Capturing data through a SPAN session issue

Unanswered Question
Feb 8th, 2007

Here's my dilemma. We currently have 2 span sessions created on our core switch 6509, one for an IDS and the other for a websense server. I currently only have 1 vlan configured but that will change. We have 20+ edge switches and branch locations. We just invested in a Sniffer. If we still want to keep these other two span sessions, what other options do I have?

Options presented: 1. Purchase a tap. Seems expensive

2. I read that I could set up a span session on a switch and have the traffic routed. Is this possible?

3. Take off the IDS and put in the sniffer.

Thanks for the help.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
andreas.larsen@... Thu, 02/08/2007 - 06:41

Put hub inbetween the spanport and the 2 other systems that needs to listen to all the traffic ?

If you find it useful please rate =)


This Discussion