Hello team,
with ERSPAN [one ERSPAN session], if the packet is captured twice on the same switch, ingress and egress, I trust both should be sent to the ERSPAN destination [which is windows with wireshark].
I see the packet only one time, could it be the wireshark is hiding packet to avoid duplicate? is there a way to show it?