What is the exact command you are issuing?
I know one of the things people on my team sometimes confuse when issuing the command is mixing the two ports together.
Additionally, if you intend for traffic to be sent to/from the port *to* which you are spanning, you must use the "inpkts" command.....