When traffic is captured , either the entire contents of packets are recorded .
The headers are recorded without recording the total content of the packet .
When traffic is captured , either the entire contents of packets are recorded , or the headers are recorded without recording the total content of the packet .