FYI: Sigma's re-use of this object is slightly confusing.  Keep in mind that in Q2Q it is used exclusively for tracking TCP connections by TCP address, but in Sigma it's used to track *Q2Q* connections.