Conversation Store
The Conversation Store is a memory structure that keeps records of all endpoints and conversations. Each file is scanned for endpoints and conversations for
- Ethernet
- IPv4 and IPv6
- TCP
- UDP
All conversation details are stored to the Trace Intel Database, if not disabled in the preferences.
Note: there are plans to also scan for FQDNs seen in a file, but that is not really a conversation and the DNS/DHCP parsers are still a little too unstable in some situations for this. My bad :-)