[c-nsp] VACL Question

[Randy]

I experimented and the following allowed me to see both sides of the 
traffic:

(config-if)#switchport capture allowed vlan all
!works in both directions

VS

(config-if)#switchport capture allowed vlan <target vlan>
!works for inbound (WAN->VLAN) only

I have not applied the VACL to any VLAN other than <target vlan>, and 
the ingress/egress points for the traffic are L3 physical interfaces, 
not other VLANs.

Could someone can hit me with a clue-bat?

Thanks all,

~Randy