anchor.diff:  Packetbeat provides the module `packetbeat/protos/applayer` with
   common definitions among all application layer protocols. For example using the
   Transaction type from `applayer` guarantees the final document to have all common
  -required fields defined. Just embed the `applayer.Transaction` with you own
  +required fields defined. Just embed the `applayer.Transaction` with your own
   application layer transaction type to make use of it (from memcache protocol):
   
   [source,go]
  
positive.code: 	keyLen, _ := header.ReadNetUint16At(2)
  	totalLen, _ := header.ReadNetUint32At(8)
  
    ...
  
  	if extraLen > 0 {
  		tmp, _ := buf.Collect(int(extraLen))
  
negative.code: 		mc := common.MapStr{}
  		event["memcache"] = mc
  
          [...]
  
  		return nil
  	}
  