Protocol Decode of frame 956 from dump-win.pcap