What I do is use $mid to grab the first 930 chars, ie:

on 1:sockread:blah: {
var %tmp
sockread %tmp
%tmp = $mid(%tmp,1,930)
tokenize 32 %tmp

if ($$1-) echo -a $ifmatch
}