Struct ConversationTable 

pub struct ConversationTable { /* private fields */ }

Thread-safe conversation tracking table backed by DashMap.

Supports concurrent packet ingestion from multiple threads while maintaining per-conversation state including TCP state machines and stream reassembly. Optionally tracks memory usage and spills reassembly buffers to disk when a budget is exceeded.

Implementations

impl ConversationTable

pub fn new(config: FlowConfig) -> Self

Create a new table with the given configuration.

pub fn with_default_config() -> Self

Create a new table with default configuration.

pub fn conversation_count(&self) -> usize

Number of tracked conversations.

pub fn ingest_packet( &self, packet: &Packet, timestamp: Duration, packet_index: usize, ) -> Result<(), FlowError>

Ingest a single parsed packet, updating or creating conversation state.

timestamp is the packet capture timestamp (from PCAP metadata). packet_index is the index of this packet in the original capture (used for cross-referencing).

pub fn memory_usage(&self) -> usize

Estimated memory usage of the flow table (tracked reassembly buffers).

pub fn spill_count(&self) -> usize

Number of spill operations performed.

pub fn get_conversation( &self, key: &CanonicalKey, ) -> Option<Ref<'_, CanonicalKey, ConversationState>>

Get a read reference to a specific conversation.

pub fn evict_idle(&self, now: Duration) -> usize

Evict conversations that have exceeded their idle timeout.

Returns the number of evicted conversations.

pub fn into_conversations(self) -> Vec<ConversationState>

Consume the table and return all conversations sorted by start time.

pub fn config(&self) -> &FlowConfig

Get a reference to the configuration.