SPIN vs. VIS: A Case Study on the Formal Verification of the ATMR Protocol