SPAN, RSPAN, and ERSPAN: Packet Mirroring on Cisco Switches
SPAN, RSPAN, and ERSPAN configured on real Cisco gear, with the ERSPAN packets captured arriving at a real Linux host. Three ways to mirror traffic to Wireshark, separated by how far the analyzer sits from the traffic.