Verifying a Deployed Protocol