When the connection/flow closes:
• Update the internal state
• Report it right away
• Lower the TTL, so it's dropped sooner