Packet mirroring with Layer 2 headers for Layer 3 forwarded traffic

You can enable port mirroring at packet level along with Layer 2 headers even if the filters are installed with Layer 3 match actions. Use the new firewall-filter action l2-mirror at the [edit firewall family inet filter filter-name term tcp-flags then] hierarchy level to request Layer 2 header reporting.