1. What is the difference between source sessions (span) and Destination sessions (Span)? Which one is recommended in which particular case?
2. Using RSPAN, what are the concerns that i should be on lookout for? I am going to span the traffic of 4 live web servers to a single port. All 4 of the Servers are directly connected to Cat 6509. Considering the traffic of approx 10 mb on each server, with 6509 equiped with dual sup, csm, 10g card and other RJ45 cards, what would be a better design (if i don't want my switch to get spikes on cpu) out of (1. i connect the Analyzer on an interface of the same switch and still run the remote span? OR 2. Connect a small L2 switch with Cat 6500, connect the analyzer with that, extend the RSPAN vlan to that l2 switch and do the mirroring? OR if there is any other more recommended design for this?