What is SPAN?

5 minutes
Share the link to this page
You need to have access to the item to view this lesson.
One-time Fee
List Price:  $139.99
You save:  $40
List Price:  €128.67
You save:  €36.76
List Price:  £110.19
You save:  £31.48
List Price:  CA$190.60
You save:  CA$54.46
List Price:  A$208.90
You save:  A$59.69
List Price:  S$188.42
You save:  S$53.84
List Price:  HK$1,092.29
You save:  HK$312.10
CHF 90.89
List Price:  CHF 127.25
You save:  CHF 36.36
NOK kr1,073.95
List Price:  NOK kr1,503.58
You save:  NOK kr429.62
DKK kr686.39
List Price:  DKK kr960.97
You save:  DKK kr274.58
List Price:  NZ$228.20
You save:  NZ$65.20
List Price:  د.إ514.18
You save:  د.إ146.92
List Price:  ৳16,391.62
You save:  ৳4,683.65
List Price:  ₹11,661.24
You save:  ₹3,332.02
List Price:  RM656.20
You save:  RM187.50
List Price:  ₦205,785.30
You save:  ₦58,800
List Price:  ₨38,789.74
You save:  ₨11,083.57
List Price:  ฿5,074.35
You save:  ฿1,449.91
List Price:  ₺4,513.75
You save:  ₺1,289.73
List Price:  B$714.59
You save:  B$204.18
List Price:  R2,530.23
You save:  R722.97
List Price:  Лв251.81
You save:  Лв71.95
List Price:  ₩189,601.05
You save:  ₩54,175.60
List Price:  ₪518.60
You save:  ₪148.18
List Price:  ₱8,079.59
You save:  ₱2,308.62
List Price:  ¥21,792.94
You save:  ¥6,227
List Price:  MX$2,325.03
You save:  MX$664.34
List Price:  QR507.87
You save:  QR145.11
List Price:  P1,896.68
You save:  P541.94
List Price:  KSh18,338.69
You save:  KSh5,240
List Price:  E£6,566.93
You save:  E£1,876.40
List Price:  ብር8,018.62
You save:  ብር2,291.20
List Price:  Kz118,629.90
You save:  Kz33,896.68
List Price:  CLP$125,220.73
You save:  CLP$35,779.90
List Price:  CN¥1,011.17
You save:  CN¥288.92
List Price:  RD$8,157.46
You save:  RD$2,330.87
List Price:  DA18,810.98
You save:  DA5,374.95
List Price:  FJ$311.92
You save:  FJ$89.12
List Price:  Q1,087.56
You save:  Q310.75
List Price:  GY$29,285.87
You save:  GY$8,367.99
ISK kr13,827.61
List Price:  ISK kr19,359.21
You save:  ISK kr5,531.60
List Price:  DH1,386.51
You save:  DH396.17
List Price:  L2,464.07
You save:  L704.07
List Price:  ден7,916.55
You save:  ден2,262.03
List Price:  MOP$1,124.95
You save:  MOP$321.43
List Price:  N$2,547.77
You save:  N$727.98
List Price:  C$5,144.63
You save:  C$1,470
List Price:  रु18,661.67
You save:  रु5,332.28
List Price:  S/520.05
You save:  S/148.59
List Price:  K543.23
You save:  K155.22
List Price:  SAR524.96
You save:  SAR150
List Price:  ZK3,554.51
You save:  ZK1,015.64
List Price:  L640.62
You save:  L183.04
List Price:  Kč3,180.29
You save:  Kč908.72
List Price:  Ft49,855.26
You save:  Ft14,245.38
SEK kr1,071.59
List Price:  SEK kr1,500.27
You save:  SEK kr428.67
List Price:  ARS$124,136.13
You save:  ARS$35,470
List Price:  Bs967.19
You save:  Bs276.36
List Price:  COP$532,965.46
You save:  COP$152,286.72
List Price:  ₡71,639.71
You save:  ₡20,469.95
List Price:  L3,448
You save:  L985.21
List Price:  ₲1,048,812.96
You save:  ₲299,682.25
List Price:  $U5,395.05
You save:  $U1,541.55
List Price:  zł548.83
You save:  zł156.82
Already have an account? Log In


All right, welcome back. Now we're going to define span and the types of span. Okay? Now, what is this switch port analyzers or span and they work together. Okay, so let's just use the span feature to mirror traffic from one source on a switch port or VLAN to a destination port. Okay, and we'll look at a visualization in a sec.

This allows a monitoring device, such as a network analyzer or sniffer eye to be attached to the destination port for capturing traffic. So span will actually capture all that traffic and send it to a network analyzer. So you can see okay, what's going on now? Okay, that's what it does. Now, there's two types of spam. There's local fan, and there's remote ban or they call it our spam.

All right. Now, logo span again, source and destination are located on the local switch. Sources on one or more of the switch ports were most fan. If this is on the local switch who most fan RC is located on a different switch, where traffic is copied over a special purpose VLAN across trunks between switches from source to destination. That's all it is. All right.

And here's that visual, this is logos fan, okay now logos fan. So, this is only on one switch, one switch or one logical stack. If you have stackable switches, in other words, you must identify one source. Therefore one or more source interfaces and destination interface where it will be monitored. So what's happening here? The goal is to monitor all traffic coming from PCA.

So PCA here is this is the port gigabit 101 is the source the span source. The span destination though, is gig one zero 48 Which is this right here? Okay, this is going to the network analyzer. All right, the destination is PCB, that will be gig 102. So what happens once information going out way, there's going to be copies you can see says copied frames, it will take those copy frames, and send it to the analyzer. And then later on, you can go out and see what is going on when you're sending that information, whatever it may be.

It could be ICMP, could be HTTP could be DNS, it could be whatever was found with wanting to capture that, copy that and then send that up to the analyzer which knows, hey, there's the spam destination. There's a spam source, not our problem okay to that because this which is aware of destination and source for spam, and of course, is going through the VLAN. that span is on okay, but this is local, local support. Now the configuration our switches and the pirate tracer do not support it. Okay. You can configure one or more so simultaneous span sessions on a callus was the number of supported span sessions depends on the switch model.

Just like anything, like any hardware or software, you iOS that you have both does it have the feature first back on the switch? Okay. So there's, that's why when you're choosing things, you just can't say willy nilly, hey, I want that switch. I want this switch. I want that switch. No, what is it a uni and especially when you're gonna be monitoring your network, what iOS will be best for that?

Now a catalyst 3750 series can support only two sessions for the 6500 series can support up to 64 sessions. Now these are independent of each other. Okay, these are in the center. And here it is right here the configuration monitor session. One sort bothered monster session one source is this interface going both ways. Monster session one destination interface gigabit zero 48 which is obviously going up because this one right here, this is what we're talking about, right is going up to the network analyzer, there's your 101 and there's your one zero 48.

That's what this particular command is saying the source is PCA destination is PCB, but send it up to the analyzer. So, you can analyze that information that is local fan, one switch, several ports source and destination and then you tell it you know, more or less the nation will be the network analyzer. Keep in mind, those series of switches that can allow span how many sessions either two or full or 64. being 3750 or 60 504, and that each individual session is separate so you can monitor each individual session or span that's going on. All right. But again, it's a monitoring protocol monitoring protocol. Alright, that's it.

Let's go continue on to the next lecture.

Sign Up


Share with friends, get 20% off
Invite your friends to LearnDesk learning marketplace. For each purchase they make, you get 20% off (upto $10) on your next purchase.