Attempting to capture everything except (things on 172.0.0.0/8 and anything using port 1500).
The first part works, I don’t see any traffic on 172.0.0.0/8, but we’re still seeing port tcp/1500 traffic.
The device is a Cascade Shark 2100-series appliance running 10.0.6.
