Thank you for your solution, but it's not really what I'm looking for. I want to capture all L2 and L3 packets between Provider Switch and my ASR router.

I hope someone else can help me.

I tried to set this up also on my ASR 1002 Version 12.2(33)XNE and all I can seem to capture is the odd ethernet frame that Wireshark identifies as a DEC DNA Remote Console frame.

My monitor session config looks like this:

Session 1
---------
Type                   : Local Session
Status                 : Admin Enabled
Source Ports           :
    Both               : Gi0/0/0
Destination Ports      : Gi0/1/0

interface configs looks like this:

interface GigabitEthernet0/0/0
description SSH FEED
bandwidth 50000
ip address 10.1.2.3 255.255.255.248
ip access-group EXTERNAL-FIREWALL in
no ip redirects
ip nat outside
ip virtual-reassembly
ip route-cache same-interface
ip policy route-map IPSEC-ROUTEMAP
no negotiation auto
crypto map GENERIC
end

interface GigabitEthernet0/1/0
no ip address
negotiation auto
end

Any ideas as to why I'm not capturing any of the traffic I expect to see leaving Gi0/0/0 .

Thanks.

John

I dunno, the devel team is too busy adding support for VTP over MPLS with VRF-aware QinQ DPI pruning?  :-)

I still haven't tried monitor sessions on mine, but I do note there is a "debug monitor" command, in case you hadn't noticed it.

Thanks... didn't know about the "debug monitor" command so I tried it and guess what?? It revealed nothing. Nada. No surprise there.