@grecs plug for NSM practitioners using ringbuffer captures that are dealing with data overload: http://is.gd/sh67 (comments appreciated)