Protocol Decode of frame 1397 from evidence03.pcap