When performing performance baselining on Server 1, you notice that a large number of concurrently connected users at any given moment. This is causing performance problems on Server 1. You want to run Network Monitor on this server and capture all packets sent to Server 1.
But packet headers need to be captured in order to reduce the size of the captured data. If a large number of packets are captured, the packets must be retained on the server. Captured packets must not overwrite previously captured packets. Which of the following should you do to configure Network Monitor?