Protocol Decode of frame 1252 from evidence03.pcap