03-17-2018 12:30 PM - edited 03-08-2019 02:17 PM
I read that SPAN ports are not accurate and that TAPs are better, this is because SPAN ports do not keep layer 1 and 2 information, as they drop undersized and oversized packets, and packets with CRC errors and usually remove VLAN tags, but I don't understand why the SPAN ports will cause all these problems, can I get more info about this plz?? Thanks.
Solved! Go to Solution.
03-22-2018 05:40 AM
Hi! Lets think about one RJ45 port that has some defective pin, or with some damaged connection with the ASIC hardware, this issue can make your network a nightmare (some time ago we got some defective port that cause a loop in a production environment) and if you want to check it in a SPAN port you got nothing, because that type of problem are only perceptible after the traffic has passed thru the ASIC.
The same with optical SFP hardware issues, or just a simple dust in one of the fiber terminals.
03-20-2018 05:52 AM
Hi,
I think the word "accurate" is not accurate, the SPAN and the TAP are essentiatly different, the TAP just copies all the electric or optic signals over the wire, including the errors and all that could be wrong in the ports (physically too) and redirects all to another port, the downside is that you need some specialized equipment to really use all that information. The SPAN port is some routine that works inside the switches (probably in the ASICs) and copies all the data that traverses the chipset, but if the physical port has something bad, it cant be replicated in the SPAN (as the traffic has not passed there yet).
So, the question is, why are you using the mirrored traffic? depending on that answer you can decide if it is betther to use a SPAN port, or a TAP.
03-21-2018 10:14 PM
03-21-2018 10:50 PM
Hello,
Few months back i was looking advantages of TAP over SPAN. I found this URL which helped me understand better. Hope this helps.
https://observer.viavisolutions.com/includes/popups/taps/tap-vs-span.php
Regards,
Sathvik
03-22-2018 05:40 AM
Hi! Lets think about one RJ45 port that has some defective pin, or with some damaged connection with the ASIC hardware, this issue can make your network a nightmare (some time ago we got some defective port that cause a loop in a production environment) and if you want to check it in a SPAN port you got nothing, because that type of problem are only perceptible after the traffic has passed thru the ASIC.
The same with optical SFP hardware issues, or just a simple dust in one of the fiber terminals.
04-09-2018 09:45 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide