...level protocol headers (like HTTP and NFS). If you just want the TCP header truncate to 54 bytes. The tcp.analysis toolslows down if there are too many packets in the file. I would suggest 1000 packets on a lightly loaded network, and no more...
http://www.itworld.com/AppDev/1427/UIR970601perf/pfindex.html