Home / Summaries / ENCOR / span-traffic-source

Network analysis tools - SPAN overview

Q: In SPAN, when monitoring a source vlan, what become source of SPAN traffic?

Alternatively, you can specify a source VLAN, where all ports in the source VLAN become sources of SPAN traffic . Each SPAN session can have either ports or VLANs as sources, but not both

6 important questions on Network analysis tools - SPAN overview

On a modern switch, what prevents a traffic sniffer that is connected to another port from receiving the unicast traffic?

the switch forwards traffic that is destined for a MAC address directly to the corresponding port (L2 forwarding table)

What two port types does span feature?

source and destination (monitor) port

What type of traffic can SPAN copy from a source port?

SPAN can copy ingress, egress, or both types of traffic from a source port

What Layer ports can be configured as SPAN source ports?

Both Layer 2 and Layer 3 ports can be configured as SPAN source ports

In SPAN, to how many destination ports can you copy session traffic?

In a single session, you can monitor at least one source port. Depending on the switch series, you might be able to copy session traffic to more than one destination port.

In SPAN, when monitoring a source vlan, what become source of SPAN traffic?

Alternatively, you can specify a source VLAN, where all ports in the source VLAN become sources of SPAN traffic. Each SPAN session can have either ports or VLANs as sources, but not both

The question on the page originate from the summary of the following study material:

ENCOR

View summary