You should use a restrictive ACL to limit that issue. The resource utilization is determined by the amount of traffic hitting the capture ACL.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: