When configuring a long term, forensic packet capture and saving all packets to disk which of the following is not a consideration?