Protocol Decode of frame 1156 from dump-win-mac13k.pcap