Hi, my idea is slightly different, because I want to print the user and pass if I found at least one of them. The goal is to avoid the "false positive". For more details check #217

res_user= Parse_Form(ptr, &user, USER);
res_pass= Parse_Form(ptr, &pass, PASS);
if (res_user || res_pass) {
         po->DISSECTOR.user = user;
         po->DISSECTOR.pass = pass;
         po->DISSECTOR.content= strdup((const char *) ptr);
         po->DISSECTOR.info = strdup((const char*)conn_status->c_data);
         dissect_wipe_session(po, DISSECT_CODE(dissector_http));
         Print_Pass(po);
      }
   } else {
	   SAFE_FREE(user);
	   SAFE_FREE(pass);
   }