answered 2018-11-27 13:25:55 +0000
I have never dug deeply into it, but the best place to learn about it is probably the source code, starting with packet-tcp.c and follow.c.
