Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN)
#Phase 1: Configure SPAN and RSPAN On Switch
Example: 1 (SPAN)
S1(config)#monitor session 1 source interface fa0/1
S1(config)#monitor session 1 destination interface fa0/4 (Monitor pc,wireshak)
***Note: This Is Basic Configuration (When source and destination are in Same switch)
Example: 2 (RSPAN)
*Switch-2
S2(config)#vlan 50
S2(config-vlan)#name RSPAN
S2(config-vlan)#remote-span
S2(config)#monitor session 2 source interface fa0/24 (Port wich you want to monitor, Client or server)
S2(config)#monitor session 2 destination remote vlan 50
*Switch-1
S1(config)#vlan 50
S1(config-vlan)#name RSPAN
S1(config-vlan)#remote-span
S1(config)#monitor session 2 destination interface fa0/4 (Monitor pc,wireshark)
S1(config)#monitor session 2 source remote vlan 50
***Note: Be careful with trunk links, SPAN traffic kills bandwidth
