Protocol Decode of frame 970 from dump-win.pcap