My goal was to tap my Cisco core router/switch that sees all traffic. Unfortunately this model switch only can support 2 monitor/span sessions which are already being consumed. We have several blade enclosures with HP Virtual Connect switches. If I setup a VM with a port assigned to my server VLAN in permiscious mode I think I will only see traffic for hosts on that enclosure. Will I need to deploy sensors on each of those enclosures to see all my traffic?
If anyone has experience with this type of setup, please describe your experiences with implementing QOE. Thanks.