SPAN on 4500 and 6500 series switch

Unanswered Question
Oct 26th, 2009


I have some 200 servers connected to my L3 switch. I am planning to SPAN for every server to one Sniffer. Is it technically viable? what are the possible challenges I might face ?

Thanks in advance..

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Amit Singh Mon, 10/26/2009 - 02:57

Where is the SPAN destination located. Are you planning to do a local SPAN or a remote SPAN. SPAN is done in hardware so you can do it. You might just be hiiting the hardware limitation on the switch. With Local SPAN, you can create only 2 sessions and a maxiumum of 128 SPAN sources with Release 12.2(18)SXE and later.

Please read the doc below for all the restrictions before going ahead :


-amit singh

prasad.gsmc Mon, 10/26/2009 - 04:15


I am planning for Local SPan. If I do a Source SPAN with VLAN, inderectly covering all the ports, whether still I have hardware limitation......

Amit Singh Mon, 10/26/2009 - 05:03

Should not be a problem. But again it depends on the hardware how it behaves with such a huge traffic. As it is done in hardware, we beleive that you will be absolutely fine with it.


This Discussion