I've been trying to get the latest revision of coralreef to only capture the 1st 48 bytes of each packet on a live pcap interface. I thought I would use something like -C'm=48' or 'iomode=\!user' and various combinations but I still seem to be capturing payload data as well. Is there a way to do this on a live pcap interface (SysKonnect GigE card) or should I just resort to tcpdump?