answered 2021-02-09 07:38:36 +0000
If your traffic comes in over GRE prefix your capture filter expression with ip protochain GRE
ip protochain GRE