> redef capture_filters += { ["mpls"] = "mpls"};
> redef encap_hdr_size = 48;
>
> Because the outermost encapsulation is MPLS...
If the encapsulation is always the same and fixed-sized, then yes, this
can do the trick. My earlier reply was for cases where the encapsulation
varies.
Vern