Datacom Systems Inc
SPAN and Multi-Link Aggregators/Regenerators • USERguide
7
Introduction
The SPAN and Multi-link Aggregator/Regenerators can combine data from multiple
Ethernet network segments into one stream of data. Asingle device, such as an
intrusion detection system, protocol analyzer, or network probe can receive the
aggregated data with just one network interface card (NIC).
The SPAN and Multi-link Aggregator/Regenerators also have additional monitor
ports, so multiple devices can receive the same data stream. This allows different
monitoring and analysis devices to collect data from the same network segments at
the same time, eliminating contention for access to the network.

Monitor more network traffic with fewer tools

Network administrators are no longer required to have a separate device for each
network segment to achieve simultaneous 24x7 monitoring of multiple links, nor do
they need to "switch" to a different segment each time they need to collect data
from it. The SPAN and Multi-link Aggregator/Regenerators simultaneously collects
data from multiple network segments and aggregates all the data before sending it
to the connected monitoring and analysis devices, expanding network visibility and
reducing the number of tools needed on the network. Fewer tools means lower
equipment and licensing costs. And, because the SPAN and Multi-link Aggregator/
Regenerators aggregates all the data before sending it to the connected network
device, you can always view the entire conversation even in asymmetric routing,
redundant, and load-balanced environments.

Enhanced security

The SPAN and Multi-link Aggregator/Regenerators enhances your security because
it allows you to see 100% of your network traffic. Total visibility means no missed
packets and no chance of missing a network attack due to SPAN/Mirror port over-
subscription, traffic overflow, or many of the problems associated with traditional
monitoring methods.

Improved problem resolution time

Aggregation offers a complete view of the traffic. Instead of collecting and manual-
ly assembling trace or log files from separate tools on separate network segments,
the SPAN and Multi-link Aggregator/Regenerators can easily let security and analy-
sis tools collect all the data they need in a single file. In security applications,
events and false positives are recorded fewer times. In all applications, data can be
analyzed faster than ever, which increases uptime and saves money.