REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Peer-To-Peer Client) WinMX]
"FilterBuffer"=hex:2e,00,00,00,01,00,00,00,26,00,00,00,00,00,1f,00,00,fb,00,00,\
  00,00,00,00,01,00,01,1a,01,00,00,01,0d,77,77,77,2e,77,69,6e,6d,78,2e,63,6f,\
  6d
"szDescr"="The sending station has attempted to log into the WinMX server"
"RGBValue"=dword:000080ff
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]