Nice tool for people who are crafting their an artisanal logging system.
TrimPCAP is designed to overcome the issue with truncated sessions by removing data from the end of sessions rather than from the beginning. This also comes with a great bonus when it comes to saving on disk usage, since the majority of the bytes transferred across the Internet are made up of big sessions (a.k.a “Elephant Flows”). Thus, by trimming a PCAP file so that it only contains the first 100kB of each TCP and UDP session it’s possible to significantly reduce required storage for that data.
Don’t Delete PCAP Files – Trim Them! – NETRESEC Blog : https://www.netresec.com/?page=Blog&month=2017-12&post=Don%27t-Delete-PCAP-Files—Trim-Them