I showed a troubleshooting example on the support wiki: http://supportwiki.cisco.com/wiki/index.php/Tech_Insights:Utilizing_the_New_Packet_Capture_Feature If you want the capture in the punt path for process level you set the capture point to: monitor capture point ip process-switched .... Rodney