Protocol Decode of frame 1685 from evidence03.pcap