difference between packet sizes that captured in my pc and mirrored in ISP

edit

The reason is that the ISP runs a transport network and uses facilities of that network equipment to perform a capture. You are probably capturing on your local interface, which connects to the edge of the transport network.

There are numerous tools available to manipulate capture files. Have a look at Trace Wrangler for instance.