Xff Query about the conditions being collected

Help
1

hello
I have a question about creating an xff field.

Are xffs collected after the session ends normally?
Failing to collect xff if session crashes?

I want to know the logic of collecting xff fields in suricata