In high-traffic situations, you can limit the amount of traffic on the SPAN or mirror port. For example, set an Access Control List (ACL) on the mirror port to forward only traffic from key servers. With an ACL, unnecessary traffic is discarded before it is sent out the mirror port. Cisco 4500 Series switches support the use of an ACL.
If you use an ACL, verify that all TCP traffic is forwarded to the monitor. Then add other protocols used by the critical applications you want to monitor. Specify the appropriate ports in the port mirroring statement.
Avoid situations in which a large-capacity switch sends data from all ports to one SPAN or mirror port. In these situations, data is lost.
| Copyright © 2012 CA. All rights reserved. | Tell Technical Publications how we can improve this information |