Protocol Decode of frame 896 from dump-win.pcap