Bpf not working with erspan with af_packet or pfring

[Andreas_Herz]

Do you see a chance to craft an example pcap to share? Maybe there are some differences in implementations but loading it up in wireshark might help to get an idea how a bpf filter might work