I'm a bit stuck.
I am trying to capture Internet usage traffic to a 'monitoring agent' for analysis. Previously this was done using local span to a single destination physical host on the same switch(4506) as the firewall
The monitoring agent now sits on a virtual server within a VM environment - see diagram. The VM environment is connected to a seperate switch. I have a bit of a problem in that the RSPAN I am trying to configure doesn't seem to support multiple destination interfaces(on the switch with the VM environment).
The trunk link to the VM servers carry several different 'production traffic' VLAN's. Can anyone recommend an alternative SPAN configuration? Is this even possible?
