Conversations Conversations allow you to keep state information Source & dest IP and port numbers Search for the conversation on each frame Create one if it does not exist Best used on the first pass through all the packets