Predefined Stacks

The Predefined Stacks section contains the protocol stacks that are listed in the Predefined Stack list box in the Protocol Stack Wizard. The format of an entry is

<stack-name>,Auto|No,<protocol-ID>,[<protocol-ID>,…]

where:

<stack-name> is the name that appears in the list box.

"Auto" means that autotraversal is to be used and the protocol analyzer should attempt to determine what protocol comes next in the frame.

"No" means that autotraversal should not be used. In this situation, every frame will be decoded using the protocol(s) given in the list, in the order they are given. Any frame that does not use the defined stack will be decoded incorrectly.

<protocol-ID> is the ID of the protocol (if standalone) or the ID of the lowest-layer protocol (if in a stack).

Additional decoder IDs may be appended to an entry to further define a stack. Thus we see:

Frame Relay/HDLC,No,0x7f000101,0x7f000010,

Frame Relay/SNAP,Auto,0x7f000101,0x7f000204,

to differentiate HDLC over Frame Relay and SNAP over Frame Relay.

Predefined Stacks are sorted into alphabetical order in the program, so it does not matter what order they appear in the .personality file.