When would I use a 5 minute, 30 minute or 1 hr session?

Short sessions are ideal to check if the leak noise is still present when you get to site. If the leak noise is not audible because of high usage on the network or other interference, then correlations will be unsuccessful and you will need to come back when the noise is clearer.