Encapsulated Remote Switched Port Analyzer, a port-mirroring method that wraps copied traffic in an IP tunnel so it can reach an analyser elsewhere on the network; on vSphere it is a session type on a distributed switch.
Also called Encapsulated Remote Switched Port Analyzer.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains ERSPAN in context, with comparison tables and the common traps.
Terms in this definition
- vSphere
VMware's platform for virtualisation, made up of vCenter and ESX hosts, supplying compute for VCF clusters.
- SWITCH
Checks one expression against several candidate values, returning whichever result pairs with the match (or a fallback otherwise). Writing SWITCH ( TRUE (), ... ) avoids nested IF chains: whichever condition is first true wins.
Related terms
- SPAN
Switched Port Analyzer: duplicates a port's packets so a monitoring tool can inspect them. NSX includes remote variants (RSPAN and ERSPAN) as well as local ones, and its logical variant is limited to overlay segments.