,6e,74,3a,20,\
  4c,69,6d,65,57,69,72,65
"szDescr"="The sending station has attempted or has connected to the Limewire network"
"RGBValue"=dword:000080ff
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]