SPAN with more than 1 source interface

[Dean Romanelli]

Hi All,

Can I configure SPAN to send traffic from more than 1 source ports to 1 destination interface (sniffer connected)?

For example:

monitor session 1 source interface Gi1/0/1
monitor session 1 source interface Gi1/0/2
monitor session 1 destination interface Gi1/0/24

Will that work as expected?

If there are multiple VLANs that go across the source interfaces, I will need to add the "encapsulation dot1q" command to the destination string to see all traffic right?

[Mark Malone]

Yes that's fine i have 1 in place at the minute collecting phone traffic, works fine collects both phones 2 diff sources

If its trunk port your collecting from you should use the encapsulation command this makes the switch copy the vlan tags to the output port

https://supportforums.cisco.com/document/13891/how-configure-port-monitoring-span-catalyst-2940-2950-2955-2970-3550-or-3750-series