How to Use SPAN and RSPAN output

[paragengg]

hi,

We at our organization are going to configure the SPAN as well as RSPAN for capturing the packets going from and coming to some specific ports.

At our place we are having IP Telephony set up. The Cisco IP Phone connects to the switch (4006 series switches) and thru IP phones these switches connect to the PCs.

We want do an analysis of the network traffic using packet captures and produce a report of what sort of traffic is present on the network. How do I analyze whether any unwanted stuff can be blocked or not as well as how to block that??Would it be safe to do this configuration of SPAN during peak hours of the usage??

Can anybody guide how to analyze the output of these commands??How can I use this to do further corrections??

Thanks & Regards,

Parag

[owillins]

You can analyze network traffic passing through ports or VLANs by using SPAN to send a copy of the traffic to another port

on the switch that has been connected to a SwitchProbe device or other Remote Monitoring (RMON) probe or security device.

SPAN mirrors received or transmitted (or both) traffic on a source port and received traffic on one or more source ports or

source VLANs, to a destination port for analysis.Refer to the following URL which explains the configuration of SPAN

and RSPAN in detail.

http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration_guide_chapter09186a008014f36c.html