Modeling a Network Protocol in AFFIRM and Ada