: It cannot capture hardware-switched data plane traffic unless that traffic is specifically punted to the CPU.