In some embodiments, data prior to and/or including the portion that triggered recording, in the above example the portion ???foobarfff???, may be captured, e.g., by dumping a wrap around buffer into a save location, in addition to beginning to record the current and subsequent data associated with the flow in a save location, facilitating more complete analysis than would be possible if recording