Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have heard from many different companies that call TAC, that TAC says Cisco does not recommend to turn SPAN on for anything other than troubleshooting. I have seen this being said on all switching platforms. Today someone from a very large compan...
I am trying to understand what each of the values represent in the show controllers ethernet-controller phy command. Below is an output of an interface. Are there any documentation on what specifically each line item represents? I know some are pr...
While I have used monitor sessions for years in production for deep packet inspection for IDS/IPS, packet capture and network analysis recently a some potential clients have been told by Cisco support that SPAN is not a tool for this application. I ...
With Cisco having so many product lines and they all use different hardware and software, is there one place that informs the viewer of span considerations by switching platform. Here let me explain some more. If I choose a 3750x I know the forward...
I would like to use an endpoint custom attribute to trigger the network access a device has. So as an example if I have a device that has a endpoint custom attribute of Display, I would like to use that as a condition to assign a specific DACL or vl...
I do understand the politics and makeup of Cisco, for full disclosure I worked for Cisco for 15 years and at one point Chuck was my operational director. I would imagine that the PM for the Cat9k in the UABU would want to ensure the world that they ...
I appreciate the reply. And I want to be specific that this topic is for Local SPAN and not RSPAN or ERSPAN. Oversubscription can be argued for any port that does aggregation. Since the destination port of a local SPAN is just another port I would ...
It would be nice to know if different type of sources impact switches differently. I could see an argument where a vlan source might use more resources that an interface source because the tags would need to be read and matched and then just that tr...
Nope. I am asking about SPAN, commonly referred to as mirroring or monitoring. SPAN is used quite often for security solutions and I cannot find a single page that goes over how SPAN (switchport analyzer) is handled by the switching platforms. Aga...
