The url, body, all resources/cookies etc, literally everything. If a bit ends up going over the wire it needs to be captured. The traffic would be very small (like less than a meg a day I should think ...