Protocol Decode of frame 949 from dump-win.pcap