I have a dilemma. I need to monitor 4 links. for inbound and outbound traffic. A hub is out of the question as traffic won't be seperated. Currently I am using a product called nTap to tap the four links back to a Cisco switch. The problem is SPAN only allows for 2 sessions. So 2 links can't be monitored. Attached is a diagram. Would RSPAN be better? Is RSPAN easier to configure? What exactly is VSPAN and when would it be best applicable?
So, create an RSPAN VLAN and make sure it goes wherever you need it.
Then, on the switch(es) you want to source from:
monitor session 1 source interface f2/2 options
monitor session 1 source interface f2/8 options
monitor session 1 destination remote vlan 40
On your sniffing switch
monitor session 1 source remote vlan 40
monitor session 1 destination interface f0/4