Protocol Decode of frame 502 from dump-win.pcap