Verification Of A Transport Offload Engine