I'm using an application performance monitor (A Compuware product) which gets all the spanned traffic from the network and draws a nice and neat graph for my senior management. I'm using "monitor session" in various switches throughout the data center to send this data to Compuware product.
I'm having issue when I span DB2 traffic. My database guys sees a 1000 transaction vs.I only see a 200 in a 1 min span session. I have noticed that database snapshots are in micro second and I suspect that that span is unable to capture micro second of data. I have verified and there is no packet drops, my question is
1. Is network span a reliable way to capture a micro second of data or should I use taps or netflow etc?
2. I'm using default span configuration with source/destination and tx/rx, do I need to modify my span configuration?
3. Below is one of the span configuration in my 6500
monitor session 1 source interface Te5/5
monitor session 1 source interface Te9/5
monitor session 1 source interface Po121
monitor session 1 destination interface Te6/5
switch# sh monitor sess 1
Session 1
---------
Type : Local Session
Source Ports :
Both : Te5/5,Te9/5,Po121
Destination Ports : Te6/5
Egress SPAN Replication State:
Operational mode : Centralized
Configured mode : Centralized (default
