If your traffic comes in over GRE prefix your capture filter expression with ip protochain GRE
ip protochain GRE