Protocol Decode of frame 1392 from evidence03.pcap