Symptom
Cluster CCL interface capture shows full packets although headers-only is configured. This is only seen on one unit.
firepower# cluster exec show cap
unit-1-1(LOCAL):******************************************************
capture CAPI type raw-data reinject-hide buffer 33554432 interface inside-1 headers-only [Capturing - 691768 bytes]
match ip host 192.0.2.182 any
capture CAPO type raw-data reinject-hide buffer 33554432 interface inside-2 headers-only [Capturing - 62992 bytes]
match ip host 192.0.2.182 any
capture CCL type raw-data buffer 33554432 interface cluster headers-only [Capturing - 11659252 bytes] <--
match ip host 192.0.2.182 any
capture CCL2 type raw-data buffer 33554432 interface cluster headers-only [Capturing - 11684784 bytes] <--
unit-2-1:*************************************************************
capture CAPI type raw-data reinject-hide buffer 33554432 interface inside-1 headers-only [Capturing - 0 bytes]
match ip host 192.0.2.182 any
capture CAPO type raw-data reinject-hide buffer 33554432 interface inside-2 headers-only [Capturing - 628776 bytes]
match ip host 192.0.2.182 any
capture CCL type raw-data buffer 33554432 interface cluster headers-only [Capturing - 628892 bytes] <--
match ip host 192.0.2.182 any
capture CCL2 type raw-data buffer 33554432 interface cluster headers-only [Capturing - 651200 bytes] <--