Port mirroring is used on a regular basis in lab as well in production to capture voice traffic. Often time port mirroring causes duplicate packets. I don't see a particular pattern. Sometimes it doesn't happen at all, sometimes only few packets are duplicated while at other times all packets are duplicated. This causes problems in data analysis. I would appreciate if you could look into this and if necessary put a ticket to Cisco to get a fix for this problem.
