Determining when the Conn::log_conn event executes

Zeek
1

Does anyone have an idea of when the Conn::log_conn event executes? Does it execute whenever Bro believes the connection is finished, or can it execute earlier than that?

Thanks in advance

2

My understanding is once the session has completed.

James