On 2 October 2012 10:25, Martin T <m4rtntns at gmail.com> wrote: > Any other ideas? Not really, seems like your SPAN might not be doing anything at all. Can you confirm this by removing SPAN config, leaving port just as trunk, and see if you capture same set of packets? -- ++ytti