Protocol Decode of frame 996 from dump-win.pcap