Discard old data under memory pressure. (?)

If you capture all events for a long time, it is possible to exhaust memory and crash. Throwing out older data avoids this problem.

Include the actual bytes sent/received. (?)

This will result in huge log files, and can expose sensitive data.