SPAN mirrors traffic on one or more source interfaces on a Vyatta router to a destination interface on the same router. Source interfaces can be both physical and VLAN interfaces. Both ingress and egress traffic on source interfaces can be mirrored. For SPAN, the destination interface is a physical port to which a network monitoring tool is connected for capturing and analyzing the traffic.

The following figure shows a SPAN port mirroring session.