A SPAN port (Switched Port Analyzer), also called port mirroring, is a feature on a switch or router that copies selected traffic and forwards the copies to a destination (monitor) port. It is commonly used for troubleshooting and security monitoring because it is quick to enable on. In today's networks, Ethernet switch port mirroring provides critical visibility and control for operations and cybersecurity. This is commonly used for network appliances that require monitoring of network traffic such as an intrusion detection. Port mirroring is a simple method of copying the traffic or some services of a port to another, and implementing troubleshooting and traffic monitoring by using meters. Port mirroring has the following features: The entire physical port is mirrored. Whether you're trying to increase network security, diagnose network issues, or search for ways to improve network efficiency, monitoring is an important way to get the raw information.
[PDF Version]