Results, cont. 40-80 GB of rotating pcapd packet traces 1.5 month backlog online 36 GB of gzip-compressed iplog traces backed-up offsite 35 MB of tcpflowd payloads and logs always online